As a PUBLIC AFFAIRS SPECIALIST, GS-1035-9, this position is located in the Public Affairs Function of a state Air National Guard Wing. Under direct supervision of the wing commander. This is an Air National Guard dual status technician position that requires military membership, compatible military skill assignment and classification. The primary purpose of this position is to carry-out a wide range of public affairs assignments that include social media, media operations, community engagement, command information, communication planning, contingency/crisis response, environmental, security, policy review, and public affairs resource management in support of the mission and the commander's priorities. The position modifies standard methods, evaluates the effectiveness of information, and adapts approaches in developing new informational materials aimed at enhancing the understanding of recipients.

1. Prepares internal and external public affairs products for distribution through social media, DVIDS, wing website, and release to civilian media, as applicable. Researches and writes stories/articles and rewrites material intended for distribution. Shoots related photos and video, as required. Edits and revises products for style, format and content; and, reviews and edits photography and artwork for quality and composition. May design overall products. Accesses public affairs' products to DVIDS per current DoD procedures. Responds to requests for information, materials, and support; and, plans and conducts community engagement activities with community officials and groups. Maintains an active web/social media presence; provides visual information services for documentation and/or publicity purposes; and, plans and arranges news media coverage. For approved events, coordinates support of requests from community and community groups, schools, news media organizations, and others to include requests for interviews, speakers, tours, bands, honor guards, and aviation support and support of local observances and celebrations. Prepares and ensures distribution of customer satisfaction/opinion surveys on internal information products. Evaluates feedback to determine customer needs and uses comments to improve future output. Makes positive suggestions to the supervisor for changes in approach and adoption of new techniques. 40%)

2. Performs work for the production/management/maintenance of electronic and web-based information products. Implements and ensures the quality of the Hometown News Release program. Publicizes the programs, monitors, logs, and disseminates releases. Writes draft and final versions of news releases, feature articles, speeches, fact sheets, and brochures for internal and external audiences. Updates unit mission briefings and develops additional informational briefings as needed. Confers with program specialists, action officers, and other subject matter experts to obtain the latest and most accurate information and imagery approved for public releases. Prepares requests for photographer or graphic support; takes photographs; and, selects and edits photographs and electronic images to accompany articles and media releases. Provides historical documentation support. Provides photographic and video support for alert mission to include mishaps. Performs security reviews on information placed on the unit's public web-page and social media feed(s). Assists in the overall design of unit's web "home-page".(35%)

3. Organizes, coordinates, publicizes and conducts periodic events with local organizations such as, community councils, local governments, Chamber of Commerce, and, state and national legislative offices. Assists with organizing and conducting larger events such as, Civic Leader Tours, Base Open-House activities, and Armed Forces Days, which are designed to promote positive relations between the base and surrounding communities. Accomplishes administrative support work such as, preparing correspondence, press kits and handouts, arranging for passes, and compiling data.(15%)

4. Responds, in a timely manner, to media queries concerning special events, mobilizations, exercises, aircraft incidents, or accidents. Clears responses with appropriate authority before releasing information. Confers with subject matter experts to obtain latest and most accurate information for use in news releases on social media, radio, TV networks, newspapers or other public forums. Coordinates and responds to news media inquiries on the mission, capabilities, impacts, and contributions of the base.(10%)

5. Performs other duties as assigned.

*The above description only mentions a limited amount of the position's official duties. For a full comprehensive document that covers all the duties of the position, please contact one of the Recruitment Specialists at the bottom of the announcement.

DUTY 1: Administers the Information Security Program protecting the enterprise from espionage, terrorism, and threats of unauthorized disclosure and/or compromise of information or material considered vital to enterprise mission interests, national defense or national security.
DUTY 2: Directs the personnel security program to ensure secure accomplishment of the enterprise's missions, goals and objectives through proactive application of security principles, policies, and practices.
DUTY 3: Provides enterprise and subordinate organizations worldwide with authoritative guidance on aspects concerning physical security programs for the protection of classified national security information, both Sensitive Compartmented Information (SCI) and collateral information.
DUTY 4: Manages the Industrial Security Program. Provides effective guidance, training, and direction to subordinate assigned organizations/activities/units on industrial security program matters.
DUTY 5: Exercises supervisory personnel management responsibilities. Advises and provides counsel to employees regarding policies, procedures, and directives of management.

• Serves as COMACC's BLUE FLAG program Security Program Specialist for the collateral security function at the 505 CTS and five contractor organizations, to include security education.
• Implements policies and procedures covering the safeguarding of classified information and implements 505 CCW personnel security investigations/adjudication systems for case management.
• Develops, initiates and disseminates foreign disclosure policy guidance to group, squadron and exercise personnel and assists administration of the Industrial Security Program.
• Makes security program risk assessments and risk management/mitigation strategies/recommendations based on intelligence-derived threat issues for COMACC's BLUE FLAG program, JNTC supported exercises, and assists with wing OPSEC, FDO responsibilities that may require deviations from or synthesis of policies.

As a POLICE OFFICER, GS-0083-8, this position is located in an Air National Guard Wing, Mission Support Group, Security Forces Squadron. The primary purpose of this position is to conduct formal combat arms training and maintenance activities for the Security Forces Squadron and tenant personnel. Control and operate firing ranges; inspect, repair, and maintain ground weapons. To enforce law, maintain law and order, preserve the peace, and protect life and civil rights within the jurisdiction of the military installation. To oversee the work activities of Drill Status Guardsmen (DSG) assigned to the Security Forces Combat Arms function.

(1) Performs Combat Arms Training. Presents repetitive courses or designated blocks of longer courses and presents training material and instruction covering proper use of handguns, rifles, machine guns and other base defense/ground combat skills equipment, in accordance with approved lesson plans and course control documents. Instruction may take place in outdoor or indoor training facilities and will require multiple police/combat agility skill demonstrations. Instructor makes adjustments in presentation or other instructional methods to resolve common classroom problems, to include those of student motivation and communication, as well as, last minute agenda schedule or student changes, student problems, equipment malfunctions, or lack of supplies. Uses training aids and devices in addition to those listed in the POI in a manner that enhances training outcome. Adjusts subject matter discussions to assure material is assimilated by all students. Applies specialized subject matter knowledge in course instruction. Maintains accountability and ensures security for weapons/ammunition/explosives utilized in the course of instruction in accordance with applicable Air Force Instructions.

(2) May oversee the work activities of subordinates and Traditional Guardsmen. Trains employees in assigned duties and responsibilities. Assigns work, establishes priorities, and ensures technical quality of work products.

(3) Manages and oversees the installation ground weapons training and maintenance program; serves as an instructor and inspects ground weapons. Plans, organizes, and directs the activities of the installation s ground weapons training and maintenance program, incorporating safety requirements, and maintains adherence to safety regulations. Promptly evaluates accidents to determine cause and ensure safety guidelines are followed and necessary precautions are taken to prevent further occurrences. Performs self- inspections and presents detailed reports to senior leadership. Ensures compliance with regulatory requirements, policies, and procedures. Monitors special environmental requirements, such as lead removal. Coordinates with the local Civil Engineering Squadron personnel on various issues, to include development of a joint hazardous waste disposal site and procedures that comply with local environmental laws. Monitors the environment for noise hazards, health problems, and all other safety hazards. Directs and monitors security/resources protection program and procedures. Monitors explosive safety and munitions movement s safety procedures. Notifies appropriate unit commanders of current no-shows rates and third time failures, initiates follow-up actions, and briefs data, as directed. Oversees and assists with the maintenance and inspection of all ground weapons assigned to the installation or covered by host tenant support agreements. Submits forecast and requisition for training weapons, equipment, tools, gauges, target material, and expendable items. Validates the annual munitions allocation product.

(4) Represents the Security Forces Squadron (SFS) with a variety of installation and functional area organizations. Provides SFS position on ground combat weapons issued at installation conferences and task group meetings. Coordinates and maintains liaisons with local civilian agencies on matters concerning weapons training and maintenance. Meets with key customer and coordinating officials to assess customer satisfaction, explain organization policy and procedures and resolve problems that arise.

(5) When needed or directed, performs and enforces the full range of security forces duties within the military installation. Incumbent is exposed to the day-to-day dangers associated with law enforcement and security duties. Incumbent has full powers to detain, pursue or direct detaining person(s) who attempt to flee crime scenes, an active shooter, or other means of resisting arrest. Incumbent carries a firearm as required or directed.

(6) Performs other duties as assigned.

*The above description only mentions a limited amount of the position's official duties. For a full comprehensive document that covers all the duties of the position, please contact one of the Recruitment Specialists at the bottom of the announcement.

• As the Wing IP program administrator, is accountable for the successful accomplishment of IP mission goals, objectives and the secure accomplishment of all other Wing mission goals and objectives.
• Implements and administers the overall Wing large-scale, joint DoD and coalition exercise security program.
• Develops, initiates and disseminates foreign disclosure policy guidance to Wing organizations and JFACC exercise personnel.
• Leads and administers the Wing Signature Management Program.
• Implements and administers the Anti-Terrorism and Force Protection Programs for the Wing.

Summary Continued: vehicle passes and Defense Biometric Identification System (DBIDS) cards and passes.

DUTIES:

• Processes applications and issues identification cards contract access badges, vehicle registration, and temporary passes to eligible personnel.
• Maintains controlled forms. Maintains control logs for identification cards and contractor access badges for maintenance and destruction of accountable forms in accordance with applicable AF instructions.
• Carries out routine, miscellaneous clerical tasks.
• Provides general customer service. Focuses on responsive and accurate customer service within the Pass & Registration/Visitors Center environment.

As a Public Affairs Specialist within the Office of Communication and Publishing, some of your specific duties will include:

• Uses a variety of visual storytelling approaches to translate complex scientific charts, maps, or graphics into products designed to engage general audiences.
• Communicate information that involves high visibility issues and may require careful coordination or fast-paced responses to tight deadlines, exercising appropriate professional judgement in handling of sensitive and controversial situations.
• Plans and coordinates the release of newsworthy public information. Maintains relationships with reporters, government officials, stakeholders, and other target audiences. Develops outreach events to help meet communication goals.
• Develops products, campaigns, and posts to reach audiences with a combination of written and visual products for web or social media. Develops a variety of multimedia and interactive products that incorporate photos and videos.
• Independently researches, writes, and prepares content for public dissemination such as new releases, feature stories, talking points, speeches, briefing materials, videos, photographs and social media posts that highlight USGS science and activities.

As a Public Affairs Specialist within the Office of Communication and Publishing, some of your specific duties will include:

• Uses a variety of visual storytelling approaches to translate complex scientific charts, maps, or graphics into products designed to engage general audiences.
• Communicate information that involves high visibility issues and may require careful coordination or fast-paced responses to tight deadlines, exercising appropriate professional judgement in handling of sensitive and controversial situations.
• Plans and coordinates the release of newsworthy public information. Maintains relationships with reporters, government officials, stakeholders, and other target audiences. Develops outreach events to help meet communication goals.
• Develops products, campaigns, and posts to reach audiences with a combination of written and visual products for web or social media. Develops a variety of multimedia and interactive products that incorporate photos and videos.
• Independently researches, writes, and prepares content for public dissemination such as new releases, feature stories, talking points, speeches, briefing materials, videos, photographs and social media posts that highlight USGS science and activities.

Melaksanakan drafting kerja perusahaan dengan pihak eksternal

Hi Everyone, PT Asuransi Jiwa Inhealth Indonesia Official (Mandiri Inhealth) is currently looking for suitable candidates to fill the position of Senior IT Security for our Head Office at Mega Kuningan, South Jakarta. Here are some of the details :

• Bachelor’s degree in Information Technology or System Information or a related field.
• Minimum of 5-10 years as a IT Security or IT Cyber Security
• Familiar with common security controls and security flaws for modern Mobile Application, Web Applications, APIs and Cloud Infrastructure
• Understands the OWASP testing methodology
• Manage reporting related Information System Security status
• Manage operational SIEM & Information System Security day to day
• Familiar with common security controls and security standard such as NIST
• Offensive Security certifications is an advantage such as CEH Pratical or OSCP /OSCE certifiied

Job Family:

Travel Required:

Clearance Required:

What You Will Do:

Our Security Access Management Technical Analyst - Amazon Web Services (AWS) is a member of a service team with upwards of four (5) personnel within the Information Security Compliance group that are focused on external federation and authentication services, privileged access management, non-privileged access management, identity access auditing, and multifactor authentication services. Effectively supports and executes multiple or more complex IT Security Access Management projects that may span company-wide initiatives within scope, timeline, and budget. Applies technical knowledge to innovation and performance improvement while demonstrating critical thinking and sound logic when assessing problems and opportunities in generating solutions. Accountable for ensuring the day-to-day operations of Guidehouse Access Management security systems, maintaining, and protecting Guidehouse and Client data within AWS to the NIST SP 800-171, NIST SP 800-53, ISO 27001, ISO 20000, HIPAA, and HITRUST standards, and managing Guidehouse and client information securely through all means of electronic transfer. Reports directly to the Security Access Management Manager.

Job Function:

• Understands and supports the IT Security Access Management initiatives that support overall IT Security Compliance goals and objectives
• Demonstrates effective written and verbal communication skills; delivered in a professional, respectful, and timely manner
• Manages AWS security services such as Identity and Access Management (IAM to safeguard against unauthorized access and threats
• Produces high quality work product leveraging existing templates, tools, and methodologies that align to applicable professional standards and best practices
• Clearly and concisely conveys more complex messages to IT Security Access Management team; effectively presenting facts and recommendations
• Designs and configures monitoring and alerts for identity and access management in accordance with Guidehouse Policies, Standards, and Procedures
• Assists in conducting risk assessments and security audits to identify vulnerabilities and recommending mitigations to enhance security posture
• Proactively asks questions, validates what is heard, and shares relevant informed point of view in meetings and client discussions
• Demonstrates the ability to sense and respond to verbal and non-verbal cues and adapt messages and approach based on the audience
• Demonstrates honest and professional behavior in all interactions
• Identifies risk issues (e.g., technical, client service, engagement, team, internal and external) and escalate them to IT Security supervisors and senior leaders
• Helps with issue resolution, risk mitigation and contingency planning in alignment with IT Security Access Management leader guidance and IT Security risk mitigation plans
• Uses critical thinking, analysis, expertise, and collaboration to develop technical solutions and solve problems
• Thinks innovatively to proactively identify opportunities for system and process enhancements and make recommendations to IT Security Access Management leadership
• Works in unstructured or unclear circumstances
• Mentors and/or trains IT Security Access Management team and/or IT Security, working with supervisor/leaders to position them for success, serving as a resource to peers
• Promotes the development of new technical knowledge and skills within IT Security Access Management team
• Conducts quality assurance reviews using established or establishing KPIs and self-audit work before showing work to more senior staff and/or clients, learning from mistakes
• Takes ownership of my tasks and the tasks I delegate, resolving issues and escalating as appropriate
• Presents themselves and the company in a manner that always promotes a positive lasting impression of high quality, promptness, and professional service
• Draws from experience to propose solutions to meet needs, focusing the team accordingly
• Builds a high level of trust with stakeholders by meeting and anticipating needs and expectations
• Demonstrates an advanced understanding within AWS and ability to apply technical or specialized knowledge specific to role, industry, business line, and/or functional area within AWS
• Stays current on AWS events, trends, and issues in the news relevant to IT Security
• Ensures prescribed IT Security policies, procedures, and standards are followed while identifying opportunities for system and process enhancements
• Communicates with parties within and outside of IT Security; May have responsibility for communicating with parties external to the organization (e.g., customers, vendors, etc.)
• Works independently on mid to large or complex projects and assignments, with minimal guidance and to influence parties within and outside the job function at an operational level regarding policies, best practices, and procedures
• Responsible for developing technical AWS solutions that may require collaboration with internal expertise and deep analysis of the technical system
• Problems and issues faced are difficult and may require understanding of broader set of issues. Problems typically involve consideration of multiple issues, job areas or specialties; Problems are typically solved through drawing from prior AWS experience and analysis of issues.
• Manages projects while delegating work to lower-level employees
• Ability to participate in cross- department discussions to influence job area processes
• Exhibits practical knowledge of project management
• Advanced understanding and ability to apply standards, principles, theories, and technical concepts obtained through advanced education combined with experience

What You Will Need:

• Citizenship: India
• Shall possess following certifications:
  • AWS Certified Cloud Practitioner Foundational
  • AWS Certified Security Specialty
• Must be able to work 10am – 7pm IST
• Experience working with Executive Leadership
• Experience supporting Microsoft Windows 10 operating system
• Working knowledge of NIST SP 800-171 and NIST SP 800-53
• Experience managing multi-geographic cloud resources while implementing controls compliant with NIST SP 800-171, NIST SP 800-53, ISO 27001, ISO 20000, HIPAA, HITRUST, or GDRP
• Experience documenting processes and procedures to comply with required NIST SP 800-171, NIST SP 800-53, ISO 27001, ISO 20000, HIPAA, HITRUST, or GDRP
• Significant demonstrated experience working with cloud first solutions that are implemented globally
• Extensive experience with AWS environments, access management, and information security principles
• Experience configuring and managing AWS security services such as Identity and Access Management (IAM) to safeguard against unauthorized access and threats
• Experience executing processes and procedures in compliance with required NIST and IT standards
• Extensive experience with AWS Security Hub
• Experience with AWS Control Tower
• Working knowledge of broad web application environment standards, implementation strategies, and best business practices
• Significant experience with the operational employment of as Identity and Access Management (IAM) within AWS
• Ability to work on many concurrent, and changing priorities
• Action-oriented and able to manage and meet aggressive timelines and deadlines.
• Must have excellent organizational and time management skills

What Would Be Nice To Have:

• Bachelor’s in computer-related OR cyber field with 4-6 years of experience; OR Master's with 6-8 years of experience (Relevant experience may be substituted for formal education or advanced degree)
• Shall possess one OR more of the following certifications OR equivalent:
  • AWS Certified Solutions Architect Associate
  • AWS Certified Solutions Architect Professional
  • AWS Certified DevOps Engineer Professional
  • AWS SysOps Administrator Associate
  • AWS Certified Data Engineer
  • AWS Machine Learning Specialty
  • (ISC)2 Certified Information Security Professional (CISSP)
  • ISACA Certified Information Security Manager (CISM)
  • ISACA Certified Information Systems Auditor (CISA)
  • ISO 27001 Certified Auditor
  • ISO 9001 Certified Auditor
  • Project Management Professional (PMP)
  • CompTIA Security+ (Plus)
• Experience with Threat Intelligence
• Experience working with identity and access management systems
• Working knowledge of Active Directory, Exchange, SharePoint, and Teams
• Demonstrated ability to learn and document new technologies/solutions
• Experience with ServiceNow is a plus
• Experience working in an ITIL environment

What We Offer:

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

About Guidehouse
Guidehouse is an Equal Employment Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, citizenship status, military status, protected veteran status, religion, creed, physical or mental disability, medical condition, marital status, sex, sexual orientation, gender, gender identity or expression, age, genetic information, or any other basis protected by law, ordinance, or regulation.

If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.

Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.

Security Clearance required:

Do you want to make a difference? 
Cognosante employees are passionate about improving people’s lives. With an innovative mindset and an unwavering commitment to those we serve, we partner with healthcare, civilian and defense agencies to deliver exceptional public services and programs. Our multi-faceted technology and customer experience (CX) solutions achieve program outcomes, solve critical challenges and create meaningful change. Whether we are helping Veterans access healthcare faster, ensuring that members of the military complete their missions safely, or helping people obtain health insurance, our work touches millions of people. Are you ready to make a difference?

Come Join Our Team 
Cognosante is on a mission to transform our country’s healthcare and safety systems. With our health and security-focused solutions, we help public sector organizations achieve the important task of providing the best possible public services to American Citizens. From Enterprise IT, Data Science, and Security Services, to full-scale Consumer Engagement and Interoperability solutions, we are moving government services forward with transformation and innovation. Learn how we are making a difference in people’s lives today
 
What is the position? 
The Security Analyst is responsible for all activities related to designing, selecting, implementing, and maintaining security controls for major information systems supporting federal government contracts, including achieving and sustaining authorization to operate (ATO) following NIST Risk Management Framework procedures and guidance mandated under FISMA. 
 
What will I get to do?  

• Provides content to and collaboration with training staff on training stakeholders on triaging transactions and the reconciliation process.  This includes the continuous process improvement of the reconciliation process.
• Analyze systems, data, and operating environments to determine appropriate security controls.
• Work closely with project team members to make sure that applicable security requirements are incorporated in systems and solutions deployed for the project
• Participate in business, technical, and security reviews of the solution to explain selected security and privacy controls.
• Perform initial and ongoing risk assessments of the system.

 
What qualifications do I need? 

• Bachelor’s Degree or equivalent OR 4 years’ relevant experience in lieu of degree.
• Must be a US Citizen or Authorized to work in the US (if not a citizen) and a resident of the US for at least 3 years within the last 5 years.
• Must be proficient in word processing, spreadsheet, email, database, contact management, internet, and project management software (such as MS Office and Visio)
• Must have familiarity with project management tools and methodologies.
• Excellent communication skills
• Excellent problem-solving skills
• Excellent customer service skills

 
 
What additional characteristics will help me thrive?  

• Experience analyzing data and presenting to stakeholders.
• Formal education or professional experience in information assurance, information security management
• Ability to perform comfortably in a fast-paced, deadline-oriented work environment.
• Ability to successfully execute many complex tasks simultaneously.
• Information security certifications such as: Security +, CASP, CISA, CISM, CISSP

What We Offer  

Our mission is to provide comprehensive and competitive pay, benefits, services, and programs to eligible employees and their dependents that:  

• Ensure optimal health and productivity of our employees   

• Support employee retention and attraction  

• Provide work/life balance to ensure our employees succeed inside and outside of the office  

Compensation

The pay range for this job is determined by various factors, including but not necessarily limited to location, responsibilities of the job, and alignment with market data. When determining a salary for this role, the following factors may be taken into consideration - contract-specific affordability, education, knowledge, skills, competencies and experience. The estimate displayed represents the salary range for this position and is just one component of Cognosante’s total compensation package for employees. It is not necessarily reflective of actual compensation that may be earned, nor a promise of any specific pay for any specific employee. 

Cognosante will not provide sponsorship for employment-based immigration benefits for this position.

What We Promise  

Cognosante employees are inspired by our bold mission to improve lives. To achieve this mission, we put our people first. No matter where they're located around the nation, our innovative workplaces enable individuals to apply their skills and experience to work toward a greater good.  

We foster a winning culture of solution creators built on innovation, collaboration, flexibility, and work-life balance. And we invest in the next generation of diverse talent to foster an inclusive, progressive, adaptable workplace that prioritizes advancement for all. As an affirmative action employer, we are committed to equal opportunity regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status, or any other protected class.   

Your safety during your job search is important. Recruiting communications will always be sent through one of the following corporate domain emails (@cognosante.com or @accurate.com).  

We will never send communications through any other domain, including @cognosantecareers.com, @gmail.com or @yahoo.com). We will never request payment from you, nor will we send payment to you, prior to your start date. If you have been asked to send or receive any payment, or if you have any doubt about whether you have been contacted by a Cognosante employee, please contact us at jobs@cognosante.com 

Job Family:

Travel Required:

Clearance Required:

What You Will Do:

Our Security Governance Sr. Analyst is a member of a service-oriented team with upwards to six (6) personnel within the Information Security Governance team that are focused on policy development/management, Engagement Data Security Plan (EDSP) management, Travel assessments, and documentation management. Effectively supports and executes multiple or more complex IT Security Governance projects that may span company-wide initiatives within scope, timeline, and budget. Applies technical knowledge to innovation and performance improvement while demonstrating critical thinking and sound logic when assessing problems and opportunities in generating solutions. Accountable for ensuring the day-to-day operations of Guidehouse security governance, maintaining, and protecting Guidehouse and Client data to the NIST SP 800-171 standards, managing Engagement Data Security Plan (EDSP) implementation and execution for the Company, and manage the compliance and execution of the IT Travel Security program. Reports directly to the IT Security Governance Manager.

• Achieves operational targets within IT Security Governance area with direct impact on results

• Executes daily work within existing procedures and guidelines

• May influence other technical staff through explanation of facts, policies and practices related to job area

• Communicates with contacts typically within the project area or technical department on matters that involve obtaining or providing information requiring some explanation or interpretation in order to reach agreement

• Entry to established level technical individual contributor

• Builds on knowledge of an industry or segment and works to deepen experience across a range of projects

• Follows operating guidelines and identifies recommended enhancements in processes to improve effectiveness of IT Security Governance area

• Works under close to limited supervision on small to midsize projects or assignments

• Requires general instructions for new lines of work or special projects

• Assists with the implementation and executes on technical initiatives and solutions

• Relies on limited experience and judgment to plan and accomplish assigned tasks and goals

What You Will Need:

• United States Citizenship

• Bachelor's Degree preferred

• Minimum 2-4 years of prior relevant experience desired; (Relevant experience may be substituted for formal education or advanced degree)

• Shall possess one or more of the following certifications (preferred):

  • (ISC)2 Certified Information Security Professional (CISSP)

  • ISACA Certified Information Security Manager (CISM)

  • ISACA Certified Information Systems Auditor (CISA)

  • ISO 27001 Certified Lead Auditor

  • ISO 9001 Certified Lead Auditor

  • Project Management Professional (PMP)

  • Security+

• Must be able to work East Coast US business hours

• Experience documenting processes and procedures to comply with required NIST and IT standards

• Ability to work on many concurrent and changing priorities – flexibility is a must

• Action-oriented and able to manage and meet aggressive timelines and deadlines

• Must have excellent organizational and time management skills

What Would Be Nice To Have:

• Experience working with Governance Risk and Compliance tools beyond the manual processes of excel sheets, folders, and emails

• Experience with NIST SP 800-53

• Experience with Microsoft Azure Compliance Center

• Working knowledge of Active Directory, Exchange, SharePoint, and Teams

• Demonstrated ability to learn and document new technologies/solutions

• Experience with ServiceNow is a plus

• Experience working in an ITIL environment

What We Offer:

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

Benefits include:

• Medical, Rx, Dental & Vision Insurance

• Personal and Family Sick Time & Company Paid Holidays

• Position may be eligible for a discretionary variable incentive bonus

• Parental Leave and Adoption Assistance

• 401(k) Retirement Plan

• Basic Life & Supplemental Life

• Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts

• Short-Term & Long-Term Disability

• Student Loan PayDown

• Tuition Reimbursement, Personal Development & Learning Opportunities

• Skills Development & Certifications

• Employee Referral Program

• Corporate Sponsored Events & Community Outreach

• Emergency Back-Up Childcare Program

• Mobility Stipend

About Guidehouse
Guidehouse is an Equal Employment Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, citizenship status, military status, protected veteran status, religion, creed, physical or mental disability, medical condition, marital status, sex, sexual orientation, gender, gender identity or expression, age, genetic information, or any other basis protected by law, ordinance, or regulation.

Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.

If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1-571-633-1711 or via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.

Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.

Evotec is a leader in the discovery and development of novel small molecule drugs with operational sites in Europe, Asia and the US. The Company has built substantial drug discovery expertise and an industrialized platform that can drive new innovative small molecule compounds into the clinic. In addition, Evotec has built a deep internal knowledge base in the treatment of diseases related to neuroscience, pain, and inflammation. Leveraging these skills and expertise the Company intends to deliver superior science-driven discovery alliances with pharmaceutical and biotechnology companies.

We are looking for a full-time Senior Network and Security Engineer to join our team.  
 
Key responsibilities:
•    Responsible for the configuration, operation and fault clearance of the corporate WAN and LAN environment.
•    Design and Deployment of new sites and infrastructure.
•    Administration of the infrastructure of the central data centers and the Evotec sites and act as a contact for the network and security services used.
•    Provide 3rd tier support to local administration teams.
•    Plan, control, and implement changes to critical IT security and network infrastructures as part of a managed service.
•    Responsible for the documentation of the changes in the IT security and network environment.
•    Training of other administrators in the day to day functionality of the systems within their remit. 

Qualifications:

•    Completed IT-technical training or university degree.
•    Experience with network and firewall components (e.g. Cisco, Fortinet, Broadcom, F5, HP, Aruba) as well as with Windows networking.
•    Knowledge and experience in operation and troubleshooting in the following areas: Firewalls, VPN, Reverse Proxy, Load Balancers, Cloud Security, Cloud Services.

Evotec (US) Inc. is an Equal Opportunity Employer.  All qualified applicants will receive consideration for employment without regard to race, gender, age, disability, genetic information, gender expression, gender identity, national origin, religion, sexual orientation, or veteran status.

Evotec (US) Inc. is an Equal Opportunity Employer.  All qualified applicants will receive consideration for employment without regard to race, gender, age, disability, genetic information, gender expression, gender identity, national origin, religion, sexual orientation, or veteran status.

Who are we?

Product Software, Platform Services

Equinix is a global leader in interconnection and data center services, empowering businesses to connect their digital infrastructure securely and reliably. With a presence in more than 50 markets worldwide, Equinix provides cutting-edge solutions that enable companies to accelerate their digital transformation and thrive in today's interconnected world.

As we continue to prioritize the security of our customers' data and infrastructure, we are seeking a talented and driven Software Security Engineer to join our passionate team of experts at Equinix and help us maintain the highest level of security for our platform services that serve all Equinix’s products and customers.

Job Summary

As a Software Security Engineer at Equinix, you will play a pivotal role in enhancing the security posture of our software systems and services. Your expertise will be instrumental in safeguarding critical data and ensuring the uninterrupted operation of our platform services. You will collaborate closely with product and information security teams, as well as platform services’ engineering teams, architects, and other DevSecOps professionals across the organization.

Together, you will implement robust security measures, address potential vulnerabilities identified by InfoSec stakeholders, and promote security best practices throughout the software development lifecycle. This is a technical, hands-on engineering role designed for security specialists familiar with Java/Spring Boot and microservices architecture. Experience with distributed, highly automated environments and a developer’s understanding of security, coupled with a willingness to learn new concepts, are essential for success in this role.

Responsibilities

• Collaborate with internal InfoSec stakeholders to address security requirements and enhance security awareness across the organization

• Collaborate with platform services’ engineering teams to implement security practices into the software development process, ensuring secure coding standards, design principles, and threat mitigation strategies are followed

• Monitor and analyze security events and incidents, providing timely resolution and implementing preventive measures to protect against future threats

• Adhere to the defined SLOs to address the security vulnerabilities

• Conduct security training and awareness programs for developers and other team members to promote a security-conscious culture within the organization

• Contribute to the development and maintenance of security policies, procedures, and guidelines that align with industry best practices and regulatory requirements

• Conduct comprehensive security assessments, including code reviews, penetration testing, SAST/DAST scanning, and threat modeling, to identify and address potential security risks in the services that the platform team owns

• Manage configurations of security tools for platform services in alignment with other products and InfoSec

• Adopt and improve cloud and infrastructure security controls

• Assess the security of authentication, authorization, and encryption mechanisms to safeguard sensitive data and ensure secure access control.

• Actively research and keep abreast of the latest security threats, vulnerabilities, and industry best practices, and apply this knowledge to continuously improve our security strategies

Qualifications

• Minimum 7 years of professional engineering experience in Software Security , or a related field

• Minimum 5+ years of full-stack expertise in application design & development with Java technologies, with knowledge of Spring, JPA/Hibernate, Message Queues & Workflow Engines in a microservices architecture

• Strong hands-on ability to fixing vulnerable libraries/packages in Java, Spring Boot, ReactJS, NodeJS, Go, Kotlin, Message Queue frameworks or workflow engines

• Strong understanding of software security principles, secure coding practices, and common security vulnerabilities (OWASP Top 10, CWE, etc.)

• Proven work experience as a Software Security Engineer or similar role with a focus on securing large-scale, distributed software systems including secure configuration of AWS, docker, K8s, service mesh, and NACL configuration management

• Hands-on experience with security tools and frameworks for code analysis, vulnerability scanning, and penetration testing in software & network systems

• Hands-on experience with cloud security best practices and technologies using AWS

• Solid knowledge of network protocols, web application security, and data protection mechanisms

• Understanding of compliance frameworks like ISO, GDPR and SOC

• Demonstrated ability to collaborate effectively with cross-functional teams and communicate complex security issues to both technical and non-technical stakeholders

• Strong analytical and problem-solving skills with a keen eye for detail

• Passion for staying up-to-date with the latest security trends and technologies to proactively address emerging threats

• Apply now and be a key player in shaping the future of the security of Equinix’s platform services

Equinix is committed to ensuring that our employment process is open to all individuals, including those with a disability. If you are a qualified candidate and need assistance or an accommodation, please let us know by completing this form.

Equinix is an Equal Employment Opportunity and, in the U.S., an Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to unlawful consideration of race, color, religion, creed, national or ethnic origin, ancestry, place of birth, citizenship, sex, pregnancy / childbirth or related medical conditions, sexual orientation, gender identity or expression, marital or domestic partnership status, age, veteran or military status, physical or mental disability, medical condition, genetic information, political / organizational affiliation, status as a victim or family member of a victim of crime or abuse, or any other status protected by applicable law.