The First Mobile Threat Defense Solution

This individual must have a thorough understanding and practical experience with various public cloud platforms, AWS GovCloud, industry certifications (ie. FedRAMP, ISO), and the implementation of information system security standards and controls (ie. NIST) to protect the organization.

Responsibilities:

• Works to understand complex architectures and assist in turning those into secure deployable products/services in FedRAMP accredited environments.
• Architects, designs, implements, maintains and operates information system security controls and countermeasures.
• Analyzes and recommends security controls and procedures in acquisition, development, and change management lifecycle of information systems, and monitors for compliance.
• Analyzes and recommends security controls and procedures in business processes related to use of information systems and assets, and monitors for compliance.
• Monitors information systems for security incidents and vulnerabilities; develops monitoring and visibility capabilities; reports on incidents, vulnerabilities, and trends.
• Responds to information system security incidents, including investigation of, countermeasures to, and recovery from computer-based attacks, unauthorized access, and policy breaches; interacts and coordinates with third-party incident responders, including law enforcement.
• Administers authentication and access controls, including provisioning, changes, and de-provisioning of user and system accounts, security/access roles, and access permissions to information assets.
• Analyzes trends, news and changes in threat and compliance environment with respect to organizational risk; advises organization management and develops and executes plans for compliance and mitigation of risk; performs risk and compliance self-assessments, and engages and coordinates third-party risk and compliance assessments.
• Analyzes and develops information security governance, including organizational policies, procedures, standards, baselines and guidelines with respect to information security and use and operation of information systems.
• Develops and administers, or provides advice, evaluation, and oversight for, information security training and awareness programs.
• Performs threat simulations and penetration tests to identify and detect possible risks.
• Manages cryptography and encryption of data in the cloud.
• Leads responses to audits as needed.

Qualifications:

• Bachelor's degree in computer science, information systems or other related course of study
• 5+ years of progressive experience in information Security for Cloud based offerings
• Understanding of information security assessment and auditing procedures, from both technical and business perspectives, and the use of formal methodologies
• Outstanding communications skills - must be proficient communicating across all levels of the organization as well as building successful relationships
• Experience with ATO and NIST controls, processes and procedures
• Extensive knowledge of FedRAMP accredited cloud architectures and operating procedures preferred
• Exposure to ISO 27001 controls, processes and procedures preferred.
• Certification such as CISA, CISM or CISSP a plus but not required

Qualified candidates (no 3rd parties) should email their resume and contact information to jobs@zimperium.com.

Zimperium is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex including sexual orientation and gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.