IT Security Engineer in New York

• Handle day-to-day implementation, monitoring and operational support of security hardware, software, customer applications, and managed solutions.
• Actively participate security team meetings that facilitate secure design.
• Engage in information security projects that evaluate existing security infrastructure and propose changes as defined by security leadership and architects. Additionally, deliver projects on time and within budget.
• Assist with incident response and system stability issues as they occur. This may include involvement outside of regular work hours, and responsiveness is expected.
• Implement solutions observing compliance – Health Information Portability and Accountability Act (HIPAA), Payment Card Industry (PCI), New York State Department of Financial Services Cybersecurity Requirements (23 NYCRR 500).
• Work in tandem with architects, the security operations center (SOC), incident responders (in cases of anomalous...

• Design, implement, and manage complex network architecture to meet requirements from various business units
• Support network and security infrastructure and controls, including, but not limited to Routers, Switches, SD-WAN, Firewalls, VPN, TACACS, netflow based tools, etc.
• Develop and implement disaster recovery plans for the network; assist in conducting periodic  internal and external audits to assess security/risk in the network
• Ensure network systems comply with relevant regulatory and compliance standards Participate in incident triage, analysis, response, and remediation for network outages, intrusions, attacks, and other incidents
• Assist in developing network-specific security policies, guidelines, standards, and procedures
• Implement automation scripts and tools to streamline repetitive network tasks
• Manage network services and configurations, recommending and implementing changes that will improve overall...

BLACKBIRD.AI protects organizations from narrative attacks created by deepfakes, misinformation and disinformation that cause financial and reputational harm. Our Constellation AI-driven Narrative Intelligence Platform – identifies key narratives that impact your organization/industry, the influence behind them, the networks they touch, the anomalous bot behavior that scales them, and the cohorts and communities that connect them. This information enables organizations to proactively understand narrative threats as they scale and become harmful for better strategic decision-making. A diverse team of AI experts, threat intelligence analysts, and national security professionals founded Blackbird.AI to defend information integrity and fight a new class of narrative threats. 

We are seeking a highly skilled Principal Application Security Engineer to join our team. Reporting directly to the CISO, you will play a critical role in securing our applications and infrastructure...

About the role

We're looking for an Engineer to lead our Security and Compliance efforts. Our infrastructure handles diverse workloads processing 1 billion API calls per day. Since we process sensitive location data collected from mobile devices the security and compliance of our infrastructure is paramount. We've invested a lot but there's always more to do to improve our security posture. This is an ideal role for someone who aspires to one day be a CISO.

The stack:

Our infrastructure runs on AWS, managed by Terraform.

We leverage AWS Security Hub for cloud monitoring, AWS Inspector for vulnerability monitoring, and AWS GuardDuty for intrusion detection and malware prevention.

Servers and employee endpoints are hardened leveraging CIS benchmarks and hardened images.

Snyk and Github Advanced Security monitor our codebase and libraries for vulnerabilities and patch them.

Our SIEM is AlienVault and our...

• Monitor and defend systems against unauthorized access, modification and destruction.
• Identify suspicious threats and activities
• Identify and spotlight vulnerabilities in networks, programs and applications.
• Correct problems and prevent security breaches.
• Design security elements to mitigate emerging threats
• Design, build, implement and support security systems
• Monitor network traffic for unusual activity
• Review, investigate and respond to real-time alerts within systems
• Monitor online security resources for new and emerging cyber threats
• Establish security requirements for networks and equipment
• Conduct monthly security audits and make policy recommendations
• Perform vulnerability and network scanning assessments
• Configure and support security tools such as Palo Alto firewalls, anti-virus software, patch management systems, etc.
• Contribute to and...