- Security Compliance and Auditing: Knowledge of regulatory compliance requirements (., GDPR, HIPAA, PCI, DSS, NIST) and experience with security auditing frameworks and processes
- Cloud Security: Familiarity with cloud security principles and best practices, including securing cloud infrastructure, services, and applications in platforms, OCI is a plus
- Security Standards: Improve security posture by defining, enhancing, and maintaining security standards based on industry leading security framework.
- Security Architecture: Ability to assess, design, and implement security architectures, including network segmentation, secure access controls, and defense-in-depth strategies
- Forensics and Incident Response: Experience in conducting digital forensics investigations and leading incident response activities, including evidence collection, analysis, and containment
- Communication and Leadership: Strong leadership, interpersonal, and communication skills, with the ability to effectively communicate security-related concepts and findings to stakeholders at all levels of the organization
- Continuous Learning and Improvement: Commitment to continuous learning and professional development in the field of cybersecurity, staying updated with the latest threats, trends, and technologies
- Bachelor's degree in Computer Science, Information Security, or a related field. Master's degree preferred
- 8+ years of experience in information systems, business operations, or related fields,
- 3+ years of experience in security operations, with a focus on incident detection, response, and vulnerability remediation
- Experience with at least 1 automation language or framework (Python, PowerShell, Terraform, or vulnerability scanning tool (Qualys, Nessus,
- Strong understanding of networking protocols, operating systems (Linux, Windows), MiddleTier, Database, and cloud computing environments
- Experience with security tools such as SIEM platforms, intrusion detection/prevention systems, and endpoint security solutions
- Relevant certifications such as CISSP, CISM, CISA, or GIAC certifications are preferred
- Excellent communication skills with the ability to effectively communicate technical concepts to both technical and non-technical stakeholders
- Proven leadership abilities with experience leading security projects and initiatives
- Ability to work independently and collaboratively in a fast-paced environment
- Strong analytical and problem-solving skills with a keen attention to detail
- Manage and address security audits as directed and liaison with internal teams for evidence as a security and compliance SME.
- Make recommendations and provide guidance/consultation regarding process improvements necessary for remediating internal control gaps. Engage with various teams, both internal and external, around data compliance efforts.
- Drive security risk management program with forensics investigations, and evidence collection, as a security exemption approver
- Responsible for service impact analysis (SIA) and maintaining service resilience compliance in partnership with business owner
- Build and publish security standards for commonly audited areas (Endpoint, Application, Network) to address gap areas and drive better compliance. Work with system administrators, engineers, and the Information System Security Manager (ISSM) to create or update system/site policies, procedures, and process guides.
- Build automation to detect configuration gaps that impact security operations. Collaborate with cross-functional teams to design and implement security controls and countermeasures
- Develop and maintain cybersecurity documentation such as the System Security Plan (SSP), Privacy Impact Assessment (PIA), Configuration Management Plan (CMP), Plan of Action and Milestones (POA&M), and Standard Operating Procedures (SOP) as necessary.
- Define roles and responsibilities, process ownership, and operating model for all teams involved in security operations
- Develop, implement, and maintain industry best practices and regulatory security policies, procedures, and system standards (servers, database, endpoint, application design)
- Engagement in cloud security technologies and protocols, including cloud security architecture, identity and access management, and data protection
- Write stakeholder reports using accessible language to explain the assessment and audit results and recommendations. Create and provide metrics for cybersecurity leadership. Brief executive leadership on compliance matters. Disclaimer:
-
Security Analyst
1 week ago
University of Colorado Denver, United StatesSecurity Analyst · University of Colorado Denver · Description · Who We Are: · Position Summary: · Where You Will Work: · Diversity and Equity: · Duties & Responsibilities: · Monitoring · Reviews alerts from information security monitoring systems · Reviews and evaluates incident ...
-
Cyber Security Analyst
4 weeks ago
Insight Global Boulder, United StatesRequired Skills and Experience · Active Top Secret Clearance with SCI eligibility · Must be willing to obtain CI Polygraph · Bachelor's Degree and 5-15+ years of related experience in Cyber Security · Strong understanding of RMF process and NIST controls · Technical experience r ...
-
TEKsystems c/o Allegis Group San Francisco, United States PermanentDuration · 18 Duration Unit · Month(s) Product · Contract Description · Job Description: · TEKsystems is looking for a new Cyber Analyst to join our Security Operations Center (SOC) in Boulder, CO. Primary Responsibilities: · Perform against established operational rhythm, expect ...
-
TEKsystems c/o Allegis Group Boulder, United StatesDuration · 18 Duration Unit · Month(s) Product · Contract Description · Job Description: · TEKsystems is looking for a new Cyber Analyst to join our Security Operations Center (SOC) in Boulder, CO. Primary Responsibilities: · Perform against established operational rhythm, expect ...
-
Security Compliance Analyst
3 weeks ago
Automox Boulder, United StatesAre you ready to own something big? Automox is turning IT admins into IT heroes by replacing traditional tools with our award winning cloud-native endpoint management platform. Our product works autonomously and so do our teams. We value a one team' mentality where everyone's uni ...
-
IAM Security Analyst
1 day ago
Randstad North America, Inc. Denver, United StatesWe are seeking an experienced and highly skilled IAM Security Analyst with direct IAM (Identity and Access Management) experience to join our dynamic team. The ideal candidate will play a pivotal role in strengthening our organization's security post Security Analyst, Security, A ...
-
Business Security Analyst
2 weeks ago
Computer Enterprises, Inc. Denver, United StatesSummary: · CEI s top municipal Client is adding a Business Security Analyst to their Information Security Office (ISO) · Business Security Analysts work within the ISO s Engagement team but are embedded within city departments to evaluate and consult on information security and p ...
-
iam security analyst
1 day ago
Randstad Denver, United Statesiam security analyst. · denver , colorado · posted today · job details · summary · $ $53.12 per hour · contract · bachelor degree · category computer and mathematical occupations · reference · job details · job summary: · We are seeking an experienced and highly skill ...
-
Security Analyst II
3 weeks ago
Cologix Denver, United StatesAbout our Company: · Based in Denver, Colorado, Cologix is North America's leading network-neutral interconnection and hyperscale edge data center company. Our platform gives customers access to 40+ digital edge and ScalelogixSM hyperscale edge data centers in 11 markets across ...
-
Security Analyst
1 week ago
State of Colorado Denver, United StatesSecurity Analyst · Print ) · Security Analyst · Salary · $78, $83,000.00 Annually · Location · Denver, CO · Job Type · Full Time · Job Number · CU33620 · Department · University of Colorado - System Administration · Opening Date · 05/14/2024 · Closing Date · 5/27/2024 11:59 PM Mo ...
-
Web Application Security Analyst
6 days ago
Fastly Denver, United StatesFastly helps people stay better connected with the things they love. Fastly's edge cloud platform enables customers to create great digital experiences quickly, securely, and reliably by processing, serving, and securing our customers' applications as close to their end-users as ...
-
Security Analyst
3 weeks ago
University of Colorado Denver, United States Paid WorkSecurity Analyst · Description · Who We Are: · Position Summary: · Where You Will Work: · Diversity and Equity: · Duties & Responsibilities: · Monitoring · Reviews alerts from information security monitoring systems · Reviews and evaluates incident tickets assigned to the securi ...
-
Cyber Security Analyst Staff
3 weeks ago
Workday Denver, United StatesCyber Security Analyst Staff · Job Category: Information Technology · Time Type: Full time · Minimum Clearance Required to Start: TS/SCI with Polygraph · Employee Type: Regular · Percentage of Travel Required: None · Type of Travel: None · Currently, CACI seeking a motivat ...
-
ELINT Analyst with Security Clearance
2 weeks ago
Malama Kai Technologies Aurora, United StatesWe are seeking a highly skilled and motivated ELINT Analyst to join our team The ELINT Analyst will play a critical role in collecting, analyzing, and interpreting electronic signals to provide valuable intelligence for national security and decision-making purposes. The successf ...
-
Info Security Assoc Analyst
2 days ago
FirstBank Denver, United StatesDescription · This is a hybrid position requiring 2 days a week in office. Must reside in the state of CO on start date. Relocation assistance is not provided. FirstBank does not sponsor work visas · If candidates are related to, living with, dating, or in a familial-like relatio ...
-
Info Security-Cloud Analyst
3 weeks ago
Unison Systems Inc. Englewood, United StatesJob Description · Job Description · A Brief Overview · The Analyst, Info Security-Cloud will work to promote and ensure the security of the company and its customers' data through the rigorous application of tools and skills for the purpose of intrusion/breach prevention, threat ...
-
Data Security Analyst Intern
4 days ago
RingCentral Denver, United StatesSay hello to possibilities.Internship opportunities are important. You want to make sure you land a great one where you will learn A LOT. We're RingCentral and we're happy you are considering an internship with us - we promise to make it worth your while.First, a little about us, ...
-
IT Security and Risk Analyst III
2 weeks ago
American Family Insurance Agency Staff Denver, United StatesThe is role is a Governance Risk Compliance position. · You will analyze security, threats, risks and exposures, determines the causes of security deviations and suggests procedures to halt future incidents and improve security. Collaborates cross functionally in business and sy ...
-
SOC Intrusion Analyst with Security Clearance
2 weeks ago
Equiliem Boulder, United StatesSOC Intrusion Analyst · Location: Fairmont, WV or Boulder, CO · Clearance: Minimum fully adjudicated Secret and Interim Top Secret clearance We are looking for a new Cyber Analyst to join our Security Operations Center (SOC) in support of our customer at the National Oceanic and ...
-
Top Secret Cyber Security Analyst
3 weeks ago
Insight Global Boulder, United StatesA company in the Boulder, CO area is looking for a Cyber Security Analyst to join their team in support of a Defense Program. This position requires x4 days per week in Boulder, CO location and x1 per week at site in Aurora, CO. Candidates should be self-starters with the ability ...
Security Analyst 3 - Broomfield, United States - Oracle
Description
At Oracle Cloud Infrastructure (OCI), we build the future of the cloud for Enterprises. We act with the speed and attitude of a start-up along with the scale and customer focus of the leading enterprise software company in the world.
About the team:
EES Security and Compliance team defines and measures baseline standards using existing internal policies and industry standards such as CIS and SANS. The team creates tools to proactively detect gaps with baseline compliance that improve security operations (scan failure, asset management gaps, configuration drift, and drive resolution. Technical liaisons for EES teams to analyze and prioritize vulnerabilities, compliance gaps, and security programs. Provides solution guidance to optimize remediation efforts, assist with exception requests, and resolve any process inefficiencies.
Ideally, the candidate will possess several of the following skills:
Qualifications:
Supports the strengthening of Oracle's security posture, focusing on one or more of the following:
Certain US customer or client-facing roles may be required to comply with applicable requirements, such as immunization and occupational health mandates.
Range and benefit information provided in this posting are specific to the stated locations only
US: Hiring Range: from $ to $ per hour; from $86,200 to $178,200 per annum. May be eligible for equity.
Oracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle's differing products, industries and lines of business.
Candidates are typically placed into the range based on the preceding factors as well as internal peer equity.
Oracle US offers a comprehensive benefits package which includes the following:
1. Medical, dental, and vision insurance, including expert medical opinion
2. Short term disability and long term disability
3. Life insurance and AD&D
4. Supplemental life insurance (Employee/Spouse/Child)
5. Health care and dependent care Flexible Spending Accounts
6. Pre-tax commuter and parking benefits
k) Savings and Investment Plan with company match
8. Paid time off: Flexible Vacation is provided to all eligible employees assigned to a salaried (non-overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment. Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation.
9. 11 paid holidays
10. Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar year. Unused balance will carry over each year up to a maximum cap of 112 hours.
11. Paid parental leave
12. Adoption assistance
13. Employee Stock Purchase Plan
14. Financial planning and group legal
15. Voluntary benefits including auto, homeowner and pet insurance
