Lead, Cybersecurity

🕒 il y a 28 jours

🇺🇸 États-Unis – Télétravail

💵 $150 000 / an

⏰ Temps Plein

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🦅 Parrain de Visa H1B

Cette entreprise a parrainé des visas H1B par le passé.

👻 Score fantôme 0%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Smartlinx

Site WebLinkedInTous les Emplois

51 - 200 employés

Fondée en 2000

🏥 Santé

💼 Conseil

📦 Logistique

💰 Private equity en 2020-04

Healthcare • Consulting • Logistics

Smartlinx est une plateforme SaaS de gestion de la main-d'œuvre et des ressources humaines spécialement conçue pour les prestataires de soins aux personnes âgées et les organisations de personnel de santé. Elle propose des solutions de gestion des plannings, de temps et de présence, de paie, de conformité PBJ/CMS, d'analytique de la main-d'œuvre, de gestion unifiée des ressources humaines (recrutement, intégration, avantages), de gestion du personnel temporaire et des fournisseurs, et des outils mobiles pour les employés afin d'optimiser le travail, de maintenir la conformité réglementaire et d'améliorer l'engagement et la rétention du personnel.

Description

• Define and operate Smartlinx's cybersecurity program across multi-tenant SaaS products, cloud infrastructure, corporate technology, data platforms, integrations, and third-party services • Own SaaS product and application security, cloud and infrastructure security, identity and access management, vulnerability management, security monitoring, incident response, third-party risk, and SOC 2 Type II readiness • Lead threat modeling, security architecture reviews, abuse-case analysis, risk assessments, secure coding guidance, automated security testing, penetration testing, and remediation • Establish secure cloud baselines and govern network security, secrets, certificates, encryption, privileged credentials, patching, endpoint protection, vulnerability scanning, and configuration management • Review security of databases, data platforms, data exchanges, backups, and disaster-recovery environments • Lead SOC 2 Type II readiness, control design, evidence collection, auditor coordination, remediation, management responses, and annual attestation • Maintain security policies, standards, procedures, risk register, evidence repository, exception records, remediation plans, and executive compliance reporting • Apply HIPAA and HITECH requirements and support customer contractual security obligations • Establish unified vulnerability-management and third-party security programs • Define security monitoring, detection use cases, incident-response plans, escalation paths, investigations, containment, recovery, forensics, and post-incident reviews • Conduct tabletop exercises and drive corrective actions to closure • Establish identity-first security with least privilege, multifactor authentication, privileged access management, conditional access, and access certification • Govern data classification, access, encryption, masking, retention, deletion, secure disposal, and data-loss prevention • Develop cybersecurity strategy, operating plan, budget, staffing model, roadmap, executive and Board reporting, and security scorecard • Select and manage security tools, deliver security education, and recruit, coach, and develop security personnel

🎯 Exigences

• Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Systems, or a related field, or equivalent practical experience • 8+ years of progressive experience across product, application, cloud, infrastructure, or security-operations disciplines • 3+ years in a lead, principal, architect, or security-program ownership role • Experience securing multi-tenant B2B SaaS products in healthcare, payroll, HR technology, or another regulated environment • Experience protecting PHI, PII, financial, or other sensitive data • Hands-on experience leading at least one successful SOC 2 Type II audit cycle • Strong Microsoft Azure security experience across cloud networking, identity, compute, storage, databases, containers, Kubernetes, infrastructure as code, secrets, logging, monitoring, backup, and recovery • Deep knowledge of secure software development, threat modeling, web, mobile, and API security, authentication, authorization, tenant isolation, OWASP risks, and DevSecOps practices • Hands-on experience with SAST, DAST, SCA, SBOM, secrets scanning, SIEM, EDR, DLP, WAF, CSPM, vulnerability scanning, penetration testing, and related security capabilities • Experience managing vulnerabilities, security findings, and incidents through risk assessment, containment or remediation, retesting, exception management, post-incident review, and executive reporting • Knowledge of SOC 2 Trust Services Criteria, NIST Cybersecurity Framework, CIS Controls, ISO 27001, and HITRUST • Ability to make risk-based decisions, balance security with product delivery, influence cross-functional stakeholders, and explain technical risks clearly • Relevant certifications such as CISSP, CCSP, CISM, CISA, CSSLP, OSCP, GIAC, HITRUST CCSFP, or Microsoft Azure Security Engineer are preferred • Experience with Entra ID, Defender, Sentinel, Azure DevOps, Snowflake, or Microsoft Fabric is preferred

🏖️ Avantages

• 10% bonus eligible • Remote work environment • Medical insurance • Dental insurance • Vision insurance • FSA • HSA • Life insurance • Pet insurance • 401(k) • Professional development and skills growth opportunities • Occasional travel up to 15%