Title: Security Operations Engineer II Location: New York, New York, United States Job Description: StubHub is on a mission to redefine the live event experience on a global scale. Whether someone is looking to attend their first event or their hundredth, we’re here to delight them all the way from the moment they start looking for a ticket until they step through the gate. The same goes for our sellers. From fans selling a single ticket to the promoters of a worldwide stadium tour, we want StubHub to be the safest, most convenient way to offer a ticket to the millions of fans who browse our platform around the world. The Security Operations team owns incident response, threat detection, SIEM engineering, log management, and third-party security risk forming the frontline defense for StubHub's global operations. As a Security Operations Engineer you will bring deep hands-on experience in incident response and threat detection. You will help extend the existing tooling, automation, and detection infrastructure that enables the team to operate at scale. This is not a purely operational role; we are looking for an engineer who writes production-quality code to solve security problems, architects detection pipelines, and help mature StubHub’s SOC-less approach to Detection & Response. You will work closely with Cloud and Infrastructure Security, Identity Engineering, and cross-functional stakeholders. Your work will directly shape how StubHub detects, responds to, and learns from threats. Location: Hybrid (3 days in office/2 days remote) – New York, NY or Century City, CA What You'll Do: What You've Done: - Incident Response - Lead and coordinate security incident response end-to-end: detection, triage, containment, eradication, recovery, and post-incident review - Develop and maintain incident response playbooks - Drive root cause analysis and translate findings into durable improvements to detection and prevention capabilities - Act as an escalation point for complex or high-severity incidents across the organization - Threat Detection - Design, build, and tune detection rules, event correlation logic, and behavioral analytics across cloud, endpoint, network, and application data sources - Assist in maintaining a threat model for StubHub's environment and mapping detection coverage to the MITRE ATT&CK framework - Proactively hunt for threats and indicators of compromise across the environment - Collaborate with red team and pen test partners to validate detection coverage and identify gaps - SIEM & Log Engineering - Continually improve SIEM capabilities including data ingestion pipelines, normalization, enrichment, and alerting workflows - Own log collection strategy: define what gets collected, at what fidelity, and for how long across cloud providers, SaaS applications, endpoints, and internal services - Write and maintain parsers, ETL pipelines, and data transformation logic to ensure high-quality signal in the SIEM - Own and operate security tooling where needed (SIEM, SOAR, EDR, etc.) - Security Automation & Tooling - Write internal software in Python, Go, or similar to automate detection, response, enrichment, and reporting workflows - Build integrations between security tools, internal APIs, and third-party services to accelerate analyst workflows and reduce mean time to respond - Develop dashboards, metrics, and reporting to communicate operational health and coverage to security leadership - Contribute to shared security infrastructure and internal libraries used across the security engineering organization - Third-Party Security - Support the third-party security program by evaluating vendor security posture, reviewing assessments, and triaging risk findings - Build or maintain tooling to automate third-party risk intake, tracking, and reporting - Collaborate with Legal, Procurement, and Engineering to ensure third-party risks are identified and remediated appropriately - 3+ years of experience in security engineering, security operations, or a related discipline - Demonstrated, hands-on experience leading incident response efforts, including complex, multi-system investigations - Strong threat detection engineering experience: writing detection rules, tuning alerts, building correlation logic, and reducing false positive rates at scale - Proficiency in at least one programming or scripting language (Python strongly preferred; Go, Ruby, or Bash also relevant) — you regularly write code to solve security problems, not just configure tools - Deep familiarity with SIEM platforms (e.g., Splunk, ELK, Chronicle, Panther, or similar) including query languages and datra data onboarding. - Experience with cloud environments (AWS, GCP, or Azure) and the associated log sources, threat models, and detection strategies - Strong understanding of attacker tactics, techniques, and procedures (TTPs); experience mapping detections to MITRE ATT&CK - Excellent written and verbal communication skills; able to convey technical risk clearly to non-technical stakeholders Preferred Experience: Experience operating in a SOC environment, either in-house or as part of an MSSP Familiarity with SOAR platforms and automation-driven response workflows Experience with threat intelligence platforms and operationalizing threat feeds into detection pipelines Prior involvement in third-party or vendor security risk programs Experience at high-growth technology companies or marketplaces where scale and velocity present unique security challenges Familiarity with data engineering concepts — streaming pipelines, schema design, log normalization — applied to security contexts Relevant certifications (GCIH, GCIA, GCFE, OSCP, or equivalent) are a plus, but not required What We Offer: - Accelerated Growth Environment: An environment designed for swift skill and knowledge enhancement, where you have the autonomy to lead experiments and tests on a massive scale. - Top Tier Compensation Package: Competitive base, equity, and upside that tracks with your impact. - Flexible Time Off: Enjoy unlimited Flex Time Off, giving you the flexibility to manage your schedule and take time to recharge as needed. - Comprehensive Benefits Package: Prioritize your well-being with a comprehensive benefits package, featuring 401k, and premium Health, Vision, and Dental Insurance options. The anticipated gross base pay range is below for this role. Actual compensation will vary depending on factors such as a candidate’s qualifications, skills, experience, and competencies. Base annual salary is one component of StubHub’s total compensation and competitive benefits package, which includes equity, 401(k), paid time off, paid parental leave, and comprehensive health benefits. Salary Range $165,000—$200,000 USD About Us StubHub is the world’s leading marketplace to buy and sell tickets to any live event, anywhere. Through StubHub in North America and viagogo, our international platform, we service customers in 195 countries in 33 languages and 49 available currencies. With more than 300 million tickets available annually on our platform to events around the world -- from sports to music, comedy to dance, festivals to theater -- StubHub offers the safest, most convenient way to buy or sell tickets to the most memorable live experiences. Come join our team for a front-row seat to the action. For California Residents: California Job Applicant Privacy Notice found here We are an equal opportunity employer and value diversity on our team. We do not discriminate on the basis of race, color, religion, sex, national origin, gender, sexual orientation, age, disability, veteran status, or any other legally protected status.

Role Description - Monitor and assess alerts, cases, and reports for potential privacy incidents (e.g., unauthorized access, data exfiltration, misdirected communications). - Perform initial triage to classify incidents involving Personal Data (PII/PHI). - Lead or support end-to-end investigation of privacy incidents. - Analyze impacted data elements, systems, and individuals; determine root cause and scope of exposure. - Document incident findings in accordance with legal and compliance requirements. - Evaluate breach thresholds under regulations (HIPAA, GDPR, state breach laws). - Coordinate with Legal on breach notification obligations. - Support preparation of regulatory filings and communications to affected individuals. - Participate in incident response war rooms and crisis management efforts. - Ensure alignment between technical containment and privacy obligations. - Maintain detailed incident records and case documentation. - Track incident metrics (e.g., time to detect/respond, incident trends). - Provide reporting to leadership, regulators, and audit teams. - Enhance privacy incident response playbooks and workflows. - Conduct tabletop exercises and training sessions. - Contribute to privacy program maturity and continuous improvement initiatives. - Participate in projects collaborating with stakeholders as needed. - Monitor the Privacy Office inbox and provide timely guidance and responses to inquiries. - Develop and deliver privacy training and awareness initiatives to promote a culture of data protection and compliance. - Draft and review privacy policies and procedures to ensure alignment with applicable regulations and organizational standards. Qualifications - Bachelor’s degree in Cybersecurity, Information Security, Law, Privacy, Healthcare or related field (or equivalent experience). Requirements - 5+ years of experience in Privacy Operations. - Experience building or leading a Privacy Incident Response function preferred. - Direct interaction with regulators or auditors. - Knowledge of data mapping, data governance, and privacy engineering. - Handling data breach or privacy incidents. - Strong understanding of data protection regulations (HIPAA, GDPR, CCPA, etc.). - Familiarity with privacy principles and data classification. - Understanding of the incident response lifecycle (NIST/SANS framework familiarity). - Certifications such as: - CIPP (US/E, or equivalent) - CIPM / CIPT - CISSP, CISM, or GIAC (GCIA, GCIH) - Certified Healthcare Compliance Professional (CHC) or Certified Healthcare Privacy Compliance (CHPC) - Experience in healthcare or other regulated industries. Benefits - Comprehensive benefits package including medical, dental, and vision insurance. - 401(k) with company match. - Paid time off. - Parental leave. Company Description Fresenius Medical Care is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sexual orientation, gender identity, parental status, national origin, age, disability, military service, or other non-merit-based factors.

Role Description The Director of Network Security Operations will lead the strategy, governance, implementation, and operational sustainment of physical and operational security programs across DSV’s North American Contract Logistics network, High Tech 2 vertical. This role is responsible for ensuring facilities, infrastructure, systems, and operational practices comply with enterprise and customer security standards — particularly for high-security warehousing environments supporting critical infrastructure, sensitive inventory, and restricted operational zones. The leader will drive a scalable and audit-ready security operating model across a geographically dispersed logistics network while partnering closely with operations, engineering, IT, facilities, customer security teams, and third-party security providers. The role requires strong leadership through influence across highly matrixed stakeholder groups. Key Responsibilities - Security Operations & Governance - Develop and maintain security governance programs aligned to customer and enterprise security requirements - Ensure operational compliance with: - Zone-based access control methodologies - Critical component handling protocols - Chain-of-custody standards - Security incident management procedures - Physical infrastructure protection requirements - Establish scalable security standards across site-types, supporting varying operational risk profiles - Security Systems & Infrastructure - Lead strategy and operational oversight for: - Access control systems - CCTV/video surveillance infrastructure - Intrusion detection systems - Alarm monitoring - Security command center operations - Ensure security systems meet operational and compliance standards for: - Video retention - DORI coverage requirements - Environmental monitoring - UPS and generator-backed resiliency - Network segregation requirements - Partner with IT and engineering teams to ensure secure deployment and sustainment of: - Security hardware - Approved device standards - Integrated monitoring solutions - Access management systems - Oversee security vendor relationships, system integrators, and guard force providers - Incident Response & Risk Management - Lead development and execution of network-wide: - Security incident response plans - Escalation procedures - Business continuity support protocols - Emergency response coordination - Ensure all incidents involving restricted areas, critical components, or infrastructure are investigated, documented, and resolved in accordance with defined protocols - Establish risk assessment and audit programs supporting: - Quarterly physical security assessments - Security system testing - Compliance reviews - Corrective action management - Lead root cause analysis and mitigation planning for security vulnerabilities or operational gaps - Operational Partnership & Stakeholder Management - Drive accountability across operational partners with and without direct authority - Partner closely with: - Site Operations Leadership - IT & Infrastructure teams - Engineering & Facilities - Customer security organizations - Legal, HR, and Compliance teams - Support customer audits, compliance reviews, and security program presentations - Continuous Improvement & Program Development - Establish KPIs and scorecards for: - Security compliance - Incident trends - Access management - Audit performance - Security system uptime - Drive continuous improvement initiatives focused on: - Risk reduction - Process standardization - Security automation - Operational scalability - Develop long-term security roadmap supporting business growth, customer requirements, and evolving threat landscapes Qualifications - 10–15+ years in physical security, security operations, supply chain security, or critical infrastructure protection - 5+ years leading enterprise or multi-site security operations programs - Experience supporting: - High-security warehousing environments - Critical infrastructure operations - Data center or technology supply chain security - Regulated or highly controlled operational environments - Proven experience implementing and sustaining: - Zone-based security frameworks - Access control governance - CCTV and surveillance programs - Security incident management processes - Experience driving compliance within matrixed operational organizations - Strong executive presence and stakeholder management capability - Ability to drive operational compliance through both influence and direct ownership - Excellent crisis management and decision-making capability - Strong analytical and risk-based problem-solving skills - Ability to balance operational efficiency with stringent security requirements Technical & Functional Skills - Strong understanding of: - Physical access control systems - CCTV/video surveillance platforms - Security Operations Center (SOC) environments - Alarm monitoring systems - Critical infrastructure protection - Experience with: - Badge access systems - Dual-authentication security controls - Chain-of-custody processes - Security audit and compliance programs - Incident response management - Familiarity with: - WMS and warehouse operational environments - Network/server room security controls - UPS and environmental monitoring systems - Security system resiliency standards - Advanced proficiency in: - Excel - Power BI/Tableau - Security reporting and incident management platforms Travel - Expected 20-30% travel Compensation For this position, the expected base pay range is $160,783.00 – $200,979.00 Annual. Actual compensation will be determined based on job-related factors such as relevant experience, skills, education, certifications, and geographic location, in accordance with applicable laws and company policy. Benefits Information regarding DSV’s benefits offerings, including eligibility, coverage options, and plan details, is available through the DSV Benefits Showcase. Benefits, programs, and eligibility may vary by location and division in accordance with applicable state and local laws. Company Description DSV - Global transport and logistics In 1976, ten independent hauliers joined forces and founded DSV in Denmark. Since then, DSV has evolved to become the world's 3rd largest supplier of global solutions within transport and logistics. Today, we add value to our customers' entire supply chain by transporting, storing, packaging, re-packaging, processing and clearing all types of goods. We work every day from our many offices in more than 80 countries to ensure a steady supply of goods to production lines, outlets, stores and consumers all over the world. Our reach is global yet our presence is local and close to our customers.

Title: Security Operations Engineer II Location: Los Angeles, California, United States Job Description: StubHub is on a mission to redefine the live event experience on a global scale. Whether someone is looking to attend their first event or their hundredth, we’re here to delight them all the way from the moment they start looking for a ticket until they step through the gate. The same goes for our sellers. From fans selling a single ticket to the promoters of a worldwide stadium tour, we want StubHub to be the safest, most convenient way to offer a ticket to the millions of fans who browse our platform around the world. The Security Operations team owns incident response, threat detection, SIEM engineering, log management, and third-party security risk forming the frontline defense for StubHub's global operations. As a Security Operations Engineer you will bring deep hands-on experience in incident response and threat detection. You will help extend the existing tooling, automation, and detection infrastructure that enables the team to operate at scale. This is not a purely operational role; we are looking for an engineer who writes production-quality code to solve security problems, architects detection pipelines, and help mature StubHub’s SOC-less approach to Detection & Response. You will work closely with Cloud and Infrastructure Security, Identity Engineering, and cross-functional stakeholders. Your work will directly shape how StubHub detects, responds to, and learns from threats. Location: Hybrid (3 days in office/2 days remote) – New York, NY or Century City, CA What You'll Do: Incident Response - Lead and coordinate security incident response end-to-end: detection, triage, containment, eradication, recovery, and post-incident review - Develop and maintain incident response playbooks - Drive root cause analysis and translate findings into durable improvements to detection and prevention capabilities - Act as an escalation point for complex or high-severity incidents across the organization Threat Detection - Design, build, and tune detection rules, event correlation logic, and behavioral analytics across cloud, endpoint, network, and application data sources - Assist in maintaining a threat model for StubHub's environment and mapping detection coverage to the MITRE ATT&CK framework - Proactively hunt for threats and indicators of compromise across the environment - Collaborate with red team and pen test partners to validate detection coverage and identify gaps SIEM & Log Engineering - Continually improve SIEM capabilities including data ingestion pipelines, normalization, enrichment, and alerting workflows - Own log collection strategy: define what gets collected, at what fidelity, and for how long across cloud providers, SaaS applications, endpoints, and internal services - Write and maintain parsers, ETL pipelines, and data transformation logic to ensure high-quality signal in the SIEM - Own and operate security tooling where needed (SIEM, SOAR, EDR, etc.) Security Automation & Tooling - Write internal software in Python, Go, or similar to automate detection, response, enrichment, and reporting workflows - Build integrations between security tools, internal APIs, and third-party services to accelerate analyst workflows and reduce mean time to respond - Develop dashboards, metrics, and reporting to communicate operational health and coverage to security leadership - Contribute to shared security infrastructure and internal libraries used across the security engineering organization Third-Party Security - Support the third-party security program by evaluating vendor security posture, reviewing assessments, and triaging risk findings - Build or maintain tooling to automate third-party risk intake, tracking, and reporting - Collaborate with Legal, Procurement, and Engineering to ensure third-party risks are identified and remediated appropriately What You've Done: - 3+ years of experience in security engineering, security operations, or a related discipline - Demonstrated, hands-on experience leading incident response efforts, including complex, multi-system investigations - Strong threat detection engineering experience: writing detection rules, tuning alerts, building correlation logic, and reducing false positive rates at scale - Proficiency in at least one programming or scripting language (Python strongly preferred; Go, Ruby, or Bash also relevant) — you regularly write code to solve security problems, not just configure tools - Deep familiarity with SIEM platforms (e.g., Splunk, ELK, Chronicle, Panther, or similar) including query languages and datra data onboarding. - Experience with cloud environments (AWS, GCP, or Azure) and the associated log sources, threat models, and detection strategies - Strong understanding of attacker tactics, techniques, and procedures (TTPs); experience mapping detections to MITRE ATT&CK - Excellent written and verbal communication skills; able to convey technical risk clearly to non-technical stakeholders Preferred Experience: Experience operating in a SOC environment, either in-house or as part of an MSSP Familiarity with SOAR platforms and automation-driven response workflows Experience with threat intelligence platforms and operationalizing threat feeds into detection pipelines Prior involvement in third-party or vendor security risk programs Experience at high-growth technology companies or marketplaces where scale and velocity present unique security challenges Familiarity with data engineering concepts — streaming pipelines, schema design, log normalization — applied to security contexts Relevant certifications (GCIH, GCIA, GCFE, OSCP, or equivalent) are a plus, but not required What We Offer: - Accelerated Growth Environment: An environment designed for swift skill and knowledge enhancement, where you have the autonomy to lead experiments and tests on a massive scale. - Top Tier Compensation Package: Competitive base, equity, and upside that tracks with your impact. - Flexible Time Off: Enjoy unlimited Flex Time Off, giving you the flexibility to manage your schedule and take time to recharge as needed. - Comprehensive Benefits Package: Prioritize your well-being with a comprehensive benefits package, featuring 401k, and premium Health, Vision, and Dental Insurance options. The anticipated gross base pay range is below for this role. Actual compensation will vary depending on factors such as a candidate’s qualifications, skills, experience, and competencies. Base annual salary is one component of StubHub’s total compensation and competitive benefits package, which includes equity, 401(k), paid time off, paid parental leave, and comprehensive health benefits. Salary Range $165,000—$200,000 USD About Us StubHub is the world’s leading marketplace to buy and sell tickets to any live event, anywhere. Through StubHub in North America and viagogo, our international platform, we service customers in 195 countries in 33 languages and 49 available currencies. With more than 300 million tickets available annually on our platform to events around the world -- from sports to music, comedy to dance, festivals to theater -- StubHub offers the safest, most convenient way to buy or sell tickets to the most memorable live experiences. Come join our team for a front-row seat to the action. For California Residents: California Job Applicant Privacy Notice found here We are an equal opportunity employer and value diversity on our team. We do not discriminate on the basis of race, color, religion, sex, national origin, gender, sexual orientation, age, disability, veteran status, or any other legally protected status.