Vulnerability Jobs

Technology Delivery Lead: Cyber Security Location: London (Hybrid) | Practice Area: Technology & Engineering | Type: Permanent Lead the delivery of security initiatives that safeguard the future of digital finance. The Role As a Security Delivery Lead at Capco, you’ll lead the end-to-end delivery of complex cyber security initiatives for some of the world’s leading financial and energy institutions. Working closely with security architects, engineers, technology teams and client stakeholders, you’ll turn security priorities into structured delivery plans, coordinate multidisciplinary workstreams, and ensure projects are delivered to agreed scope, timelines and outcomes. You’ll provide clear governance across risks, dependencies, resources and decisions while helping teams embed security-by-design across cloud, on-premise and hybrid environments. You’ll also champion practical, responsible use of approved AI tools, automation and AI-enabled workflows where they can improve delivery speed, quality and insight, while maintaining appropriate human judgement, review and security guardrails. What You’ll Do Lead security projects from initiation through delivery, defining scope, plans, milestones, dependencies and delivery outcomes, using approved AI-enabled tools and automation where appropriate to improve planning, insight and delivery efficiency Coordinate security, engineering, architecture, technology and client workstreams to maintain momentum, resolve delivery blockers and oversee initiatives across areas including IAM, cloud security, endpoint protection, SIEM, application security, vulnerability management and Zero Trust Own project governance, including RAID management, status reporting, decision tracking, change control and escalation, maintaining appropriate human review, audit trails and escalation pathways when AI-enabled workflows are used Manage project resources, budgets and delivery forecasts, ensuring work remains aligned to agreed priorities, commit

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. As our SAP Security Leader/Architect, you will own the enterprise security vision and roadmap for a global hybrid landscape spanning S/4HANA, NetWeaver, HANA, SAP BTP, and SaaS platforms. You will serve as the trusted technical authority, turning business risk into resilient architecture, stronger controls, AI led and enabled intelligent automation, and measurable value. Responsibilities: Own Micron's SAP security strategy, architecture, standards, and roadmap across on-premises, cloud, and hybrid environments. Build and implement secure-by-default solutions for S/4HANA, HANA, SAP BTP, Ariba, Fieldglass, integrations, APIs, and cloud-hosted workloads, bringing to bear AI-enabled capabilities where appropriate. Modernize identity and access governance through SAP GRC, RBAC, segregation of duties, privileged access management, IAS, and IPS. Strengthen cyber resilience through risk assessments, threat modeling, vulnerability management, security monitoring, and SAP-focused incident response. Embed SOX, ITGC, privacy, and regulatory controls into programs, releases, access reviews, testing, and audit readiness activities. Translate business requirements and complex security risks into practical architectures, informed decisions, and measurable outcomes. Lead SAP security for critical initiatives, upgrades, and transformations, guiding teams from planning through implementation and operational handoff. Serve as Micron's trusted SAP security authority, influencing ex

ReqID: FEQ427R340 Location: London Skills: Networking, Security, Platform, DevOps, Databricks, Cloud - AWS, GCP, Azure, Infrastructure - First preference would be GCP experience Recruiter: Dina Hussain The Role As an Infrastructure & Platform Senior Specialist Solutions Architect (SSA), you will serve as a trusted technical advisor, guiding enterprise customers through the architecture, administration, and security of their Databricks deployments on their cloud of choice (AWS, Azure, or GCP). You combine deep technical expertise with strategic thinking to position Databricks as the foundation of your customers' data and AI strategy. The Impact You Will Have Guide strategic customers through the full lifecycle of Databricks on their cloud platform, including platform administration from initial architectural design to production deployment Architect secure, scalable enterprise deployments that satisfy complex cloud networking (virtual networks, private connectivity), identity (cloud IAM and enterprise identity providers), and security compliance standards Serve as a subject matter expert in core areas such as cloud infrastructure, infrastructure-as-code (IaC), cloud networking, and identity management Drive technical wins in competitive scenarios by demonstrating Databricks' differentiation through custom-built solutions Orchestrate cross-functional resources (DSAs, SAs, FDE, Partners) to deliver comprehensive solutions for complex customer needs Influence product direction by providing structured feedback on customer requirements and competitive gaps What We Look For 8+ years in solutions architecture, technical pre-sales, or a senior hands-on technical role Advanced expertise across the following areas: Security & Identity: Cloud security controls, platform/network/data security, encryption, vulnerability management, compliance, and identity protocols. This includes cloud-native IAM (AWS IAM, Microsoft Entra ID / Azure AD, Google Cloud IAM), enterpris

Shape the Future with Dun & Bradstreet At Dun & Bradstreet, we believe data has the power to create a better tomorrow. As a global leader in business decisioning data and analytics, we help companies worldwide grow, manage risk, and innovate. Since 1841, businesses have trusted us to turn uncertainty into opportunity. We’re a diverse, global team that values creativity, collaboration, and bold ideas. Are you ready to make an impact and help shape what’s next? Join us! Explore opportunities at dnb.com/careers. Key Responsibilities: Own and enhance the reliability, scalability, security, and operational readiness of production and non-production environments. Build and maintain Infrastructure as Code (IaC), configuration management, CI/CD pipelines, deployment automation, and operational tooling. Collaborate with Engineering, Product, QA, Security, and Cloud teams to support releases and production deployments. Implement and improve monitoring, observability, logging, alerting, and incident response processes. Troubleshoot issues across Linux and Windows systems, networking, DNS, SSL/TLS, web servers, databases, APIs, and cloud platforms. Support cloud migration, platform modernization, vulnerability remediation, patching, disaster recovery, and operational documentation. Participate in production support, incident management, root cause analysis, and continuous service improvements. Design, develop, test, and deploy new product features and enhancements. Utilize AI-assisted development tools for code generation, refactoring, testing, and documentation while adhering to engineering best practices. Key Skills: 8+ years of exper

WHAT IS BOX? Box (NYSE:BOX) is the leader in Intelligent Content Management. Our platform enables organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform business workflows with enterprise AI. We help companies thrive in the new AI-first era of business. Founded in 2005, Box simplifies work for leading global organizations, including JLL, Morgan Stanley, and Nationwide. Box is headquartered in Redwood City, CA, with offices across the United States, Europe, and Asia. By joining Box, you will have the unique opportunity to continue driving our platform forward. Content powers how we work. It’s the billions of files and information flowing across teams, departments, and key business processes every single day: contracts, invoices, employee records, financials, product specs, marketing assets, and more. Our mission is to bring intelligence to the world of content management and empower our customers to completely transform workflows across their organizations. With the combination of AI and enterprise content, the opportunity has never been greater to transform how the world works together and at Box you will be on the front lines of this massive shift. WHY BOX NEEDS YOU Box is building the industry's most trusted, secure content and AI platform. Our Production Security Tools team is seeking a Security Tooling Engineer II with curiosity and a security mindset to help build and operate infrastructure security across our tooling stack, including monitoring, vulnerability scanning, data loss prevention (DLP), and hardening checks. In this role, you will implement and operate security tooling and controls under the guidance of senior engineers; collaborate with engineering, privacy, legal, and other security teams to reduce data exposure and configuration risk; and help keep Box's infrastructure secure-by-design and secure-by-default while enabling rapid, responsible product development and AI adoption. WHAT Y

For over 20 years, Smartsheet has empowered teams to manage work seamlessly and scale solutions smarter. Now, in our most ambitious chapter yet, we are uniting human teams with AI agents. By orchestrating the work agents do best, automating manual tasks and uncovering insights at scale, we create the space for people to focus on what truly matters: judgment, creativity, and big thinking. That is magic at work, and it’s what we show up for every day. The Sr. Security Engineer I is a critical technical role focused on deal acceleration, platform security evangelism, and the development of security features and capabilities that enhance our customer security and governance capabilities. You will support security and compliance during sales motions and bridge communication between complex customer security requirements and technical product engineering. You will work directly with customer security leaders (security engineers through CISOs) to communicate and clarify product security posture and controls results (such as pen test results), and will work with Smartsheet engineering to build security features that meet real-world customer requirements. You will display product understanding through highly customized presentation demonstrations to customers and at conferences and events. This role reports to the Senior Director, GRC Engineering and can be based in our Bellevue, WA office or remotely from anywhere in the US where Smartsheet is a registered employer. You Will: Serve as a trusted advisor to enterprise customers, CISOs, CIOs, and guiding them on Smartsheet security, compliance, and risk management. Evaluate customer infrastructure diagrams and data flows, and how Smartsheet can help with automation without compromising security. Present scanning results (NIST 800-53 gaps, vulnerability scans, DAST/pen test, IaC scans) to customers including walking through remediations. Help customers interpret scan results and develop deviation rationales fo

Altana is the network for trusted trade. Our AI-powered product network empowers governments and businesses to build a more resilient and secure global economy while keeping trade flowing. The Opportunity at Altana The Cloud Engineering team is hiring a Senior Engineering Manager to lead the group that owns Altana's regulated and sovereign environments. These are the accredited, compliance-constrained deployments our government customers run on, including our FedRAMP environments and dedicated sovereign clusters. You will report to the Senior Director of Platform Engineering and lead a team of three to four engineers across the US, UK, and Australia. The usual playbook does not apply here. Connectivity and automation are constrained and accreditation obligations shape engineering decisions well before anyone opens a design doc. Your job is to make this domain work like a platform instead of a set of individual builds, so that each new accredited environment launches faster than the one before it, and so product teams can keep shipping without having to absorb the regulatory complexity themselves. Your Responsibilities Own the architecture and operation of our regulated and sovereign environments across AWS and Azure, along with the IaC (Infrastructure-as-Code), Kubernetes, and release tooling beneath them Lead the standardization of environment builds into a repeatable blueprint, so the number of environments can grow without headcount growing with it Make sure critical technical decisions in the domain are sound, through design review, RFCs, prototypes, and whiteboard sessions, and hold the quality bar on what the team ships Stay close to the work with hands-on engineering of your own, usually operational tooling or greenfield projects Work with our Security and Compliance team to embed secure-by-default patterns across your environments and make control evidence a routine output of how the team works Keep accreditations healthy, with vulnerability remediation insi

About Us Twitch is the world’s biggest live streaming service, with global communities built around gaming, entertainment, music, sports, cooking, and more. It is where thousands of communities come together for whatever, every day. We’re about community, inside and out. You’ll find coworkers who are eager to team up, collaborate, and smash (or elegantly solve) problems together. We’re on a quest to empower live communities, so if this sounds good to you, see what we’re up to on LinkedIn and X , and discover the projects we’re solving on our Blog . Be sure to explore our Interviewing Guide to learn how to ace our interview process. About the Role Twitch Security Platform builds and operates the technology at the intersection of security, privacy, software engineering, and data engineering. As a Senior Engineering Manager, Security Platform, you will guide a diverse group of software engineers to build critical tools and automation solutions used across Twitch. You will report to the Director of Security, Identity, and Privacy Platforms. You will manage engineers responsible for operating our security data platform handling billions of weekly events, a multi-petabyte data lake, and numerous analysis tools that provide critical data across the organization to support important security programs. You will also lead engineers responsible for writing software to accomplish security at scale through automation, libraries, and services. With this team, you will lead the full software development lifecycle from product discovery, roadmap prioritization, and execution. Programs you support will include Fraud, Service-to-Service Auth, Detection and Incident Response, Vulnerability Management, Engineering Intelligence, and Privacy. You are experienced in software and data engineering, you bring awareness of the industry's cutting edge, and you're passionate about security. If this sounds accurate, come join us! You can work from San Francisc

About Us Twitch is the world’s biggest live streaming service, with global communities built around gaming, entertainment, music, sports, cooking, and more. It is where thousands of communities come together for whatever, every day. We’re about community, inside and out. You’ll find coworkers who are eager to team up, collaborate, and smash (or elegantly solve) problems together. We’re on a quest to empower live communities, so if this sounds good to you, see what we’re up to on LinkedIn and X , and discover the projects we’re solving on our Blog . Be sure to explore our Interviewing Guide to learn how to ace our interview process. About the Role Twitch Security Platform builds and operates the technology at the intersection of security, privacy, software engineering, and data engineering. As a Senior Engineering Manager, Security Platform, you will guide a diverse group of software engineers to build critical tools and automation solutions used across Twitch. You will report to the Director of Security, Identity, and Privacy Platforms. You will manage engineers responsible for operating our security data platform handling billions of weekly events, a multi-petabyte data lake, and numerous analysis tools that provide critical data across the organization to support important security programs. You will also lead engineers responsible for writing software to accomplish security at scale through automation, libraries, and services. With this team, you will lead the full software development lifecycle from product discovery, roadmap prioritization, and execution. Programs you support will include Fraud, Service-to-Service Auth, Detection and Incident Response, Vulnerability Management, Engineering Intelligence, and Privacy. You are experienced in software and data engineering, you bring awareness of the industry's cutting edge, and you're passionate about security. If this sounds accurate, come join us! You can work from San Francisc

About Us Twitch is the world’s biggest live streaming service, with global communities built around gaming, entertainment, music, sports, cooking, and more. It is where thousands of communities come together for whatever, every day. We’re about community, inside and out. You’ll find coworkers who are eager to team up, collaborate, and smash (or elegantly solve) problems together. We’re on a quest to empower live communities, so if this sounds good to you, see what we’re up to on LinkedIn and X , and discover the projects we’re solving on our Blog . Be sure to explore our Interviewing Guide to learn how to ace our interview process. About the Role Twitch Security Platform builds and operates the technology at the intersection of security, privacy, software engineering, and data engineering. As a Senior Engineering Manager, Security Platform, you will guide a diverse group of software engineers to build critical tools and automation solutions used across Twitch. You will report to the Director of Security, Identity, and Privacy Platforms. You will manage engineers responsible for operating our security data platform handling billions of weekly events, a multi-petabyte data lake, and numerous analysis tools that provide critical data across the organization to support important security programs. You will also lead engineers responsible for writing software to accomplish security at scale through automation, libraries, and services. With this team, you will lead the full software development lifecycle from product discovery, roadmap prioritization, and execution. Programs you support will include Fraud, Service-to-Service Auth, Detection and Incident Response, Vulnerability Management, Engineering Intelligence, and Privacy. You are experienced in software and data engineering, you bring awareness of the industry's cutting edge, and you're passionate about security. If this sounds accurate, come join us! You can work from San Francisc

About Us Twitch is the world’s biggest live streaming service, with global communities built around gaming, entertainment, music, sports, cooking, and more. It is where thousands of communities come together for whatever, every day. We’re about community, inside and out. You’ll find coworkers who are eager to team up, collaborate, and smash (or elegantly solve) problems together. We’re on a quest to empower live communities, so if this sounds good to you, see what we’re up to on LinkedIn and X , and discover the projects we’re solving on our Blog . Be sure to explore our Interviewing Guide to learn how to ace our interview process. About the Role Twitch Security Platform builds and operates the technology at the intersection of security, privacy, software engineering, and data engineering. As a Senior Engineering Manager, Security Platform, you will guide a diverse group of software engineers to build critical tools and automation solutions used across Twitch. You will report to the Director of Security, Identity, and Privacy Platforms. You will manage engineers responsible for operating our security data platform handling billions of weekly events, a multi-petabyte data lake, and numerous analysis tools that provide critical data across the organization to support important security programs. You will also lead engineers responsible for writing software to accomplish security at scale through automation, libraries, and services. With this team, you will lead the full software development lifecycle from product discovery, roadmap prioritization, and execution. Programs you support will include Fraud, Service-to-Service Auth, Detection and Incident Response, Vulnerability Management, Engineering Intelligence, and Privacy. You are experienced in software and data engineering, you bring awareness of the industry's cutting edge, and you're passionate about security. If this sounds accurate, come join us! You can work from San Francisc

CAPCO POLAND *We are looking for Poland based candidate. At Capco Poland, we’re not just another consultancy - we’re the spark behind digital transformation in the financial world. As a global leader in technology and management consulting, we thrive on helping clients tackle the toughest challenges across banking, payments, capital markets, wealth, and asset management. Role Overview We are looking for a DevSecOps Engineer to provide support for our client in the insurance sector, helping embed security into cloud infrastructure and delivery processes. You will work across AWS and Azure, combining Infrastructure as Code, automation, CI/CD security, and developer enablement to build secure-by-default, scalable cloud environments. Key Responsibilities Policy-as-Code & Guardrails: Write, test, and deploy automated policy guardrails using Infrastructure as Code (IaC) linting and scanning tools (e.g., Checkov, Tfsec, OPA/Rego) to catch misconfigurations before they reach production. Multi-Cloud Automation: Build and manage highly available infrastructure across AWS and Azure using Infrastructure as Code (Terraform). Security Product Deployment: Automate the baking of EDR agents, vulnerability scanners, and monitoring tools into base machine images (AMIs, Azure Golden Images) and containerized base environments reps. Develop software distribution solution with cloud native tooling (Azure extension, AWS SSM) Developer Enablement: Serve as a bridge between Security and Engineering, providing developer-friendly remediation guidance and creating reusable, secure-by-default code templates (Terraform modules, Helm charts). Required Skills & Qualifications Experience: 3+ years in a cloud operations or infrastructure role managing production environments in both AWS and Azure. Tools: Deep familiarity with Terraform and scripting languages (Python, Bash, or PowerShell). DevSecOps & CI/CD Pipelines: Deep, practical experience constructing and se

Information Systems Specialist – Public Sector Location: Remote, United States Level: Entry level Salary: $80,000–$100,000 base Requirements: U.S. citizenship and an active Secret clearance Travel: Occasional travel to customer sites Help secure the software that critical systems depend on RapidFort helps organizations reduce vulnerabilities and attack surface in containerized software. Our platform provides curated container images, runtime-based software reduction, and continuous security validation. We work with commercial customers and U.S. government teams operating in security-sensitive environments. We’re looking for an Information Systems Specialist to join our Public Sector team. This is an opportunity to build your technical career while supporting federal and DoD customers and learning container security and software supply chain technology from the engineers who build our platform. If you’ve developed your technical skills through military service, an internship, a co-op, a help desk, or another structured IT setting, we’d like to hear from you. What You’ll Do Support the day-to-day operation and troubleshooting of information systems used in federal and DoD environments. Work with Linux and Windows systems, networking, user access, and system configuration. Investigate customer issues, document your findings, resolve issues within your scope, and escalate complex problems to senior technical or engineering teams. Assist with installation, configuration, patching, system hardening, and security-related tasks. Maintain clear documentation, system inventories, and configuration records. Support compliance activities by gathering information and following established procedures. Learn RapidFort’s platform and develop practical knowledge of container security, vulnerability management, and the software supply chain. What You Bring 0–2 years of professional IT experience. Relevant military service, internships, co-ops, help desk work, and substantial hands-on

Bloomreach is building the world’s premier agentic platform for personalization .We’re revolutionizing how businesses connect with their customers, building and deploying AI agents to personalize the entire customer journey. We're taking autonomous search mainstream, making product discovery more intuitive and conversational for customers, and more profitable for businesses. We’re making conversational shopping a reality, connecting every shopper with tailored guidance and product expertise — available on demand, at every touchpoint in their journey. We're designing the future of autonomous marketing , taking the work out of workflows, and reclaiming the creative, strategic, and customer-first work marketers were always meant to do. And we're building all of that on the intelligence of a single AI engine — Loomi — so that personalization isn't only autonomous…it's also consistent.From retail to financial services, hospitality to gaming, businesses use Bloomreach to drive higher growth and lasting loyalty. We power personalization for more than 1,400 global brands, including American Eagle, Sonepar, and Pandora. About the Role: You will act as the designated security focus on a specific product domain, driving threat modeling, security assessments, and vulnerability management across Bloomreach's platform. Your Job Will Be: Support the implementation and adoption of Secure Software Development Lifecycle ( SSDLC ) practices across engineering teams, helping integrate security throughout the product development process. Perform security reviews of application designs , system architectures , and i nfrastructure components , with guidance as needed, to identify security risks and recommend appropriate mitigations. Participate in threat modeling exercises for new and existing products, helping identify threats, assess risk, and document practical security recommendations. Provide security guidance to product and engin

Location: Doha | Practice Area : Technology & Engineering | Type: Permanent The Role Capco is looking for a Security Consultant to help our clients identify, assess, and manage cybersecurity threats and technology risks across complex environments. You’ll work with security, technology, risk, architecture, and business teams to deliver structured threat and risk assessments that support informed decision-making and effective security controls. This is an opportunity to work on complex cybersecurity challenges within financial services, helping clients understand their threat landscape, identify vulnerabilities and control gaps, and strengthen their overall security and technology risk posture. What You’ll Do Assess existing security controls and evaluate their effectiveness against identified cyber and technology risks. Identify potential threats, vulnerabilities, control gaps, and risk scenarios, documenting findings and recommending proportionate remediation actions. Conduct regular data, threat and risk assessments and recommend corrective actions to improve security posture. Work with security, architecture, engineering, risk, and business stakeholders to embed threat and risk assessment activities throughout technology change and delivery. Conduct threat and risk assessments across infrastructure, cloud environments, technology platforms, and business services. Produce clear risk assessments, reports, and recommendations that support governance, remediation planning, risk acceptance, and informed decision-making. What We’re Looking For Strong experience in cybersecurity risk assessment, threat assessment, technology risk, information security, or related disciplines. Practical knowledge of threat modelling, vulnerability assessment, security controls, risk assessment methodologies, and remediation planning. Experience assessing applications, infrastructure, cloud services, or technology solutions against security and risk requirements. Strong understanding