Serve as the dedicated ISSO across a multi-system portfolio, managing ongoing Continuous Monitoring (ConMon), assessment preparation, and full Assessment and Authorization (A&A) lifecycles to achieve and maintain Authorities to Operate (ATO).
Locations (2)
Washington, District of Columbia, United States
Greenbelt, Maryland, United States
Compensation
We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law. The salary offered will depend on several factors including, but not limited to, relevant experience, skills, education, geographic location, internal equity, business needs, and other factors permitted by law. Posted pay ranges are a general guideline only and are not a guarantee of compensation or salary.
Responsibilities
Serve as the dedicated ISSO across a multi-system portfolio, managing ongoing Continuous Monitoring (ConMon), assessment preparation, and full Assessment and Authorization (A&A) lifecycles to achieve and maintain Authorities to Operate (ATO).
Develop, update, and maintain comprehensive System Security Plans (SSPs), Risk Assessment Reports (RAR), Contingency Plans, PIA/PTAs, system architecture/network diagrams, and supporting authorization artifacts within RISCS.
The role focuses on strengthening the security posture across the organization by running and tuning core security tooling, prioritizing vulnerability remediation, and providing hands-on support for monitoring and incident response.
Responsibilities
Investigate, analyze, respond to, and recover from cybersecurity incidents, events, and threats following the incident response lifecycle.
Configure and maintain the enterprise vulnerability management platform, covering scan coverage, credentialed scans, and reporting.
Analyze and prioritize vulnerabilities based on risk, exploitability, and business context, and set the remediation queue.
Work with IT and engineering teams to identify remediation options or compensating workarounds, track remediation through to closure, and advise teams on preventative measures.
Engineer security solutions that reduce risk and strengthen the organization's security posture.
Requirements
Bachelor's degree in Cybersecurity, MIS, Computer Science, or a related field
Lead threat detection, investigation, and response for Microsoft’s global security operations.
Compensation
The typical base pay range for this role across the U.S. is USD $102,100 - $202,200 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $133,800 - $219,200 per year.
Responsibilities
Proactively identify and respond to sophisticated threats
Perform deep-dive investigations into complex security events
Partner with threat intelligence, detection engineering, product teams, and researchers
Identify gaps in existing detections and workflows
Leverage data, analytics, and security telemetry to prioritize work
Requirements
Master's Degree in Statistics, Mathematics, Computer Science, or related field
Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field
Support the development and implementation of Generative AI solutions on Google Cloud within the Public Cloud platform.
Locations (2)
Hamburg, Hamburg, Germany
Dortmund, North Rhine-Westphalia, Germany
Responsibilities
Support inter-disciplinary team in developing new solutions based on LLMs using Google Cloud, Vertex AI, Gemini Enterprise, Python microservices, Cloud Run, Cloud Build, Terraform
Establish standardized processes and methods for Generative AI and cloud security concepts
Assist in developing architecture guidelines and managing projects with modern architecture standards in Public Cloud
Consider data protection, legal and ethical aspects of ML model applications
Engage with technical product owners to promote cloud migration
Requirements
Bachelor's in Computer Science or equivalent IT qualification
Nice to have: Generative AI application development
S
Public Cloud Engineer (m/w/d) Generative AI befristet bis 31.01.2028
Governance Engineer focused on automating and optimizing manual governance and vulnerability management processes using AI, cloud, and orchestration frameworks.
Responsibilities
Identify opportunities to automate and optimize manual engineering, operational, governance, compliance, and business processes.
Design and build AI-powered workflows using Agentic AI, Azure OpenAI, orchestration frameworks, and enterprise automation technologies.
Implement observability, monitoring, evaluation, performance measurement, and operational controls for governance solutions.
Support teams across CRD/Alpha/State Street with governance tasks, including vulnerability management, lifecycle management, configuration management, and patch management.
Requirements
Masters degree in a technical, engineering, software development, information systems, data science, or analytical field, or equivalent experience.
Manage and track Plans of Action and Milestones (POA&Ms) and Risk-Based Decisions (RBDs) through remediation and closure.
Evaluate vulnerability scan results, identify technical security weaknesses, and coordinate remediation and mitigation actions with engineering, SOC, and systems administration teams.
Coordinate and conduct annual security control assessments, self-assessments, gap analyses, and contingency plan testing/training.
Requirements
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field (or equivalent professional experience).
Nice to have: NASA cybersecurity policies
Nice to have: NASA Space Communications and Navigation (SCaN) operations