Cloud Security Research Engineer Job at Wiz (London)

Security and Application Security Engineer

Beacon Technologies is seeking a Security and Application Security Engineer. The...

Location

United States , Las Vegas

Salary:

Not provided

Beacon Technologies

Expiration Date

Until further notice

Requirements

Minimum of five years of Information Security experience with at least two years of application-level security
Strong communication skills: ability to convey and document security guidelines, requirements, and coding best practices
Familiarity with Security Best Practices in common coding languages
Application Penetration Testing / API Security Testing
Software Development Life Cycle Design and Implementation
Static and Dynamic Application Testing Tools and Methods
Container and orchestration security (Kubernetes, Docker, Octopus, GitHub, etc.)
Familiarity with Application Security Testing Frameworks such as OWASP
Strong logical and analytical thinker
exceptional skills in security systems solutions

Job Responsibility

Operate as a liaison between the Security Team and the Development Teams
Preserve PCI and SOX Security Certification programs with a primary focus on ensuring compliance with the appropriate industry standards and security controls
Supporting incident response and architecture review whenever applications security expertise is needed
Integrating threat modeling practices into the SDLC
Work with other staff to perform periodic scans and evaluation of system security including areas such as patch management, penetration testing, vulnerability assessments, and other types of InfoSec-related tasks
Assist in identifying and communicating security exposures, information security incidents or non-compliance situations to IT management or the CISO as appropriate. Duties may also include collecting and documenting cyber security and incident response event data as necessary.

What we offer

Career advancement opportunities
extensive training
excellent benefits including paying for health and dental premiums for salaried employees.

Fulltime

Product Security Engineer

The Senior Security Engineer/Threat Researcher position will be part of Aruba Th...

Location

United States , Remote

Salary:

101900.00 - 234500.00 USD / Year

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

B.S. or M.S. in software engineering, computer science, cybersecurity, or a related field (or equivalent experience)
7+ years of professional experience in software engineering, vulnerability research, penetration testing, or a related security discipline
Programming experience in C and at least one additional language used for secure software development, such as Rust, Go, or Python
Hands-on experience with security testing tools and techniques, such as fuzzing, reverse engineering, and exploit development frameworks (e.g., Metasploit, Immunity Debugger, Ghidra, or IDA Pro)
Understanding of memory-unsafe vulnerabilities, including buffer overflows, use-after-free, integer overflows, and format string vulnerabilities, as well as mitigation techniques such as ASLR, DEP, and stack canaries
Strong knowledge of web application security, including OWASP Top 10 vulnerabilities such as XSS, SQL injection, XXE, CSRF, and insecure deserialization
Familiarity with secure coding practices, threat modeling, and static and dynamic application security testing (SAST/DAST) tools
Knowledge of modern cryptographic algorithms and security protocols (e.g., TLS, IPsec, OAuth) and their implementation pitfalls
Demonstrated ability to analyze, exploit, and remediate security vulnerabilities in complex codebases
Strong written and verbal communication skills, with the ability to create detailed technical reports and convey complex concepts to both technical and non-technical stakeholders

Job Responsibility

Conduct advanced security assessments of HPE Aruba networking products, including manual code reviews and penetration testing, to uncover vulnerabilities such as memory-unsafe errors, insecure deserialization, and authentication/authorization flaws
Develop proofs of concept (PoCs) to demonstrate the exploitability of identified vulnerabilities and provide actionable remediation guidance to engineering teams when requested
Develop and maintain custom tools to assist in vulnerability discovery, exploit development, and tracking and disclosure of vulnerabilities to the public
Assist in managing Aruba’s bug bounty program, collaborating with external researchers and product engineering teams to triage, reproduce, and remediate reported vulnerabilities
Assist in writing vulnerability disclosure bulletins and managing the process of releasing those bulletins to the public
Serve as a subject-matter expert on secure coding practices, particularly in memory-safe and memory-unsafe programming languages, and evangelize these practices across product engineering teams
Conduct original security research on non-Aruba products and technologies, including discovering new vulnerabilities, publishing papers, and presenting at leading security conferences
Positively represent Aruba in the global security community by fostering collaboration with security researchers while balancing the goals of researchers with the needs of our customers.

What we offer

Comprehensive suite of benefits that supports physical, financial, and emotional wellbeing
Specific programs catered to helping employees reach career goals
Inclusive working environment.

Fulltime

Senior AI Security Engineer

Senior AI Security Engineer role in Citi's Application, Platform and Engineering...

Location

United Kingdom , London

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Production system builder with security focus - proven track record of architecting and building secure, large-scale production applications and business-facing platforms from the ground up
Ethical hacking and penetration testing expertise - hands-on experience finding and exploiting vulnerabilities, conducting red team exercises
State-of-the-art security engineering with Go, Python, JavaScript
HashiCorp Vault mastery - deep experience writing custom plugins, creating secrets engines, implementing dynamic credentials
Enterprise authentication & authorization - designing and implementing OAuth, JWT, RBAC, and complex identity systems
API security and threat modelling - securing REST/GraphQL APIs, conducting threat assessments
AI/ML security and vulnerability research - understanding of LLM vulnerabilities, model security, prompt injection attacks
Security automation and tooling – automating manual security processes
Cloud-native security - securing containerized applications in Kubernetes, service mesh security
Incident response and forensics - experience investigating, analyzing, and responding to security incidents

Job Responsibility

Build secure AI products from 0-1 - Engineer production-grade, business-facing AI platforms with security built-in from day one
Conduct ethical hacking and red team activities - penetration testing, vulnerability research, and attack simulation
Design and build security tools and frameworks - Create automated security solutions that scale across fast-paced development cycles
Secure novel AI attack surfaces - Identify and mitigate LLM-specific vulnerabilities, prompt injection attacks, and AI model security risks
Lead 'shift left' security - Embed security practices throughout rapid development lifecycle while maintaining velocity
Mentor security practices - Guide other engineers on secure coding, vulnerability remediation, and security-first thinking

What we offer

27 days annual leave (plus bank holidays)
Discretional annual performance related bonus
Private Medical Care & Life Insurance
Employee Assistance Program
Pension Plan
Paid Parental Leave
Special discounts for employees, family, and friends
Hybrid working model (up to 2 days working at home per week)
Competitive base salary (annually reviewed)

Fulltime

Cloud Engineer

AnaVation is seeking a Cloud Engineer to join our engineering team in support of...

Location

United States , Reston

Salary:

Not provided

AnaVation

Expiration Date

Until further notice

Requirements

Clearance: TS/SCI Eligible, willing to obtain polygraph
Education: Bachelor’s degree in Computer Science, Information Systems or a related technical field and 10 years of relevant technical experience
Certifications: DoD 8570 IAT II and CSSP Infrastructure Support certifications (CompTIA CySA+ preferred or equivalent certifications that cover both requirements acceptable such as both Security+ and Cloud+) within 30 days of contract start
A Compute Environment-specific certification such as AWS, Azure, RedHat, Windows, etc
Location: Full time on-site in Reston, VA
Experience and knowledge on: Working collaboratively across cross-functional teams of all experience levels
Creating, maintaining, and updating related knowledge management and technical documentation
Experience analyzing, designing and implementing cloud infrastructure
Experience integrating cloud infrastructure with platform management tools, identity and access management systems, and development/test environments
Experience with automating build pipelines, cloud migrations, and implementing security and compliance controls in the cloud

Job Responsibility

Provide technical expertise in designing, automating, integrating, configuring, testing, and delivering cloud-based infrastructure and services across development, test, and production environments
Contribute to quarterly Agile Development Planning
Participate in customer meetings as needed
Design and implement scalable, secure, and automated AWS-based cloud infrastructure
Develop and manage infrastructure-as-code solutions to support cloud deployments
Analyze existing cloud infrastructure and identify opportunities for optimization, automation, and increased resilience
Implement security best practices, including patch management, access control, and vulnerability remediation
Design and build lab and demonstration environments for testing, prototyping, and solution validation
Research and evaluate emerging cloud technologies, especially in the area of cloud security and tooling
Collaborate with cyber, DevOps, and application development teams to integrate infrastructure with enterprise solutions

What we offer

Generous cost sharing for medical insurance for the employee and dependents
100% company paid dental insurance for employees and dependents
100% company paid long-term and short term disability insurance
100% company paid vision insurance for employees and dependents
401k plan with generous match and 100% immediate vesting
Competitive Pay
Generous paid leave and holiday package
Tuition and training reimbursement
Life and AD&D Insurance

Fulltime

Cloud Engineer IV

The Cloud Engineer is responsible for designing, implementing and documenting hi...

Location

United States , Washington, DC

Salary:

140000.00 - 155000.00 USD / Year

Chickasaw Nation Industries, Inc (CNI)

Expiration Date

Until further notice

Requirements

Ability to obtain, maintain and access classified information at the Top Secret level
Bachelor's degree and a minimum of 8 years relevant experience, or equivalent combination of 15 years of education/experience
Certification at the IAT II is required (can consist of: CCNA-Security, CYSA+, GICSP, GSEC, Security+ CE, CND, SSCP)
Advanced understanding of distributed systems via on prem, cloud native or hybrid computing
Familiarity with systems management concepts, processes and standards, capacity and performance management and tuning, and storage and network management
Good understanding of infrastructure: AD, DNS, firewalls, load balancers, routing, switching, etc.
Experience in building applications using languages
Experience in database systems
Experience in working with microservices and containerization, including virtualization, orchestration, cluster management, and container storage
Experience with scripting languages

Job Responsibility

Evaluates provided documentation and make recommendations to the government on acceptability of technical artifacts
Tracks and reports commercial parity exceptions on a monthly basis to support the customer
Evaluates change/release notifications from CSPs and advise the government on the operational impact of those changes
Provides direction on designing cloud infrastructure capable of supporting applications in the cloud with an emphasis on scalability, automation, performance and availability
Advises user community on CSO adoption based on specific DoD use cases
Interacts with CSPs on a weekly basis to discuss cloud adoption pipeline
Engages with CSPs on routine questions regarding DoD configuration, policy, and controls
Facilitates and attends multi-cloud technical exchange meetings
Develops and tracks DoD CSO demand tracking list for IC working groups
Works with Cyber PMO to ensure engineered solutions meet cyber compliance

What we offer

Medical
Dental
Vision
Company Life Insurance
Short-Term and Long-Term Disability Insurance
401(K) Immediate Vesting
Professional Development Assistance
Legal Aid Assistance Program
Family Planning / Fertility Assistance
Personal Time Off

Fulltime

Cloud Engineer Graduate

The role involves designing, developing, and implementing cloud solutions while ...

Location

United States , Ft. Collins

Salary:

83700.00 - 159700.00 USD / Year

Hewlett Packard Enterprise

Expiration Date

July 06, 2026

Requirements

Bachelor´s degree in Statistics, Operations Research, Computer Science or equivalent
Typically 0-2 years experience
Knowledge of at least one programming language like C, C++, python, JavaScript, Java or associated libraries, web-sockets, and other cloud networking protocols
Familiarity with and understanding of design for software systems running on multiple platform types
A basic understanding of Object-Oriented Programming (OOP) principles & Model View Controller (MVC) design patterns, in addition to SQL / NoSQL DBs, GNU, Linux, IPC and process scheduling, and networking protocols TCP/IP
Some exposure to full-stack Java software development, Java frameworks and application servers, Web Services (SOAP/REST API), responsive JS (Angular/Node/React.js), version control (preferably Git)

Job Responsibility

Collaborate with cross-functional teams to design, develop, and implement cloud solutions tailored to meet business needs
Assist in the deployment and configuration of cloud infrastructure, platforms, and services
Contribute to the optimization and automation of the cloud deployment processes to improve efficiency and scalability
Perform testing and troubleshooting of cloud systems to ensure reliability, performance, and security
Stay up to date with industry trends and best practices in cloud computing to provide insights and recommendations for continuous improvement
Support ongoing cloud operations and provide technical assistance as needed

What we offer

Health & Wellbeing
Comprehensive suite of benefits supporting physical, financial, and emotional wellbeing
Personal & Professional Development programs
Unconditional Inclusion
Career development programs

Fulltime

Software Engineer (Hebrew Speaker) - Axis Security

Designs, develops, troubleshoots and debugs software programs for software enhan...

Location

Israel , Tel Aviv

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

Bachelor's in Computer Science, Information Systems, or equivalent (with army training)
Minimum of 3 years of experience as a Software Engineer
Familiarity with security aspects (encryption, authentication mechanisms, networking protocols research)
English Advanced, Hebrew Native
Experience designing and developing software systems design tools and languages
Excellent analytical and problem solving skills
Experience in overall architecture of software systems for products and solutions
Designing and integrating software systems running on multiple platform types into overall architecture
Evaluating and selecting forms and processes for software systems testing and methodology, including writing and execution of test plans, debugging, and testing scripts and tools
History of innovation with multiple patents or deployed solutions in the field of software design

Job Responsibility

Develops organization-wide architectures and methodologies for software systems design and development across multiple platforms and organizations within the Global Business Unit
Identifies and evaluates new technologies, innovations, and outsourced development partner relationships for alignment with technology roadmap and business value
creates plans for integration and update into architecture
Reviews and evaluates designs and project activities for compliance with development guidelines and standards
provides tangible feedback to improve product quality and mitigate failure risk
Leverages recognized domain expertise, business acumen, and experience to influence decisions of executive business leadership, outsourced development partners, and industry standards groups
Provides guidance and mentoring to less- experienced staff members to set an example of software systems design and development innovation and excellence

What we offer

Health & Wellbeing
Personal & Professional Development
Diversity, Inclusion & Belonging

Fulltime