Role Description This project will optimize the agency's CrowdStrike SIEM and related CrowdStrike services to improve threat detection, monitoring, and response capabilities. The contractor will expand and tune telemetry, integrate additional high-value log sources, enhance security dashboards, and support the rollout of additional CrowdStrike services. The effort will increase visibility into endpoint and security risk, improve signal quality and correlation, and provide security leadership with clear insight into security operations effectiveness and overall risk posture. Expected Outcomes: - Expanded and optimized CrowdStrike SIEM telemetry coverage - Integration of additional high-value log sources - Improved dashboards for operational and executive visibility - Enhanced detection fidelity and monitoring effectiveness - Clearer insight for leadership into endpoint risk and security operations performance Duties to Be Performed: - Assess current CrowdStrike SIEM configuration, telemetry coverage, and log ingestion - Enable and tune additional CrowdStrike telemetry to improve visibility and signal quality - Identify and integrate new high-value log sources into CrowdStrike SIEM - Develop and refine security dashboards aligned to SOC and executive use cases - Assist with technical enablement and rollout of additional CrowdStrike services - Validate data quality, parsing, and correlation within the SIEM - Coordinate with Security Operations, IT Operations, and system owners - Identify gaps, risks, and improvement opportunities in monitoring and detection - Provide weekly status updates and monthly executive-level progress summaries - Deliver supporting documentation and recommendations to sustain improvements Deliverables: - Summary of work performed and capabilities delivered - Documentation supporting all telemetry enablement, log integrations, and dashboard implementations - Measurable improvements in monitoring, detection, or visibility - Recommendations for future enhancements or next-phase efforts Qualifications - 8 years - Demonstrated skill with documentation, reporting, and knowledge transfer - 8 years - Experience with Stakeholder Engagement, and Executive Communication - 8 years - Experience in SIEM Detection Engineering and Alert Optimization - 8 years - Experience in Log Source Integration and Data Normalization - 3 years - Hands-On Experience with CrowdStrike SIEM and Dashboard Development - 5 years - Hands-On Experience with SIEM and Dashboard Development (Preferred) Requirements - Candidates that do not meet or exceed the minimum stated requirements (skills/experience) will be displayed to customers but may not be chosen for this opportunity. Company Description - Solicitation Reference Number: 70126092 - Customer/Dept: Texas Education Agency

Role Description You'll be embedded in the product development process, not sitting outside it. From threat modeling new features before they're built, to reviewing code with engineers, to making sure regulatory requirements turn into real, scalable solutions, you'll shape how Higgsfield builds securely as we grow. Responsibilities - Conduct threat modeling of new features - Test new features and products pre-release - Partner with engineers on security design and code review - Develop security processes that fit into existing delivery cycles - Turn regulatory requirements into scalable solutions Qualifications - Ability to read and understand code (Go, Python, TypeScript) - Basic understanding of AWS and Kubernetes security - High agency - Working English Requirements - Experience with LLM/agent attack surface (nice to have) - Ability to write code (nice to have) Benefits - Shift schedule: 2/2 - Competitive salary in USD - Preferably on-site in Almaty (remote possible) - Full-time position, part of a world-class team

Role Description As a frontline leader in the Cybersecurity Department, the Supervisor of Epic Security is responsible for overseeing access control, auditing, and risk mitigation efforts within Froedtert ThedaCare’s Epic environment. This role ensures that Epic security practices align with clinical workflows, regulatory requirements, and organizational cybersecurity standards. The Supervisor leads a team of Epic Security Analysts, coordinates with operational and IT stakeholders, and supports secure, efficient, and compliant access to electronic health records (EHR). This position plays a pivotal role in identity and role governance, audit response, and continuous improvement in Epic access and configuration practices. Qualifications - At least five (5) years of experience as a Senior Epic Security Administrator required. - Seven (7) or more years of senior-level experience in Epic Security preferred. - Knowledge of computer principles at a level normally acquired through completion of a Bachelor’s Degree in a relevant technology field or acquired through a combination of education and experience is required. Requirements - Emerging Leader abilities. - Demonstrated interpersonal skills in communications with all levels of hospital personnel, vendors, IT personnel, and leadership. - Analytical and problem-solving skills. - Ability to manage multiple tasks. - Highly motivated and ability to operate under limited management. - Ability to prioritize and execute in high-pressure situations. - Ability to communicate clearly and effectively, both written and verbal. - Current Epic Security Certification with Provider and Data Courier badges preferred. Benefits - Pay is expected to be between: (expressed as hourly) $41.37- $70.76. Final compensation is based on experience and will be discussed with you by the recruiter during the interview process. - Paid time off. - Growth opportunity - Career Pathways & Career Tuition Assistance, CEU opportunities. - Academic Partnership with the Medical College of Wisconsin. - Referral bonuses. - Retirement plan - 403b. - Medical, Dental, Vision, Life Insurance, Short & Long Term Disability, Free Workplace Clinics. - Employee Assistance Programs, Adoption Assistance, Healthy Contributions, Care@Work, Moving Assistance, Discounts on gym memberships, travel and other work-life benefits available.

Role Description The SecOps Manager is primarily responsible for the day-to-day operations of the Security Operations Center and team, including: - Threat detection - Incident response - Digital forensics - Data protection across the health system's clinical, financial, and administrative environments All activities are conducted in compliance with the organization's security policies and procedures, regulations, and law. Other duties as assigned. Responsibilities: - Creates a SecOps program that supports the CISO’s overall Cybersecurity Program and plans. - Manages, trains, retains, and supports the Security Operations (SecOps) Team. - Manages the CyberSecurity Operations Center (CSOC) function, overseeing 24x7 monitoring, triage, and escalation of security events. - Directs incident response activities, including containment, eradication, recovery, and post-incident review. - Oversees digital forensics and investigations, including evidence collection and chain of custody. - Manages proactive threat hunting activities to identify adversary behavior. - Administers and optimizes the SIEM platform, ensuring log source coverage and alert fidelity. - Oversees data loss prevention (DLP) tooling to prevent unauthorized exfiltration of data. - Manages email security tooling to defend against phishing and malicious attachments/links. - Oversees CASB and secure web gateway platforms for safe cloud and web usage. - Evaluates and integrates security tooling to extend or consolidate the SecOps tool stack. - Develops and maintains SecOps playbooks, runbooks, and standard operating procedures. - Monitors compliance with security policies and procedures among employees and third parties. - Performs security risk analysis and periodic activity reviews. - Supports disaster recovery and business continuity testing related to security monitoring. - Serves as an internal SecOps consultant, advising on emerging threats. - Monitors advancements in security operations technologies and threat intelligence. - Monitors changes in legislation and accreditation standards affecting security operations. - Initiates and promotes security awareness activities related to threat detection. - Serves as SecOps liaison for clinical, financial, administrative, and behavioral systems. - Maintains an effective Vulnerability Management Program. Qualifications - Five or more years of experience in security operations, incident response, or threat hunting. - Prior people-management or team-lead experience preferred. - Bachelor's degree in information security, computer science, or a related field is required. Requirements - Knowledge of network infrastructure, SIEM administration, DLP/CASB/SWG tooling, email security platforms, and digital forensics methodology. - Good presentation and communication skills. - GIAC (GCIH, GCFA, or GNFA), CISSP, or CISM certification is preferred. Benefits - Pay is expected to be between $49.15 - $84.07 (hourly). - Paid time off. - Growth opportunity - Career Pathways & Career Tuition Assistance, CEU opportunities. - Academic Partnership with the Medical College of Wisconsin. - Referral bonuses. - Retirement plan - 403b. - Medical, Dental, Vision, Life Insurance, Short & Long Term Disability, Free Workplace Clinics. - Employee Assistance Programs, Adoption Assistance, Healthy Contributions, Care@Work, Moving Assistance. - Discounts on gym memberships, travel, and other work-life benefits available.