Total 494 Credit Analyst job vacancies in Legal / Public / Security category in The United States of America

Responsibilities：

• Support security developments (such as evolving threats, new or enhanced security controls or changes to the technical infrastructure)
• Ensure that all Infrastructure related procedures, operation guide, architecture diagram, hardening baselines, security metrics, etc documents shall be reviewed annually or updated whenever there are changes within a month.
• Be responsible for strengthening Customer’s cyber security posture against cyber threats through vulnerability management, incident response and analysis, threat hunting and security operations.
• Manage Customer’s Cyber security operation and manage the reporting and handling of cyber security incidents.
• Perform Vulnerability Management leveraging on MVMS.
• Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring dashboard for any abnormalities.
• On boarding of subscribed servers and infrastructure devices to MVMS.
• Provide supporting documents for audits
• Perform Monthly Vulnerability Assessment, Quarterly Vulnerability Assessment for servers and network equipment.
• Work with application and infrastructure team to to ensure compliance and regulatory requirements and industry standards

Requirements;

• Diploma/degree in computer studies
• 2 years of experience working in a security operations, incident response, vulnerability management or related field.
• Demonstrated experience in network security, server security, endpoint security, web security etc.
• Strong knowledge of security principles, technologies, and industry best practices.
• Experience with log analysis, malware analysis, and network traffic analysis.
• Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues and develop effective solutions.
• Hands-on experience in security appliances such as IBM Guardium, MMVS, Carbon Black, Cyber Ark is a definite advantage.
• Experience in IT security/support operations with willingness to learn above mentioned tools are encouraged to apply. Experienced candidates will be considered for team lead role
• Willing to work in rotational shift environment (including weekends and night shift).

What you get to do in this role
 
We are looking for a highly motivated, collaborative and technically experienced Security Compliance - Junior Analyst with ability to understand and influence cloud operational and security processes, effectively communicate ServiceNow’s controls including intent, and drive changes within the organisation through effective testing. The successful candidate must be reliable, resourceful and have a “can-do” attitude.  
 
You will be a key member of our team and play an important role in defining the Security and Compliance framework for a leading cloud company. In this role you will be required to demonstrate ability to analyse difficult problems, think out-of-box and provide pragmatic solutions and recommendations.   

ServiceNow current compliance initiatives are focused on, but not limited to Australia’s IRAP, Singapore MTCS, Japan’s ISMAP, and other global programs such as ISO 27001, ISO 27018, PCI, SSAE 18, and SOC 2. Security Compliance Junior Analyst will be involved in driving and measuring compliance for the cloud business systems, control areas, process, and product for company compliance initiatives.    
 
Responsibilities

• Perform activities to help measure and monitor compliance with company policies and procedures 
• Facilitate certifier requests and information gathering for audit activities and lead onsite audits
• Conduct activities to comply with the various Government Cyber Security requirements within the APJ
• Successfully drive security compliance testing activities across various teams within the organisation 
• Contribute by enhancing and maturing the existing common control framework 
• Liaise with Risk Management and conduct security risk assessment activities  
• Help our customers understand ServiceNow’s security and compliance control environment 
• Contribute towards enhancing the GRC tool and processes to meet compliance business needs 

This is a 12 months contract assigned to our client

Work Location: To be confirmed (during interview)

Salary Range : $5,000-$7,500

Job Description

Top Mandatory skills

1. Azure native security

2. Security Incident response

3. Familiar with at least 2 of below security tooling upkeeping:

SIEM, Endpoint Detect and Response, Endpoint Anti-virus, Next Gen Firewall, VA Scanner

Skills which are good to have / optional

1. Hardening CIS benchmark

2. Impact analysis report drafting, testing of patches

3. Government compliance standards familiarity

4. Knowledge on Cloud Application Architecture

Cyber Security Analyst SALARY: $2,074.14 - 2,376.22 pw Super Work Type: Temporary Full Time for up to 2 years Location: Oran Park Administration Building - 70 Central Avenue, Oran Park 2570 Come join an organisation with endless opportunities, where people choose to work because they are inspired by the chance to shape, influence and grow a community. We are seeking a talented Cyber Security Analyst to join our growing Cyber Security Team. You'll play a vital role in safeguarding Council's data and systems by working alongside our Cyber Security Advisor. Here's what you'll do in the next two years: Collaborate on implementing and executing our comprehensive Cyber Security Action Plan. Analyse and improve security policies to ensure the highest level of protection. Assist in undertaking cyber security risk assessments on vendors and solutions. Educate staff and cultivate a culture of cybersecurity awareness and responsibility across Council. What We Offer We are committed to offering and…

Click here to view more detail / apply for Cyber Security Analyst

This is a 12 months contract assigned to our client

Work Location: To be confirmed (during interview)

Salary Range : $5,000-$7,500

Job Description

Top Mandatory skills

1. Azure native security

2. Security Incident response

3. Familiar with at least 2 of below security tooling upkeeping:

SIEM, Endpoint Detect and Response, Endpoint Anti-virus, Next Gen Firewall, VA Scanner

Skills which are good to have / optional

1. Hardening CIS benchmark

2. Impact analysis report drafting, testing of patches

3. Government compliance standards familiarity

4. Knowledge on Cloud Application Architecture

Whitefox Recruitment Time to leap into the cyber security realm with a premier Aussie Tech Company! Eager to embark on a journey as a Cyber Security Analyst? Comprehensive training in cyber security and technology. A chance to be part of a leading company known for its innovative culture. Career development and progression opportunities. Time to leap into the cyber security realm with a premier Aussie Tech Company! Eager to embark on a journey as a Cyber Security Analyst?   Here's the lowdown: a titan in the Australian cyber security industry is on the hunt for proactive individuals ready to kickstart their career in the dynamic world of cyber security. They're seeking a Cyber Security Analyst who's not just tech-savvy but also keen to learn and excel in safeguarding digital domains.   As a Cyber Security Analyst, you'll dive into an extensive training program, honing your cyber security skills, mastering threat analysis, and getting a comprehensive understanding of advanced security protocols. This role is ideal for those eager to enter cyber security, merging education with hands-on experience.   Our client is a powerhouse of innovation, deeply rooted in the Australian tech sector, with a legacy of excellence in cyber security. Being Australian-owned and operated, they're all about nurturing local talent, primarily from Melbourne, Canberra, and Sydney, aiming to lead in tech and uplift the community.   Living in Melbourne isn’t just about work; it's a lifestyle, with its vibrant arts scene, bustling cafes, and lush parks, offering a blend of urban life and natural beauty. It's the perfect place for balancing career and leisure, allowing you to thrive in a metropolitan haven.   Joining this team means your part of a passionate crew who thrive in the fast-paced world of tech. The company culture is robust, with a security team rich in expertise, serving clients across the nation. What you'll do: Immerse yourself in learning about our security solutions to excel in threat analysis and incident response. Shadow experienced security professionals to grasp the nuances of cyber defence strategies. Identify and mitigate potential security threats through various monitoring techniques. Excel in security assessments and audits, understanding and addressing client vulnerabilities. Develop and maintain strong client relationships, ensuring their digital assets are secure. Create and implement effective security protocols and measures. Collaborate with our tech teams to guarantee robust security implementations. Continually enhance your cyber security and industry knowledge through ongoing training. What you need: Strong analytical and problem-solving skills. A keen interest in cyber security and a proactive approach to learning. Team-oriented mindset. A solid foundation in IT and security principles is advantageous. Organisational skills and the ability to manage time effectively. Having active NV2 security clearance at the time of applying is an essential requirement for this position. What you'll get: Comprehensive training in cyber security and technology. A chance to be part of a leading company known for its innovative culture. Career development and progression opportunities. A supportive, team-focused environment. Benefits aligned with health and wellness. In collaboration with the 2024 Global Recruitment Firm of the Year, Whitefox Recruitment, we offer this exciting role and are eager to explore other opportunities with you to find your perfect match.   Our client is dedicated to fostering growth, learning, and success. It’s more than just a job; it’s a career pathway in cyber security with a company that values innovation, excellence, and community engagement.   This is a full-time permanent position. If you're ready to elevate your career with a company where your impact is valued, we're excited to talk!   For more info and to throw your hat in the ring, hit up Luke Hemmings at Whitefox Recruitment on 07 5619 7075, reference: 611252.   We value our candidates and respond to all who apply.   Interviews are underway, so get in quick! Salary: $90000-130000 Job Publish: 13-04-2024 Job Expire: 13-05-2024 Please click to View more detail / apply .

Develop policy and standards for API security. Experience and knowledge in Application Programming Interface (API), static application security testing (SAST) and related tools like Veracode / Checkmarx / Fortiy. Experience and knowledge in Burp Suite tool for dynamic testing (DAST). Primarily responsible for API application security but with a good working knowledge of other security domains (Cryptography, Identity and Access Management, Threat and Vulnerability Management) At least 2 years of working experience in application security that includes API, SAST and DAST along with Checkmarx, Veracode Knowledge of security technologies (encryption, data protection, design, privilege access, etc.) Proficiency in time management, communications, decision making, presentation and organizational skills Proficiency in planning, reporting, establishing goals and objectives, standards, priorities and schedules Excellent decision-making, analytical and problem solving skills Excellent verbal and written communication skills to technical and non-technical audiences of various levels in the organization Experience establishing and maintaining effective working relationships with employees and/or clients Strong knowledge of development and application security Hands-on experience performing application API security assessment, static and dynamic security assessments with tools such as: Burpsuite, OWASP ZAP, AppScan, WebInspect, Fortify, Veracode, Checkmarx, etc. Knowledge of OWASP Top 10/ SANS Top 25, identify vulnerabilities via manual and automated testing methods and how to effectively remediate vulnerabilities associated with each Expert knowledge of information security principles, web applications, and intermediate familiarity with malicious code and common hacking techniques used by malicious actors Experience conducting risk assessments and performing threat modeling of applications Ability to collaborate with teams remotely

Security Operations Analyst SALARY: $2,074.14 - 2,376.22 pw Super  Work Type: Temporary Full Time for up to 2 years Location: Oran Park Administration Building - 70 Central Avenue, Oran Park 2570 Come join an organisation with endless opportunities, where people choose to work because they are inspired by the chance to shape, influence and grow a community.  Exciting new opportunity has arisen for a Security Operations Analyst to join Council’s IT Operations Team, working in conjunction with Council’s Cyber Security Team.  You will provide a high level of information security operational support to the Council. This is a great opportunity for a Security Operations professional to work across Council’s ICT ecosystem. Don’t miss out on being part of something great by joining an evolving, rapidly growing, adaptive and innovative organisation.  What We Offer We are committed to offering and supporting development and employment opportunities to help people excel and build a lasting career. We offer generous learning…

Click here to view more detail / apply for Security Operations Analyst

Cyber Security Analyst SALARY: $2,074.14 - 2,376.22 pw Super  Work Type: Temporary Full Time for up to 2 years Location: Oran Park Administration Building - 70 Central Avenue, Oran Park 2570 Come join an organisation with endless opportunities, where people choose to work because they are inspired by the chance to shape, influence and grow a community.  We are seeking a talented Cyber Security Analyst to join our growing Cyber Security Team. You'll play a vital role in safeguarding Council's data and systems by working alongside our Cyber Security Advisor. Here's what you'll do in the next two years: Collaborate on implementing and executing our comprehensive Cyber Security Action Plan. Analyse and improve security policies to ensure the highest level of protection. Assist in undertaking cyber security risk assessments on vendors and solutions. Educate staff and cultivate a culture of cybersecurity awareness and responsibility across Council. What We Offer We are committed to offering and supporting development…

Click here to view more detail / apply for Cyber Security Analyst

Job Description:Respectfully - No Recruitment Agencies Please.We draw on the talents of our people and collaborate with others who share our vision and values to continue the pioneering spirit of Mary Aikenhead and the Sisters of Charity. We are committed to providing compassionate and innovative care, enabling hope for those we serve.We are actively sourcing an experienced Cyber Security Business Analyst to be part of our Cyber Remediation Program at St Vincent’s Health Australia. Reporting directly to the Cyber Security Program Manager, you will be responsible for gathering, analysing, and documenting business requirements and processes to ensure the successful adoption of Cyber Security initiatives within the organisation.The ideal candidate will have strong experience in Cyber Security Projects across Active Directory Remediation and exposure to the Hospital/Healthcare industry. You will be a committed, resourceful, and flexible team player who is willing to make an extra effort to ensure the security and safety of those we serve…

Click here to view more detail / apply for Cyber Security Business Analyst

Full time Experienced (relevant combo of work and education) Bachelor of Computer Science 0% As the world works and lives faster, FIS is leading the way. Our fintech solutions touch nearly every market, company and person on the planet. Our teams are inclusive and diverse. Our colleagues work together and celebrate together. If you want to advance the world of fintech, we’d like to ask you: Are you FIS? About the team: It’s an amazing opportunity to join a Talented team of innovative and committed folks doing interesting work at the world’s largest global provider dedicatedto financial technology solutions! What you will be doing: Develop policy and standards for API security. Experience and knowledge in Application Programming Interface (API), static application security testing (SAST) and related tools like Veracode / Checkmarx / Fortiy. Experience and knowledge in Burp Suite tool for dynamic testing (DAST). Primarily responsible for API application security but with a good working knowledge of other security domains (Cryptography, Identity and Access Management, Threat and Vulnerability Management) What you bring: At least 2 years of working experience in application security that includes API, SAST and DAST along with Checkmarx, Veracode Experience and knowledge in static application security testing (SAST) and related tools like Veracode / Checkmarx / Fortiy. Experience and knowledge in Burp Suite tool for dynamic testing (DAST). Primarily responsible for application security but with a good working knowledge of other security domains (Cryptography, Identity and Access Management, Threat and Vulnerability Management). Knowledge of security technologies (encryption, data protection, design, privilege access, etc.) Proficiency in time management, communications, decision making, presentation and organizational skills Proficiency in planning, reporting, establishing goals and objectives, standards, priorities and schedules Excellent decision-making, analytical and problem solving skills Excellent verbal and written communication skills to technical and non-technical audiences of various levels in the organization Experience establishing and maintaining effective working relationships with employees and/or clients Strong knowledge of development and application security Hands-on experience performing application API security assessment, static and dynamic security assessments with tools such as: Burpsuite, OWASP ZAP, AppScan, WebInspect, Fortify, Veracode, Checkmarx, etc. Knowledge of OWASP Top 10/ SANS Top 25, identify vulnerabilities via manual and automated testing methods and how to effectively remediate vulnerabilities associated with each Expert knowledge of information security principles, web applications, and intermediate familiarity with malicious code and common hacking techniques used by malicious actors Experience conducting risk assessments and performing threat modeling of applications Ability to collaborate with teams remotely What we offer you: A career at FIS is more than just a job. It’s the change to shape the future of fintech. At FIS, we offer you: A voice in the future of fintech Always-on learning and development Collaborative work environment Opportunities to give back Competitive salary and benefits Privacy Statement FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice. Sourcing Model Recruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company. #pridepass

IT Cyber Security Analyst & Team Leader - CISSP or CySA+ or MSc Information Security

Weymouth, Dorset, or London, South East UK or Stoke on Trent, Staffordshire

£50,000pa + Hybrid & Flexi-Working & Training & Certifications Available

Weymouth, Dorset, or London, South East UK, or Staffordshire + Hybrid and Flexible Working as Standard

The Client: Are a well-known High St and Online retailer who are seeking a Senior IT Cyber Security Analyst who specialises in Microsoft / Wintel Servers and Virtualisation supporting a UK wide infrastructure.

Objective: You will Lead 2 x Cyber Security Analysts, giving support to the Head of Cyber Security in delivering the Information Security service to the global business.

You will lead all Cyber Security Operations function and be the first point of contact for technical information security related matters.

Role Responsibilities:

• You will Lead 2 x Cyber Security Analysts, giving support to the Head of Cyber Security
• Act as the first point of action or escalation for the identification of security incidents and their investigation.
• Be responsible for the managed Security Operations Centre (SOC), Network Monitoring and Managed Detection and Response services and associated vendor relationships.
• Offer mentoring, advice and guidance to those in your Team
• Be the subject matter expert for technical security related queries, providing the Security Architect, IT Service and Delivery teams and business stakeholders with authoritative advice and defined security requirements.
• Be responsible for the Security Education and Awareness scheme.
• Ensure Cyber Security campaigns are conducted, and improvements implemented and ensure colleague queries around policies and requirements are appropriately answered in a timely manner.
• Be responsible for the Vulnerability Management process.
• Act on vulnerability information and conduct Cyber Security risk assessments and work with suppliers, partners, and internal teams to ensure security vulnerabilities are identified, assessed, and remediated in good time.

Key Requirements you will need:

• In depth knowledge of Information Security concepts and principles, including cloud security capabilities.
• Experience with configuring and utilising security tooling, including SIEM, EDR, vulnerability scanners, CASB, network scanning, DLP.
• Hands-on IT experience with proven expertise in a previous Information Security role.
• Vendor management experience.
• A relevant intermediate or advanced Information Security based qualification (e.g. CISSP, CySA+, MSc Information Security)
• Ability to critically analyse information and make decisions based on judgement, knowledge, and experience.

Business Knowledge:

• Knowledge of Retail and eCommerce is of great advantage but is not essential.
• Working knowledge of the Information Security elements of Data Protection regulations (e.g. GDPR, The Data Protection Act 2018) is essential.
• Knowledge of the NIST Cyber Security Framework is of advantage.
• Awareness of regulations that affect Retail, such as PCI DSS, is of great advantage but experience of maintaining compliance is not essential.

CISSP or CySA+ or MSc Information Security Certifications will be advantageous.

Call 0121 712 8715 today!

Develop policy and standards for API security.

• Location: Singapore / Hong Kong / Dubai
• Relocation support provided if you are interested in relocating to Dubai
• SGD 11-14K / HKD 62-81K / AED 29-38K
• Passionate in security risk and security audit in Web3 / Fin-tech / Wallets / Crypto / Blockchain Technologies
• Bilingual capabilities in English and Chinese (Mandarin) will be a plus as you will liaise with English and Chinese speaking stakeholders.

Responsibilities:

• Conduct thorough security audits for web3 wallets, focusing primarily on Java code, to identify potential risks related to business requirements and technology implementation schemes. Provide actionable solutions and facilitate their implementation.
• Analyze the characteristics of new blockchain networks, gaining deep insights into potential risks during the integration process and advocating for risk mitigation strategies within code implementation.
• Actively contribute to the research and development efforts of the entire Product R&D team, ensuring the adherence to Secure Development Lifecycle (SDL) practices.

Requirements:

• Proficient in relevant application security and blockchain security concepts, with a comprehensive understanding of common security vulnerabilities, including their internal principles, exploitation methods, and mitigation strategies.
• Experience in security auditing, with a strong emphasis on Java or other programming languages. Experience in leading or participating in SDL implementation is preferred.
• Thorough understanding of the blockchain industry and its technologies, including common security risks and the operational principles of mainstream chains such as BTC and ETH.
• Familiarity with widely-used encryption, decryption, and signature algorithms, particularly those employed in web3 wallets (e.g., ECDSA, ED25519, RSA, AES, SSS).
• Background in penetration testing and proficiency in mainstream attack methodologies.
• Demonstrated passion for emerging blockchain technology, with a proactive attitude towards self-driven learning and understanding.
• Bilingual capabilities in English and Chinese (Mandarin) will be a plus as you will liaise with English and Chinese speaking stakeholders.

If you are interested in the above position or other cyber / information security position, please kindly send your updated CV to Shannagh Wu at Shannagh.Wu@ethosbc.com
*Due to high volume of applications, only shortlisted applicants will be contacted.*

Reg No.R23112660
BeathChapman Pte Ltd
Licence no. 16S8112

Business Function

Group Technology and Operations (T&O) enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group T&O, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.

Responsibilities

• Administration and management (technical operations) of firewall infrastructure
• Evaluate and upgrade firewall hardware and/or firmware
• Coordinate with vendor, deploy, configure and manage Firewall devices according to system engineering design
• Coordinate with information security governance team to align IT infrastructure with established standards
• Ensures system compliance with all established information security policies
• Perform period health check and tuning of firewall devices
• Performs technical assessment of any non-well defined or complex firewall change requests prior to implementation
• Performs regular review of firewall rulebases and recommend necessary optimization actions
• Assists Level 1 Support Engineers during problem determination and resolution whenever necessary.
• Planning and recommending overall improvements in firewall management
• Device Access management
• Advanced troubleshooting production problems with RCA and fault diagnosis
• Performance and historical trend analysis
• Implements changes to firewall infrastructure hardware in order to correct errors or enhance functionality
• Develops processes for improving operational efficiencies, as well as identifies/implements automation tools for existing manual processes.
• Prepares technical reports, memoranda, and instructional manuals as documentation of network design and operational requirements.
• Management of network daily activities; incident and problem management
• Responsible to work with respective team members on the review of network architecture and design
• Responsible to work with the respective server and application team's members
• Responsible to work with the respective network vendor's teams for the trouble-shooting, identification and resolution of network problems
• Responsible for network devices, as well as appliances, vulnerability review and assessment.
• Responsible for network devices, as well as appliances, change implementation review and assessment
• Responsible to conduct pre / post implementation plan review
• Responsible to conduct and train Level 1 engineers, i.e. to empower and equipped the L1 engineers with the knowledge to run and maintain Data center network
• Coordinate with information security governance team to align IT infrastructure with established standards
• Change requests prior to implementation
• Advanced troubleshooting production problems with RCA and fault diagnosis
• Design and monitor operations metrics on a monthly basis to keep track of key operation metrics
• Ready to work in shifts including public holidays
• Ready to be on call for 24x7 support during shifts

Requirement

• Experience: Minimum 8 years firewall operations and/or management role
• Certification : CCSA, CCSE, JNCIA-FWV, JNCIA-SEC, JNCIS-SEC (Preferred but not mandatory CISSP, CISM, ITIL Foundation)
• Checkpoint Firewalls, Juniper Netscreen / SRX Firewalls, VPN Technologies, DNS, NTP, 2 Factor Authentication technologies.
• Ability to work independently or as a team player.
• Experience in highly complex data center network design and support
• Experience with Cisco and Arista products specially DCI technology
• Experience with Cisco and Arista Software Define network (ACI, DNAC, etc)
• Strong hands on experiences on Fabric Patch, OTV, VPC+, Vxlan, Mlag, MP-BGP
• Knowledge and experience in employing and using various networking trace tools, i.e. Sniffer, Wireshark, riverbed net profiler, NetBrain, Gigamon and etc.
• Pro-active, dynamic and with good analytical/conceptual thinking.
• Certifications such as CCIE or above level in networking is an advantage
• Python or Linux shell scripting skill is a plus

Apply Now

We offer a competitive salary and benefits package and the professional advantages of a dynamic environment that supports your development and recognises your achievements.