About the Team At DoorDash we’re building the industry’s most scalable and reliable delivery network to support our three-sided marketplace of consumers, merchants, and Dashers. Security is paramount to the success of our business, and DoorDash Security aspires to be the world’s best security team. We are committed to protecting our people, partners, customers, and technologies with robust safeguards and unwavering vigilance. About the Role The Senior Security Engineer, Red Team will be responsible for conducting threat intelligence-informed adversary emulations to simulate real-world cyber attacks and proactively identify security improvement opportunities in the DoorDash environment. This role will work closely with cross-functional teams across the company and assess the security posture of DoorDash’s critical assets and products. This role operates with the necessary freedom and accountability to complete full-scope Red Team operations against any valuable objectives in the company, providing a crucial feedback loop for all efforts in upholding customer trust. You’re excited about this opportunity because you will… - Plan and execute realistic adversary simulations using curated threat intelligence to assess security opportunities, and detection and response capabilities - Hunt for vulnerabilities across AI systems, payment infrastructure, autonomous delivery hardware, and emerging technologies before adversaries do - Exercise range of expertise to include cyber, insider, and fraud Red Team testing scenarios. - Build custom tools, exploits, and payloads tailored to DoorDash's unique and evolving tech stack - Partner with Blue Teams to escalate emerging threats and develop proactive detection or defensive strategies - Advise leadership on emerging threats and shape the security strategy for one of the world's most complex logistics platforms We’re excited about you because… - 5+ years of experience in Red Teaming and Purple Teaming - You are passionate about offensive security and care about improving your craft every day - You think like an adversary. You have deep, experiential knowledge of APT and insider threat TTPs, not just theoretical familiarity - Experience partnering with cross-functional teams to secure diverse environments, providing feedback loops that articulate business risks and generate actionable intelligence - You've run full-scope operations across multi-platform and cloud environments, and you know how to build the malware and tooling to support them - Strong knowledge of one of Python, Golang, Rust, Kotlin, Java, or Powershell - Experience using and developing tooling, methodologies and scalable infrastructure to support red team engagements capabilities (e.g. command and control frameworks, phishing environment, exploits) - Experience with Command and Control (C2) frameworks - Experience with Defense Evasion to bypass security tooling (e.g. Endpoint Detection and Response) - Excellent understanding of information security operations related frameworks and standards (e.g., MITRE Att&ck) - Experience providing technical leadership and guidance, and thinking strategically and analytically to solve problems - Excellent communication, presentation, and stakeholder management skills - Engages with a people-first approach, is able to facilitate a conversation rather than dictate it, and is empathetic to divergent viewpoints We expect this position to be filled by 5/19/25. Compensation The successful candidate’s starting pay will fall within the pay range listed below and is determined based on job-related factors including, but not limited to, skills, experience, qualifications, work location, and market conditions. Base salary is localized according to an employee’s work location. Ranges are market-dependent and may be modified in the future. In addition to base salary, the compensation for this role includes opportunities for equity grants. Talk to your recruiter for more information. DoorDash cares about you and your overall well-being. That’s why we offer a comprehensive benefits package to all regular employees, which includes a 401(k) plan with employer matching, 16 weeks of paid parental leave, wellness benefits, commuter benefits match, paid time off and paid sick leave in compliance with applicable laws (e.g. Colorado Healthy Families and Workplaces Act). DoorDash also offers medical, dental, and vision benefits, 11 paid holidays, disability and basic life insurance, family-forming assistance, and a mental health program, among others. To learn more about our benefits, visit our careers page here. See below for paid time off details: - For salaried roles: flexible paid time off/vacation, plus 80 hours of paid sick time per year. - For hourly roles: vacation accrued at about 1 hour for every 25.97 hours worked (e.g. about 6.7 hours/month if working 40 hours/week; about 3.4 hours/month if working 20 hours/week), and paid sick time accrued at 1 hour for every 30 hours worked (e.g. about 5.8 hours/month if working 40 hours/week; about 2.9 hours/month if working 20 hours/week). The national base pay range for this position within the United States, including Illinois and Colorado. $159,800—$235,000 USD About DoorDash At DoorDash, our mission to empower local economies shapes how our team members move quickly, learn, and reiterate in order to make impactful decisions that display empathy for our range of users—from Dashers to merchant partners to consumers. We are a technology and logistics company that started by enabling door-to-door delivery, and we are looking for team members who can help us go from a company that is known as the place you order food to a company that people turn to for any and all goods. DoorDash is growing rapidly and changing constantly, which gives our team members the opportunity to share their unique perspectives, solve new challenges, and own their careers. We're committed to supporting employees’ happiness, healthiness, and overall well-being by providing comprehensive benefits and perks including premium healthcare, wellness expense reimbursement, paid parental leave and more. Our Commitment to Diversity and Inclusion We’re committed to growing and empowering a more inclusive community within our company, industry, and cities. That’s why we hire and cultivate diverse teams of people from all backgrounds, experiences, and perspectives. We believe that true innovation happens when everyone has room at the table and the tools, resources, and opportunity to excel. Statement of Non-Discrimination: In keeping with our beliefs and goals, no employee or applicant will face discrimination or harassment based on: race, color, ancestry, national origin, religion, age, gender, marital/domestic partner status, sexual orientation, gender identity or expression, disability status, or veteran status. Above and beyond discrimination and harassment based on “protected categories,” we also strive to prevent other subtler forms of inappropriate behavior (i.e., stereotyping) from ever gaining a foothold in our office. Whether blatant or hidden, barriers to success have no place at DoorDash. We value a diverse workforce – people who identify as women, non-binary or gender non-conforming, LGBTQIA+, American Indian or Native Alaskan, Black or African American, Hispanic or Latinx, Native Hawaiian or Other Pacific Islander, differently-abled, caretakers and parents, and veterans are strongly encouraged to apply. Thank you to the Level Playing Field Institute for this statement of non-discrimination. Pursuant to the San Francisco Fair Chance Ordinance, Los Angeles Fair Chance Initiative for Hiring Ordinance, and any other state or local hiring regulations, we will consider for employment any qualified applicant, including those with arrest and conviction records, in a manner consistent with the applicable regulation. If you need any accommodations, please inform your recruiting contact upon initial connection.

WHO WE ARE Zeta Global (NYSE: ZETA) is the AI-Powered Marketing Cloud that leverages advanced artificial intelligence (AI) and trillions of consumer signals to make it easier for marketers to acquire, grow, and retain customers more efficiently. Through the Zeta Marketing Platform (ZMP), our vision is to make sophisticated marketing simple by unifying identity, intelligence, and omnichannel activation into a single platform – powered by one of the industry’s largest proprietary databases and AI. Our enterprise customers across multiple verticals are empowered to personalize experiences with consumers at an individual level across every channel, delivering better results for marketing programs. Zeta was founded in 2007 by David A. Steinberg and John Sculley and is headquartered in New York City with offices around the world. To learn more, go to www.zetaglobal.com. About the Role We’re looking for a highly skilled Staff Application Security Engineer to lead our application and platform security initiatives. You’ll be responsible for embedding security into every stage of the development lifecycle, from threat modeling through deployment, ensuring secure-by-design practices are consistently applied. Zeta operates at significant scale, supporting billions of consumer profiles and petabytes of data across real-time, AI-powered marketing platforms. In this role, you'll help safeguard our high-performance systems by driving best practices, evaluating emerging threats, and enabling cross-functional teams to build secure, reliable applications. This is a high-impact position with visibility across engineering, product, and executive leadership. Key Responsibilities Threat Modeling & Security Validation • Lead threat modeling and security architecture reviews for distributed, event- driven systems. • Integrate security code reviews, SAST/DAST, Software Composition Analysis (SCA), and container scanning into CI/CD and AI/ML pipelines. • Coordinate and lead incident simulations specific to AI systems; oversee red/blue team exercises to validate defensive posture. • Conduct security reviews of third-party vendors and tools to ensure alignment with enterprise security standards. Embedding Security into the SDLC • Collaborate with engineers and product teams to build secure features without impeding innovation. • Establish and lead security checkpoints across the software development lifecycle. • Review system designs, architecture, and data flow diagrams to identify and mitigate risks early. • Collaborate with key stakeholders to drive informed Go/No-Go security decisions for all major production deployments. Emerging Threat Monitoring & Proactive Defense • Stay on the forefront of security innovations, including OWASP, cloud-native, and API security practices. • Monitor modern threat vectors like LLM jailbreaks, prompt injection, and data poisoning. • Recommend and implement forward-looking controls to safeguard AI models and data platforms.Security Awareness & Policy Implementation • Evangelize secure coding and AI security through training, brown bag sessions, and workshops. • Develop and roll out internal security policies, standards, and best practices. • Raise awareness of security threats through documentation and hands-on engagement. • Foster a security-first culture across engineering, product, and data teams. What You Need to Succeed • Bachelor’s degree in Computer Science, Cybersecurity, or a related field, or equivalent experience. • 5+ years of experience in Application Security, DevSecOps, or secure software development. • In-depth understanding of OWASP Top 10, SANS CWE Top 25, MITRE ATT&CK for ML, and adversarial threat modeling. • Experience securing modern frameworks and architectures (e.g., React, Node.js, Django, FastAPI). • Familiarity with AI/ML attack vectors including model inversion, adversarial examples, and training pipeline integrity. • Strong foundation in OAuth2, OpenID Connect, JWT, and securing APIs and microservices. • Experience with cloud-native security (e.g., AWS, GCP, Azure) and container technologies (e.g., Docker, Kubernetes). • Strong communication and stakeholder management skills. Nice to Have • Hands-on with tools like Semgrep, Veracode, Checkmarx, SonarQube, Burp Suite, Zap, Trivy, Brakeman, or LangSec. • Certifications such as OSCP, CSSLP, GWAPT, or ML-specific certs (e.g., MITRE ATT&CK Defender for ML). BENEFITS & PERKS - Unlimited PTO - Excellent medical, dental, and vision coverage - Employee Equity - Employee Discounts, Virtual Wellness Classes, and Pet Insurance And more!! SALARY RANGE The salary range for this role is $160,000 - $200,000, depending on location and experience. PEOPLE & CULTURE AT ZETA Zeta considers applicants for employment without regard to, and does not discriminate on the basis of an individual’s sex, race, color, religion, age, disability, status as a veteran, or national or ethnic origin; nor does Zeta discriminate on the basis of sexual orientation, gender identity or expression. We’re committed to building a workplace culture of trust and belonging, so everyone feels invited to bring their whole selves to work. We provide a forum for employees to celebrate, support and advocate for one another. Learn more about our commitment to diversity, equity and inclusion here: https://zetaglobal.com/blog/a-look-into-zetas-ergs/ ZETA IN THE NEWS! https://zetaglobal.com/press/?cat=press-releases #LI-DD1 #LI-Remote

Title: Information Technology Specialist 4 Information Security - 10928 Location: Latham NY United States Salary RangeFrom $96336 to $121413 Annually Employment Type Full-Time Appointment Type Contingent Permanent Jurisdictional Class Non-competitive Class Travel Percentage 0% Workweek Mon-Fri Hours Per Week 37.5 Workday From 8 AM To 5 PM Telecommuting allowed? Yes County Albany Street Address 31 British American Blvd. City Latham StateNY Zip Code12110 Duties Description Under the direction of senior staff within the Chief Information Security Office (CISO), the incumbent will provide services for the administration of Active Directory Services (AD) within the Chief Information Security Office, Cyber Defense and Response Bureau. The incumbent will be expected to participate in technical work to improve systems architecture and infrastructure and implement new solutions. The ideal candidate will possess a solid understanding of information technology systems administration and technical support. The position requires availability during off-shift hours to ensure appropriate response to security incidents or other critical activities that may impact sensitive information, critical systems, NYS agencies, or ITS. Duties include, but are not limited to, the following: - Build, maintain, and support AD authentication and authorization applications such as Active Directory Federation Services. - Build, maintain, and support AD management and automation applications such as OneIdentity Active Roles Server. - Build, maintain, and support AD synchronization applications such as Microsoft Identity Manager, Azure AD Connect, and OneIdentity QuickConnect. - Collaborate with other teams to integrate applications with NYS AD using common protocols such as SAML, OIDC, and LDAP. - Collaborate with CISO and compliance teams to ensure systems meet security and compliance standards. - Assign, approve, and track changes to supported environments. - Ensure staff are following the proper change control procedures for all work performed. - Perform daily monitoring of all supported services. - Respond to requests and incidents in accordance with pre-defined SLAs. - Collaborate with other teams on incidents, projects and threat responses. - Troubleshoot issues on supported systems as necessary. - Update and maintain system documentation. - Provide after-hours support as needed. - Perform the full range of supervisory responsibilities. Minimum Qualifications Information Technology Specialist 4 (Information Security) Non-competitive: six years of information technology, cybersecurity, or information assurance experience, including one year at the supervisory level. Substitutions: A bachelor's or higher-level degree in any field including or supplemented by 15 semester credit hours in computer science or related field substitutes for three years of required experience; any bachelor's substitutes for two years of required experience. An associate degree with 15 semester credit hours in computer science or related field may substitute for one year of required experience. Candidates in a bachelor's degree program with at least 15 semester credit hours in computer science or related field may substitute such credits for one year of required experience. A master's degree or higher in computer science or related field substitutes for one year of required experience. Preferred Qualifications: - Demonstrated experience managing enterprise identity services with a strong focus on Microsoft Entra ID (Azure AD) and Active Directory Federation Services (ADFS) in a production environment. - Hands-on operational experience supporting hybrid identity environments, including synchronization and federation between on-premises Active Directory and Entra ID. - Working knowledge of Entra ID security features, such as Conditional Access policies, identity protection concepts, authentication methods, and access governance controls. - Experience overseeing ADFS operations, including monitoring federation health, managing relying party trusts, certificates, and authentication flows. - Prior experience within information security, IAM, or CISO-aligned organization, supporting secure identity operations. - Strong understanding of identity-related incident response, including troubleshooting authentication failures, federation outages, and access-related security events. Benefits of Working for NYS Generous benefits package, worth 65% of salary, including: Holiday & Paid Time Off - Thirteen (13) paid holidays annually - Up to Thirteen (13) days of paid vacation leave annually - Up to Five (5) days of paid personal leave annually - Up to Thirteen (13) days of paid sick leave annually for PEF. - Up to three (3) days of professional leave annually to participate in professional development Health Care Benefits - Eligible employees and dependents can pick from a variety of affordable health insurance programs - Family dental and vision benefits at no additional cost Additional Benefits - New York State Employees' Retirement System (ERS) Membership - NYS Deferred Compensation - Access to NY 529 and NY ABLE College Savings Programs, as well as U.S. Savings Bonds - Public Service Loan Forgiveness (PSLF)

Requisition Number: 2348014 Optum Tech is a global leader in health care innovation. Our teams develop cutting-edge solutions that help people live healthier lives and help make the health system work better for everyone. From advanced data analytics and AI to cybersecurity, we use innovative approaches to solve some of health care's most complex challenges. Your contributions here have the potential to change lives. Ready to build the next breakthrough? Join us to start Caring. Connecting. Growing together. The Security Architect serves as a technical security authority supporting mergers and acquisitions (M&A) security implementation programs. This role is responsible for defining, influencing, and implementing security architectures and controls that are being developed to be included within Optum's current security portfolio, while ensuring integrations are executed securely, efficiently, and in alignment with enterprise risk tolerance. This role operates at the intersection of integration delivery, security architecture, and product/platform evolution. The Principal Security Architect partners closely with M&A targets, Enterprise Security, Infrastructure, Cloud, Application, and Product teams to translate integration-driven security needs into actionable architectures, capability gaps, roadmap recommendations, and ready to implement accordingly both individually and by others within the organization. Success in this role requires the ability to lead through influence without authority, operate effectively amid ambiguity, and balance identified risks with long-term platform and product strategy. You'll enjoy the flexibility to work remotely * from anywhere within the U.S. as you take on some tough challenges. For all hires in the Minneapolis or Washington, D.C. area, you will be required to work in the office a minimum of four days per week. Key Accountabilities: - Serve as an architect for M&A integration initiatives, accountable for the overall security architecture, risk posture, and strategic alignment of acquired entities - Lead security discovery and architecture assessments of acquisition targets to identify gaps between current UHG capabilities and required future-state security outcomes - Define and recommend security solutions and architectural patterns where capabilities do not yet exist, including interim, compensating, and long-term solutions - Partner with downstream internal teams (Enterprise Security, Infrastructure, Cloud, IAM, Application Security, Product, and Engineering) to: - Understand existing technical offerings and constraints - Translate integration-driven security requirements into capability enhancements or net-new solutions - Influence and shape security product and platform roadmaps to close identified gaps - Act as a trusted advisor to business and technology leaders, clearly articulating security risk, trade-offs, and architectural options - Lead the development of future-state security architectures, reference designs, and integration patterns applicable across multiple acquisitions - Provide architectural oversight through early implementation phases to ensure security intent is preserved and delivered - Drive alignment across multiple stakeholders with competing priorities, using influence rather than authority - Mentor and provide architectural guidance to other security and integration architects across the organization - Represent security architecture in executive-level discussions related to M&A strategy, integration planning, and risk decisions Primary Responsibilities: - Own and evolve security architecture standards and patterns for M&A, including: - Identity and Access Management (IAM) - Network and perimeter security - Cloud and hybrid security - Data protection and privacy controls - Evaluate and document security risks, assumptions, dependencies, and constraints associated with protecting acquired environments - Produce high-quality internal artifacts including: - Security architecture diagrams and reference architectures - Gap analyses and capability assessments - Roadmap input and security design recommendations - Provide guidance on secure adoption of Optum platforms while recognizing when non-standard or emerging solutions are required - Develop automation where applicable that enables security deployments to be faster, more programmatic, and reduce human intervention You'll be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well as provide development for other roles you may be interested in. Required Qualifications: - Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent experience - 8+ years of experience in security architecture, enterprise security, or platform security roles, with demonstrated impact at an enterprise level - Proven experience supporting M&A integrations, complex enterprise transformations, or large-scale platform initiatives - Solid breadth across IT and security domains, including: - Cloud (public, private, hybrid) security architectures - IAM, zero trust, and secure access models - Network, endpoint, and infrastructure security - Security orchestration & automated response - Demonstrated ability to operate in high ambiguity environments where requirements, solutions, or products are not yet fully defined - Experience influencing product, platform, or service roadmaps based on architectural and security needs - Exceptional ability to communicate complex security concepts to technical and non-technical audiences - Proven track record of leading through influence across organizational boundaries Preferred Qualifications: - Healthcare or other highly regulated industry experience - Expert level experience with the following tools: - Zscaler - Palo Alto - Microsoft Entra - Splunk - Tanium - Experience designing or influencing enterprise security platforms or shared services - Familiarity with regulatory and compliance frameworks (e.g., HIPAA, NIST, ISO, SOC) - Experience working with executive stakeholders during acquisition due diligence and integration planning - Mentorship or thought leadership experience within architecture or security communities that can effectively span down towards younger engineers *All employees working remotely will be required to adhere to UnitedHealth Group's Telecommuter Policy. Pay is based on several factors including but not limited to local labor markets, education, work experience, certifications, etc. In addition to your salary, we offer benefits such as, a comprehensive benefits package, incentive and recognition programs, equity stock purchase and 401k contribution (all benefits are subject to eligibility requirements). No matter where or when you begin a career with us, you'll find a far-reaching choice of benefits and incentives. The salary for this role will range from $112,700 to $193,200 annually based on full-time employment. We comply with all minimum wage laws as applicable. Application Deadline: This will be posted for a minimum of 2 business days or until a sufficient candidate pool has been collected. Job posting may come down early due to volume of applicants. At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone-of every race, gender, sexuality, age, location and income-deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes - an enterprise priority reflected in our mission. UnitedHealth Group is an Equal Employment Opportunity employer under applicable law and qualified applicants will receive consideration for employment without regard to race, national origin, religion, age, color, sex, sexual orientation, gender identity, disability, or protected veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations. UnitedHealth Group is a drug - free workplace. Candidates are required to pass a drug test before beginning employment.