The Information Security Analyst partners with business units, IT, DevOps, and third-party vendors to maintain and continuously strengthen the organization's security posture and regulatory compliance. This role demands deep technical expertise across cloud environments, operational security, risk management, and data privacy — paired with the maturity to lead initiatives, influence stakeholders, and drive measurable improvements to the Information Security Management System (ISMS). Key Responsibilities Security Operations & Monitoring - Monitor and analyze security alerts from SIEM and other detection tools; tune rules and enhance detection capabilities to reduce false positives and improve threat visibility. - Lead vulnerability assessments across network, infrastructure, OS, and applications; track findings through to validated remediation. - Ensure timely patching and system hardening across all infrastructure layers, including endpoints, servers, and cloud workloads. - Participate in and continuously improve incident response, business continuity, and disaster recovery exercises. - Stay current on emerging threats, vulnerabilities, and attack techniques; translate intelligence into actionable defensive recommendations. Application & Cloud Security - Advise DevOps and Engineering teams on secure architecture, secure-by-design principles, and common application vulnerabilities (OWASP Top 10, etc.). - Conduct application security assessments, code reviews, and penetration test coordination; drive remediation with development teams. - Collaborate with IT to ensure secure design and deployment of systems, networks, and cloud environments. - Support system administrators with security policy deployment and configuration aligned to company standards and industry benchmarks (e.g., CIS). Compliance & Risk Management - Lead and support technical compliance activities for applicable frameworks (GDPR, HIPAA, PII, SOC 2, CIS); identify control gaps, implement remediation, and gather audit evidence. - Perform internal access control reviews and spot audits to verify policy adherence and data protection standards. - Assess third-party and external vendors for alignment with the ISMS; maintain vendor risk documentation and escalate material findings. - Assist in designing, maintaining, and continuously improving the ISMS to reflect the evolving risk landscape. - Prepare executive-ready reports documenting security metrics, threat activity, and audit outcomes for leadership and senior IT staff. Security Awareness & Training - Develop and deliver effective security awareness training and educational materials covering general cybersecurity hygiene, PHI handling, and HIPAA compliance. - Champion a security-first culture by engaging employees at all levels with relevant, practical guidance. Required Qualifications & Skills - Bachelor's degree in Computer Science, Information Security, or a closely related field. - 5+ years of progressive experience in an information security role, including hands-on implementation of security controls. - Strong technical foundation in IT systems, network security, cloud security (AWS, Azure, or GCP), and infrastructure hardening. - Hands-on experience with endpoint protection platforms, SIEM solutions, and log analysis. - Solid understanding of identity and access management (IAM), encryption, and authentication frameworks. - Familiarity with secure coding practices and common application-layer vulnerabilities. - Experience conducting vendor risk assessments and managing third-party security relationships. - Proficiency with compliance frameworks: GDPR, US data privacy laws, HIPAA, SOC 2, and CIS Controls. - Relevant certifications such as CISSP, CISM, CEH, SANS GIAC, or equivalent. - Excellent analytical, problem-solving, and written/verbal communication skills. - Proven ability to work independently across remote or distributed teams. - Sound judgment, high integrity, and a self-motivated approach to continuous learning.

We are a boutique professional services firm seeking an experienced Microsoft Purview consultant to help us design and implement an AI data governance strategy within our Microsoft 365 environment. The ideal candidate will have deep expertise in Microsoft Purview, Microsoft 365 security and compliance, and AI data governance, and will be able to provide both strategic guidance and hands on implementation support. We are looking for a trusted advisor who can help us evaluate available Microsoft technologies, recommend practical solutions, and implement an AI governance framework that aligns with our firm's operational, security, and compliance objectives. Initially, we are seeking a consultant to assess our current Microsoft environment, explain the capabilities available through Microsoft Purview, identify any licensing considerations, and recommend a practical implementation roadmap for a small organization. If the engagement is a good fit, we anticipate continuing through implementation and ongoing advisory support. Areas of interest include: Microsoft Purview Microsoft Information Protection and Sensitivity Labels Data Loss Prevention (DLP) Information Governance and Records Management Retention Policies eDiscovery capabilities Microsoft Copilot governance AI governance and best practices Monitoring, auditing, and reporting We are particularly interested in understanding how Microsoft technologies can help organizations govern and protect information used with AI platforms, including Microsoft Copilot, ChatGPT, Codex, and similar tools, while maintaining appropriate administrative controls and information governance. Experience implementing Microsoft Purview for professional services organizations is preferred. Strong communication skills and the ability to explain technical concepts to business users are important.

We're a small Central Florida nonprofit foundation consolidating fully into Google Workspace and moving off our current outside IT provider. We have an in-house Google Workspace admin who will architect the plan and oversee the work — we're looking for a specialist to execute the migration cleanly and with minimal downtime. Scope: - Migrate email/mailboxes from our current provider into Google Workspace (Gmail) - DNS cutover: MX, SPF, DKIM, DMARC, plus any A/CNAME/TXT records - User provisioning and account setup - Migrate and verify mail, contacts, calendars, and Drive data as needed - Domain configuration and verification - Brief documentation of what was done About you: - Proven Google Workspace migration track record (small-business or nonprofit experience a plus) - Strong on email deliverability (SPF/DKIM/DMARC) and DNS - Comfortable working under the direction of our in-house Workspace admin - Clear, responsive communicator This is a bounded project to start, with potential for occasional ongoing support afterward. When you apply, please tell me: 1. Roughly how many Google Workspace migrations you've done, and the largest. 2. Your process for an email cutover with minimal downtime. 3. Whether you're comfortable working under the direction of our in-house Workspace admin.

I'm looking for a professional who knows the platform uSecure very well. I have three clients I must run automated phishing simulations for. I am looking for a consultant to come in, work inside of my uSecure partner account, and provision the three tenants and set up automated phishing simulations and automated training. I will handle all of the whitelisting in the tenants and communication with the end users. I need someone to come in and set up the infrastructure so that it goes into set it and forget it mode. Ideal candidate knows uSecure in and out, and can answer any questions related to the platform, and make recommendations. While this is technically a one-time job, if it's a fit, I would like to have you come on board and assist with some infosec work for some of my clients MSP experience is a bonus

My small business internet network has been flagged by Verizon for sending malicious traffic related to the "Avalanche" botnet. Verizon provided a US-CERT alert. I need a freelancer to identify and resolve this security issue. The task involves analyzing network traffic, identifying infected devices, and implementing measures to prevent future infections. The ideal candidate will have experience in network security and botnet removal.

Column Case Management is looking for a senior, hands-on IT infrastructure and application performance expert who can troubleshoot intermittent large-file upload and video download issues across the entire stack rather than focusing on only one component. This Candidate should have a solid understanding of the following Technologies listed below.  Tools: WireShark tcpdump Cisco Firewalls Windows Server & Linux PostgreSQL  browser developer tools (HAR analysis) Useful Knowledge: Hostname-versus-Direct-IP Differences ISP or Carrier-Level Throttling (Traffic Shaping) General computing knowledge which would help diagnose the issue TCP/IP performance analysis TLS/HTTPS The issue is intermittent, which has made it difficult to reproduce consistently: the same files may complete normally during one test and take 20–60 minutes or more during another, while one reported a one-hour transfer dropped to approximately 10 minutes when the user accessed the application through the direct public IP instead of the DNS hostname. We need someone capable of leading a coordinated end-to-end test with an affected user, browser HAR capture, client and server packet captures, Cisco firewall captures, Linux/server performance monitoring, application logs, storage metrics, and ISP-path validation collected during the same good and bad test windows, then correlating the evidence and identifying exactly where the delay begins.  

We are a small Seattle-based nonprofit with 11 employees and no IT staff. We use Mac laptops, Google Workspace, and have just purchased 4 iPhones for specific employees who need physical phones for work. Our Apple Business account was set up by a previous employee, and we need help making sure the settings are correct, deciding on the appropriate level of service for our needs, adding users and devices, and making a management plan that our non-technical operations staff can manage on an ongoing basis.

NETWORK ENGINEER — ATLAS NETWORKS Department: Network Operations Hours: Mon–Fri, 8am–5pm Pacific + on-call rotation Location: Remote - strong preference for US Type: Full-time, dedicated READ THIS FIRST We run one of the largest MikroTik deployments on the West Coast - thousands of devices, real customers, real stakes. We need an engineer who can step into that environment and be useful fast. If you're already a MikroTik expert, great - you'll feel at home on day one. If you're a strong network engineer from a Cisco, Juniper, or Arista background who's hungry to go deep on RouterOS, we want to hear from you too. What we won't compromise on is the underlying networking fundamentals. You either have them or you don't, and we'll find out either way in the lab. This role moves between tactical work - provisioning, escalations, config changes - and strategic input on design and process. If you're as comfortable at a CLI as you are whiteboarding an architecture decision, keep reading. ABOUT ATLAS NETWORKS We're an independent ISP based in Seattle, WA. We believe everyone deserves a reliable, affordable internet connection without the nonsense. Our values: Grit, Get S##t Done, Constructive Candor, Continuous Evolution - aren't poster slogans. They're how we actually operate. You can learn about us at (link removed) WHAT YOU'LL DO - Provision and configure MikroTik routers/switches, TP-Link Omada & Deco, and Ubiquiti UniFi gear to production standards - Serve as the escalation point for helpdesk and field teams - Troubleshoot advanced Layer 2/3 issues quickly and cleanly - Contribute to network change planning and upgrades - Document every deployment and change - non-negotiable - Improve the provisioning and escalation processes you work inside of - Be on the forefront of our push for an AI powered network - we have a full time dev team with a major AI network initiative WHAT YOU BRING Required: - Strong networking fundamentals: TCP/IP, VLANs, DHCP, DNS, OSPF, BGP - you can troubleshoot at every layer without Googling or asking ChatGPT - Hands-on production experience with at least one major networking platform (MikroTik strongly preferred; Cisco, Juniper, Arista, or similar also welcome) - Multi-vendor troubleshooting instincts - The ability to work independently in a remote-first team without losing momentum - Track record of juggling priorities and hitting deadlines without dropping quality - Willingness to prove your skills with our Chief Network Engineer before hire - this is non-negotiable regardless of your background If you're not already a MikroTik expert: you need to be genuinely excited to become one, fast. We'll support you, but the learning curve is yours to climb. Preferred: - MikroTik certifications (MTCNA, MTCRE) or Cisco (CCNA and up) - ISP or service provider experience - Ubiquiti or Aviat microwave radio configuration and alignment (or similar) - TP-Link Omada controllers, Deco systems, UniFi - VoIP fundamentals (we run our own switch) THE NON-NEGOTIABLES - Hours: Mon–Fri, 8am–5pm Pacific. Full-time and dedicated - we don't tolerate overlapping shifts with other employers. - Language: Fluent English with minimal accent for customer-facing work. - On-call: we're a small team, you'll be part of a rotation to respond to after-hours emergencies. WHAT SUCCESS LOOKS LIKE - 30 days in: You're handling provisioning, routine config work, and escalated troubleshooting against our standards. - 60 days in: You're operating across daily ops, documentation, and escalations with limited hand-holding. - Beyond: You become a go-to engineer for advanced troubleshooting and high-impact changes - and you make the people around you better at their jobs. WHAT WE OFFER - High expectations, high support - we don't hire people we don't intend to invest in - Real, complex network challenges on a growing ISP backbone - A team that picks results and candor over politics and ego - Paid time off after the first year HOW TO APPLY Submit your proposal and tell us: 1. Your most challenging MikroTik project - or, if you're coming from another platform, the gnarliest networking problem you've owned end-to-end 2. How you approach troubleshooting when the obvious answer is wrong 3. Microwave radio experience, if any 4. Your certifications If you're ready to work hard, think hard, and contribute at a level higher than the title suggests - apply.

Must be located within practical, rapid commuting distance of NY2 (Secaucus). Remote-only candidates will not be considered. 1. Datacenter Hardware Support (Rack & Stack) - Receive, inspect, and inventory shipped equipment at the datacenter. - Rack-mount and un-rack servers, switches, firewalls, routers, PDUs, and console devices. - Connect power, network, and console cabling according to provided diagrams. - Replace failed components under pressure (Disks/NVMe, RAM, PSUs, Fans, NICs, Transceivers/Optics). - Manage local RMA processes and coordinate with hardware vendors for warranty replacements. 2. Server Hardware & Out-of-Band (OOB) Management - Perform initial server power-on and hardware validation. - Basic setup of management interfaces (HPE iLO, Dell iDRAC, Supermicro IPMI, Lenovo XClarity). - Assign management IP addresses and verify remote console/power control based on provided instructions. - Configure basic BIOS settings (boot order, RAID controller modes, disk visibility). 3. Physical Network Support - Install/replace physical network devices and SFP/SFP+/QSFP optics. - Patch fiber and copper cabling, ensuring meticulous labeling and port mapping. - Perform basic physical troubleshooting (checking link status, port LEDs, connecting a crash cart). - Coordinate with datacenter facility teams regarding cross-connects. 4. Deployment of Second Datacenter (NY3/NY5) - Work alongside our Bulgaria-based engineering team (who will be on-site initially) to duplicate our NY2 setup. - Assist with full deployment: unboxing, racking, cabling, OOB setup, and power-on validation. - Provide impeccable documentation (serial numbers, management IPs, and high-quality photos of front/rear racks).

ONSITE WORK REQUIRED We are seeking a network automation consultant with strong Python skills to configure an enterprise-level network for our home office in Alpharetta, GA. The ideal candidate will have experience in network security and administration, ensuring a secure and efficient network setup. This is a small scale project expected to last less than 5 days. However, should there be a good fit between consultant and client, there is strong potential for ongoing Managed Services agreement.