field_job_occupational_field_parents_all

job_organization_name

field_job_employment_type

city

state

<h3>Job Description</h3>
The Security Risk Lead is responsible for identifying, assessing, and mitigating risks related to the organization's information technology and cybersecurity practices. This role involves developing and implementing cybersecurity risk management strategies, ensuring compliance with relevant regulations, and fostering a culture of risk awareness across the organization. Responsibilities 
<ul>
<li>Assist business line leadership with identifying, assessing, controlling, mitigating, and communicating risks associated with business processes and decisions. Evaluate the root cause, the corrective action plans, and work with business partners Technology teams to successfully implement and document remediation</li>
</ul>
 
<ul>
<li>Support the business in the development of Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs)</li>
</ul>
 
<ul>
<li>Keep the Business aware of the risk and control environment of the Business through continuous and open communication, by preparing and hosting meetings with Senior Management to present and follow-up on issues, concerns, and corrective action plans.</li>
</ul>
 
<ul>
<li>Provide oversight and governance to the assigned business unit regarding its control environment including change activities (both business and regulatory change)</li>
</ul>
 
<ul>
<li>Execute, facilitate and monitor risk governance mechanisms, including but not limited to, Compliance Risk and Control Self-Assessment (C-RCSA), Risk and Control Self-Assessment (RCSA), key risk indicators, policies, risk committees and other elements of the Enterprise Risk Framework</li>
</ul>
 Qualifications 
<ul>
<li>Bachelor's degree in information technology, cybersecurity, or a related field; Master's degree preferred.</li>
</ul>
 
<ul>
<li>Minimum of 6 years of experience in cybersecurity and risk management roles.</li>
</ul>
 
<ul>
<li>Strong understanding of IT security frameworks and regulatory requirements.</li>
</ul>
 
<ul>
<li>Executive Communication Skills: Proven experience in presenting risk management findings and recommendations to executive committees, risk oversight bodies, and boards of directors. Ability to distill complex information into actionable insights for senior leaders.</li>
</ul>
 
<ul>
<li>Excellent problem-solving, analytical, and critical thinking skills to effectively respond to shifting priorities, demands and timelines</li>
</ul>
 
<ul>
<li>Leadership and Influence: Demonstrated ability to engage, influence, and collaborate with senior executives and cross-functional teams to drive strategic risk initiatives and foster a risk-aware culture.</li>
</ul>
 
<ul>
<li>Cyber and Enterprise Risk Management Expertise: Deep understanding of cyber and ERM principles and frameworks (e.g., NIST, ISO, COSO, COBIT) with experience</li>
</ul>
 
<ul>
<li>Relevant certifications such as Certified Information Systems Security Professional (CISSP) or Certified Risk and Information Systems Control (CRISC) are preferred.</li>
<li>Deep understanding of risk management principles, frameworks, and processes.</li>
<li>Ability to independently organize and execute risk assessments.</li>
<li>Strong collaborator able to work across departmental teams to achieve desired results.</li>
<li>Technical understanding and experience a significant plus.</li>
<li>Understanding of risk management reporting</li>
</ul>
 USD 108,800.00 - 181,400.00 per year Compensation: Compensation includes a base salary of $108,800.00 - $181,400.00. The base salary may vary within the anticipated base pay range based on factors such as the ultimate location of the position and the selected candidate's knowledge, skills, and abilities. Position may be eligible for additional compensation that may include an incentive program. Benefits: The Company offers eligible employees the flexibility to take as much vacation with pay as they deem consistent with their duties, the company's needs, and its obligations; seven paid holidays throughout the calendar year; and up to 160 hours of paid wellness annually for their own wellness or that of family members. Employees are also eligible for additional paid time off in the form of bereavement leave, time off to vote, jury duty leave, volunteer time off, military leave, and parental leave. Applicants must currently be authorized to work in the United States for any employer without current or future sponsorship.

Cybersecurity Risk Management Lead

<h3>Job Description</h3>
Summary A Lead of Integrated Cybersecurity Architecture is responsible for evangelizing the agreed upon cybersecurity architectural principles, standards, and design patterns, and advising engineering teams on how to build secure products and enterprise tools for multi-cloud and on-premises environments. This role is focused on being an integrated member of the product and engineering teams. A separate function defines the architecture guidelines that this role is responsible for advising the teams on how to implement. By having deep cybersecurity knowledge in the design and build of secure software products and tools in both multi-cloud and on-premises environments, this role will partner with and influence direct and cross-functional teams throughout the organization and collaborate cross-functionally to solve cybersecurity risks that are unique to a business unit's risk profile and products. This role will report directly to a Director of Integrated Cybersecurity Architecture at Cox Automotive. Primary Responsibilities 
<ul>
<li>Communicate cybersecurity guidelines to engineering teams and business teams and support their adoption of the guidelines.</li>
<li>Be integrated with and in continuous contact with engineering teams to advise on their architecture decisions and assist with cybersecurity control implementation.</li>
<li>Contribute to the identification and mitigation of cybersecurity risks based on threat modeling of products and enterprise tools.</li>
<li>Provides cybersecurity architecture advice and consultation across major program and solution levels.</li>
<li>Engage with cybersecurity peers to create a cohesive cybersecurity department and share back internally regarding business specific activities. Act as the on the ground cybersecurity security representative to the product and engineering teams.</li>
<li>Partner with enterprise architecture, infrastructure and engineering teams to review existing architecture, identify gaps and recommend security enhancements.</li>
<li>Participate in security events and incident response to identify gaps in current design and propose solutions to prevent threats from reoccurring.</li>
<li>Educate product and enterprise architects and engineers on cybersecurity best practices and standards.</li>
<li>Partner with the legal and security governance, risk and compliance teams to ensure that cybersecurity architecture enables compliance with relevant regulatory and contractual requirements.</li>
</ul>
 Minimum Qualifications 
<ul>
<li>Bachelor's degree in a related discipline and 6 years of experience in a related field. The right candidate could also have a different combination, such as a master's degree and 4 years of experience; a Ph.D. and 1 year of experience in a related field; or 10 years' experience in a related field.</li>
<li>At least 4 years focused on cybersecurity.</li>
<li>Relevant experience with designing, securing, or operating AWS infrastructure and services.</li>
<li>Clearly articulate the objective of specific cybersecurity policies and procedures to technical and non-technical stakeholders.</li>
<li>Excellent customer service skills, writing, and executive presentation skills.</li>
<li>Develop a strong and productive working environment with key stakeholders and collaborate closely with other Cox entities' cybersecurity teams to implement cybersecurity best practices. </li>
<li>Consultative nature to work through controversial or complex topics to employees, leaders, and/or senior leadership.</li>
<li>Evaluate risks and recommend actions based on impact and likelihood of the risk to the business.</li>
<li>Knowledge of current cybersecurity and technology architectures such as zero trust, IaaS, PaaS, SaaS, virtualization, containerization, DevSecOps, and software-defined networking across a variety of environments and deployments.</li>
<li>Creatively solving complex cybersecurity challenges while exhibiting solid, pragmatic business acumen.</li>
<li>Experience utilizing Agile methodologies.</li>
<li>Initiating change and deploying solutions in Fortune 1000 companies.</li>
</ul>
<ul>
<li>Knowledge of cybersecurity frameworks (e.g., ISO 27000, NIST, FFIEC) and industry relevant regulations that will guide architectural requirements (e.g., GDPR, FFIEC, GLBA).</li>
</ul>
 Preferred Qualifications 
<ul>
<li>Experience in the development and design of cybersecurity standard methodologies to all layers of the hosting and application stack in both cloud and on-premises environments.</li>
<li>Knowledge of Identity and Access Management (IAM), cryptography / key management, secrets management, access controls and security protocols (e.g., multi-factor, SAML, OAuth, OIDC).</li>
<li>Experience with application security implementations and standard methodologies.</li>
<li>Extensive technology knowledge and recognized expertise in several areas including Python, .NET, Java, Spring frameworks, Oracle, serverless, cloud patterns, cloud service and user authentication or similar.</li>
<li>Experience with firewall, web application firewalls, and other edge services as well as deep understanding of DMZ and other network architectures.</li>
<li>AWS Well-Architected Framework.</li>
<li>Experience establishing a strategy for and implementing cloud enterprise solutions in AWS, GCP, or Azure.</li>
<li>A strong understanding of cloud containers and/or serverless platforms (e.g., EKS, ECS, Lambda, Fargate).</li>
<li>Experience in national critical infrastructure industries (telecommunications, financial services, defense, government, etc.). </li>
<li>Big four consulting or Fortune 500 company experience.</li>
<li>Relevant industry certification (e.g., CISSP, CEH, OSCP, Azure, AWS, CISM, CISA).</li>
</ul>
 USD 119,600.00 - 199,400.00 per year Compensation: Compensation includes a base salary of $119,600.00 - $199,400.00. The base salary may vary within the anticipated base pay range based on factors such as the ultimate location of the position and the selected candidate's knowledge, skills, and abilities. Position may be eligible for additional compensation that may include an incentive program. Benefits: The Company offers eligible employees the flexibility to take as much vacation with pay as they deem consistent with their duties, the company's needs, and its obligations; seven paid holidays throughout the calendar year; and up to 160 hours of paid wellness annually for their own wellness or that of family members. Employees are also eligible for additional paid time off in the form of bereavement leave, time off to vote, jury duty leave, volunteer time off, military leave, and parental leave. Applicants must currently be authorized to work in the United States for any employer without current or future sponsorship.

Lead Cybersecurity Integrated Architect -19556

<h3>Job Description</h3>
Governance lead coordinates all key security department activities such as staffing, financial management, reporting, training, awareness and security communications. Provides project management support and prepares senior management presentations. Understands priorities, operating policies and procedures necessary to ensure appropriate organizational decision-making occurs and practices are followed. Key Responsibilities 
<ul>
<li>Employee Engagement &amp; Awareness: Lead the implementation of employee communication and engagement initiatives, including All Hands meetings, Weekly Direct leadership off-sites, community engagement events, and the annual Security Awareness Training.</li>
<li>Security Culture &amp; Training: Lead the rollout of training and awareness programs designed to foster a strong security mindset and culture across the organization.</li>
<li>Cross-Functional Collaboration: Coordinate intra departmental and cross-functional teams focused on security budgeting, annual planning, communications, and people culture initiatives. </li>
<li>Executive Communications: Develop executive-level presentations and internal messaging, including Quarterly Business Reviews, governance meetings, business updates, Teams Channel posts, and the Monthly Newsletter ensuring clear and consistent communication on security matters.</li>
<li>Project Monitoring &amp; Reporting: Monitor cross-functional projects to ensure timely execution of key objectives and deliverables.</li>
<li>Strategic Reporting: Drive aggregated reporting and messaging around core strategic security focus areas to support transparency and alignment across the organization.</li>
</ul>
 Qualifications 
<ul>
<li>Bachelor's degree in business, law, or a related field; Master's degree preferred.</li>
</ul>
 
<ul>
<li>At least 6 years of experience in compliance, risk management, or related areas. The, right candidate could also have a different combination such as a Master's degree plus 4 years of experience or PhD and 1 year experience. Master's degree preferred.</li>
</ul>
 
<ul>
<li>Proven experience in executive/leadership communications and business reporting, translating strategies to execution plans</li>
</ul>
 
<ul>
<li> Excellent writing skills, ability to "storyboard" and develop visually compelling presentations with clear logic and structure</li>
</ul>
 
<ul>
<li> Highly organized and detailed oriented; proficient in managing competing priorities and multi-task in a fast-paced, deadline-driven environment</li>
</ul>
 
<ul>
<li>Outstanding written and verbal communication skills and presentation skills, including creative thinking and willingness to work hands-on to deliver impactful outcomes</li>
</ul>
 USD 108,800.00 - 181,400.00 per year Compensation: Compensation includes a base salary of $108,800.00 - $181,400.00. The base salary may vary within the anticipated base pay range based on factors such as the ultimate location of the position and the selected candidate's knowledge, skills, and abilities. Position may be eligible for additional compensation that may include an incentive program. Benefits: The Company offers eligible employees the flexibility to take as much vacation with pay as they deem consistent with their duties, the company's needs, and its obligations; seven paid holidays throughout the calendar year; and up to 160 hours of paid wellness annually for their own wellness or that of family members. Employees are also eligible for additional paid time off in the form of bereavement leave, time off to vote, jury duty leave, volunteer time off, military leave, and parental leave. Applicants must currently be authorized to work in the United States for any employer without current or future sponsorship.

Cybersecurity Governance Lead

<h3>Job Description</h3>
The Release Train Architect provides technical leadership and guidance to a value-oriented release train comprised of multiple delivery teams. As a part of the Release Train Leadership Team, the Release Train Architect works with engineering, product, and business leaders to create and promote the release train's current architectural direction and future vision. Job Summary: We know you've got choices as an experienced Architect, so why work for Cox Automotive? Besides being a privately held company that's been in business for over 100 years, Cox Automotive is a respected industry leader. The Release Train Architect provides technical leadership and guidance to a value-oriented release train comprised of multiple delivery teams. As a part of the Release Train Leadership Team, the Release Train Architect works with engineering, product, and business leaders to create and promote the release train's current architectural direction and future vision. Key responsibilities include ensuring technical alignment, architectural health and vision across the release train's agile delivery teams. The Architecture team accomplishes our goals by: 
<ul>
<li>Defining and socializing future state vision</li>
</ul>
 
<ul>
<li>Understanding technical and business dependencies</li>
</ul>
 
<ul>
<li>Understanding and communicating broader architectural context</li>
</ul>
 
<ul>
<li>Promoting leading practices to drive architectural health and high quality</li>
</ul>
 
<ul>
<li>Creating Technical Proof of Concepts validating architectural/design patterns for engineering</li>
</ul>
 
<ul>
<li>Defining, assessing, and communicating technical debt and risk</li>
</ul>
 
<ul>
<li>Guiding architectural decisions</li>
</ul>
 
<ul>
<li>Analyzing design and technology alternatives with respect to business benefits</li>
</ul>
 
<ul>
<li>Applying emerging technology to business opportunities</li>
</ul>
 
<ul>
<li>Promoting a culture of mentoring, collaboration and sharing</li>
</ul>
 Successful Release Train Architects are able to communicate effectively on both technical and business fronts. Validating technology assumptions and quantifying value, effort, risk and technical feasibility in terms of time and money is a critical skill for this role. Release Train Architects must understand the technology landscape of their domain and be able to collaborate with their peers to promote standards, patterns and re-usability to enable the development of best-in-class solutions. Architecture has an important role in our business. We strive to enable a sustainable, continuous, accelerating flow of exceptional solutions to the market. Skills and Experience: 
<ul>
<li>Demonstrating a strong ability to collaborate with others. Working in concert with engineering, product and business leaders. Resolve design pattern conflicts between teams when necessary to ensure architectural alignment</li>
</ul>
 
<ul>
<li>Forming educated opinions about the evolution of our architecture practice. Illustrate and evangelize technical and product vision through creating architectural artifacts such as roadmaps, diagrams, leading practices documents, maturity models and technical analysis presentations</li>
</ul>
 
<ul>
<li>Work with architecture and engineering team members to author guiding principles to better inform teams' design decisions</li>
</ul>
 
<ul>
<li>Understand technical risks and technical debt. Working transparently to bring visibility to these items is critical, as is developing appropriate mitigation strategies</li>
</ul>
 
<ul>
<li>Continuous learning: staying current with technology that is relevant to our problem/solution space</li>
</ul>
 
<ul>
<li>Evaluating current and future work-streams for opportunities to leverage preferred technology patterns and solutions (such as Gen AI and Amazon Web Services) in reusable patterns. Release Train Architects should always be thinking about new ways to employ AWS to create scalable, cost effective and inventive solutions</li>
</ul>
 
<ul>
<li>Share what our teams are learning and doing! Cox Automotive wins when we leverage our collective learnings and we're intentional about sharing great work</li>
</ul>
 Qualifications: 
<ul>
<li>Bachelor's degree in a related field and 8+ years of experience or a Master's degree and 6 years or Ph.D. and 3 years in full development life cycle and significant experience in delivering applications and architecture services in a production environment</li>
</ul>
 
<ul>
<li>3+ years' experience working with Amazon Web Services (AWS)</li>
</ul>
 
<ul>
<li>2+ years leadership/influencing experience</li>
</ul>
 
<ul>
<li>Experience developing software in one or more programming languages (Java, C#, JavaScript, Python, etc.)</li>
</ul>
 
<ul>
<li>Prior experience in the implementation of design and architecture processes in an Enterprise Agile Environment</li>
</ul>
 
<ul>
<li>Prior experience in IT architecture in large-scale, complex IT environments</li>
</ul>
 
<ul>
<li>Experience working in automation first environments promoting Continuous Integration/Continuous Delivery and infrastructure as code</li>
</ul>
 
<ul>
<li>A solid understanding of the architecture of consumer-scale web solutions, distributed systems integration and cloud computing platforms</li>
</ul>
 
<ul>
<li>A strong record of being able to learn new technologies and apply them to business needs</li>
</ul>
 
<ul>
<li>Bachelor's degree in Computer Science, Management of Information Systems, or related field OR equivalent work experience</li>
</ul>
 Preferred Qualifications: 
<ul>
<li>Experience architecting solutions using no-code/low-code platforms, particularly Salesforce</li>
</ul>
 
<ul>
<li>Understanding of ERP systems architecture and integration patterns, with NextWorld experience</li>
</ul>
 
<ul>
<li>Ability to evaluate and recommend appropriate use cases for no-code/low-code solutions versus custom development</li>
</ul>
 
<ul>
<li>Experience with B2B integrations</li>
</ul>
 USD 144,900.00 - 241,500.00 per year Compensation: Compensation includes a base salary of $144,900.00 - $241,500.00. The base salary may vary within the anticipated base pay range based on factors such as the ultimate location of the position and the selected candidate's knowledge, skills, and abilities. Position may be eligible for additional compensation that may include an incentive program. Benefits: The Company offers eligible employees the flexibility to take as much vacation with pay as they deem consistent with their duties, the company's needs, and its obligations; seven paid holidays throughout the calendar year; and up to 160 hours of paid wellness annually for their own wellness or that of family members. Employees are also eligible for additional paid time off in the form of bereavement leave, time off to vote, jury duty leave, volunteer time off, military leave, and parental leave.

Senior Lead Architect

<h3>Job Description</h3>
The Senior Manager of Cybersecurity Detection Engineering will lead a team of Detection Engineers in designing, implementing, and maintaining advanced detection capabilities to safeguard the organization against emerging cyber threats. This pivotal role will enhance Cox Automotive's next-generation Cyber Defense practice, enabling rapid threat response and automated remediation. The position will be responsible for developing the strategy for the Detection Engineering program and establishing metrics to demonstrate continuous improvement. The ideal candidate will possess expert-level knowledge in SIEM implementation and log ingestion, SOAR, Incident Response, and Threat Intelligence that will be data-driven with strong verbal, written communication, and leadership skills. Cybersecurity Detection Engineering: 
<ul>
<li>Define detection engineering strategy, roadmap, and objectives to achieve.</li>
<li>Design and implement advanced threat detection techniques using tools such as SIEM, EDR, NDR, and SOAR platforms.</li>
<li>Develop innovative custom detection rules and automated remediation, playbooks, and alerts tailored to the organization's threat landscape for enterprise and customer security.</li>
<li>Leverage industry standard MITRE frameworks to identify detection coverage and close gaps.</li>
<li>Monitor, optimize, and continuously improve detection systems for performance, scalability, and effectiveness.</li>
<li>Collaborates with Threat Detection and Response team to continuously improve cybersecurity capabilities in identification, management, and response to threats in the most efficient and effective manner.</li>
<li>Performs attack simulation testing to validate efficacy of use cases and purple teaming exercises collaborating with the Vulnerability Mgmt team.</li>
<li>Manages and maintains SIEM/Data Lake data management and log ingestion infrastructure in collaboration with Cyber Defense Engineering.</li>
<li>Evaluate, validate, tune, and sunset where necessary detection capabilities</li>
<li>Maintains operational guidelines, diagrams, and documentation for security detection and response.</li>
</ul>
 Incident Response Support: 
<ul>
<li>Collaborate with the incident response team to ensure rapid detection and containment of cyber threats.</li>
<li>Provide technical expertise and guidance to develop detection use cases during high-severity security incidents.</li>
<li>Continuously improve detection and response processes based on lessons learned from incidents.</li>
<li>Other duties may be assigned as needed to address new security threats facing the enterprise.</li>
<li>Provides off hour support as needed for security administration, detection, and response activities.</li>
</ul>
 Threat Intelligence Integration: 
<ul>
<li>Leverage threat intelligence to enhance detection capabilities and proactively mitigate risks.</li>
<li>Identify and analyze new and emerging threat vectors and incorporate them into detection strategies.</li>
</ul>
 Stakeholder Collaboration: 
<ul>
<li>Partner with other Cybersecurity, Engineering, and Product teams to align detection strategies with organizational objectives.</li>
<li>Communicate detection capabilities and findings to technical and non-technical stakeholders, including executive leadership.</li>
</ul>
 Governance and Compliance: 
<ul>
<li>Ensure all detection processes and tools adhere to regulatory requirements and industry standards (e.g., GDPR, PCI-DSS, NIST).</li>
<li>Establish and maintain documentation of detection strategies, processes, and configurations.</li>
</ul>
 Professional Technology Skills (the professional technology skills you need to be able to do the job) Ability to: 
<ul>
<li>Proven track record of building scalable organizations that have world class threat detection capabilities.</li>
<li>Technical proficiency performing security investigations at scale; including endpoint, cloud, identity, network, and email threats.</li>
<li>Work with internal IT teams and external MSSPs for creation and operationalization of Detection Engineering use cases for WAF, DDoS Protection, Email systems, DLP, AV, and Endpoint security technologies.</li>
<li>Practical experience with Detection &amp; Response tools for network, endpoints, cloud, and identity as well as SOAR platforms.</li>
<li>Apply security Threat Intelligence to identify new threat vectors.</li>
<li>Lead projects to improve security monitoring and response capabilities.</li>
<li>Demonstrate a strong security engineering and architecture background to best understand how to employ the most effective and efficient security monitoring.</li>
<li>Strong fundamentals of Linux, MacOS, and Windows operating system internals.</li>
<li>Demonstrate effective communication of security issues to management and others.</li>
<li>Maintain detection use case and SIEM configuration guidelines and standards for security.</li>
<li>Proficiency creating and managing operational metrics that increase team efficiency and quality.</li>
<li>Enthusiastic about managing and mentoring individuals pursuing careers in detection engineering.</li>
<li>Ability to manage effective relationships with organizational leaders, build a roadmap, and drive broad initiatives to completion.</li>
<li>Understanding of Machine Learning concepts as related to predictive analytics.</li>
</ul>
 Knowledge, Experience &amp; Qualifications Essential: 
<ul>
<li>Bachelor's degree in Computer Science or equivalent and 8+ years of industry related professional experience. The right candidate could also have a different combination, such as a master's degree and 6 years' experience; a Ph.D. and 3 years' experience in a related field; or 20 years' experience in a related field</li>
<li>Multi-cloud security experience AWS, Azure, GCP</li>
<li>Expert level knowledge on Detection Engineering and Security Operations</li>
<li>3+ years of management or leadership experience with direct people management responsibilities</li>
<li>Strong experience with Information Security, Network Security, Security Monitoring, and Incident Response.</li>
<li>Strong experience with developing SIEM/SOAR detection and automation use cases.</li>
<li>Working experience with industry standard security technologies and services such as Threat Intelligence, Firewalls, SASE, IPS, Endpoint Security, DLP, SIEM/SOAR, and Data Lakes.</li>
<li>Expert level knowledge on the attack kill chain and diamond model.</li>
<li>5+ years' experience in an Incident Response or Security Operations role</li>
<li>3+ years' leadership experience in a SOC or equivalent role</li>
<li>Must live within a commutable distance to North Hills NY or Atlanta GA and be willing to come onsite 3x a week</li>
</ul>
 Desirable: 
<ul>
<li>GSEC, GCIA, GFE, GCFA, CISA, CISSP, CISM, or CIA certification(s)</li>
<li>Development/ Dev Ops / Engineering / Network / System Administration experience</li>
</ul>
 USD 173,900.00 - 289,800.00 Compensation: Compensation includes a base salary of $173,900.00 - $289,800.00. The base salary may vary within the anticipated base pay range based on factors such as the ultimate location of the position and the selected candidate's knowledge, skills, and abilities. Position may be eligible for additional compensation that may include an incentive program. Benefits: The Company offers eligible employees the flexibility to take as much vacation with pay as they deem consistent with their duties, the company's needs, and its obligations; seven paid holidays throughout the calendar year; and up to 160 hours of paid wellness annually for their own wellness or that of family members. Employees are also eligible for additional paid time off in the form of bereavement leave, time off to vote, jury duty leave, volunteer time off, military leave, and parental leave.

Senior Manager of Cybersecurity Detection Engineering

<h3>Job Description</h3>
A Sr Manager, Software Engineering of Level 1 &amp; 2 Salesforce Support manages and leads a team providing technical support to customers, primarily focused on resolving complex Salesforce-related issues. This role involves technical expertise, leadership, and strong communication skills to ensure effective resolution of support cases and drive customer satisfaction. Your Role: Team Leadership 
<ul>
<li>Lead and mentor a team of Salesforce support engineers, providing guidance, coaching, and performance management.</li>
</ul>
 Technical Expertise 
<ul>
<li>Possess a deep understanding of Salesforce platform, including its various modules (SFX , SFX(CPQ) and Billing) and related technologies.</li>
</ul>
 Case Management 
<ul>
<li>Ensure team's work is completed in a timely manner and within SLAs by shifting resources and managing priorities as required, escalating as needed, while maintaining accurate documentation and communication.</li>
</ul>
 Customer Communication 
<ul>
<li>Build strong relationships with customers, providing clear and concise technical explanations and updates on case status.</li>
</ul>
 Process Improvement 
<ul>
<li>Identify and implement process improvements within the support team to enhance efficiency and effectiveness.</li>
</ul>
 Collaboration 
<ul>
<li>Work closely with internal teams like Sales, Service, Product, and Engineering to resolve issues and ensure product alignment. (added "Service")</li>
</ul>
 Incident Management 
<ul>
<li>Lead the resolution of major incidents, ensuring timely recovery and minimal impact on customers.</li>
</ul>
 Knowledge Management 
<ul>
<li>Contribute to the development and maintenance of knowledge base articles and support documentation.</li>
</ul>
 Problem Solving 
<ul>
<li>Proactively identify and resolve potential issues before they impact customers. </li>
</ul>
 Technologies We Use: Salesforce, Service Station, Min Qualifications: 
<ul>
<li>Bachelor's degree in a related discipline and 8 years' experience in a related field. The right candidate could also have a different combination, such as master's degree and 6 years' experience; a P.h.D. and 3 years'; or 20 years' experience in a related field.</li>
<li>3+ years' leadership experience with demonstrated ability to motivate and lead a team, providing clear direction and guidance.</li>
<li>5+ years' experience in Salesforce administration, development, or support roles, with a proven track record of leading and mentoring teams.</li>
<li>3+ years of ServiceNow experience</li>
<li>Strong understanding of Service Station and Salesforce platform, including its various modules and functionalities.</li>
</ul>
 Preferred 
<ul>
<li>5+ leadership experience with demonstrated ability to motivate and lead a team, providing clear direction and guidance with 5+ direct reports.</li>
</ul>
 Leadership and Management Skills: 
<ul>
<li>Experience leading and motivating small to medium-sized engineering teams: Candidates should have a proven track record of getting results through others.</li>
<li>Strong communication and collaboration skills: This position will need to effectively communicate with engineers, product managers, and other stakeholders with varying technical backgrounds.</li>
<li>Ability to prioritize tasks and manage competing demands: Juggling project needs with stakeholder requests and team goals requires strong prioritization skills.</li>
<li>Problem-solving and decision-making skills: This position will be asked to analyze problems, identify solutions, and make clear decisions that benefit the team and project.</li>
<li>Manage career progression for team members, including hiring, performance reviews, salary decisions, mentoring, coaching, and all duties normally associated with a hiring manager.</li>
<li>Work with your team to plan, design, implement and operationalize innovations and improvements to existing software.</li>
<li>Work with your team to continually improve their processes and develop best practices for agile development that deliver value to our stakeholders.</li>
<li>Servant leadership - we want you to empower your team members and remove roadblocks for them.</li>
<li>Desire to mentor and help our team members grow.</li>
<li>Excellent planning and prioritization skills with the ability to multitask and adapt to change.</li>
</ul>
 USD 144,900.00 - 241,500.00 per year Compensation: Compensation includes a base salary of $144,900.00 - $241,500.00. The base salary may vary within the anticipated base pay range based on factors such as the ultimate location of the position and the selected candidate's knowledge, skills, and abilities. Position may be eligible for additional compensation that may include an incentive program. Benefits: The Company offers eligible employees the flexibility to take as much vacation with pay as they deem consistent with their duties, the company's needs, and its obligations; seven paid holidays throughout the calendar year; and up to 160 hours of paid wellness annually for their own wellness or that of family members. Employees are also eligible for additional paid time off in the form of bereavement leave, time off to vote, jury duty leave, volunteer time off, military leave, and parental leave.

Sr Manager, Software Engineering

<h3>Job Description</h3>
The Security Client and Vendor Compliance Lead will manage compliance and oversight accountabilities for third party service providers (vendors). This leader will implement and manage boarding/due diligence required for third party service providers and ensure operating effectiveness over time. Oversee internal and external security audits, ensuring remediation plans for identified issues are executed effectively as well as monitor emerging regulations and compliance trends to maintain up-to-date practices. Coordinate with regulatory bodies, auditors, and other stakeholders on security risk-related matters. This role will drive a culture of continuous improvement for security compliance practices, benchmark the organization's compliance performance against industry peers, and foster innovation in security compliance to address emerging threats. Key Responsibilities 
<ul>
<li>Engages with Cox business leaders to ensure understanding and support of security compliance strategy, priorities and initiatives</li>
<li>Collaborates with the team on effective roadmap development and governance for global initiatives related to security awareness, policy development, client and vendor compliance and overall process improvement</li>
<li>Establish, maintain and communicate CAI security policies related to third party service providers. Partner with cross-divisional counter parts to ensure alignment, where appropriate, across all Cox divisions.</li>
<li>Serve as the liaison with External Auditors, Internal Audit, on all significant Compliance issues involving third party service providers.</li>
<li>Manage all contractual security requirements for third party service providers and present compliance reports to the leadership and executive team</li>
<li>Provide oversight and guidance over the assessment of broad complex issues, structures potential solutions and drive effective resolution with other senior stakeholders.</li>
</ul>
 Minimum Qualifications 
<ul>
<li>Bachelor's degree in a related discipline and 6 years' experience in a related field. The right candidate could also have a different combination, such as a master's degree and 4 years' experience; a Ph.D. and 1 year of experience; or 18 years' experience in a related field</li>
<li>Proactively builds, nurtures and maintains business-focused, long-term working relationships with partners inside and outside of the organization. Demonstrates flexibility when forming and adjusting partnerships to achieve broader goals. Shows willingness to work across boundaries to achieve outcomes addressing business, customer and partner goals and expectations. Demonstrated strong executive presence and communication skills.</li>
<li>Direct oversight of managing external attestations such as SOC1/SOC2 Reports, as well as managing compliance with GLBA, PCI DSS, GDPR</li>
<li>Direct experience managing and redlining contractual security requirements and interacting with legal.</li>
<li>Direct experience with managing international compliance requirements in Europe</li>
<li>Effective negotiation skills, a proactive and 'no surprises' approach in communicating issues and strength in sustaining independent views. Strong presentation and relationship management skills are essential</li>
<li>Articulate and effective communicator, both orally and in writing, with an energetic, charismatic and approachable style. Candidates must have effective persuasion skills, the ability to work effectively at the highest levels of the organization, and will display highly effective networking and influencing skills</li>
</ul>
 Preferred Qualifications 
<ul>
<li>Ability to make strategic decisions, supervise complex programs, manage and educate highly skilled professionals, and influence other departments relating to security risk and control.</li>
<li>Solid, pragmatic business acumen with a proven record of creatively solving problems and offering solutions.</li>
<li>Consultative nature to work through controversial or complex topics to employees, leaders, and/or senior leadership.</li>
<li>Ability to manage multiple complex projects while meeting all deadlines and manage leaders of teams to achieve optimal results.</li>
<li>Develop strong and productive working environment with key stakeholders and collaborate closely with other Cox entities' security teams to implement security best practices.</li>
<li>Relevant industry certification: CISSP, CEH, OSCP, Azure, AWS, CISM, CISA, etc.</li>
</ul>
 USD 108,800.00 - 181,400.00 per year Compensation: Compensation includes a base salary of $108,800.00 - $181,400.00. The base salary may vary within the anticipated base pay range based on factors such as the ultimate location of the position and the selected candidate's knowledge, skills, and abilities. Position may be eligible for additional compensation that may include an incentive program. Benefits: The Company offers eligible employees the flexibility to take as much vacation with pay as they deem consistent with their duties, the company's needs, and its obligations; seven paid holidays throughout the calendar year; and up to 160 hours of paid wellness annually for their own wellness or that of family members. Employees are also eligible for additional paid time off in the form of bereavement leave, time off to vote, jury duty leave, volunteer time off, military leave, and parental leave. Applicants must currently be authorized to work in the United States for any employer without current or future sponsorship.

Security Client and Vendor Compliance Lead

<h3>Job Description</h3>
Summary The Senior Cybersecurity Integrated Architect is responsible for evangelizing the agreed upon cybersecurity architectural principles, standards, and design patterns, and advising engineering teams on how to build secure products and enterprise tools for multi-cloud and on-premises environments. This role is focused on being an integrated member of the product and engineering teams. A separate function defines the architecture guidelines that this role is responsible for advising the teams on how to implement. By having deep cybersecurity knowledge in the design and build of secure software products and tools in both multi-cloud and on-premises environments, this role will partner with direct and cross-functional teams throughout the organization and collaborate cross-functionally to solve cybersecurity risks that are unique to a business unit's risk profile and products. This role will report directly to a Director of Integrated Cybersecurity Architecture at Cox Automotive. Primary Responsibilities 
<ul>
<li>Communicate cybersecurity guidelines to engineering teams and business teams and support their adoption of the guidelines.</li>
<li>Be integrated with and in continuous contact with engineering teams to advise on their architecture decisions, assist with cybersecurity control implementation, and resolve cybersecurity risks that arise based on threats and risks occurring for their products.</li>
<li>Collaborate with business, technical and other relevant stakeholders to understand current areas of security risk, control standards and requirements.</li>
<li>Participate in the identification and mitigation of cybersecurity risks based on threat modeling of products and enterprise tools.</li>
<li>Contribute to the design and development of new systems / controls based on identified business requirements and risks.</li>
<li>Engage with cybersecurity peers to create a cohesive cybersecurity department and share back internally regarding business specific activities. Act as the on the ground cybersecurity security representative to the product and engineering teams.</li>
<li>Participate in security events and incident response to identify gaps in current design and propose solutions to prevent threats from reoccurring.</li>
</ul>
 Minimum Qualifications 
<ul>
<li>Bachelor's degree in a related discipline and 4 years of experience in a related field. The right candidate could also have a different combination, such as a master's degree and 2 years of experience; a Ph.D. and 1 years of experience in a related field; or 8 years' experience in a related field.</li>
<li>At least 2 years focused on cybersecurity.</li>
<li>Relevant experience with designing, securing, or operating AWS infrastructure and services.</li>
<li>Clearly articulate the objective of specific cybersecurity policies and procedures to technical stakeholders.</li>
<li>Excellent customer service skills, writing, and executive presentation skills.</li>
<li>Develop a strong and productive working environment with key stakeholders and collaborate closely with other Cox entities' cybersecurity teams to implement cybersecurity best practices. </li>
<li>Consultative nature to work through controversial or complex topics to employees, leaders, and/or senior leadership.</li>
<li>Evaluate risks and make informed decisions based on impact and likelihood of the risk to the business.</li>
<li>Knowledge of current cybersecurity and technology architectures such as zero trust, IaaS, PaaS, SaaS, virtualization, containerization, DevSecOps, and software-defined networking across a variety of environments and deployments.</li>
<li>Creatively solving complex cybersecurity challenges while exhibiting solid, pragmatic business acumen.</li>
<li>Experience utilizing Agile methodologies.</li>
<li>Initiating change and deploying solutions in Fortune 1000 companies.</li>
<li>Knowledge of cybersecurity frameworks (e.g., ISO 27000, NIST, FFIEC) and industry relevant regulations that will guide architectural requirements (e.g., GDPR, FFIEC, GLBA).</li>
</ul>
 Preferred Qualifications 
<ul>
<li>Experience in the development and design of cybersecurity standard methodologies to all layers of the hosting and application stack in both cloud and on-premises environments.</li>
<li>Knowledge of Identity and Access Management (IAM), cryptography / key management, secrets management, access controls and security protocols (e.g., multi-factor, SAML, OAuth, OIDC).</li>
<li>Experience with application security implementations and standard methodologies.</li>
<li>Extensive technology knowledge and recognized expertise in several areas including Python, .NET, Java, Spring frameworks, Oracle, serverless, cloud patterns, cloud service and user authentication or similar.</li>
<li>Experience with firewall, web application firewalls, and other edge services as well as deep understanding of DMZ and other network architectures.</li>
<li>AWS Well-Architected Framework.</li>
<li>Experience establishing a strategy for and implementing cloud enterprise solutions in AWS, GCP, or Azure.</li>
<li>A strong understanding of cloud containers and/or serverless platforms (e.g., EKS, ECS, Lambda, Fargate).</li>
<li>Experience in national critical infrastructure industries (telecommunications, financial services, defense, government, etc.). </li>
<li>Big four consulting or Fortune 500 company experience.</li>
<li>Relevant industry certification (e.g., CISSP, CEH, OSCP, Azure, AWS, CISM, CISA).</li>
</ul>
 USD 99,000.00 - 165,000.00 per year Compensation: Compensation includes a base salary of $99,000.00 - $165,000.00. The base salary may vary within the anticipated base pay range based on factors such as the ultimate location of the position and the selected candidate's knowledge, skills, and abilities. Position may be eligible for additional compensation that may include an incentive program. Benefits: The Company offers eligible employees the flexibility to take as much vacation with pay as they deem consistent with their duties, the company's needs, and its obligations; seven paid holidays throughout the calendar year; and up to 160 hours of paid wellness annually for their own wellness or that of family members. Employees are also eligible for additional paid time off in the form of bereavement leave, time off to vote, jury duty leave, volunteer time off, military leave, and parental leave. Applicants must currently be authorized to work in the United States for any employer without current or future sponsorship.

Senior Cybersecurity Integrated Architect

<h3>Job Description</h3>
Lead Product Owner Innovation matters most when it meets real needs. That's why we're looking for a Lead Product Owner to guide our teams through the development of products that are building a better future. In this role, you'll shape a product roadmap, set team priorities and ensure that products align with customer needs. Ready to dive deep into our products? Let's talk! The Lead Product Owner will own and maintain visibility into the product and optimization backlog, ensuring continuous refinement and prioritization of enhancements, defects, and strategic improvements based on data-driven insights. They will apply data analytics to assess impact, track performance, and inform prioritization ensuring decisions are grounded in business objectives and consumer behavior trends. Writing epics and stories in plain language, clearly articulating product functionality while balancing technical feasibility and market demands. Leads strategic and tactical planning efforts by aligning backlog priorities with the broader product vision, consumer needs, and key business objectives. The Lead Product Owner will champion backlog integrity and iteration cycles to ensure timely resolution of defects and feature enhancements, balancing speed-to-market with long-term scalability. We are needing someone who can manage stakeholder relationships, partnering cross-functionally with Product Management, Engineering, UX, Analytics and other departments to drive successful roadmap execution. 
<ul>
<li>Sets direction, defines roadmap to develop and execute a comprehensive approach to deliver one or more products, capabilities, services or enhancements in accordance with product roadmap(s).</li>
<li>Engages with / leads two or more Scrum teams, depending on platform size, to build, enhance and manage diverse products, capabilities and/or services.</li>
<li>Demonstrates a depth of knowledge with focus on world-class delivery and quality for release planning and defect management.</li>
<li>Acts an advocate for the customer while balancing business goals and workflow optimizations for successful feature delivery.</li>
<li>Prioritizes and manages backlog and implementation, ensuring product execution meets product strategy, performance, user and company / business / financial requirements.</li>
<li>Leads processes to refine features into user stories and story acceptance criteria.</li>
<li>Coordinates with Product Leaders and Release Train to deliver on a vision that crosses multiple delivery streams and Release Trains.</li>
<li>Partners with Sales, Sales Operations, Client Solutions, Editorial, Advertising, Legal, SEO, and Marketing teams to drive communication of product performance and value.</li>
</ul>
 Required Experience &amp; Specialized Knowledge and skills 
<ul>
<li>Bachelor's degree in a related discipline and 6 years' experience in a related field; or a different combination, such as a master's degree and 4 years' experience; a Ph.D. and 1 years' experience in a related field; or 10 years' experience in a related field.</li>
<li>Advanced skills in analytical thinking, project administration &amp; management, requirements analysis, system &amp; technology integration and technology savvy.</li>
<li>Acts with integrity. Advanced skills in building partnerships, driving innovation, focusing on execution and striving for excellence.</li>
<li>Other duties as needed or required.</li>
<li>Requires physical ability and mental acuity to execute the duties of the position successfully within required timeframes to meet business requirements.</li>
</ul>
 USD 108,800.00 - 181,400.00 per year Compensation: Compensation includes a base salary of $108,800.00 - $181,400.00. The base salary may vary within the anticipated base pay range based on factors such as the ultimate location of the position and the selected candidate's knowledge, skills, and abilities. Position may be eligible for additional compensation that may include an incentive program. Benefits: The Company offers eligible employees the flexibility to take as much vacation with pay as they deem consistent with their duties, the company's needs, and its obligations; seven paid holidays throughout the calendar year; and up to 160 hours of paid wellness annually for their own wellness or that of family members. Employees are also eligible for additional paid time off in the form of bereavement leave, time off to vote, jury duty leave, volunteer time off, military leave, and parental leave.

121,498 Jobs in Washington