HaemoneticsNYSE: HAE: Manufactures medical devices for blood and plasma management.
10+ YOE10+ years software engineering with 5+ years in principal/architect roles; expert C# or Java/Python; experience with REST APIs, microservices, event-driven systems, CI/CD, containerization, SQL/NoSQL, AWS and Terraform; security and compliance (OWASP, OIDC, SAML2, SOC2, ISO27001, HIPAA).
QuEra Computing: Develops and operates neutral-atom quantum computing systems.
4+ YOEBachelor's or equivalent experience, 4+ years in information security/systems/DevOps, cloud and networking knowledge, vulnerability management, security frameworks (SOC 2/ISO27001/NIST), strong communication.
Tenable, CrowdStrike, Qualys, Rapid7, AWS Inspector, Microsoft Purview, AWS, Azure, Oracle Cloud, Jira, SIEM, Splunk, Microsoft Sentinel, Python, PowerShell, Bash
Richmond or St. Louis or Cleveland or Philadelphia or Chicago or San Francisco or New York City or Kansas City or Boston or Atlanta or Minneapolis or Dallas
$113k-$187k/yrOnsiteFull Time
Federal Reserve System: The central bank of the United States.
6+ YOE6+ years product/network experience; hands-on with Ansible, Terraform, Python; knowledge of routing, switching, firewalls, zero-trust, and compliance frameworks (NIST,FedRAMP,CMMC,ISO27001); strong communication and product leadership.
WHOOP: Wearable technology for personalized health and performance tracking.
8+ YOE8+ years in security architecture or senior security engineering, experience with cloud-native security (AWS), application and infrastructure security, threat modeling, and regulatory frameworks; strong communication and mentoring skills.
Alnylam PharmaceuticalsNASDAQ: ALNY: Develops RNAi therapeutics to treat rare and common diseases.
15+ YOE10+ Mgmt15+ years in cybersecurity/risk/compliance, 10+ years leading GRC teams; Bachelor’s in a relevant field required; strong knowledge of NIST, ISO, ERM; CISSP/CISM/CRISC/CISA preferred.
NIST CSF v2.0, NIST 800-53, ISO 27001, ERM, GxP, HIPAA, SOX, FDA, Computer System Validation (CSV), NIS2, IT SDLC
KlaviyoNYSE: KVYO: Software platform for automated e-commerce marketing and customer data.
10+ YOE10+ years infrastructure/platform security experience; deep cloud security (AWS/GCP IAM, mTLS), secrets management, IaC and CI/CD controls, vulnerability and SLO-driven remediation, threat modeling, and experience with compliance frameworks.
AWS, GCP, mTLS, IaC, CI/CD, SOC 2, ISO 27001, GDPR, AI
Fidelity Investments: Provides investment management, retirement planning, and brokerage services.
5+ YOEExpertise in IT risk and cybersecurity, audited frameworks (SOC1/2/3, PCI-DSS, HITRUST, ISO27000, Swift CSP), NIST, 5+ years Big 4 IT assurance experience, bachelor’s in tech preferred, cybersecurity certifications a plus.
envelio: Software to help utilities digitize and automate power grids.
4+ YOE4+ years in information security or IT operations, SOC 2/ISO 27001 experience, MDM and identity management experience, Microsoft 365/Entra ID/Intune administration, strong communication and process-building skills.
SOC 2, ISO 27001, Mobile Device Management (MDM), Microsoft 365, Microsoft Entra ID (Azure AD), Microsoft Intune
Identity and Access Management (IAM) Senior Consultant
Washington or Denver or Boston
$140k-$200k/yrOnsiteFull Time
Bank of AmericaNYSE: BAC: Provides banking, investment, and financial risk management services.
10+ YOE10+ years in IAM, information security, cloud or related disciplines in large regulated organizations; deep IAM and public cloud knowledge; experience with AI identity risks, vendor assessments, and executive communication.
AWS, Microsoft Azure, Google Cloud Platform, NIST, COBIT, ISO 27001, MITRE ATLAS, OWASP
Alloy Therapeutics: Providing drug discovery technologies and services to scientific partners.
Build and run an information security program including incident response, vulnerability and patch management, IAM and endpoint hardening, data protection for large-scale research, compliance (SOC 2/ISO), and governance.
Google Workspace, AWS, GCP, Azure, IAM, MFA, FIDO2, YubiKey, SSO, SCIM, EDR, CVE, CSIRT, SOC 2 Type 2, ISO 27001
BC Platforms: Provides secure data platforms for healthcare and life sciences.
8+ YOE8+ years in security, compliance or governance; CISSP or CISM preferred; experience with ISO 27001, GDPR, SOC 2, GxP/21 CFR Part 11; cloud security, audit readiness, stakeholder engagement and strong communication.
ISO 27001, GDPR, SOC 2, GxP, 21 CFR Part 11, EHDS, EU AI Act
Ahold Delhaize USAEuronext Amsterdam: AD: Operates a portfolio of omnichannel grocery brands.
10+ YOE3+ MgmtRequires 10+ years in technology, 3+ years managing or developing teams, a bachelor's degree, cybersecurity and incident response expertise, security framework knowledge, analytical and communication skills, and 25% travel.
Security Operations Center (SOC), Security Information and Event Management (SIEM), NIST, ISO/IEC 27001, MITRE ATT&CK, CIS Controls
United States or Canada or Fort Collins or New York City or Framingham
$120k-$175k/yrRemoteFull Time
Landline: Providing seamless ground transportation connections for airline networks.
5+ YOERequires 5+ years in IT compliance, information security, audit, or governance, including 2+ years owning a control or audit program; framework, GRC platform, MSP oversight, and core IT control experience required.
InformaLondon Stock Exchange: INF: Organizing international business events and publishing academic research journals
7+ YOEBachelor’s or master’s degree in computer science, information technology, or related field; 7+ years of cybersecurity experience; deep cloud security expertise; multi-cloud architecture leadership; strong analytical and communication skills.
AWS, GCP, Cloud Security Posture Management (CSPM), Cloud Infrastructure Entitlement Management (CIEM), Wiz, Identity and Access Management (IAM), Security Information and Event Management (SIEM), CI/CD, OWASP, Docker, Kubernetes, Trivy, Aqua Security, Unix, NIST, COBIT, ISO 27001, SOC 2, GDPR, SOX
San Mateo or New York City or Boston or Salt Lake City
HybridFull Time
Overjet: AI platform for dental diagnostics and practice management.
7+ YOERequires 7+ years in medical device regulatory affairs, 2+ years with FDA software as a medical device, global submissions experience, regulatory framework expertise, and a scientific or engineering bachelor's degree.
FDA 510(k), De Novo, Health Canada Medical Device License (MDL), EU MDR, UK MHRA, Australian TGA, 21 CFR Part 820, Software as a Medical Device (SaMD), ISO 13485, ISO 14971, IEC 62304, ISO 27001, HIPAA, GDPR