NinjaJobs

We’re excited to announce a new version of NinjaJobs! The latest platform release has a modern look and offers a lot more to the job seeker. Registration is encouraged, but not forced in order to search or view jobs. Expect to see continued development and big updates in the coming weeks!

NinjaJobs NinjaJobs is a community-run job platform developed by cybersecurity professionals. Our unique approach of focusing strictly on cybersecurity positions allows us to personalize the user experience and excell in placement services.

New week! New Month! New Roles!!

See below for some of our new openings. Message me or anyone at NinjaJobs for more info.

- SOC Lead (Day Shift) - Fully Remote
- SOC Lead (Mid Shift) - Fully Remote
- Mid-level Threat Analyst - Fully Remote
- Mid-level IR Specialist - NY/NJ Metro
- Sr. DFIR - Fully Remote
- Security PM - Fully Remote
- Sr. Python Engineer - Fully Remote
- Sr. Cloud Security Engineer - DC

Unable to provide sponsorship for these roles.

*Currently remote and will eventually be on-site in DC post COVID*

*Salary range $100-$140k/year*

*Must be able to obtain Public Trust clearance*

This position is a hands-on technical position. You will be based in our offices in Washington, DC and will be part of our Cyber Risk practice. This group supports client facing challenges developing and implementing tailored concepts and technologies for risk recognition, measurement, and control.

This includes gathering and analyzing information, formulating and testing hypotheses, and developing (technically & functionally) and communicating recommendations. You will use your expertise and handle a variety of cyber risk topics, including IT infrastructure, Software development, and technology risk. You will help us to integrate strategic perspectives and approaches with actual operations and process redesign capabilities.

Additionally, you will help Dragonfli develop our expertise in this area and you’ll have the opportunity to shape this fast-growing initiative. As a consultant, you will receive exceptional training as well as frequent coaching and mentoring from colleagues.

University degree ideally in computer science, mathematics or business degree with specialization in technology management
Relevant work experience in a professional services environment or industry/tech company
Demonstrated aptitude for analytics
Proven experience in cyber security strategy, technology development, and risk-based digital resilience transformations
Practical knowledge in IT risk management, information security and technology risk
Proven record of leadership in a work setting and/or through extracurricular activities
Ability to communicate complex ideas effectively – both verbally and in writing
In addition to the above Role Description and Qualifications, below outlines the initial day-to-day responsibilities in client delivery and Dragonfli capability development.
This position is a hands-on technical position leading a cybersecurity SOC. This is a client-facing position that will be working with one or multiple of our top client partners. In this role, you will be performing hands-on technical and functional risk management work. Below outlines potential day-to-day delivery work for one of our global critical infrastructure clients.
Coordinate response to threats through managing team members effectively. Running the SOC on a day-to-day bases, hands-on.
Documenting processes and recording incidents.
Utilize cyber SOC tools and operating systems
Coordinate and monitor patch/remediation discovery, assessment, testing and deployment activities
Collect and document patch testing and deployment evidence
Document change control/release management tickets
Coordinate Mitigation plan development and management
Interface with appropriate vendors when troubleshooting activities arise from patching
Address concerns, issues, or problems with remediation activities
Develop lessons learned and continuous improvement process
Must have superior communications skills (both verbal and written) as this role will serve as the "face" of the department's security team to component agencies. Candidate must provide writing samples.
Public Trust Clearance (only) and 5-panel drug screen pre-employment required

This position is REMOTE with up-to 25% travel (post COVID). No travel currently and entire hiring process is virtual.

*** Must be based in the US ***
*** Cannot provide visa sponsorship ***

Immediate need for a technical IR Lead. Looking for a strong IR professional who is willing to lead and grow an IR team. This person should be technical enough to participate in IR activities as needed along with managing the day to day activities of the IR team. It would be split about 50/50 between technical IR work and IR program management.

• Responsible for managing a team of security analysts who are charged with the analysis and management of incident response data from a variety of sources
• Determine work requirements, priorities, and maximize the effectiveness of analysts through efficient scheduling and cross training
• Provide oversight to incident response activities (triage, root cause analysis, escalations, notifications, communication, etc)
• Determine the severity level of incidents, act as a conduit for escalation and ensure accordance with requirements
• Provide technical investigative support to other departments as required
• Develop and maintain IR Procedures to ensure incident response policy, procedures, and work instructions stay current and effective
• Provide regular reporting of IR metrics with specific attention to efficiency and effectiveness measures • Recommend courses of action based on analysis of both general and specific threats
• Deliver reports, briefings, and assessments to leadership, facilitating understanding of cyber threat entities and environments
• Advanced knowledge of networking, operating systems fundamentals
• Having one or more security certifications such as SANS/GIAC, CISSP, CEH, OSCP
• Advanced computer forensic or network forensic certifications
• Excellent communication skills

This is a remote job opportunity. Position requires candidates to be located in the US for occasional travel. Cannot provide sponsorship for candidate to work in the US.

POSITION: Software Developer
EXPERIENCE: Minimum 3-5 years
LOCATION: USA Remote
We are looking for a passionate back-end developer who is deeply driven by a passion for
building highly scalable products that customers love. You would be building technology
solutions for the Cybersecurity domain, but your job is not just to build, but also ideate on what
would be best for our customers. You will drive the development of features from proposals to
polished end results and earn experience in working with cross-functional teams to design, build
and roll-out products that deliver the company’s vision and strategy.

Responsibilities
● Develop features from proposal to polished end result
● Manage and review code contributed by the rest of the team and work with them to get it
ready for production
● Take initiative in improving the software in small or large ways to address pain points in
your own experience as a developer
● Keep code easy to maintain and keep it easy for others to contribute
Skills and Qualifications
● Bachelor’s degree or higher, in Computer Science, Engineering, IT or a related discipline
● 1-2 years of practical experience in building Django applications is a huge plus.
● Knowledge in Python, with the ability to build efficient REST API using Django REST
Framework
● Knowledge of scheduling framework or event-driven programming in Django.
● The ability to naturally follow good development practices like test automation, CI/CD,
source version control, GitHub, etc.
● Experience in designing scalable micro-services required
● Understanding of the threading limitations of Python, and multi-process architecture
● Good understanding of server-side templating languages
● Knowledge of user authentication and authorization between multiple systems, servers,
and environments
● Understanding of fundamental design principles (including MVC).
● Good hands-on experience in working on a scalable AWS environment
● Experience with different RDBMS and NoSQL databases like MySQL, MongoDB, etc.
● Understanding of caching architecture and usage of different datastore like Redis,
Memcache, etc.
● Strong unit testing and debugging skills
● Proficient understanding of code versioning tools such as Git
● Knowledge of different message brokers like Rabbitmq, Kafka, Redis, etc.
● Knowledge about caching mechanism using Redis, Memcache, etc.
● Strong proficiency in data structure and algorithms
● Knowledge of different RDBMS or NoSQL databases. Understanding of the associated
use cases and application of both the technologies

● Knowledge of container technologies like Docker, k8s, etc.
● Knowledge of OOPS and different design patterns like strategy, adapter, etc. to build a
modular and scalable solution
● Good understanding of the RBAC controls
● Understanding of secure coding principles
● Self-driven approach to enjoy technical challenges and is eager to explore new
technologies
Bonus
● Experience in developing product from scratch
● Good understanding of Elasticsearch
● Experience of working in startup culture

We are seeking an experienced Associate Director of Pe*******on Testing with over 10 years of Cyber Security experience (minimum 5 years managing teams that support pe*******on testing and/or red team programs) to join our Enterprise Information Protection team. The candidate will lead our Pe*******on Testing program and drive key initiatives to increase our program maturity.
Pe*******on Testers carry our offensive security assessments to enumerate weaknesses, identify needed security improvements, and validate our security control effectiveness.
The Associate Director will focus on continuing to build out the teams, developing vision and strategy for pe*******on testing, continuously optimize capacity and efficiency of pe*******on testing, and partner with the CISO and other stakeholders to determine which assets to prioritize testing for.

Primary Responsibilities
• Lead a team of Pe*******on Testers focused on ethical hacking and simulated attacks against web, mobile, cloud and network assets.
• Must have prior Kanban experience and be comfortable leading a Kanban team.
• Strong engagement skills with experience discussing security requirements and issues with senior management from both the business and technology, as well as with developers and technologists.
• Develop a model to support a continuous lifecycle of pe*******on testing that align with the business and focus on the highest risk areas of the company.
• Focus on continuous process optimization and coverage to achieve capacity gains without necessarily adding more people.
• Provides direction and thought leadership to enterprise-wide initiatives applying security principles such as access control, encryption, and host security as well as state of the art and emerging technologies such as cloud computing, mobile computing, and next generation architecture.
• Collaborate with IT and Developers to design and implement remediation solutions.
• Knowledge with tools and industry standards such as Mitre ATT&CK, PCI, SOx, NIST, HiTrust, and OWASP.
• Solid knowledge and understanding of systems development life cycle (SDLC), CI/CD pipelines and Agile methodologies
Required Qualifications
• Bachelor's degree in an IT-related field required; post-graduate degree is a bonus, but not required.
• 6 or more years of experience in or leading Threat and Vulnerability Management, Pe*******on Testing, or Red Teaming
• 2 or more years of management experience
• Must be passionate about contributing to an organization focused on continuously improving consumer experiences
Location Requirements
Preferred locations are Washington D.C. or Louisville Kentucky.