• Administer, configure, deploy, and maintain Cisco FirePower Threat Defense (FTD) and SkyHigh Web Gateway appliances across the authorization boundary and enterprise-level environments • Implement advanced intrusion prevention systems (IPS) using CISCO FirePower to identify and block malicious traffic • Implement CISCO routers (CSRs) to do Policy Based Routing (PBR) on all network traffic from the Virtual Private Clouds (VPC) • Design and optimize Security Rule Sets (SRUs) and tailor policies to meet organizational and mission-critical security requirements • Perform threat analysis, event correlation, and deep packet inspection to mitigate emerging cyber threats • Configure and manage Cisco FireSight/FirePower Management Center (FMC) for centralized policy management, event monitoring, and system reporting • Integrate FirePower NGIPS with other security solutions such as SIEM or SOAR platforms to enable automated threat response capabilities • Conduct regular audits and vulnerability assessments within FirePower systems to identify gaps in coverage • Troubleshoot Cisco FirePower appliances for performance issues, ensuring high availability and resilience across the network • Collaborate with cross-functional IT and security teams to optimize firewall configurations and enforce Zero Trust principles • Create and maintain detailed documentation for system configurations, policies, procedures, and operational tasks • Provide technical expertise, guidance, and training to internal teams on Cisco FirePower operations and best practices

• Coordinate occupational safety activities, implementing preventive and corrective actions to minimize risks to employees' health and integrity, ensuring compliance with internal policies, regulatory standards and current legislation, with a focus on promoting a safe, healthy environment in accordance with legal and operational requirements. • Coordinate the Occupational Health and Safety (SESMT) teams at the industrial units, ensuring standardization of processes, execution of planned activities and alignment with corporate Occupational Health and Safety guidelines. • Work in partnership with company departments to identify, assess and control occupational risks, proposing actions that contribute to the prevention of accidents and occupational diseases. • Plan, coordinate and monitor safety programs, training and campaigns, promoting the strengthening of a prevention culture and safe behavior. • Coordinate initiatives aimed at reducing accidents and occupational diseases, overseeing the preparation and revision of legally required programs, risk analyses and other Occupational Health and Safety requirements. • Monitor performance indicators, analyze accidents, incidents and deviations, follow up on action plans and promote continuous improvement of safety processes. • Participate in corporate and operational projects and initiatives, working collaboratively with other departments, supporting audits and inspections, and contributing to digital transformation initiatives, process automation and the use of data to improve Occupational Health and Safety management.

Role Description The DHA Hearing Center of Excellence (HCE) is currently seeking an experienced Information Assurance (IA) Cybersecurity Subject Matter Expert (SME) to support the Department of War (DoW) HCE Enterprise Audiology Programs and Data Solutions branch to assist in leading cyber security efforts for existing and potential future audiology applications and systems in accordance with DoDI 8510.01 Risk Management Framework (RMF), National Institute of Standards and Technology (NIST) Special Publication 800-53 (Revision 5) cyber security compliance requirements outlined within the Defense Health Agency (DHA) RMF. The IA SME will devise solutions that integrate information security requirements to proactively manage information protection throughout an application and our system's lifecycle. Responsibilities - Perform Information System Security Officer (ISSO) duties supporting information assurance, cybersecurity, and the application of the information technology security principles, methods, and security products to protect and maintain the availability, integrity, confidentiality, and accountability of information systems. - Initiate, obtain, and update the Authority to Operate (ATOs), risk assessments for application/system, complete the continuous monitoring strategy tasks, and annual self-assessments. - Complete required tasks within Enterprise Mission Assurance Support Service (eMASS) (asset manager, artifacts, control correlation identifiers (CCIs) responses, Plan of Action and Milestone (POA&M) creation, Ports, Protocols, and Service Management (PPSM) and any other RMF activities supporting accreditation). - Implement DoW Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIG). - Perform analysis, design, and development of security solutions and plans for system architecture requirements. - Create and maintain IA and ATO related artifacts and documentation. - Request Assured Compliance Assessment Solution (ACAS) scans from Data Center Operations (DCOPS) Cyber Security team. - Respond to DCOPS Cyber Security requests for ACAS credential validation. - Evaluate and coordinate security program requirements; recommend information assurance/security solutions; and identify, report, and mitigate security violations. - Conduct vulnerability risk analyses and assessments of applications and peripheral devices during all phases of the system development life cycle. - Develop and implement information assurance/security standards and procedures in accordance with NIST publications. - Support the medical devices risk assessment and standardization initiative to ensure the audiology community is utilizing commonly used enterprise-wide components to minimize non-compatibility or incident issues when capturing audiometric testing results. - Act as a coordinator with costs related to the accreditation including independent audits/Independent Verification and Validation (IV&V). - Develop all systems documentation including Privacy Threshold Analysis (PTA)/Privacy Impact Assessment (PIA), Federal Information Processing Standards (FIPS) 199, Standard Operational Procedures, Business Impact Assessment, and all supporting documents and artifacts. Qualifications - Proficient in the application and functionality of the eMASS system. - Experience in conducting manual and technical techniques for mitigation of vulnerabilities or requirements. - Experience in implementing DISA STIGs, including the ability to find the guidance and tools available for the security measures to be taken for a particular system, application, or environment after assessing standards for implementation and compliance. - Prior experience in completing the RMF ATO process (created artifacts, examined CCIs, and compose POA&M records). - Strong written and oral communication skills. - Work independently in a remote environment. Requirements - Must possess 5-7 years’ experience with implementation of the DoW RMF lifecycle. - Bachelor’s degree in cyber security management and computer science. - Certifications: Security+ Preferred Qualification - Certified Information Systems Security Professional (CISSP) - Master’s degree in a related field - Secret Security Clearance Benefits - The salary range for this position is $90,000.00 to $110,000.00 annually. - Comprehensive benefits package, including medical, dental, and vision insurance. - 401(k) plan with company matching. - Tax-deferred savings options. - Supplementary benefits. - Paid time off. - Professional development opportunities.

Role Description We are looking for a passionate Senior Security Engineer to drive security engineering efforts within our growing Information Security organization. As a Senior Professional, you will be critical to embedding security and implementing guardrails for the company's AI-first strategy. You will be expected to demonstrate advanced technical skills, create significant impact across the engineering org, and foster a collaborative environment. You should have hands-on experience securing modern cloud and enterprise environments, a natural sense of curiosity, and a diplomatic approach to problem-solving. This is a remote position, though it could also be a hybrid role from our Mexico City office as part of our expanding site. What You'll Do - Threat Management: Monitor active threats, perform in-depth analysis of AI-related attack vectors (e.g., prompt injection, model poisoning), and lead the development of comprehensive remediation plans. - Infrastructure Security: Monitor, audit, detect, and remediate critical security exposures across our cloud infrastructure. - Incident Response: Respond to security incidents and manage the end-to-end incident response lifecycle. - Automation & Tooling: Implement advanced automation and AI agents for security tasks, including detection rule testing, auditing, metrics collection, and reporting to improve operational efficiency. - Security Architecture: Work cross-functionally with engineering teams to architect secure, scalable solutions, including implementing security guardrails and governance for AI/ML workloads and evaluating third-party security tools. - Mentorship & Expertise: Serve as a recognized security expert in multiple specialty areas and maintain strong awareness of the external threat landscape. - Process Improvement: Drive the implementation of security, technical, and process improvements across the organization. Qualifications - At least 4+ years of industry experience in security engineering or a related field. - Strong hands-on experience with AWS services (VPC, EC2, S3, EKS) and associated networking, IAM, and security controls in production environments. - Solid understanding of Docker and containerization, including building, optimizing, scanning, and securing container images and workflows. - Strong knowledge of Kubernetes architecture and experience operating or securing platforms like EKS in production. - Proficiency with Terraform to provision and manage cloud infrastructure in a repeatable, scalable manner. - Proficiency in at least one scripting or programming language, with a strong preference for Python to support security tooling and automation. - Foundational knowledge of general networking concepts, including TCP/IP, DNS, routing, firewalls, and load balancing across cloud and containerized environments. - In-depth knowledge of Threat/Intrusion Detection, Vulnerability Management, and specialized expertise in securing AI agents, LLMs, and Model Context Protocol (MCP) environments. - MS or Bachelor’s degree in Computer Science or an equivalent field. - At least 6 months of experience using AI-assisted development tools (e.g., GitHub Copilot, Cursor, ChatGPT, or similar tools) as part of your software development workflow. - Familiarity with compliance standards such as ISO 27001, SOC2, NIST, SOX, and PCI is a plus. - Experience with IAM tools (Okta, OneLogin), Zero Trust architectures, and Data Loss Prevention (DLP) solutions is a plus. - Experience with access control and PII management is a plus. - Previous experience in the financial services industry is highly preferred. - Experience with security orchestration, automation, and response (SOAR) technologies is a plus. Benefits - Excellent healthcare options. - Internet and cell phone reimbursement. - Learning and development stipend. - Potential opportunities to travel to our Mountain View headquarters.