***This position can be based out of one of three corporate office locations: McLean, VA or Memphis, TN or Dallas, TX*** From smartphone capabilities like Digital Key to connected rooms that allow for integrated entertainment, temperature, and lighting controls, Hilton's Global Technology team is responsible for creating the hospitality experience of the future – for our guests, owners, and Team Members. Through innovative technology development and deployment, this team ensures Hilton has the technology needed to support our continued global growth while remaining at the forefront of hospitality technology innovation. What will I be doing? Commercial technology solutions (a.k.a. Commercial Off-The-Shelf – COTS) from third-party vendors support numerous corporate, call center, and hotel technology functions. As the Lead Security Analyst – Commercial Solutions, you will be a technical contributor on Hilton's Information Security, responsible for integrating sound cyber security processes and controls for COTS solutions that handle sensitive data, may impact guest/employee life and safety, and deliver positive guest stay experiences. You will be dedicated and committed to supporting the development, maintenance, and management of processes that provide for initial and ongoing secure implementation of commercial solutions. This includes consistent and repeatable solution security controls. More specifically, you will: Perform timely reviews and assessments of the commercial solution architecture and support service delivery processes that help ensure cyber risks are not introduced due to limitations in technology management, maintenance, and support processes. Integrate commercial solutions into the enterprise technology management and security process (e.g., threat management, logging, patch delivery). Execute the annual Payment Card Industry (PCI) commercial solutions assessments, as well as other compliance driven requirements (e.g., privacy impact analyses). This is a new position at Hilton and will report to a new technical leader that will craft the future approach and direction for the role. What are we looking for? The success in this role will demonstrate itself through the following attributes and skills: Experience developing an understanding of how a solution functions through the review of user documentation and inquiries with the vendor Applied knowledge of base cyber security practices at all layers of the technology stack in the design and/or assessment of commercial solutions: Network Layer: un-trusted network access controls, application firewall rules and vendor remote access Platform: AD, Domain Join, service accounts, COTS solution, platform agent interoperability and patching Devices/IoT: communication requirements and centralized device management Data and Database: Data types stored, processed, transmitted, database accounts and access controls, and secure database connections Application: Application access, role based access to admin and business transactions/functions Experience overseeing multi-functional technology groups comprised of positive partnerships such as solution sponsors, engineers, and support to promote commercial solutions architecture and management practices Prior experience in managing or implementing a commercial solution is desirable To fulfill this role successfully, you must possess the following minimum qualifications and experience: High School Diploma/GED Three (3) years of related experience Travel up to 30% of the time It would be advantageous in this position for you to demonstrate the following capabilities and distinctions: Five (5) years of related experience Certification in CISSP What will it be like to work for Hilton? Hilton is the leading global hospitality company, spanning the lodging sector from luxurious full-service hotels and resorts to extended-stay suites and mid-priced hotels. For nearly a century, Hilton has offered business and leisure travelers the finest in accommodations, service, amenities and value. Hilton is dedicated to continuing its tradition of providing exceptional guest experiences across its global brands. Our vision to fill the earth with the light and warmth of hospitality unites us as a team to create remarkable hospitality experiences around the world every day. And, our amazing Team Members are at the heart of it all! EOE/AA/Disabled/Veterans

The Architect develops, documents, and disseminates information security architectural standards across all of JetBlue’s Information Technology groups. The Architect provides direction to project teams on building the appropriate information security controls into systems in development.   The Architect provides direction to system engineers on improving and maintaining the appropriate information security controls for production systems.  The Architect is responsible for driving the implementation and adoption of key information security tools. Essential Responsibilities Ensures that  information security policies, multi-year strategies, standards, procedures, and best practices are developed and communicated with JetBlue's IT Leadership Develop and execute data security architecture framework Define and research information security standards; vulnerability analyses and risk assessments; reviewing architecture platforms, applications and integration issues. Participates in Project Management activities to manage IT Security programs and initiatives; Participate on the IT Architectural Review Board to drive overall technology direction for JetBlue. Participates in the development and delivery of a comprehensive information security training program that provides the appropriate training for all crewmembers. Works with internal and external Auditors to assess compliance with policies, standards, procedures, and best practices. Review and evaluate firewall change requests. Other duties as assigned Minimum Experience and Qualifications Bachelors in Computer Science. Four (4) years information technology experience. Four (4) years information security experience. Experience delivering comprehensive architecture specifications Experience providing data protection and web application firewalls Must be able to work in a team environment as a productive and cordial team player Must be able to multi-task and prioritize in a fast paced multi-team environment Ability to present to a variety of audiences Ability to work to deadlines with quick turnaround Ability to handle confidential information with professionalism and diplomacy Must pass a ten (10) year background check and pre-employment drug test Must be legally eligible to work in the country in which the position is located Preferred Experience and Qualifications CISSP certified (or equivalent). Knowledge of Information security principles. Understands the concepts of and techniques for secure programming. Knowledge of security vulnerabilities/weaknesses - fundamental causes of vulnerabilities through which most attacks are exploited. Able to recognize and categorize the most common types of vulnerabilities and associated attacks. Familiarity of network Protocols including IP, TCP, UDP, ICMP, ARP, RARP, TFTP, FTP, HTTP, HTTPS, SNMP, and SMTP.  Understand how these protocols work, what they are used for, the differences between them, some of the common weaknesses, etc. Understanding of information security risk analysis. Knowledge of network applications and services – expertise in the purpose of the application or service, how it works, common usage, secure configurations, and the common types of threats or attacks against the application or service, as well as mitigation strategies. Host/System Security Issues – expertise in security issues at a host level for the various types of operating systems (Windows and UNIX). Experience in using the operating system (user security issues) and some familiarity in managing and maintaining the operating system as an administrator. Malicious Code (Viruses, Worms, Trojan Horse programs) – expertise in not only how malicious code is propagated through some of the obvious methods (disks, email, programs, etc.) but also how it can propagate through other means such as PostScript, Word macros, MIME, peer-to-peer file sharing, or boot-sector viruses. Understanding/Identifying Intruder Techniques - must be able to recognize known intrusion techniques based on the footprints or artifacts left by different types of attack in the incident reports.  Know the appropriate methods to protect against these known attack techniques and the risks associated with the attacks.  Analysis of and correlation between incidents to notice what has not been seen before. Working Conditions Crewmember Expectations: Regular attendance and punctuality Potential need to work flexible hours and be available to respond on short-notice Well groomed and able to maintain a professional appearance When working or traveling on JetBlue flights, and if time permits, all capable crewmembers are asked to assist with light cleaning of the aircraft Must be an appropriate organizational fit for the JetBlue culture, that is, exhibit the JetBlue values of Safety, Caring, Integrity, Passion and Fun Equipment: Computer and other office equipment Work Environment: Normal Office Environment Physical Effort:  Generally not required, or up to 10 pounds occasionally, 0 pounds frequently. (Sedentary Disclaimer: The above statements are intended to describe the general nature and level of work being performed by the crewmember(s) assigned to this position. They are not intended to be an exhaustive list of all responsibilities, duties, and skills required of individuals in this position. Position Expectations may be subject to change as the needs of the organization change. JetBlue Airways Corp. is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, marital status, veteran status, sexual orientation, gender identity or expression, disability status, pregnancy, genetic information, citizenship status or any other characteristic protected by law. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Intel's Information Security team is hiring Information Security professionals in all domains of Cyber Security across our locations in the United States, Israel, India and Costa Rica. Candidates with 5 - 20 years of experience in Cyber Security and with diverse experience in one or several of the key Cyber Security domains are encouraged to apply. Security Management, Governance, Risk, Compliance, Privacy, Vulnerability Management, Data Protection, DLP, Identity and Access Management, Network Security, Application Security, Cryptography, End point security, Security engineering, Security architecture and design, Threat management, Threat intelligence, Security operations, Forensics, Investigations, Audit, Security Operations Center (SOC) and other major areas of Cyber Security are some of the skillsets we are looking for. If you think you are a passionate security professional and ready to pursue an exciting and satisfying career with Intel, please apply in this requisition. ----- This position is for Intel's enterprise Information Security team. The Cyber Threat Intelligence Analyst manages threat priorities, detection coverage, and the threat actor portfolio. This role will partner with incident response, red team, and vulnerability and risk management. Your responsibilities will include but not be limited to: Track threat actors, campaigns, leading and tailing vulnerabilities and exploits, and associated tactics, techniques, and procedures (TTP). Covert TTPs into internal SNORT, YARA, and SIEM rules to produce actionable alerts. Produce clear, concise, and precise oral briefings, technical alerts, and actor profiles in accordance with accepted analytic tradecraft and methodologies. Reverse engineer malware (static or dynamic) to support incident response and proactively convert malware artifacts into retro-hunts in malware repositories. Ability to integrate timely, actionable, and relevant TTPs into Red Team operations to emulate actors, model campaigns, and increase detection in assumed areas of risk. Ability to collect/analyze long-term actor trends to coordinate with peer information and product security, legal, and corporate security teams to reduce business impact. Coordinate intelligence internally with information security teams and externally with trusted information sharing groups and select industry partnerships. Qualifications: The ideal candidate should exhibit the following behavioral traits: Problem-solving skills Ability to multitask Strong written and verbal communication skills Ability to work in a dynamic and team oriented environment You must possess the below minimum qualifications to be initially considered for this position. Preferred qualifications are in addition to the minimum requirements and are considered a plus factor in identifying top candidates. Minimum Qualifications: Bachelor's degree or higher in Computer Science, Math, Statistics, Information Systems, Economics, International relations or any other related area. Certifications such as CISSP, GIAC, GCIH, GCFA, GREM, OSCP'E, CREST Certified Threat Intelligence Analyst, or FOR578 from certification bodies like ISC2, ISACA, SANS, or comparable intelligence community training are required. 5+ years of experience working as a cyber intelligence analyst, incident responder, Red team operator, reverse engineer, or technical cyber policy analyst. This U.S. position is open to U.S. Workers Only. A U.S. Worker is someone who is either a U.S. Citizen, U.S. National, U.S. Lawful Permanent Resident, or a person granted Refugee or Asylum status by the U.S. Government. Intel will not sponsor a foreign national for this position. Preferred Qualifications: Possess a passion for systems thinking, data analysis, strong analytical skills. Integrate IOCs, detection rules, and correlation rules in accordance with CND-based models (Kill Chain, Pyramid of Pain, ATT&CK, etc.) with security operations tools. Experience in Agile/Kanban enterprise-scale software development. Industry or sector leadership in designing and improving the field of cyber intelligence. Change agent with ability to drive accountability and cross-team outcomes across a matrixed global team environment across time zones and international geographies. Knowledge, Skills, Abilities: Scripting languages: Python, Ruby, JavaScript. Network security tools: DNS monitoring tools, NIPS/NIDS rules, Next generation firewalls. Malware reversing: Dynamic and static malware analysis, reversing engineering tools. Email security tools: Proxy tools, anti-phishing software, and e-mail content scanning. Host based security: HIPS/HIDS correlation rules, endpoint detection and response tools. Analytic tradecraft: structured analytic techniques and/or Intelligence community standards. Intelligence enrichment tools: PassiveDNS, Domain Registration, VirusTotal, OSINT collection. Candidates should be willing to relocate to Folsom, California or Portland, Oregon area. Inside this Business Group Intel's Information Technology Group (IT) designs, deploys and supports the information technology architecture and hardware/software applications for Intel. This includes the LAN, WAN, telephony, data centers, client PCs, backup and restore, and enterprise applications. IT is also responsible for e-Commerce development, data hosting and delivery of Web content and services. Other Locations US, Arizona, Phoenix; US, California, San Jose Posting Statement All qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance.

The Boeing Company is looking for a Cyber Security Specialist to join our Architecture, Integration, and Emerging Technologies team in the Information Security organization in Bellevue, WA. Responsibilities Conduct security evaluation of mobile devices and mobile OS Enhance integrated approach for mobile application security Support projects that focus on emerging technologies (e.g. cloud and mobility); work with senior security integrator to identify security requirements and complete integrated design of complex solutions Perform threat analysis and review threat models Understand security requirements and approval processes for various security domains Perform cloud security reviews to ensure company data is secure Maintain understanding of security capabilities of strategic IS products and new technologies Create and maintain project management dashboards in Team Foundation Server (TFS), automate processes by leveraging TFS Maintain internal computing standards, design patterns, and practices Perform additional duties as assigned Boeing is the world's largest aerospace company and leading manufacturer of commercial airplanes and defense, space and security systems. We are bold innovators and dreamers. Join us, and you can build something better for yourself and for our customers and for the world. Division CIO, Information & Analytics Relocation Assistance Available Yes. Available for eligible candidates, if authorized. Qualifications This position must meet Export Control compliance requirements, therefore a “US Person” as defined by 22 C.F.R.§120.15 is required. “US Person” includes US Citizen, lawful permanent resident, refugee, or asylee Basic Qualifications (Required Skills/Experience): 1+ years of cyber security experience Preferred Qualifications (Desired Skills/Experience): Possesses one or more security certifications relevant to the position such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH) Certified Cloud Security Professional (CCSP), etc. Threat modeling experience Understanding of security best practices, threats, and mitigating techniques Possesses knowledge of cloud-based solutions and mobile technologies Strong analytical, architecture, and integration skills Strong written and verbal communication skills Strong focus on first time quality Desire to grow technical skills and ability to learn new technologies swiftly High attention to detail, self-starter, result driven Ability to work in a cross-functional team Typical Education/Experience Bachelor's degree in Computer Science, Cyber Security, Information Technologies, or a related field, or equivalent practical experience Experience Level Individual Contributor Job Type Standard Travel Yes, 10 % of the Time Contingent Upon Program Award No Union No Job Code 3AQ2N2

Hunt and eliminate malware within Stripe networks The security concerns are ever-evolving, making the security team an extremely dynamic environment to work in. Our ultimate goal is to secure Stripe, secure Stripe users, and secure the Internet. For the Threat Engineering Team, signature based detection is not enough - Stripe strives for world class security that recognizes abnormal through aggressive baselining of endpoints and servers. Stripe’s threat engineering team recognizes that, in order to manage and defend against an attack, one must understand the attack and approaches each challenge with an adversary mindset. Our users trust us with some of their most sensitive information, and we make security a first-class consideration in everything we do. You will: Develop general techniques and frameworks that will enable other engineering teams to find flaws before they are introduced into production Be a security subject matter expert and respond to any internal security engineering questions/request Work with other teams to help architect solutions that are inherently secure Perform penetration testing on our internal and external applications Threat model existing applications Perform reactive incident response when a security event occurs Perform proactive research to detect new attack vectors Architect and create frameworks that prevent current and future attack scenarios Create and execute training exercises to advance developers’ security knowledge Research, architect, and execute solutions that will advance internal security monitoring & controls Our ideal candidate for this role: Can write defensive, maintainable code that solves real-world problems for our users Has previously held security role in professional environment Has software engineering experience in production environment Has a security-specific background Has a knack for finding flaws in software and can efficiently communicate how to fix them Has the ability to find creative ways of reducing risk of inherently insecure efforts Can think about problems from an out-of-the box perspective Can think like an attacker and preemptively determine how malicious actors will attack Stripe What’s it like to work at Stripe? Stripe is helping the internet fulfill its potential as a platform for economic progress by building software tools that accelerate global economic access and technological development. Stripe makes it easy to start, run and scale an internet business from anywhere in the world. Stripe is, at its heart, an engineering company. To provide a missing pillar of core internet infrastructure, we hire people with a broad set of technical skills (and from a wide variety of backgrounds) who are ready to take on some of the most challenging problems in the industry – from reliably handling 100M API requests per day, to building adaptive machine learning as a result of years of data science and infrastructure work, and enabling entrepreneurs worldwide to start a global internet business. We look at Stripe as a constant work in progress and the same is true of our people; for all of us, we believe the best is yet to come. We’re here to support each other in our curiosity and creativity – which we pursue through thoughtful discussion and knowledge-sharing among a diverse set of peers and colleagues. We encourage all engineers to transition teams once every year and a half and also take on short-term projects with other teams across Stripe. This enables engineers to learn how different parts of Stripe work while also establishing stronger ties and cross-pollination between groups. We contribute to existing open-source projects and the people working on them, and we release several tools as open-source. We want to work in a company of warm, inclusive people who treat their colleagues exceptionally well. The kind of people who are committed to going out of their way to help other Stripes in the short-term and pushing them to improve over the long-term (by helping them to get better at what they do). We’re a highly cross-functional organization and view that as part of the fun: we design our space to encourage as much collaboration as possible. We have long tables in the kitchen for a reason (to enable everyone to meet new people and learn from them). We also have a culture of transparency that we carry through to email communication, ensuring that Stripes all around the world have the information they need to make good local decisions. In both our products and our people, we aim to reflect, represent and advocate for all of our users, globally. Our users transcend geography, culture and language; what we share, collectively, is a drive to create a fairer, more economically interconnected world.

Come help build the tools and systems required to prevent the use of Stripe for financial crimes like money laundering and terror financing! We are looking for an aspiring regulatory professional to join our Financial Crimes team based in San Francisco. Joining our Growth sub-team, you’ll help design and maintain the tools and systems required for regulatory analysts to investigate money laundering and prevent the use of Stripe for sanctioned activity and other financial crimes. You’ll also work with Stripe product teams to ensure that Stripe expands its business in compliance with financial partner and regulatory obligations around the world. Stripe is a technology company that operates within the financial services industry, and you will need to be comfortable straddling both of those worlds every day. The right person for this role will enjoy working in the intersection of an emerging sector, seeking creative solutions to traditional problems, introducing technically driven solutions while moving with urgency and focus. You will: Manage end-to-end projects to design improvements to existing tools for analysts on the Financial Crimes team to investigate and prevent money laundering, terrorist financing, and other illegal activity. Work with other Financial Crimes team members to translate regulatory requirements into digestible project scoping documents for review and implementation by our engineering, product, and other cross-functional stakeholders. Embed with product teams at Stripe to represent Financial Crimes interests as Stripe’s global business expands. Work collaboratively with cross-functional stakeholders, including product teams, Legal, and internal engineering functions. We’re looking for someone with: 3-5 years of work experience. The ability to identify and define problems, build project plans to address them, and manage implementation of their solutions An ambitious sense of curiosity and a willingness to explore areas outside of your comfort zone, like new markets or new product types. The ability to work efficiently and independently in an ambiguous, fast-paced environment, with the discernibility to escalate urgent issues when necessary. Experience managing projects of a cross-functional and/or technically complex nature. Respect for and interest in financial rules and regulations, as well as an eagerness to innovate in the spirit of those restrictions. Nice to haves: CAMS or equivalent certification. Financial compliance, regulatory, or legal experience. Experience working with engineering and/or technical teams. SQL or Excel skills. You should include these in your application: Resume and LinkedIn profile.