• Make Our Products Brilliant: Feed research directly into product and engineering — work close to the roadmap and the codebase to sharpen how we detect, prioritise, and remediate, building capabilities that outclass the competition • Shape How Our AI Understands Risk: Translate deep threat research into the labels, signals, and product feedback that train our models to prioritise vulnerabilities like a seasoned researcher • Lead Our Security Research Function: Set the direction, standards, and methodologies for how Maze researches, validates, and prioritises cloud and application security threats, scaling a small team of researchers as we grow • Find Novel Vulnerabilities That Get Reach: Surface original research and build narratives — blog posts, technical talks, podcasts, video, conference presentations — that earn real reach and give Maze technical credibility with the security community • Build Authoritative Technical Intelligence: Produce detailed research on exploitation techniques, attack vectors, and remediation across cloud infrastructure and application security, enriched with CVE, advisory, and threat-intel sources • Set the Standard for Research Quality: Establish the frameworks and review processes that keep our vulnerability assessment consistent, defensible, and ahead of the threat landscape • Grow the Bench: Mentor and develop researchers, raising the technical bar of the team and creating a research culture others want to join

Role Description The Cloud Network Engineer III at Staritas is responsible for the architecture, design, governance, and operational excellence of enterprise cloud and hybrid network environments. This role leads the development and enforcement of network policies, standards, and security controls while ensuring scalability, performance, and resilience across multi-cloud and colocation platforms. This position plays a key leadership role in cloud transformation initiatives, including the migration of colocation-based infrastructure to cloud-native architectures. The Cloud Network Engineer III partners with IT Operations, Security, and Cloud Engineering to define network strategy, implement monitoring and KPIs, and ensure alignment with enterprise compliance and performance objectives. - Architect and govern enterprise cloud network solutions across Azure, AWS, and GCP, including landing zones, hub/spoke, and zero trust architectures - Lead network strategy and design for migration initiatives from colocation environments to cloud-native and hybrid architectures - Develop, implement, and enforce network policies, standards, and guardrails aligned with security and compliance frameworks (e.g., SOC 2, HIPAA) - Define and operationalize network KPIs and SLAs (e.g., availability, latency, MTTR, change success rate) and implement monitoring frameworks to track performance - Design and maintain secure hybrid connectivity (VPN, ExpressRoute, Direct Connect) with a focus on resiliency and scalability - Own and enhance network observability, including logging, alerting, and telemetry across cloud and hybrid environments - Architect and manage network security controls, including NGFWs (Check Point), WAFaaS, segmentation, and zero trust network access (ZTNA) - Drive capacity planning and cost optimization strategies for cloud networking resources - Lead incident response and root cause analysis, ensuring systemic improvements and prevention of recurring issues - Establish and maintain network architecture documentation, standards, and runbooks at an enterprise level - Collaborate with Security to ensure policy enforcement, audit readiness, and continuous compliance - Evaluate and recommend new technologies and architectural patterns to improve reliability, performance, and security - Provide technical leadership and mentorship to junior engineers and cross-functional teams - Interface with vendors and providers to guide strategic improvements and issue resolution - Manage DNS, load balancing, and traffic management services in cloud environments - Assist with cost optimization and capacity planning for cloud network resources - Evaluate and recommend new networking technologies, tools, and services - Work with vendors and service providers to resolve issues and optimize performance - Participate in incident response and root cause analysis for network-related issues Qualifications - 10+ years of experience in network engineering, with significant focus on cloud networking and architecture - Proven experience leading colocation to cloud migration initiatives, including network design and cutover execution - Deep expertise in Azure networking (preferred), with working knowledge of AWS and/or GCP - Strong hands-on experience with Check Point NGFWs, Cisco networking, and secure hybrid connectivity - Demonstrated experience developing and enforcing network policies, governance models, and standards - Experience implementing monitoring, observability tools, and KPI-driven operations - Strong understanding of zero trust architecture, segmentation, and cloud-native security controls - Experience supporting regulated environments (e.g., SOC 2, HIPAA) - WAFaaS and advanced traffic management experience strongly preferred Requirements - Associate/bachelor’s degree in Info Tech, Cybersecurity, Computer Science, or related field is preferred but not required - Relevant experience may be considered equivalent Benefits - Competitive salary and performance bonus program - Fully remote work environment - Comprehensive benefits package including 401k match - 19 days of PTO per year; 10 holidays per year - Opportunity to work in a mission-driven organization where your work directly shapes clarity, confidence, and better outcomes across healthcare - Up to 10% travel, based on business needs

• Ensure compliance with policies, regulatory requirements, and industry standards • Identify, assess, and manage information security risks • Develop and maintain a comprehensive process for managing policy exceptions • Perform risk assessments for proposed policy exceptions • Coordinate and ensure regular risk control self-assessments across various business units • Compile and analyze assessment results and prepare reports • Maintain accurate and timely reporting of offshoring activities • Develop and maintain a comprehensive service catalog for ISG • Oversee the implementation and management of information security compliance across the bank • Be the owner of the bank’s GRC platform for ISG

Role Description The Security Fusion Center (SFC) Manager is responsible for leading the strategy, governance, and operational maturity of an enterprise Security Fusion Center. This role serves as the primary architect and coordinator for an intelligence-driven cybersecurity program that integrates: - Threat intelligence - Threat hunting - Incident response - Security engineering - Insider threat - Continuous monitoring - Attack surface management The ideal candidate possesses extensive experience developing and managing enterprise cybersecurity programs, establishing governance frameworks, and driving cross-functional collaboration among cybersecurity operations, engineering, and executive leadership. This individual will lead the development of Security Fusion Center strategy, operational processes, performance metrics, and implementation roadmaps while continuously improving the organization's ability to identify, detect, respond to, and mitigate cyber threats. Qualifications - Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Assurance, or a related field. - 6+ years of experience in cybersecurity operations, cyber defense, or enterprise security program management. - Demonstrated experience developing or managing a Security Operations Center (SOC), Security Fusion Center (SFC), Cyber Fusion Center, or equivalent enterprise cybersecurity program. - Experience leading cross-functional cybersecurity initiatives involving multiple operational teams. - Strong understanding of: - Threat Intelligence - Advanced Threat Hunting - Incident Response - Continuous Monitoring - Security Engineering - Insider Threat Programs - Attack Surface Management - Experience developing governance documentation, operational procedures, playbooks, and Concepts of Operations (CONOPS). - Experience developing cybersecurity strategies, roadmaps, implementation plans, and executive-level reporting. - Strong knowledge of cybersecurity frameworks including the NIST Cybersecurity Framework (CSF), NIST Risk Management Framework (RMF), and MITRE ATT&CK. - Excellent communication, leadership, and stakeholder engagement skills. Requirements - CISSP (Certified Information Systems Security Professional) - GIAC Certified Incident Handler (GCIH) - GIAC Cyber Threat Intelligence (GCTI) - Certified Information Security Manager (CISM) - Project Management Professional (PMP) - Experience supporting federal government cybersecurity programs. - Experience implementing enterprise SIEM, SOAR, XDR, EDR, threat intelligence platforms, or security analytics solutions. - Familiarity with Zero Trust Architecture and enterprise cyber modernization initiatives. Benefits - Competitive salary - Employer-paid health insurance premiums (medical, dental, vision) - Employer-paid short/long term disability insurance and basic life/AD&D insurance - 401K with a 4% employer contribution - Professional development reimbursement options available (training, certification, education, etc) - Flexible and remote work policies for most positions - Paid Time Off (PTO) at a rate of three (3) weeks plus one (1) day per year of service up to four (4) weeks annually - 11 paid holidays per calendar year - The anticipated salary range for this role is $100,000 - $155,000 per year, depending on experience and qualifications.