Fully Remote möglich | Unbefristet Unser Klient ist ein großer, etablierter IT-Dienstleister mit einem breiten Leistungsportfolio und mehreren spezialisierten Geschäftsbereichen. Für eine fokussierte Security-Sparte wird ein IT-Consultant mit Schwerpunkt Security Engineering im Microsoft- und Infrastruktur-Umfeld gesucht. Aufgaben - Mitarbeit bei der Konzeption, Konfiguration und Einführung von IT-Security-Lösungen - Mitarbeit in nationalen und internationalen IT-Security-Projekten - Technische Planung und projektbezogene Vorbereitung von Security-Maßnahmen - Identifikation, Analyse und Bewertung von Security-Schwachstellen in Netzwerken und Anwendungen - Dokumentation, Priorisierung und Behebung identifizierter Schwachstellen - Zuarbeit und Unterstützung des Security Managements auf Kundenseite - Unterstützung interner Backoffice- und Security-Strukturen (z. B. SOC, Security Operations) Qualifikation - Gute Kenntnisse im Bereich IT-Security im Windows- und Infrastruktur-Umfeld - Erfahrung mit ESAE, ASAI und Enterprise Access Model - Kenntnisse der Microsoft Defender Produktfamilie von Vorteil - Erfahrung mit Tools wie ADAudit Plus, PingCastle, Schwachstellenscannern, PurpleKnight oder RuneCast wünschenswert - Idealerweise Zertifizierungen im Security- oder Microsoft-Umfeld - Eigenständige, strukturierte Arbeitsweise und professionelles Auftreten - Hohe Lernbereitschaft und Interesse an kontinuierlicher Weiterentwicklung - Freude an einem innovativen, flexiblen Arbeitsumfeld mit Gestaltungsspielraum Benefits - Fully-Remote-Arbeitsmodell (dauerhaft möglich) - Mitarbeit in einer hoch spezialisierten Security-Sparte eines großen IT-Dienstleisters - Spannende, abwechslungsreiche Projekte mit technischem Tiefgang - Attraktives Vergütungspaket inkl. zusätzlichem erfolgsabhängigen Jahresbonus - Strukturiertes, fundiertes Onboarding - Kollegiales, fachlich starkes Team mit Duz-Kultur ab dem ersten Tag - Praxisnahe Weiterbildungs- und Zertifizierungsmöglichkeiten - Regelmäßige Team- und Unternehmensevents - Umfangreiche Sozialleistungen - Flexible Arbeitszeitmodelle (Voll- oder Teilzeit) Interessiert? Wir freuen uns auf deine Bewerbung!

• Erstellen von IT-Security Konzepten und Unterstützung bei der Integration diverser Lösungen im laufenden Betrieb. • Unterstützung unserer Kunden bei der Auswahl geeigneter Security Lösungen/ Strategien. • Fokus auf „Endpoint Security”, XDR "SIEM", "Network Security" & "Cloud Security" SOC Services.

Role Description Amyx is seeking to hire a RMF and Cybersecurity Lead to join our Defense client in O'Fallon, IL. This position will support RMF compliance, cybersecurity operations, and continuous monitoring. - Develops and maintains RMF artifacts (ATO/ATC, POA&Ms). - Supports vulnerability management and security audits. - Provides cybersecurity reporting and metrics. - Must be experienced in RMF compliance & documentation: - Develop/maintain documentation to obtain ATO/ATC. - Identify evidence/artifacts for A&A packages. - Manage RMF artifacts (risk acceptance memos, POA&Ms, etc.). - Update security documentation in eMASS or Government-selected tools. - Provide A&A metrics. - Continuous monitoring & vulnerability management: - Upload code/security scans/checklists. - Document AP/CCI mappings. - Track POA&Ms. - Audit POA&M items. - Validate privileged user accounts as needed. - Compliance auditing & PPSM: - Support PPSM registry activities. - Ensure declared PPSMs follow applicable instructions. - Support internal/external security audits (including financial/privacy audits). - Cybersecurity operations: - Log analysis. - Support control audits/assessments. - Assess security control effectiveness. - Develop metrics and security posture reporting. - Support change management review for security impacts. - Incident reporting awareness: align reporting actions with DFARS 252.204. - Must have the ability to communicate accurate information. Qualifications - Desired: Secret Clearance. - Must have one CE cert/certificate aligned to OS/tools/devices supported (categories include OS, network support/defense, cloud/virtualization, applications, etc.). - Required: - Experience supporting USTRANSCOM and working at USTC. - Experience supporting DoD. - Demonstrated experience producing recurring cybersecurity deliverables (POA&M status, compliance reports, hygiene/scorecards, risk assessments). - Familiarity with NIST 800‑171 SSP expectations (contractor System Security Plan requirement). Benefits - Medical, Dental, and Vision Plans (PPO & HSA options available). - Flexible Spending Accounts (Health Care & Dependent Care FSA). - Health Savings Account (HSA). - 401(k) with matching contributions. - Roth. - Qualified Transportation Expense with matching contributions. - Short Term Disability. - Long Term Disability. - Life and Accidental Death & Dismemberment. - Basic & Voluntary Life Insurance. - Wellness Program. - PTO. - 11 Holidays. - Professional Development Reimbursement. Company Description Amyx is proud to be an Equal Opportunity Employer. All qualified candidates will be considered without regard to race, color, religion, national origin, age, disability, sexual orientation, gender identity, status as a protected veteran, or any other characteristic protected by law. Amyx is a VEVRAA federal contractor and we request priority referral of veterans. Physical Demands - Employee needs to be able to sit at a workstation for extended periods. - Use hand(s) to handle or feel objects, tools, or controls. - Reach with hands and arms. - Talk and hear. - Most positions require ability to work on desktop or laptop computer for extended periods of time reading, reviewing/analyzing information, and providing recommendations, summaries and/or reports in written format. - Must be able to effectively communicate with others verbally and in writing. - Employee may be required to occasionally lift and/or move moderate amounts of weight, typically less than 20 pounds. - Regular and predictable attendance is essential.

What you can expect We are seeking a Senior AI Security Assurance Engineer to lead the offensive verification of our AI systems and pipelines. This role will serve as the dedicated AI security lead within the Security Assurance organization, reporting directly to the Head of Security Assurance. While not a traditional covert red team position, the role requires similar deep adversarial thinking and the ability to evaluate AI systems with the mindset of a determined skeptic. Your mission: verify and innovate. You’ll be responsible for independently evaluating, challenging, and validating the security, safety, and integrity of all AI initiatives across the company, including AI embedded in products, internal AI use cases, training pipelines, model lifecycle management, and supporting infrastructure. This is not a compliance role, it’s a hands-on, experimental one. At Zoom, Security Assurance encompasses Offensive Security (product, infrastructure, hardware, red team), PSIRT, Product Vulnerability Management, and Bug Bounty. This role will also operate across all of these domains as the organization’s primary authority on AI-related risk and capabilities/implementation. You will be the AI expert in efforts to develop scalable, intelligent systems that automate and amplify Security Assurance at Zoom. You’ll both break and build, challenging assumptions in our AI infrastructure, features, and tools while creating tools to continuously expose and mitigate critical risk. About the Team The Security Assurance team at Zoom is an adversarial, high-leverage group focused on finding and reducing the company’s most critical security risks. We work from an attacker’s mindset and operate well beyond checklists, audits, and standard SDLC gates, targeting the vulnerabilities and systemic failures that escape existing controls. The team covers offensive security (vulnerability research, red teaming, hardware security), PSIRT, product vulnerability management, bug bounty, and emerging AI security. We apply deep technical rigor and clear risk judgment to drive concrete product and platform changes. We value evidence over assumptions and curiosity over comfort. This team is for truth-seekers who want their work to measurably reduce risk at global scale. Responsibilities - Leading adversarial verification of AI systems: Design and execute deep, unconstrained assessments of AI models, pipelines, and agents, testing guardrails, safety layers, and data boundaries through offensive experimentation. - Uncovering gaps between promise and practice: Identify where AI security, safety, or privacy controls fail under pressure. Surface the mismatch between claims and reality. - Assessing the full AI lifecycle: Evaluate data, training, and deployment pipelines for risks like model poisoning, prompt injection, or fine-tuning abuse. - Developing AI-powered security discovery systems: Research, prototype, and operationalize machine learning–driven approaches to automatically detect, predict, and prioritize vulnerabilities and behavioral deviations in Zoom’s products and platform. - Automating and scaling offensive operations: Build AI-based frameworks to scale red teaming, vulnerability discovery, and bug bounty triage. Use LLMs, anomaly detection, and pattern learning to enhance automation and coverage. - Adapting cutting-edge research: Integrate the latest findings from offensive security research, autonomous agents, and AI-driven vulnerability analysis into Zoom’s security assurance programs. - Shaping AI security methodologies: Build frameworks for continuous AI-driven adversarial testing, automated validation, and system monitoring that scale across teams and products. - Translating findings into impact: Communicate verified risks and systemic weaknesses clearly to engineering and leadership, pairing technical insight with strategic direction. - Staying ahead of the curve: Track evolving AI architectures, attack vectors, and defenses, turning new research into offensive and defensive capability. What we’re looking for - Have deep understanding of generative AI systems (transformers, diffusion models, multi-agent frameworks) and their security failure modes. - Have experience building or adapting novel AI/ML methods to real-world security problems. - Demonstrate proficiency in Python, ML frameworks (PyTorch, TensorFlow, Hugging Face, LangChain), and modern cloud/data environments. - Be skilled at uncovering the true behavior and limitations of AI and platform systems through experimentation, code review, and automated adversarial techniques. - Be skilled at setting direction, advising peers, and communicating high-impact risks to executives. - Be unafraid to challenge assumptions or expose uncomfortable truths in service of user and system safety. - Demonstrate experience in red teaming, exploit development, or vulnerability research. Salary Range or On Target Earnings: Minimum: $124 000,00 Maximum: $271 200,00 In addition to the base salary and/or OTE listed Zoom has a Total Direct Compensation philosophy that takes into consideration; base salary, bonus and equity value. Note: Starting pay will be based on a number of factors and commensurate with qualifications & experience. We also have a location based compensation structure; there may be a different range for candidates in this and other locations At Zoom, we offer a window of at least 5 days for you to apply because we believe in giving you every opportunity. Below is the potential closing date, just in case you want to mark it on your calendar. We look forward to receiving your application! Anticipated Position Close Date: 04/13/26 Ways of Working Our structured hybrid approach is centered around our offices and remote work environments. The work style of each role, Hybrid, Remote, or In-Person is indicated in the job description/posting. Benefits As part of our award-winning workplace culture and commitment to delivering happiness, our benefits program offers a variety of perks, benefits, and options to help employees maintain their physical, mental, emotional, and financial health; support work-life balance; and contribute to their community in meaningful ways. Click Learn for more information. About Us Zoomies help people stay connected so they can get more done together. We set out to build the best collaboration platform for the enterprise, and today help people communicate better with products like Zoom Contact Center, Zoom Phone, Zoom Events, Zoom Apps, Zoom Rooms, and Zoom Webinars. We’re problem-solvers, working at a fast pace to design solutions with our customers and users in mind. Find room to grow with opportunities to stretch your skills and advance your career in a collaborative, growth-focused environment. Our Commitment​ At Zoom, we believe great work happens when people feel supported and empowered. We’re committed to fair hiring practices that ensure every candidate is evaluated based on skills, experience, and potential. If you require an accommodation during the hiring process, let us know—we’re here to support you at every step. If you need assistance navigating the interview process due to a medical disability, please submit an Accommodations Request Form and someone from our team will reach out soon. This form is solely for applicants who require an accommodation due to a qualifying medical disability. Non-accommodation-related requests, such as application follow-ups or technical issues, will not be addressed. #LI-Remote