Virginia Tech | Compliance Advisory - 2027 Summer Internship

Coalfire

United States
Remote
Internship

Apply

Sep 13

View job

Cybersecurity GRC Evaluator - Expert

mercor

India
Remote
Contract

Apply

Sep 13

View job

Senior IT Project Manager - OT Security & Secure File Transfer in Pharma

Fusion Consulting

Hungary
Remote
Full-time

Apply

Sep 13

View job

Senior, DevSecOps Engineering (m/f/d)

Redcare Pharmacy

Germany
Remote
Full-time

Apply

Sep 13

View job

Senior Product Manager (XDR) - Security Solutions

Elastic

Canada
Remote
Full-time

Apply

Sep 13

View job

Backend Engineer, IAM

United States
Remote
Full-time

Apply

Sep 13

View job

Field Security Advisor

Veeam Software

United States
Remote
Full-time

Apply

Sep 13

View job

Junior Cloud Security Validation Engineer

Upwind Security

Ukraine
Remote
Full-time

Apply

Sep 13

View job

Senior Security Engineer - Sec Ops

Elsevier

United States
Remote
Full-time

Apply

Sep 13

View job

Red Team Security Engineer

Motive

Canada
Remote
Full-time

Apply

Sep 13

View job

Cybersecurity Assessor and Consultant

Motorola Solutions

United States
Remote
Full-time

Apply

Sep 13

View job

AI Security Manager

iFood

Brazil
Remote
Full-time

Apply

Sep 13

View job

Sr Cybersecurity Engineer

ReviveRX

United States
Remote
Full-time

Apply

Sep 13

View job

Senior Cloud Security Engineer (Remote Canada)

Smile Digital Health

Canada
Remote
Full-time

Apply

Sep 13

View job

Senior IT Project Manager - OT Security & Secure File Transfer in Pharma

Fusion Consulting

Poland
Remote
Full-time

Apply

Sep 13

View job

Information Security Analyst

EnableComp

United States
Remote
Full-time

Apply

Sep 13

View job

Security Research Engineer III

SpyCloud

United States
Remote
Full-time

Apply

Sep 13

View job

Senior IT Project Manager - OT Security & Secure File Transfer in Pharma

Fusion Consulting

Spain
Remote
Full-time

Apply

Sep 13

View job

Information Security Analyst I

AnewHealth

United States
Remote
Full-time

Apply

Sep 13

View job

Smart Contract Security Audit Intern (AI Audit)

Bybit

Hong Kong
Remote
Internship

Apply

Sep 13

View job

Senior Technical Product Manager, Privileged Access Management (PAM)

Keeper Security, Inc.

United States
Remote
Full-time

Apply

Sep 13

View job

Director, Security Research

Sysdig

United States
Remote
Full-time

Apply

Sep 13

View job

Risk Analyst

Pavago

Pakistan
Remote
Full-time

Apply

Sep 13

View job

Director, Risk

Alkami Technology, Inc.

United States
Remote
Full-time

Apply

Sep 13

View job

Security Program Manager

Lifelancer

United States
Remote
Full-time

Apply

Sep 13

View job

Government Compliance Technical Specialist

BeyondTrust

Canada
Remote
Full-time

Apply

Sep 13

View job

Senior Security Engineer

AgelessRx

United States
Remote
Full-time

Apply

Sep 13

View job

Technical Program Manager - Enterprise Security

Samsara

United States
Remote
Full-time

Apply

Sep 13

View job

Senior Security Engineer

The Mill Adventure

Malta
Remote
Full-time

Apply

Sep 13

View job

Backend Engineer, Security Platform

Vannevar Labs

United States
Remote
Full-time

Apply

Sep 13

Senior, DevSecOps Engineering (m/f/d)

Redcare Pharmacy

Senior, DevSecOps Engineering (m/f/d)

GermanyRemoteFull-time

Posted Sep 13

Apply

Job Description

About your tasks:

Build and maintain secure CI/CD pipelines (Azure DevOps or GitHub Actions): secrets hygiene, signed artifacts/SBOMs, SAST/DAST/container scanning, least-privilege service connections, and supply-chain hardening.
Automate security in infrastructure with Terraform: enforce guardrails using policy-as-code (Azure Policy, OPA/Conftest) and continuous IaC scanning (Checkov/tfsec).
Harden Kubernetes: implement RBAC, NetworkPolicies, Pod Security Standards, secret management, image signing/scanning, and admission policies (Gatekeeper/Kyverno).
Protect cloud identities & data: manage Entra ID roles/Managed Identities, Key Vault, Private Link/NSGs, encryption at rest/in transit, and just-in-time/least-privilege access.
Secure ML/MLOps: lock down Databricks (Unity Catalog permissions, secret scopes), MLflow/model registry, feature stores; add model artifact signing, provenance, and runtime isolation for training/serving.
Monitoring, logging & response: wire platform and security telemetry to Microsoft Sentinel/Defender, define alerts/runbooks, and support incident response and tabletop exercises.
CVE & vulnerability management: maintain and publish SBOMs; continuously scan for vulnerabilities; triage CVEs (e.g., CVSS scoring + exploitability context), coordinate mitigations/patches, track exposure windows and SLAs, verify remediation, and report metrics to SecOps/GRC.
Concepts & architecture: draft and maintain reference architectures, trust-boundary diagrams, data-classification schemes, environment isolation patterns, secure secret/key management patterns, and network segmentation for AI services.
Compliance & assurance: contribute to risk assessments and threat modeling (incl. AI-specific risks: prompt injection, data exfiltration, model theft), support DPIAs, vendor/third-party risk reviews, penetration tests, control testing, evidence collection, and audit readiness for ISO 27001, GDPR, and EU AI Act/NIS2 where applicable.
Governance: maintain security baselines and exceptions, own platform security KPIs, ensure retention policies, access reviews, and end-to-end audit trails (code → data → model → deployment).

About you:

Experience as a DevSecOps / Cloud Security Engineer (or DevOps with strong security focus) in Azure and Kubernetes environments.
Hands-on with Azure DevOps/GitHub Actions; comfortable automating guardrails and checks in pipelines.
Working knowledge of Azure security (Entra ID, Key Vault, Azure Policy, Defender for Cloud, Sentinel) and Kubernetes security.
Familiar with vulnerability management & CVEs (SBOM creation, dependency/container/IaC scanning, triage/prioritization, remediation workflows, SLA tracking).
Understanding of Data & AI/ML security: Databricks (Unity Catalog, SCIM/AAD), MLflow/model registry, secrets, data governance, and privacy-by-design.
Comfortable interfacing with central Security and compliance teams, contributing to audits and group standards, and translating requirements into practical controls.
A shift-left mindset: you collaborate across teams, codify controls, and enjoy solving real-world security challenges in cloud-based Data & AI platform.

About your benefits:

In order to provide our employees with the best possible support for their individual needs, we offer a wide range of benefits:

Work from Home: If your job does not require you to be present in the office, we can arrange the place you work from individually - even for up to 20 days a year anywhere in the EU.
Redcare events: We promote teambuilding through creative team events, and celebrate our successes together at regularly scheduled parties.
Kindergarten Grant: We offer our employees who pay for childcare in kindergarten 100,00 € (total) per month.
Mental Health: Get quick and professional help from psychologists if you feel overwhelmed in private or professional life. Anonymous and free of charge.
Personal Development: We are all constantly learning. That's why we support and foster your career development through internal & external training and help you grow.
Mobility: Your commute matters to us. We provide our employees with a fully costed Deutschland Ticket which can be used at any time.
Sports & Health: Your well-being is our top priority. Therefore, we offer you a range of opportunities to improve your health. Profit from a membership (M) package at Urban Sports Club, providing a variety of sports offers tailored to your interests.

About Redcare Pharmacy:

As Europe’s leading online pharmacy, Redcare Pharmacy is driven by our dedicated teams and cutting-edge innovation. We strive to create an enjoyable and collaborative working environment where every employee feels comfortable and is motivated to contribute to our vision: “Until every human has their health.” If you are looking for a meaningful career that aligns with your values, join our team and start your #Redcareer.

About the role:

You’ll secure our Azure & Kubernetes Data & AI platform end-to-end—baking security into CI/CD, infrastructure, data, and ML workloads. You’ll use Azure DevOps or GitHub Actions, Terraform for policy-as-code guardrails, and Azure services like Key Vault, Entra ID (AAD), and Data Lake with least-privilege access. You’ll also work with Azure Policy, Microsoft Defender for Cloud, Microsoft Sentinel, and Kubernetes security features (RBAC, NetworkPolicies, Pod Security Standards, admission controllers). Experience with ACR image scanning (e.g., Defender, Trivy), OPA/Gatekeeper or Kyverno, CodeQL/Dependabot, Checkov/tfsec, and Databricks security (Unity Catalog, SCIM/AAD) is a plus.

Originally posted on Himalayas

Job Description

About your tasks:

Build and maintain secure CI/CD pipelines (Azure DevOps or GitHub Actions): secrets hygiene, signed artifacts/SBOMs, SAST/DAST/container scanning, least-privilege service connections, and supply-chain hardening.
Automate security in infrastructure with Terraform: enforce guardrails using policy-as-code (Azure Policy, OPA/Conftest) and continuous IaC scanning (Checkov/tfsec).
Harden Kubernetes: implement RBAC, NetworkPolicies, Pod Security Standards, secret management, image signing/scanning, and admission policies (Gatekeeper/Kyverno).
Protect cloud identities & data: manage Entra ID roles/Managed Identities, Key Vault, Private Link/NSGs, encryption at rest/in transit, and just-in-time/least-privilege access.
Secure ML/MLOps: lock down Databricks (Unity Catalog permissions, secret scopes), MLflow/model registry, feature stores; add model artifact signing, provenance, and runtime isolation for training/serving.
Monitoring, logging & response: wire platform and security telemetry to Microsoft Sentinel/Defender, define alerts/runbooks, and support incident response and tabletop exercises.
CVE & vulnerability management: maintain and publish SBOMs; continuously scan for vulnerabilities; triage CVEs (e.g., CVSS scoring + exploitability context), coordinate mitigations/patches, track exposure windows and SLAs, verify remediation, and report metrics to SecOps/GRC.
Concepts & architecture: draft and maintain reference architectures, trust-boundary diagrams, data-classification schemes, environment isolation patterns, secure secret/key management patterns, and network segmentation for AI services.
Compliance & assurance: contribute to risk assessments and threat modeling (incl. AI-specific risks: prompt injection, data exfiltration, model theft), support DPIAs, vendor/third-party risk reviews, penetration tests, control testing, evidence collection, and audit readiness for ISO 27001, GDPR, and EU AI Act/NIS2 where applicable.
Governance: maintain security baselines and exceptions, own platform security KPIs, ensure retention policies, access reviews, and end-to-end audit trails (code → data → model → deployment).

About you:

Experience as a DevSecOps / Cloud Security Engineer (or DevOps with strong security focus) in Azure and Kubernetes environments.
Hands-on with Azure DevOps/GitHub Actions; comfortable automating guardrails and checks in pipelines.
Working knowledge of Azure security (Entra ID, Key Vault, Azure Policy, Defender for Cloud, Sentinel) and Kubernetes security.
Familiar with vulnerability management & CVEs (SBOM creation, dependency/container/IaC scanning, triage/prioritization, remediation workflows, SLA tracking).
Understanding of Data & AI/ML security: Databricks (Unity Catalog, SCIM/AAD), MLflow/model registry, secrets, data governance, and privacy-by-design.
Comfortable interfacing with central Security and compliance teams, contributing to audits and group standards, and translating requirements into practical controls.
A shift-left mindset: you collaborate across teams, codify controls, and enjoy solving real-world security challenges in cloud-based Data & AI platform.

About your benefits:

In order to provide our employees with the best possible support for their individual needs, we offer a wide range of benefits:

Work from Home: If your job does not require you to be present in the office, we can arrange the place you work from individually - even for up to 20 days a year anywhere in the EU.
Redcare events: We promote teambuilding through creative team events, and celebrate our successes together at regularly scheduled parties.
Kindergarten Grant: We offer our employees who pay for childcare in kindergarten 100,00 € (total) per month.
Mental Health: Get quick and professional help from psychologists if you feel overwhelmed in private or professional life. Anonymous and free of charge.
Personal Development: We are all constantly learning. That's why we support and foster your career development through internal & external training and help you grow.
Mobility: Your commute matters to us. We provide our employees with a fully costed Deutschland Ticket which can be used at any time.
Sports & Health: Your well-being is our top priority. Therefore, we offer you a range of opportunities to improve your health. Profit from a membership (M) package at Urban Sports Club, providing a variety of sports offers tailored to your interests.

About Redcare Pharmacy:

About the role:

Originally posted on Himalayas

Job Description

About your tasks:

Build and maintain secure CI/CD pipelines (Azure DevOps or GitHub Actions): secrets hygiene, signed artifacts/SBOMs, SAST/DAST/container scanning, least-privilege service connections, and supply-chain hardening.
Automate security in infrastructure with Terraform: enforce guardrails using policy-as-code (Azure Policy, OPA/Conftest) and continuous IaC scanning (Checkov/tfsec).
Harden Kubernetes: implement RBAC, NetworkPolicies, Pod Security Standards, secret management, image signing/scanning, and admission policies (Gatekeeper/Kyverno).
Protect cloud identities & data: manage Entra ID roles/Managed Identities, Key Vault, Private Link/NSGs, encryption at rest/in transit, and just-in-time/least-privilege access.
Secure ML/MLOps: lock down Databricks (Unity Catalog permissions, secret scopes), MLflow/model registry, feature stores; add model artifact signing, provenance, and runtime isolation for training/serving.
Monitoring, logging & response: wire platform and security telemetry to Microsoft Sentinel/Defender, define alerts/runbooks, and support incident response and tabletop exercises.
CVE & vulnerability management: maintain and publish SBOMs; continuously scan for vulnerabilities; triage CVEs (e.g., CVSS scoring + exploitability context), coordinate mitigations/patches, track exposure windows and SLAs, verify remediation, and report metrics to SecOps/GRC.
Concepts & architecture: draft and maintain reference architectures, trust-boundary diagrams, data-classification schemes, environment isolation patterns, secure secret/key management patterns, and network segmentation for AI services.
Compliance & assurance: contribute to risk assessments and threat modeling (incl. AI-specific risks: prompt injection, data exfiltration, model theft), support DPIAs, vendor/third-party risk reviews, penetration tests, control testing, evidence collection, and audit readiness for ISO 27001, GDPR, and EU AI Act/NIS2 where applicable.
Governance: maintain security baselines and exceptions, own platform security KPIs, ensure retention policies, access reviews, and end-to-end audit trails (code → data → model → deployment).

About you:

Experience as a DevSecOps / Cloud Security Engineer (or DevOps with strong security focus) in Azure and Kubernetes environments.
Hands-on with Azure DevOps/GitHub Actions; comfortable automating guardrails and checks in pipelines.
Working knowledge of Azure security (Entra ID, Key Vault, Azure Policy, Defender for Cloud, Sentinel) and Kubernetes security.
Familiar with vulnerability management & CVEs (SBOM creation, dependency/container/IaC scanning, triage/prioritization, remediation workflows, SLA tracking).
Understanding of Data & AI/ML security: Databricks (Unity Catalog, SCIM/AAD), MLflow/model registry, secrets, data governance, and privacy-by-design.
Comfortable interfacing with central Security and compliance teams, contributing to audits and group standards, and translating requirements into practical controls.
A shift-left mindset: you collaborate across teams, codify controls, and enjoy solving real-world security challenges in cloud-based Data & AI platform.

About your benefits:

In order to provide our employees with the best possible support for their individual needs, we offer a wide range of benefits:

Work from Home: If your job does not require you to be present in the office, we can arrange the place you work from individually - even for up to 20 days a year anywhere in the EU.
Redcare events: We promote teambuilding through creative team events, and celebrate our successes together at regularly scheduled parties.
Kindergarten Grant: We offer our employees who pay for childcare in kindergarten 100,00 € (total) per month.
Mental Health: Get quick and professional help from psychologists if you feel overwhelmed in private or professional life. Anonymous and free of charge.
Personal Development: We are all constantly learning. That's why we support and foster your career development through internal & external training and help you grow.
Mobility: Your commute matters to us. We provide our employees with a fully costed Deutschland Ticket which can be used at any time.
Sports & Health: Your well-being is our top priority. Therefore, we offer you a range of opportunities to improve your health. Profit from a membership (M) package at Urban Sports Club, providing a variety of sports offers tailored to your interests.

About Redcare Pharmacy:

About the role:

Originally posted on Himalayas

Job Description

About your tasks:

Build and maintain secure CI/CD pipelines (Azure DevOps or GitHub Actions): secrets hygiene, signed artifacts/SBOMs, SAST/DAST/container scanning, least-privilege service connections, and supply-chain hardening.
Automate security in infrastructure with Terraform: enforce guardrails using policy-as-code (Azure Policy, OPA/Conftest) and continuous IaC scanning (Checkov/tfsec).
Harden Kubernetes: implement RBAC, NetworkPolicies, Pod Security Standards, secret management, image signing/scanning, and admission policies (Gatekeeper/Kyverno).
Protect cloud identities & data: manage Entra ID roles/Managed Identities, Key Vault, Private Link/NSGs, encryption at rest/in transit, and just-in-time/least-privilege access.
Secure ML/MLOps: lock down Databricks (Unity Catalog permissions, secret scopes), MLflow/model registry, feature stores; add model artifact signing, provenance, and runtime isolation for training/serving.
Monitoring, logging & response: wire platform and security telemetry to Microsoft Sentinel/Defender, define alerts/runbooks, and support incident response and tabletop exercises.
CVE & vulnerability management: maintain and publish SBOMs; continuously scan for vulnerabilities; triage CVEs (e.g., CVSS scoring + exploitability context), coordinate mitigations/patches, track exposure windows and SLAs, verify remediation, and report metrics to SecOps/GRC.
Concepts & architecture: draft and maintain reference architectures, trust-boundary diagrams, data-classification schemes, environment isolation patterns, secure secret/key management patterns, and network segmentation for AI services.
Compliance & assurance: contribute to risk assessments and threat modeling (incl. AI-specific risks: prompt injection, data exfiltration, model theft), support DPIAs, vendor/third-party risk reviews, penetration tests, control testing, evidence collection, and audit readiness for ISO 27001, GDPR, and EU AI Act/NIS2 where applicable.
Governance: maintain security baselines and exceptions, own platform security KPIs, ensure retention policies, access reviews, and end-to-end audit trails (code → data → model → deployment).

About you:

Experience as a DevSecOps / Cloud Security Engineer (or DevOps with strong security focus) in Azure and Kubernetes environments.
Hands-on with Azure DevOps/GitHub Actions; comfortable automating guardrails and checks in pipelines.
Working knowledge of Azure security (Entra ID, Key Vault, Azure Policy, Defender for Cloud, Sentinel) and Kubernetes security.
Familiar with vulnerability management & CVEs (SBOM creation, dependency/container/IaC scanning, triage/prioritization, remediation workflows, SLA tracking).
Understanding of Data & AI/ML security: Databricks (Unity Catalog, SCIM/AAD), MLflow/model registry, secrets, data governance, and privacy-by-design.
Comfortable interfacing with central Security and compliance teams, contributing to audits and group standards, and translating requirements into practical controls.
A shift-left mindset: you collaborate across teams, codify controls, and enjoy solving real-world security challenges in cloud-based Data & AI platform.

About your benefits:

In order to provide our employees with the best possible support for their individual needs, we offer a wide range of benefits:

Work from Home: If your job does not require you to be present in the office, we can arrange the place you work from individually - even for up to 20 days a year anywhere in the EU.
Redcare events: We promote teambuilding through creative team events, and celebrate our successes together at regularly scheduled parties.
Kindergarten Grant: We offer our employees who pay for childcare in kindergarten 100,00 € (total) per month.
Mental Health: Get quick and professional help from psychologists if you feel overwhelmed in private or professional life. Anonymous and free of charge.
Personal Development: We are all constantly learning. That's why we support and foster your career development through internal & external training and help you grow.
Mobility: Your commute matters to us. We provide our employees with a fully costed Deutschland Ticket which can be used at any time.
Sports & Health: Your well-being is our top priority. Therefore, we offer you a range of opportunities to improve your health. Profit from a membership (M) package at Urban Sports Club, providing a variety of sports offers tailored to your interests.

About Redcare Pharmacy:

About the role:

Originally posted on Himalayas