• Perform scoped and open-ended assessments on internal and external facing systems. • Perform threat and vulnerability research to identify new ways of achieving the program’s mission and act as a source for innovation within the cybersecurity industry. • Develop and implement processes and/or tools that assist with execution of security assessments, including custom tools and automation. • Work with the customer to identify gaps and address findings.

Role Description With a team of Information Security experts (m/f/d), the future position holder will be responsible to further improve the security posture over the whole noventic group and implement concepts groupwide. The following tasks will be part of your position: - Improve the security of our (hybrid) M365 tenants. Hands-on and in cooperation with M365 Administrators. - Coach and support our IT colleagues and teams to get beyond Microsoft's security mechanisms and concept. - Contribute to governance, security and compliance strategies within the Microsoft ecosystem (e.g. information protection, data classification). - Helping to maintain a security culture in our group through education and other activities. - Responding to and handling security incidents and improving the remediation processes. Qualifications - Several years of hands-on experience with Microsoft 365 security and Compliance (Entra ID, Defender, Intune, Purview, tenant configuration). - Knowledge of Zero Trust concepts and their practical implementation within the Microsoft security ecosystem. - Solid understanding of how configurations translate into real risk: You can distinguish between theoretical best practice and practical impact. - Curiosity and the ability to learn quickly with a problem-solving mindset. - Strong communication skills in both English and German (C1 or better). - You are located in Northern Germany and willing to travel to the headquarter in Hamburg from time to time. Requirements - Interest in emerging topics like AI security and Copilot governance. - Experience with multi-tenant environments or complex organizational structures. - Experience in migration of On-Prem Microsoft Systems to M365. - Experience with security standards (ISO 27001, NIST, etc.) – especially translating them into technical controls. Benefits - Modern hardware and the opportunity to work with cutting-edge technologies. - Besides our 100% remote work possibility, we offer an office in Hamburg (Hammerbrook) and Munich for a more personal collaboration. - Space and budget for personal growth. - Flexible working hours. - 30 days vacation. - Events for employees to celebrate our achieved goals and great team-spirit. - Community of Practice and Knowledge Nuggets for improving your skills. - Corporate Benefits and Mental Health Programme. - Subsidized Urban Sports Club membership. - Jobticket. - JobRad-Leasing. - Coffee, tea and water for free in our office. What's next? If you are interested in the role, this is the way how to proceed: - Send us your complete application documents (curriculum vitae and references). - Once you've submitted an application, if successful, you will directly get in touch with our HR team. - You'll meet potential team members of beyonnex to get more information about our company and why we love to work at beyonnex. - In case you have any questions about the offered position, your application or the application process, send us an email to jobs@beyonnex.io.

Role Description We are looking for a Junior Security Engineer to join our Information Security team. This is a hands-on, operational role across a broad range of security disciplines. You will be responsible for the day-to-day health of our security environment: - Monitoring and responding to SOC alerts - Managing our email and endpoint security platforms - Conducting basic log analysis - Supporting our vulnerability management program You will work closely with senior security personnel and IT teams to keep our environment protected and our response capabilities sharp. This role is ideal for someone who takes ownership, communicates clearly, and is eager to grow into a more senior security role over time. This role requires access to CUI and a FedRAMP/GovCloud-hosted environment. Candidates must be U.S. citizens physically located and working within the United States. Qualifications - 1–2 years of experience in a security, IT, or systems administration role; relevant internships and co-ops are welcome. - Foundational understanding of networking concepts including TCP/IP, DNS, HTTP/S, firewalls, and VPNs. - Familiarity with Windows and Linux operating systems in an enterprise environment. - Basic understanding of common attack techniques, threat actor TTPs, and the MITRE ATT&CK framework. - Experience working within a ticketing system such as ServiceNow, Jira, or Zendesk. - Strong analytical and problem-solving skills with high attention to detail. - Clear written and verbal communication skills with the ability to document findings and escalate appropriately. - Ability to manage competing priorities in a fast-paced, team-oriented environment. Requirements - Monitor and triage SOC alerts from SIEM, EDR, and email security platforms, investigating and escalating threats according to established runbooks and incident response procedures. - Manage the day-to-day security ticket queue, ensuring timely resolution, accurate documentation, and clear stakeholder communication from open to close. - Administer our email security platform, including policy configuration, quarantine management, phishing investigation, and ongoing tuning to reduce false positives while maintaining strong threat coverage. - Operate and maintain EDR — monitoring detections, investigating endpoint alerts, managing agent deployment and updates, performing remediation actions, and tuning policies to minimize noise without reducing visibility. - Perform basic log analysis and SIEM querying to identify anomalous or malicious activity, support incident investigations, and assist in onboarding new log sources. - Support the vulnerability management program by reviewing and prioritizing CVE and scan findings based on risk and asset criticality, coordinating remediation with IT and engineering teams, and tracking patching progress. - Research newly disclosed CVEs to assess organizational relevance and provide timely internal guidance on recommended action. - Assist in the administration and tuning of additional security controls including firewalls, DLP, MFA, and network monitoring solutions. - Support identity and access management tasks including MFA enrollment, access reviews, and privileged account monitoring in alignment with least-privilege principles. - Participate in phishing simulations and security awareness activities, helping to educate end users and reduce human risk. - Contribute to the development and maintenance of security runbooks, standard operating procedures, and documentation. - Support security projects including tool evaluations, policy development, and compliance initiatives such as SOC 2, ISO 27001, or NIST CSF. Benefits - Salary Range: $64,000–$75,000 - This base pay range will vary depending on experience, qualifications, and location.

Role Description GovCIO is hiring a Senior Security Engineer to support the Department of Veterans Affairs (VA) Data Modernization initiative with a focus on VA environment vulnerability remediation. The Senior Security Engineer will provide expert guidance on cloud security, deliver surge support for data ingestion needs, and help customers efficiently navigate the Security Impact Analysis (SIA) process. This role is critical to enabling secure, rapid, and scalable access to VA cloud environments. This position is fully remote within the United States. - Performs advanced vulnerability identification, analysis, and remediation across UNIX/Linux systems (UNIX, RedHat Enterprise Linux, Ubuntu), VMware infrastructures, and containerized workloads (Docker, Kubernetes, AWS EKS). - Apply security engineering best practices to cloud environments in AWS (EC2, IAM, VPC, S3, ECR, ES) and Azure (Key Vaults, Storage Accounts, Databricks), ensuring secure configurations, compliance alignment, and mitigation of risks across application, infrastructure, and data layers using shell scripting, secure baselining, and automated remediation approaches. - Provide end‑to‑end security support for all aspects of the Data Modernization effort, including secure workspace provisioning, access configurations, and governance controls. - Deliver surge support to help customers ingest additional datasets securely, ensuring compliance with VA security and privacy requirements. - Guide users through the Security Impact Analysis (SIA) process, ensuring documentation accuracy, risk identification, and alignment with VA security standards. - Collaborate with intake, provisioning, and data engineering teams to ensure security requirements are integrated into automated workflows and common use‑case configurations. - Review and validate security controls for pre‑created workspaces, including service principals, role-based access configurations, linked services, and data access pathways. - Support the rapid provisioning goal by ensuring security checkpoints are met for DevTest and Production environments within required SLAs (1–2 days when applicable). - Act as a security advisor to customers, helping them understand cloud-native tools, data governance policies, and best practices for secure analytics development. - Coordinate with Databricks SMEs, CDW data teams, and VHA Data Lake stewards to validate security configurations and ensure secure data connectivity. - Maintain and update security documentation, standard operating procedures, security architecture diagrams, and onboarding guidance. - Support the “single front door” customer experience by contributing security-focused content related to onboarding, platform policies, and data access procedures. - Help identify blockers that slow security review steps during provisioning and recommend enhancements to streamline approval workflows. Qualifications - Bachelor’s degree plus 12 years experience in Cybersecurity, Information Technology, Computer Science, or a related field (or commensurate experience). - Experience in security engineering, cloud security, or cybersecurity compliance roles. - Strong understanding of security frameworks such as NIST, RMF, FedRAMP, or similar governance models. - Experience conducting or supporting Security Impact Analyses (SIA), risk assessments, or security authorizations. - Proficiency with Azure cloud security tools, identity and access management (IAM), service principals, and role-based access controls. - Ability to work with cross-functional teams and communicate security requirements to both technical and non‑technical audiences. - Strong analytical, problem-solving, and communication skills. Requirements - Expertise: UNIX, RedHat Enterprise Linux, Ubuntu, VMware, AWS (EC2, IAM, VPC, S3, ECR, ES), Azure (Azure Resource provisioning, Databricks, key vaults, storage accounts), ADF, Synapse, Azure DevOps, Github, IBM Rationale tools suite, Cockroach DB, Docker, Kubernetes, AWS EKS (Elastic Kubernetes Service), Shell, Terraform, Cloud Migration and Application development. - Experience supporting federal government environments, ideally within the Department of Veterans Affairs or healthcare-related systems. - Familiarity with Databricks security models, data lake access controls, and secure data ingestion processes. - Experience with automated provisioning workflows, intake systems, or customer enablement platforms. - Working knowledge of ServiceNow, Jira, SharePoint, or similar platforms used for workflow and ticketing. - Understanding of cloud data architectures, including data warehouse provisioning, linked services, and data pipeline security. - Certifications such as Security+, CISSP, CCSP, Azure Security Engineer, or equivalent. Clearance Required - Ability to obtain and maintain a suitability/Public Trust. Posted Salary Range USD $175,000.00 - USD $200,000.00 /Yr.