Role Description Estamos a recrutar um(a) AI Security Specialist para integrar um projeto internacional no setor da logística, com foco na segurança de soluções baseadas em Microsoft Copilot e ecossistema Azure/Microsoft 365. - A função envolve a proteção, monitorização e otimização de ambientes Copilot. - Garantir conformidade com boas práticas de segurança, Zero Trust e gestão de identidades. - Papel ativo na análise de ameaças emergentes em soluções de IA, como: - Prompt injection - Data poisoning - Tentativas de manipulação de modelos Qualifications - Licenciatura em Ciência da Computação, Cibersegurança, IT ou área relacionada. - Mestrado em Cibersegurança ou áreas similares é uma mais-valia. - Fluência em inglês. Requirements - Mínimo de 5 anos de experiência em Cibersegurança. - Pelo menos 3 anos de experiência com Microsoft 365 e Azure Security. - Sólidos conhecimentos em Microsoft Defender, Entra ID, Conditional Access e Zero Trust. - Experiência prática em modelação de ameaças e security testing. - Conhecimentos de PowerShell, Python ou C# (obrigatório). - Certificações em segurança (ex.: Microsoft Security, AZ-500, CISSP) são valorizadas. Company Description Na Sourcing Trust, comprometemo-nos a fornecer soluções tecnológicas inovadoras, fiáveis e personalizadas que capacitam as empresas a prosperar num panorama digital em rápida evolução. - Foco na excelência, integridade e colaboração. - Construímos parcerias duradouras através da compreensão das necessidades únicas de cada cliente. - Oferta de suporte especializado em todas as fases. - A nossa equipa dedica-se a promover um ambiente de trabalho positivo e inclusivo. - Incentivamos o crescimento contínuo, a aprendizagem e o sucesso partilhado.

Role Description This position ensures the technological and digital security of the Bank. Mitigates exposure to cyber threats, security risks, and unauthorized access. Assesses organizational networks, applications, or systems for potential vulnerabilities. Protects assets and information through a variety of methods, resolving security issues or incidents as they arise. Maintains knowledge of industry practices, technology, and evolving threats in order to enhance defenses for the Bank's information systems and resources. Remote eligible. Responsibilities - Technical Security: Administers tools or processes that secure assigned technical areas and data. Participates in security audits, identifies security gaps, and develops and implements risk mitigation solutions. Ensures compliance with necessary protocols, configurations, or procedures. - Analysis: Identifies and evaluates potential threats or vulnerabilities in the Bank's networks, applications, or systems. Compiles data from external or internal sources. Creates actionable intelligence based on review of analysis. - Security Expertise: Maintains a current knowledge of technology, emerging threats, and security trends within the assigned technical area. May provide guidance on appropriate security protocols. - Issue Resolution: Investigates and resolves security incidents which may include unauthorized access, malware infections, configuration anomalies, cyber attacks, and other risks. Escalates as appropriate. Qualifications - Bachelor's Degree and 2 years of experience in Systems engineering, networking, or information security OR High School Diploma or GED and 6 years of experience in Systems engineering, networking, or information security - Knowledge of data security practices, procedures, monitoring and alert tools, and risk management standards - Knowledge of Active Directory administration and user provisioning, Domain Name System, Group Policy Objects, New Technology File System permissions, File Shares, SharePoint, and Domain controllers - Knowledge of Identity and Access Management concepts and technologies - Ability to clearly communicate risks, threats, and vulnerabilities identified during assessments - Availability to provide after-hours operational support on a rotational basis, with minimal travel Requirements - This job posting is expected to remain active for 10 days from the initial posting date listed above. If it is necessary to extend this deadline, the posting will remain active as appropriate. - Job postings may come down early due to business need or a high volume of applicants. - The base pay for this position is generally between $100,000 and $150,000. Actual starting base pay will be determined based on skills, experience, location, and other non-discriminatory factors permitted by law. - For some roles, total compensation may also include variable incentives, bonuses, benefits, and/or other awards as outlined in the offer of employment. Benefits - Benefits are an integral part of total rewards and First Citizens Bank is committed to providing a competitive, thoughtfully designed and quality benefits program to meet the needs of our associates. - More information can be found at https://jobs.firstcitizens.com/benefits .

• Assess MARAD systems in one of three states: System Authorization: Initial Authorization, Reauthorization, or Continuous Monitoring Assessment (CMA) • Provide annual assessment support to the NSMV and MARAD CIO programs • Conduct independent assessments of specified MARAD information systems • Review existing information system core documentation • Provides identification of non-compliance of security requirements • Validates the security requirements of the information system • Verify and validate that the system meets the security requirements • Execute and conduct analysis of network and systems • Develop security assessment plans and assessment reports • Develop Security Assessment Plan (SAP) • Adhere to the approved SAP • Develop security assessment report (SAR) • Develop / update system qualitative risk assessment reports (RAR) • Develop recommendation report aiding in Plan of Action and Milestone (POA&M) development • Develop security assessment executive summary documents • Enter assessment data the Cyber Security Assessment and Management (CSAM) database • Provide presentations, reports, evaluations, reviews, meeting minutes and working papers as requested • Apply MARAD/DOT A&A guidance and policy • Actively work with the designated Information Systems Security Manager ISSM • Performs other job-related duties as assigned

• Implement and manage SAP security solutions within SAP RISE (cloud and hybrid). • Design and configure user roles, access controls. and authorization profiles. • Ensure governance and compliance with SAP GRC tools. • Perform security audits, vulnerability assessments, and incident management. • Collaborate with internal teams and clients for smooth SAP RISE transitions. • Provide user training and documentation on SAP security best practices.