Exeon Analytics’ Post

Job Opportunity Alert - Security Research! Curiosity is the catalyst that converts walks into path-finding missions. Are you a curious researcher who is looking for a chance to break into purple team research? Qualys is hiring security engineers for some of the most exciting products in spaces including (but not limited to) vulnerability research, threat detection & patch management. Tenets of this role: 1. Automation first 2. Deep research 3. Creative solutions 4. Edge case detection What's the work like? 0. Research new vulnerabilities ranging from RCE in webapps to overflows in windows drivers. 1. Develop Automated/Semi-automated playbooks for vulnerability detection and their remediation. 2. Conduct research to assess and create software patches and configuration changes to be applied to varied software, middleware and hardware. 3. Think ahead to avoid business outages based on the lab results. All these details are available on the job requisition page as well. If this job opportunity excites you then please, I implore you to do not just write "interested" in the comments section. Please provide some more context - maybe resume or maybe drop me a message or maybe write a bit more about how we can get in touch so we can take the conversation further. I cannot refer everyone. But I will try my best to spend some time with you and your resume to provide you best possible feedback based on my experience about how we can proceed further.

50+ applications received! I hope that hook got your attention. So, I received 50+ resumes after making this post and I think there are some common mistakes that caused me to filter out most applications. 1. Skill-set mismatch 2. Experience mismatch I understand that finding a candidate with exact match is difficult but I request you to go through the job description and try to come close to the requirements. Meet the JD somewhere in the middle. 3. Detailed personal information Please do NOT disclose your personal information like address, marital status, personal hobbies. I don’t want to be biased and no matter how much I consciously try, there will always be some level of subconscious bias in my mind. 4. Long Resumes Keep your resume short - 1 pager is perfect. 2 pager is acceptable. Don’t go beyond 2 pages please. 5. Project and Job description Explain your project by talking about WHAT you did, WHICH technology you used, and what was the IMPACT. Ex. 1. Built a console game using Unity game engine that attracted 1000 lifetime users and 100 monthly active users. 2. Created an CASE-UCO parsing library in Rust and published it via crates, has 1000+ downloads in a month. PS: I’m still hiring for my team for the same role. Please apply if you’re interested in security research.

We are #hiring, #ApplicationSecurityEngineer, A digital guardian, a protector of the unseen, skilled in the arcane arts of secure coding and cloud sorcery As a Senior Application Security Engineer, you'll be the first line of defense against cyber threats, wielding cutting-edge tools and techniques to protect our containerized applications on the cloud. Your Mission: Unmask the Dark Web: Conduct deep-dive security audits, uncovering hidden vulnerabilities in our applications. Forge a Secure Future: Collaborate with development teams to embed security into every line of code, creating a fortress of impenetrable software. Command the Arsenal: Master a vast array of security tools, from static and dynamic analysis to penetration testing, to thwart the most sophisticated attacks. Navigate the Cloud: Secure our applications in the ever-evolving cloud landscape and guarding against threats. Your Qualifications: A Keen Eye: A sharp mind and a passion for problem-solving. A Master of the Arcane: Deep knowledge of secure coding practices, cloud security, threat modeling, and DevSecOps. A Warrior's Arsenal: Proficiency in SAST and DAST tools, such as Fortify, Veracode, and Burp Suite. The Digital Battlefield: Knowledge of cloud platforms, container technologies, and programming languages. The Language of Strategy: Excellent communication skills to convey complex security concepts to diverse audiences. Let's revolutionize cybersecurity together. Connect to discuss more on the opportunity #cybersecurity #informationssecurity #applicationsecurity #cybersecurityjobs #cloudsecurity #devsecops #SAST #DAST #vulnerabilityassessment #penetrationtesting #threatmodeling #securecoding #career #jobs #SAST #DAST #cloudsecurity #threatmodeling

DVA is not associated with this job posting Senior Security Engineer, Security Research Germany https://lnkd.in/g7SQKs29 About the job There's no such thing as a "safe system" - only safer systems. Our Security team works to create and maintain the safest operating environment for Google's users and developers. As a Security Engineer, you help protect network boundaries, keep computer systems and network devices hardened against attacks and provide security services to protect highly sensitive data like passwords and customer information. Security Engineers work directly with network equipment and actively monitor our systems for attacks and intrusions. You also work with software engineers to proactively identify and fix security flaws and vulnerabilities. You use your industry experience to own and drive the resolution of complex security incidents, policy questions and technical security issues. We build tooling to scale security research, and create new methodologies for discovering high impact security vulnerabilities. We also use in-house exploit development to provide relevant and actionable guidance for long-term defenses and mitigations, and engage in non-technical work such as driving improvements to industry security processes and best practices. Responsibilities Conduct vulnerability research and exploit development. Create tools and infrastructure that enables the team to scale up our research efforts. Engage the wider defensive community by publishing results. Work with other security engineers on the analysis of, and response to vulnerabilities reported by other parties. #business #entrepreneurship #leadership #strategy #innovation #growth #success #management #marketing #sales #finance #productivity #networking #professionaldevelopment #career #teamwork #startup #smallbusiness #digitalmarketing #branding #customerexperience #technology #economy #investing #consulting #entrepreneurmindset #leadershipdevelopment #businessowner #worklifebalance #corporateculture

The US Department of Homeland Security (#DHS) is #hiring Software Engineers! The announcement (linked below) may look a little strange, because the government is still figuring out how to hire technical talent using industry best practices. So let's go over some things: * This is for multiple roles, not one. Qualified candidates would have "fit" interviews with potential organizations within DHS, you wouldn't be blindly assigned somewhere! * Because of the point above, although the posting says it is not remote, some of the organizations WILL allow remote work! * Yes, this is for the "Cybersecurity Service". But we believe that security begins with initial design of an IT system and includes software engineering. The posting says you need 5 years of "cybersecurity work experience", and good software engineering practice counts! So, take a look! Specifically READ THE QUALIFICATIONS. This is what we're looking for, and these are things you will be assessed on. And feel free to POST YOUR QUESTIONS HERE! I'm happy to answer them. https://lnkd.in/eSSrYQfs

Abdie Mohamed, thanks for your insights. As a new cybersecurity learner, this is good, foundational advice. Practice security. Do what you can to identify and act upon vulnerabilities that we see daily. #Cybersecurity #GoodPractices

Great morning folks. Here’s a mistake I made early on in my tech career. Years ago I was under the impression that only folks who had cybersecurity in their job title understood cybersecurity and did the security work. 🚨 WRONG 🚨 Just because someone doesn’t have “cybersecurity” in their job title doesn’t mean they don’t do cybersecurity work. Cybersecurity is more than a job title it’s a Practice. You practice cybersecurity. Developers, sys admins, IT Support, cloud engineers, systems engineers, network engineers and the list goes on. Don’t be like me and fall for this trap. Cybersecurity is a practice. A practice that individuals across the organization engage in. You’ll be blown away about how many professionals that don’t have the cybersecurity job title but truly understand how to practice security. #cybersecurity #engineering #riskmanagwment #technology #IT #practice

Hiring Security Researchers for orgs ranging from 50-1000+ employees Cloudsec, Appsec, all types of sec... Talk to me, I'm friendly :) If irrelevant, at least help me revive this dead meme and share

Infrastructure & CyberSecurity Engineer At World Vision ______ #opentowork #jobsearch #hireme #jobhunt #jobseekers #hiring #recruitment #jobsearching #remotework #resumehelp #coverlettertips #cvwritingservices #cvtips #jobs #Job #ikokazike #ikokazike

Using software engineers who aren’t up to par can lead to security nightmares and cost your business big time. We had a client who faced this exact issue. They had been relying on another firm for ages, only to find out during a security audit that their application was riddled with security holes and vulnerable to SQL injection attacks. When we stepped in, we swiftly fixed all these issues, and, as the client put it, we literally saved their business from ruin. Hire developers who know their stuff. It will save your business.