• Pełnienie roli eksperta i lidera opinii w obszarze cyberbezpieczeństwa poprzez promowanie najlepszych praktyk oraz innowacyjnych rozwiązań zwiększających poziom bezpieczeństwa organizacji. • Monitorowanie oraz przewidywanie przyszłych trendów w zakresie bezpieczeństwa, a następnie wykorzystywanie tej wiedzy do kształtowania i doskonalenia strategii bezpieczeństwa. • Opracowywanie strategii bezpieczeństwa oraz map drogowych (roadmap), zapewniających spójne i perspektywiczne podejście do wszystkich inicjatyw związanych z bezpieczeństwem. • Tworzenie i wdrażanie referencyjnych architektur bezpieczeństwa zgodnych z celami organizacji. • Współpraca z zespołami międzyfunkcyjnymi w celu projektowania i wdrażania zaawansowanych mechanizmów bezpieczeństwa, zgodnie ze standardami firmowymi i branżowymi. • Pełnienie funkcji mentora, wspieranie oraz rozwijanie mniej doświadczonych specjalistów ds. cyberbezpieczeństwa w organizacji.

• Serve as the primary specialist for customers, partners, and internal teams to drive revenue growth across the data security product portfolio • Partner with domain-expert solution engineers to capture customer requirements and craft compelling value propositions that close complex business deals • Own the regional quota and territory achievement by building and implementing account-based strategies to land and expand data security solutions • Collaborate synergistically with primary sales teams and leadership to ensure a unified and effective Zscaler presence in the market • Engage stakeholders across the organization, selling effectively to both C-suite executives and technical practitioners

• Own end-to-end IT operations, including device lifecycle, onboarding/offboarding, SaaS administration, identity and access management, help desk, and office infrastructure across all locations. • Lead the technical controls side of Tonal's HIPAA compliance program, implementing the safeguards required by the HIPAA Security Rule and HITECH Act. • Own and execute Tonal's security program: penetration testing remediation, security policy, tabletop exercises, vendor security reviews, and incident response. • Govern Tonal's AI tool ecosystem, including licensing, spend, API key governance, corporate AI policy, and DLP and prompt injection protections. • Administer Tonal's SaaS portfolio, owning contract renewals, license optimization, and vendor negotiations across critical platforms. • Drive automation and identity governance maturity, including Okta Identity Governance, expanding SCIM-based provisioning, building & enforcing RBAC frameworks, and driving workflow automation and system integration. • Lead and grow the IT & Security team, managing engineers and administrators, overseeing the virtual CISO engagement, owning the budget and aligning org structure to Tonal’s needs. • Own IT documentation and process improvement, maintaining runbooks and closing gaps in onboarding, offboarding, and incident response, and driving overall automation. • Manage global physical infrastructure — networking, Wi-Fi, AV, and physical access — across a distributed, multi-office footprint. • Serve as a trusted operator on Tonal's most sensitive matters, from executive access provisioning to security incidents and legal holds. • Report regularly to senior leadership and the C-suite, translating IT & Security roadmap priorities, progress, technical risk and incident management into clear, actionable narratives.

Role Description As our Senior Security Engineer, you will bridge the gap between traditional infrastructure security and modern DevSecOps. We are looking for a proactive security engineer to define secure-by-design frameworks, implement high-impact DevSecOps pipelines across multi-cloud environments (AWS and GCP), and lead critical security reviews for emerging technologies, including artificial intelligence. Beyond technical mastery, you will act as a collaborative partner to our internal teams, fostering a culture of proactive security, cyber vigilance, and continuous improvement. If you thrive in rapidly evolving environments and have a passion for building secure, resilient ecosystems, this is your next challenge. Responsibilities - Secure-by-Design Architecture: Implement, own, and champion secure-by-design frameworks across cloud, infrastructure, and application ecosystems, ensuring all system architectures address robust cybersecurity requirements. - Design & Integration Reviews: Review and approve security architecture designs for new internal systems, cloud platforms, and third-party integrations. - DevSecOps & CI/CD Pipelines: Design, enable, and maintain automated security pipelines to proactively scan Git repositories, catching vulnerabilities early in the software development lifecycle. - Cloud Security Management: Manage security lifecycles within multi-cloud environments (primarily AWS and GCP) to ensure continuous compliance and threat mitigation. - Vulnerability Management: Own and run the end-to-end vulnerability management program, prioritizing remediation efforts across enterprise systems. - AI & Emerging Tech Security: Assess and secure emerging technologies, evaluating security-focused Large Language Models (LLMs) and AI workflows to keep NPR aligned with industry progressions. - Security Monitoring & SIEM: Leverage SIEM platforms (specifically Splunk) to develop advanced dashboards, write queries, and build automated reporting mechanisms for real-time threat intelligence. - Network & Endpoint Defense: Deploy, recommend, and test advanced security controls, including Endpoint Detection and Response (EDR), enterprise-level antivirus, and perimeter security for Cisco networking devices. - Cross-Functional Collaboration: Partner with internal NPR technology and business teams to address security gaps, resolve concerns, and provide subject matter expertise in ongoing cybersecurity meetings. Qualifications - 5+ years of experience in an information security, security engineering, or infrastructure security role. - 2+ years of hands-on experience in DevSecOps, secure software development, or automated CI/CD security pipeline integration. - Strong hands-on technical experience administering enterprise security tools, including SIEM (Splunk), EDR/anti-malware, and vulnerability management systems. - Proven experience securing multi-cloud environments (AWS and/or GCP) and a solid understanding of cloud security posture management. - Practical knowledge of core networking concepts and principles, including securing perimeter devices (such as Cisco hardware). - Demonstrated track record of cross-functional technical communication, documentation, and assisting development teams with security remediation. Preferred Qualifications - Industry certifications such as CISSP, GIAC, or specialized cloud/DevSecOps credentials (or equivalent practical experience). - Experience with Infrastructure as Code (IaC) and network automation tools. - Practical experience implementing secure workflows for generative AI tools or LLMs. Required Skills/Competencies - Threat & Vulnerability Analysis: Analytical capability to interpret automated scan results, prioritize vulnerabilities, and formulate remediation plans. - Cloud Security Architecture: Foundational competence in designing and securing cloud-native services and environments. - Automation & Scripting: Ability to write utility scripts (Python, Bash, etc.) to automate security checks or integrate tools. - SIEM Querying: Proficiency in building custom queries and alerts within SIEM platforms like Splunk. - Collaborative Problem Solving: Exceptional interpersonal and technical communication skills to bridge security policies with developer workflows. Education Requirements - Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent work experience. Work Location & Requirements - This is a remote-permitted role. This role is based out of our Washington, D.C. office, but the employee may choose to work on a remote basis from a location that NPR approves. - You will have the option of working (a) remotely from a location of your choosing within the United States that is supported by NPR; (b) on-site at an NPR facility, based on the availability of desks and approval from NPR; or (c) a combination of both. - Regardless of where you choose to work from, you may be expected to travel to other locations from time to time to perform the duties of your position. Job Type - This is a full-time, exempt position. Compensation - The U.S.-based anticipated salary range for this opportunity is $125,000 - $152,000 plus benefits. - The range displayed reflects the minimum and maximum salaries NPR expects to provide for new hires for the position across all US locations. Benefits - NPR provides comprehensive benefits for employees and dependents. - Regular, full-time employees scheduled to work 30 hours or more per week are eligible to enroll in NPR’s benefits options. - Benefits include access to health and wellness, paid time off, and financial well-being. - Plan options include medical, dental, vision, life/ accidental death and dismemberment, long-term disability, short-term disability, and voluntary retirement savings to all eligible NPR employees. Company Description NPR is committed to being an inclusive workplace that welcomes diverse and unique perspectives, all working toward the same goal – to create a more informed public. Qualified applicants receive consideration for employment without regard to race, color, ethnicity, national origin, ancestry, age, religion, religious belief, sex (including pregnancy, childbirth and related medical conditions, lactation, and reproductive health decisions), sexual orientation, gender, gender identity or expression, transgender status, gender non-conforming status, intersex status, sexual stereotypes, nationality, citizenship status, personal appearance, marital status, family status, family responsibilities, military status, veteran status, mental and physical disability, medical condition, genetic information, genetic characteristics of yourself or a family member, political views and affiliation, unemployment status, protective order status, status as a victim of domestic violence, sexual assault, or stalking, or any other basis prohibited under applicable law.