Job Search Results for cybersecurity

Linux Vulnerability Management Analyst

We are looking for a Vulnerability Management Analyst with strong Linux expertise to identify, assess, and drive remediation of security vulnerabilities across Linux-based systems. This role partners... More closely with infrastructure, security, and engineering teams to reduce risk and improve security posture.Key Responsibilities?Analyse vulnerability scan results, validate findings, and assess risk based on severity, exploitability, and business impact?Coordinate and track remediation efforts with Linux system administrators, engineering teams, and application owners?Provide remediation guidance, including patching, configuration changes, and compensating controls?Perform vulnerability trend analysis and reporting for leadership and stakeholders?Ensure timely remediation in alignment with internal security policies and regulatoryrequirements?Perform manual validation of identified vulnerabilities to minimize false positives and ensure accurate reporting.?Support compliance initiatives (e.g., CIS benchmarks as applicable)?Participate in incident response and root cause analysis related to vulnerability exploitation?Contribute to the development and improvement of vulnerability management standards, metrics, and processesWe are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.Less

Sr. SOC Cloud Engineer

The Senior SOC Cloud Engineer is a SOC-focused, cloud security engineer responsible for cloud-native detection, incident response, and remediation across Azure and AWS. Reporting to the SOC Manager,... More this role owns the cloud incident response lifecycle and acts as an engineering extension of the SOC as the organization moves cloud-first. This is a control and detection?focused role. Day-to-Day? Own and support cloud incident response from detection through containment, remediation, and lessons learned? Enable high-fidelity alerts for SOC analysts (this role is not alert-triage heavy)? Build, tune, and automate cloud-native detections? Route and optimize Defender and cloud security alerts into Splunk? Support investigations involving identity compromise, ransomware, and cloud-based threats? Improve SOC readiness for real-world cloud incidentsWe are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.Less

Network Security Compliance Lead

The Network Security Compliance Lead will serve as the primary architect for translating high-level regulatory mandates into granular, technical requirements. Candidates will bridge the gap between... More Legal/Regulatory bodies and Platform/Network Engineering teams, ensuring that "Security by Design" is not a slogan, but a documented, auditable technical reality. As a "Technical Architect-Auditor." you will deconstruct legal mandates into engineering specs and then execute the hands-on implementation of those requirements. You are responsible for the technical enforcement of the Sovereign Data Controller concept, ensuring the client?s network can programmatically respond to regulatory demandsCore Responsibilities:-Automated Regulatory Architecture & Engineering (30%)?The Translator: Deconstruct complex legal mandates (e.g., NIS2 Directive Article 21, SOC 2 Trust Services Criteria) into actionable technical requirements for platform delivery and network teams.?Compliance-as-Code: Translate NIS2 and SOC 2 requirements into automated security policies (e.g., Open Policy Agent (OPA) or AWS Config).?Methodology Authoring: Develop and maintain the official Incident Handling Methodology and step-by-step procedures for regional compliance authorities.?Platform Delivery Specs: Create and sign off on Security Requirement Documents (SRDs) for all new platform features, ensuring network segmentation and identity controls are baked in.?Stakeholder Liaison: Interface directly with Legal, Regulatory CRAs, and external auditors to defend technical control logic.-Hands-on Technical Execution (20%)?Configuration & Implementation: Execute hands-on configuration changes and network modifications based on defined requirements (e.g., Firewall rules, VPC hardening, IAM policies).?Sovereign Data Controller: Build and manage the Sovereign Data Controller framework; specifically, engineering the capability to programmatically turn connections on/off based on data residency or compliance triggers.?Technical Operations: Act as the primary technical executor once requirements and processes are defined, ensuring no "gap" between policy and production.?Network Automation: Utilize Ansible, Terraform, or Python to automate network hardening and firewall rule lifecycle management.-Audit & Stakeholder Interface (30%)?Legal & Regulatory Liaison: Act as the technical point of contact for the Legal department and External Auditors. Defend technical implementations and explain control logic in non-technical terms.?CRA/Regulatory Management: Manage submissions and evidence gathering for Cyber Resilience Act (CRA) or similar regional certifications.?Risk Reporting: Translate technical network risks into Business Impact Analyses for executive leadership and legal counsel.?Data Portability: Develop and maintain automated download capabilities for audit evidence and regulatory logs to streamline external review.-Network & Platform Security Governance (10%)?Technical Oversight: Leverage deep knowledge of TCP/IP, Zero Trust Architecture, and Cloud Networking to validate that configurations (Firewalls, VPCs, IAM) actually meet the intended compliance goals.?Gap Analysis: Lead continuous "pre-audit" assessments of the network stack to identify and remediate non-conformities before they reach an official auditor.?Process Automation: Work with engineering to automate the collection of compliance evidence (Evidence-as-Code) to reduce manual audit toil.-Reporting & Audit Automation (10%)?Automated Reporting: Build and maintain regulatory reporting views and dashboards that provide real-time, "downloadable" compliance status for auditors.?Reporting Engineering: Design and build regulatory reporting views within internal dashboards to provide real-time visibility into compliance status.?Data Portability: Develop and maintain automated download capabilities for audit evidence and regulatory logs to streamline external review.?Gap Remediation: Identify network vulnerabilities and manually implement the required technical fixes to maintain an "Always Audit-Ready" state.We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.Less

Lead PAM Engineer

The PAM Engineer will be responsible for technical deployment, rollout, maintenance, and support for the end-to-end Privileged Access Management (PAM) systems (BeyondTrust Solutions ? Password... More Safe-PS, Endpoint Privileged Management EPM ? PM Window, PM Mac, Unix Linux-PMUL, AD Bridge or Identity Security Insight- ISI, Privileged Remote Access-PRA)? Responsible for the BeyondTrust delivery and operations, including strategic direction, establishing technical standards, overseeing staffing, performance, career growth, and serve as escalation for complex PAM issues? Provides technical support across IAM applications to define, implement and enhance current and new IAM software, hardware requirements, delivering and supporting PAM solutions, and processes? Provide support with respect to implementation, and concurrent delivery of two or more Privileged platforms (i.e., PAM) such as BeyondTrust, Delinea, Microsoft Entra ID, Privileged Identity Manager? Assist with onboarding and managing privileged accounts across servers, databases, network devices, cloud platforms, and applications? Assist with implementing password vaulting, credential rotation, secrets management, service accounts and non-human identities, reducing shared and hard-coded credentialsRate will range between $65-$85/hr depending on skills and experience ? Assist with various privileged access management policy tasks which include creating policies for application elevated access, policy enforcement errors, failed elevations and rule conflicts, reviews logs for policy bypass attempts, review/adjust flex group policies for appropriateness, review/adjust PMUL configurations to allow users access to appropriate systems, review discovery logs, and correct discovery issuesWe are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.Less