JUARA IT SOLUTIONS

Role Description We are looking for an experienced Application Security Engineer to join our cybersecurity team. The ideal candidate will be responsible for securing web applications and APIs by integrating security throughout the Software Development Life Cycle (SDLC). This role involves: - Implementing security tools - Identifying and validating vulnerabilities - Supporting remediation efforts - Collaborating with development teams to build secure applications Qualifications - Bachelor's degree in Computer Science, Information Security, or a related field - 7+ years of experience in Application Security or Cybersecurity - Hands-on experience with SAST, DAST, and vulnerability assessment tools - Strong knowledge of OWASP Top 10, API Security, and secure coding practices - Experience integrating security tools into CI/CD environments such as Jenkins, GitHub Actions, or GitLab - Familiarity with scripting languages such as Python, Bash, or PowerShell - Excellent analytical, troubleshooting, and communication skills Requirements - Implement and maintain security controls for web and API applications - Integrate security practices into the Secure SDLC, including threat modeling and security design reviews - Ensure compliance with organizational security policies and industry best practices - Manage and administer vulnerability scanning tools such as Tenable or equivalent solutions - Configure, optimize, and maintain scanning policies and schedules - Improve scan accuracy by reducing false positives and fine-tuning security tools - Deploy and manage Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) solutions - Integrate security testing into CI/CD pipelines - Work closely with development teams to ensure effective security testing and reporting - Identify, validate, and assess application vulnerabilities through automated and manual testing - Perform risk assessments and prioritize vulnerabilities based on business impact - Track remediation activities and ensure timely closure of security findings - Conduct manual and automated security assessments of web applications and APIs - Validate reported vulnerabilities and verify remediation after fixes are implemented - Document findings, attack scenarios, and remediation recommendations - Perform manual verification of vulnerabilities using penetration testing techniques - Develop proof-of-concept demonstrations when required - Support security assessments and red team activities Preferred Qualifications - Experience in threat modeling and secure architecture reviews - Hands-on exposure to penetration testing or red team activities - Industry certifications such as OSCP, CEH, GWAPT, CSSLP, or equivalent are preferred

Role Description We are seeking a skilled Cloud Security Engineer to strengthen the security of our multi-cloud infrastructure. The ideal candidate will be responsible for: - Cloud security operations - Security monitoring - Incident response - Configuration reviews - Automation - Implementing security best practices across cloud platforms, endpoints, email systems, and AI-enabled workloads This role requires hands-on experience with cloud security technologies, identity management, SIEM, CSPM, automation, and cloud-native security services. Qualifications - Bachelor's degree in Computer Science, Cybersecurity, Information Security, or a related field - 5–8 years of experience in Cloud Security, Security Operations, or Cloud Infrastructure Security - Hands-on experience securing AWS, Microsoft Azure, Google Cloud Platform (GCP), or Oracle Cloud Infrastructure (OCI) - Strong understanding of Identity & Access Management (IAM), cloud networking, and cloud-native security services - Experience with Cloud Security Posture Management (CSPM) tools and Endpoint Detection & Response (EDR) platforms such as CrowdStrike - Experience working with SIEM platforms and incident response processes - Knowledge of identity-aware access solutions such as Teleport or similar secure access platforms - Proficiency in Python scripting - Understanding of AI/ML workload security, API security, and cloud data protection Requirements - Monitor, analyze, and respond to security events across AWS, Azure, GCP, or OCI environments - Investigate cloud security alerts and perform threat analysis - Support continuous monitoring and improvement of the organization's cloud security posture - Analyze security findings related to cloud infrastructure, endpoints, email security, and monitoring platforms - Document risk assessments, severity classifications, business impact, and remediation recommendations - Maintain accurate security findings within ticketing systems and reporting platforms - Triage, investigate, and classify security alerts from cloud security and monitoring tools - Maintain detailed investigation records, including analysis performed, mitigation actions, escalations, and final resolution - Assist in security incident investigations, root cause analysis, and post-incident reporting - Conduct secure configuration assessments across cloud environments - Review IAM configurations and evaluate Cloud Security Posture Management (CSPM) findings - Recommend improvements to strengthen cloud security controls and compliance - Secure AI/ML workloads deployed in cloud environments, including training pipelines, inference services, and data storage - Monitor AI services and third-party AI APIs for misuse, anomalies, and unauthorized access - Collaborate with engineering teams to implement secure AI deployment practices - Support governance and policy development for responsible AI adoption - Design, develop, and maintain security automation workflows and scripts - Develop automation using Python and Infrastructure as Code (IaC) tools such as Terraform - Document automation processes to support operational teams - Prepare operational reports covering security alert trends, remediation progress, cloud security posture improvements, and tool optimization and tuning - Present security status updates and findings to internal stakeholders Company Description

Role Description We are seeking an experienced Corporate Security Architect to lead security assessments for third-party vendors and enterprise technologies. This role is responsible for strengthening the organization's security posture by conducting Third-Party Risk Assessments (TPRA), evaluating SaaS applications, cloud services, and enterprise platforms, and providing risk-based recommendations to support secure business operations. The ideal candidate will collaborate with Procurement, Legal, IT, Privacy, Compliance, and business teams to assess security risks, review vendor security controls, and ensure compliance with organizational security standards and governance frameworks. Key Responsibilities - Third-Party Risk Assessments (TPRA) - Conduct comprehensive security assessments of third-party vendors, suppliers, and service providers. - Review vendor security documentation, including SOC 2 reports, ISO 27001 certifications, penetration testing reports, security questionnaires, and architecture documents. - Evaluate security controls related to identity and access management, data protection, infrastructure security, business continuity, and incident response. - Document assessment findings, risk ratings, remediation recommendations, and approval decisions. - Corporate Technology Security Reviews - Perform security assessments of SaaS applications, enterprise platforms, cloud services, and corporate technologies. - Evaluate authentication, authorization, encryption, integrations, logging, monitoring, and overall security posture. - Assess emerging technologies, including AI-enabled solutions, for security risks and compliance. - Provide risk-based recommendations to support secure technology adoption. - Assessment Operations & Stakeholder Management - Execute security assessments in accordance with established policies, standards, and governance processes. - Maintain complete assessment documentation, supporting evidence, findings, and recommendations. - Track remediation activities and monitor assessment progress through completion. - Partner with Procurement, Legal, IT, Privacy, Compliance, and business stakeholders throughout the assessment lifecycle. - Escalate critical security risks through appropriate governance channels. - Reporting & Operational Metrics - Prepare reports covering assessment volumes, turnaround time, risk trends, remediation status, and overall program performance. - Develop stakeholder-ready summaries and support internal and external audit requirements. - Contribute to continuous improvement initiatives by identifying opportunities for process optimization and assessment automation. Key Deliverables - Completed Third-Party Risk Assessment (TPRA) reports. - Security assessment reports for SaaS applications, cloud services, and enterprise technologies. - Risk findings with severity ratings and remediation recommendations. - Assessment documentation, supporting evidence, and approval recommendations. - Remediation tracking and validation reports. - Monthly operational dashboards and assessment metrics. - Executive-ready reports and stakeholder presentations. - Recommendations for improving assessment processes and program scalability. Qualifications - Bachelor's degree in Cybersecurity, Information Security, Computer Science, or a related discipline. - 8+ years of experience in Information Security, Security Architecture, Risk Management, or Corporate Security. - Hands-on experience managing or supporting Third-Party Risk Management (TPRM/TPRA) programs. - Experience conducting security assessments for SaaS platforms, cloud services, and enterprise applications. - Strong knowledge of security frameworks and standards, including NIST CSF, ISO 27001, SOC 2, CIS Controls, cloud security, and Identity & Access Management (IAM). - Experience reviewing vendor security documentation and performing risk-based security assessments. - Excellent analytical, documentation, communication, and stakeholder management skills. Preferred Qualifications - Experience supporting enterprise SaaS environments and cloud-based technologies. - Hands-on experience with Governance, Risk & Compliance (GRC) platforms and vendor risk management tools. - Experience developing security dashboards, metrics, and operational reporting. - Professional certifications such as CISSP, CISM, CRISC, CCSP, or CISA are preferred. - Experience evaluating AI-enabled technologies and defining security requirements for AI adoption.

Role Description We are looking for an experienced Security & Endpoint Engineer to strengthen enterprise endpoint security across macOS, Windows, and Linux environments. The ideal candidate will play a key role in implementing endpoint security controls, browser security governance, privileged access management (PAM), device hardening, and Zero Trust initiatives. The successful candidate will collaborate closely with Security, Infrastructure, Identity, and Endpoint Engineering teams to deploy security solutions, enhance endpoint visibility, automate security operations, and improve the organization's overall security posture. Key Responsibilities - Browser & Endpoint Security - Evaluate and implement enterprise browser security solutions. - Assess browser extensions, developer plugins, and AI-enabled browser tools for security and compliance risks. - Define governance policies, approval workflows, and allowlisting processes for browser extensions. - Implement monitoring, reporting, and enforcement controls to prevent unauthorized extension usage and reduce client-side security risks. - Develop operational documentation, processes, and support models for ongoing management. - Endpoint Security & Hardening - Support enterprise endpoint security initiatives across macOS, Windows, and Linux platforms. - Implement endpoint hardening standards and security best practices. - Assist with vulnerability remediation, device compliance, and security policy enforcement. - Support Zero Trust and device trust initiatives. - Work closely with endpoint engineering teams to balance security with user productivity. - Privileged Access Management (PAM) - Support the implementation and administration of Privileged Access Management solutions such as Delinea, CyberArk, or similar platforms. - Assist with privileged account governance, access reviews, and least-privilege initiatives. - Partner with Identity and Security teams to strengthen administrative access controls. - Security Operations & Compliance - Participate in security assessments, compliance initiatives, and internal audits. - Create and maintain technical documentation, implementation guides, and operational runbooks. - Track remediation activities, security exceptions, and operational metrics. - Support audit readiness and evidence collection activities. - Security Automation & Tooling - Develop automation scripts using Python, PowerShell, Bash, or similar scripting languages. - Integrate security tools with enterprise platforms and operational workflows. - Build dashboards and reporting capabilities to improve visibility and operational efficiency. - Cross-Functional Collaboration - Work closely with Security, Infrastructure, Identity, and Endpoint Engineering teams. - Participate in vendor evaluations, proof-of-concept (POC) activities, and solution deployments. - Present technical recommendations, implementation progress, and project updates to stakeholders. Qualifications - Bachelor's degree in Computer Science, Cybersecurity, Information Security, or a related field. - 5–8 years of experience in Security Engineering, Endpoint Engineering, Systems Engineering, or a related domain. - Strong knowledge of enterprise endpoint security principles and device management. - Hands-on experience supporting macOS and Windows environments at scale. - Experience with browser security, extension governance, and endpoint security technologies. - Experience with endpoint management platforms such as Jamf, Microsoft Intune, FleetDM, or equivalent tools. - Good understanding of Zero Trust architecture and least-privilege access models. - Strong scripting skills using Python, PowerShell, Bash, or similar technologies. - Excellent analytical, troubleshooting, and communication skills. Preferred Qualifications - Experience with browser extension security platforms such as KOI Security, LayerX, SQRX, or similar solutions. - Hands-on experience with Privileged Access Management (PAM) platforms such as Delinea, CyberArk, or BeyondTrust. - Experience with endpoint security platforms including CrowdStrike, Microsoft Defender, or SentinelOne. - Familiarity with enterprise security technologies such as Okta, Zscaler, and Microsoft Security solutions. - Knowledge of security frameworks including SOC 2, ISO 27001, and NIST. - Understanding of AI security risks, browser-based AI tools, and governance controls. Key Success Measures - Successfully evaluate and implement enterprise browser extension security controls. - Improve visibility and governance of browser extension usage across the organization. - Implement effective allowlisting, monitoring, and enforcement processes. - Contribute to endpoint security, device hardening, and Privileged Access Management initiatives. - Deliver comprehensive documentation, operational procedures, and automation to support ongoing security operations.