CybersecurityJobs.io - Jobs in infosec and cybersecurity.

Latest Jobs

Today

Cybersecurity Analyst I

Helmerich & Payne, Inc. Tulsa, OK

Tulsa, OK

Today

Full time Cybersecurity Operations Cybersecurity Tools Incident Response

Apply Now

Job Description

Join Helmerich & Payne, Inc. in Tulsa, OK (onsite) as a cybersecurity professional focused on protecting safety, uptime, and process integrity across IT and OT environments. This Cybersecurity Analyst I role supports daily monitoring, alert triage, and incident response participation, with structured learning opportunities to build strength in OT/ICS security for rig and field operations.

What you will do

Monitor IT and OT environments, including corporate systems, rig control systems, and remote site connectivity, for alarms, suspicious email, anomalous activity, or other malicious indicators.
Triage security alerts and escalate to senior analysts and engineers when additional investigation or action is needed.
Analyze alert and telemetry data using Indicators of Compromise, Threat Intelligence feeds (for example, CISA advisories), and other available sources to identify potential malicious activity.
Support Helmerich & Payne’s Cybersecurity Incident Response Team by contributing to investigations and response activities under the guidance of senior team members.
Learn how to collaborate with Rig Operations, Controls Engineering, and field personnel so response actions in OT environments protect safety, uptime, and process integrity.
Document actions taken according to established standards.
Assist with Root Cause Analysis, After-Action Reporting, and Remediation following incidents.
Contribute to asset inventory, vulnerability tracking, and risk assessments across IT systems and the rig fleet.
Help create and maintain written security documentation, including processes, procedures, and playbooks.
Build OT/ICS security knowledge through on-the-job training, mentorship, and ongoing professional development.

Qualifications

Foundational understanding of cybersecurity concepts, including common threats, attack vectors, and defensive controls.
Basic networking knowledge such as TCP/IP, DNS, routing, firewalls, and network segmentation.
Basic familiarity with Windows and Linux and system logging.
Exposure through coursework, labs, internships, or personal projects to one or more of: SIEM, Intrusion Detection Systems, Firewalls, Endpoint Protection, Vulnerability Scanning, Packet Analysis, Email Security.
Interest in industrial control systems and operational technology, plus willingness to learn how security applies in field and rig environments.
Understanding that safety and operational continuity come first in OT environments.
Strong curiosity, attention to detail, and desire to learn and grow.
Ability to manage multiple tasks and follow through in a fast-paced environment.
Clear oral and written communication skills, including the ability to explain technical issues to both technical and non-technical audiences.
Strong interpersonal skills and the ability to work as part of a team with IT, Engineering, and Operations.

Technologies you may work with

SIEM, Intrusion Detection Systems, Firewalls, Endpoint Protection, Vulnerability Scanning, Packet Analysis, Email Security
Windows, Linux
TCP/IP, DNS, routing, network segmentation
Indicators of Compromise, Threat Intelligence feeds, CISA advisories
Modbus, EtherNet/IP, PLCs, HMIs, SCADA
NIST CSF, CIS Controls, ISA/IEC 62443, MITRE ATT&CK

Benefits

Comprehensive medical, dental, vision, and life insurance
Flexible Spending or Health Savings Accounts
401k match
Paid Leave Plans
Parental & Adoption Benefits
Disability Coverage
Employee Assistance Program
Educational Assistance
Learning & Development Opportunities
Flex-scheduling available for qualifying positions to support work-life integration

Not a must, but a plus

Bachelor’s degree in Computer Science, Management Information Systems, Information Assurance, Electrical/Controls Engineering, or a related STEM field, or equivalent experience
1–3 years of experience in IT support, network administration, security operations, or a related field, including internships
Exposure to industrial control systems such as PLCs, HMIs, or SCADA, or to industrial protocols such as Modbus or EtherNet/IP
Familiarity with security frameworks such as NIST CSF, CIS Controls, ISA/IEC 62443, or MITRE ATT&CK
Oil and Gas or other Critical Infrastructure experience (for example, Electric Power, Pipeline, Manufacturing, Water), including field or rig-site experience
Government or Military experience
Participation in cybersecurity competitions, home labs, or capture-the-flag (CTF) events
Entry-level certifications such as CompTIA Security+, Network+, CySA+, GIAC GSEC, ISC2 CC, or progress toward OT-focused certifications such as GICSP

View full job page →

Today

Cybersecurity Architect

Koch Atlanta, GA

Atlanta, GA

Today

Full time Cloud Platforms Cybersecurity Architecture Cybersecurity Tools

Apply Now

Job Description

Koch is hiring a Cybersecurity Architect based in Atlanta, GA 30301 (onsite) to provide cybersecurity expertise across MADICS merger, acquisition, divestiture, integration, closure, and site initiatives. The role supports transaction-focused security work, including due diligence, security architecture for integrations and site changes, and reusable architecture assets for Koch technology teams and operating companies.

Key Responsibilities

Act as the cybersecurity point of contact for blockers raised by project managers and technical subject matter experts on MADICS projects.
Lead cybersecurity due diligence and conduct risk assessments for acquisition, divestiture, and integration transactions, translating findings into clear implications for risk, cost, and timeline for the deal team.
Architect security designs for integrations, carve-outs, site builds, and site closures, spanning identity, network, endpoint, cloud and M365, and data protection.
Partner with project managers and business IT stakeholders to understand business problem(s) and develop plans that address them without delaying transaction activities.
Operate on tight timelines with urgency to meet delivery dates, making pragmatic security decisions when information is incomplete.
Create and publish cybersecurity points of view, reference architectures, and patterns that others can reuse across Koch.
Consult with Koch operating companies to understand their cybersecurity needs, applying an enterprise perspective while respecting how each business operates.
Provide security architecture guidance to support internal Koch Technology teams and related projects.
Build and maintain a knowledge network across Koch Technologies and operating companies, collaborating to leverage comparative advantage across the organization.

Required Experience

Experience in a cybersecurity or related role with knowledge across multiple security domains: identity, network, endpoint, cloud and M365, and data protection.
Experience assessing technology risk and translating technical findings into business terms for non-security stakeholders.
Experience partnering with project managers to document risks, solution plans, and risk optimization efforts.
Experience working in a multi-cultural environment with a diverse workforce.
Experience collaborating on global projects.

Technology Focus

M365

Benefits

Medical, dental, and vision
Flexible spending and health savings accounts
Life insurance
ADD, disability, and retirement
Paid vacation/time off
Educational assistance
May also include infertility assistance, paid parental leave, and adoption assistance

What Will Put You Ahead

Experience supporting mergers, acquisitions, divestitures, or carve-outs from a cybersecurity standpoint.
Experience developing cybersecurity points of view, reference architectures, or patterns adopted beyond a single project.
Demonstrated experience driving strategic initiatives, collaborating with stakeholders, and driving value-based conversations.
Stakeholder management experience across multiple business units or operating companies.

Equal Opportunity Information

Equal Opportunity Employer, including disability and protected veteran status.
Except where prohibited by state law, some offers of employment are conditioned upon successfully passing a drug test.
This employer uses E-Verify.

View full job page →

Today

Principal Classified Cybersecurity Analyst

Northrop Grumman Dulles, VA

Dulles, VA

Today

$114k - $171k/yr Full time Assessment & Authorization Cybersecurity Operations Cybersecurity Tools

Apply Now

Job Description

Join Northrop Grumman’s CIDO Classified Solutions team supporting information systems lifecycle activities in a mission-focused environment. This onsite, full-time role in Dulles, VA offers a 9/80 work schedule, comprehensive benefits and healthcare, a 401k matching program, paid time off, and opportunities to expand skills through learning across a wide variety of projects and customers. Work is classified in nature, so the position does not offer virtual or telecommute options.

Location: Dulles, VA (onsite)
Travel: 10% of the time
Pay range: USD 114,000 - 171,000 per yearly

What you’ll do

Conduct system audits and continuous monitoring across all security controls, configurations, and operational processes to evaluate the security posture of information systems.
Assess systems and networks within an enclave or networking environment, identifying deviations from acceptable configurations, enclave policy, or local policy.
Perform analyses to validate established security requirements and recommend additional requirements and safeguards.
Support implementation of required government policy, including recommendations on process tailoring, and participate in and document process activities.
Establish program control processes to mitigate risk and support Assessment and Authorization (A&A) of systems. This includes process support, analysis, coordination, security certification testing, security documentation, investigations, software research, hardware introduction and release, emerging technology research, inspections, and periodic audits.
Support Security Test and Evaluation (ST&E) activities required by government accrediting authorities, including pre-test preparation, test participation, result analysis, and report preparation.
Document A&A results and related technical or coordination activities, and prepare Risk Management Framework body of evidence.

Tools and frameworks you’ll work with

ACAS, Nessus, Splunk, Trellix, SCAP
NIST, JSIG, DAAG
SSPs, POA&Ms, SCTMs

Required qualifications

Master’s degree with 3 years of IT experience; OR Bachelor’s degree with 5 years of IT experience; OR Associate degree with 7 years of IT experience; OR High School Diploma/GED with 9 years of IT experience.
Must meet U.S. Government 8140 requirements for a Principal Cybersecurity Analyst, including an IAM level II equivalent (or higher) security certification (examples: CAP / CGRC, CASP+/SecurityX, CCISO, HCISPP, CISM, GSLC, CISSP-Associate, or CISSP).
Current U.S. Government Top Secret clearance (minimum), including a closed investigation date completed within the last 6 years, or enrollment in the U.S. Government Continuous Evaluation (CE) Program.
Ability to obtain and maintain access to Special Programs (SAP/SAR) as a condition of continued employment.

Benefits

Flexible work arrangements
Phenomenal learning opportunities
Exposure to a wide variety of projects and customers
Friendly team environment
Exceptional benefits/healthcare
9/80 work schedule
401k matching program
Depending on the position, eligibility for overtime, shift differential, and a discretionary bonus in addition to base pay
Annual bonuses designed to reward individual contributions and share in company results
Long Term Incentives eligibility for employees in Vice President or Director positions
Health insurance coverage
Life and disability insurance
Savings plan
Company paid holidays
Paid time off (PTO) for vacation and/or personal business

Additional details

Clearance required for start: Yes
Clearance type: Top Secret
Relocation assistance: No
Note: Due to the classified nature of the work, this position does not offer any virtual or telecommute working options. Apply only if you are willing to work on-site.
Application period: Estimated 20 days from the job posting date (may be shortened or extended based on business needs and candidate availability).

Preferred qualifications

Bachelor’s degree in Cybersecurity or related field
Security+ CE
Experience in cybersecurity compliance, for example Assessment & Authorization under RMF
Top Secret, SAP/SAR access, SCI access, and/or a Polygraph
Knowledge of security tools such as ACAS, Nessus, Splunk, Trellix, and SCAP
Knowledge of security frameworks and documentation such as NIST, JSIG, DAAG, SSPs, POA&Ms, and SCTMs

View full job page →

Today

Cybersecurity & Accreditation Specialist

Command Post Technologies, Inc. Suffolk, VA

Suffolk, VA

Today

Full time Azure Government Disa Cloud Srg Emass

Apply Now

Job Description

The Cybersecurity & Accreditation Specialist will help remove accreditation bottlenecks for Joint Staff J7 JTSD by owning the Assessment and Authorization (A&A) lifecycle and maintaining audit-ready documentation in eMASS to support Authorizations to Operate (ATOs) for JWCC Azure environments.

Location and Work Model

Suffolk, VA (hybrid)

Role Responsibilities

Manage end-to-end RMF package execution (Steps 1–6) in eMASS for systems migrating to Azure Government (IL5/IL6).
Develop and maintain authorization artifacts including System Security Plans (SSP), Continuous Monitoring Plans, Security Assessment Reports, and Plan of Action and Milestones (POA&M).
Assess and validate NIST SP 800-53 Rev 5 security controls, DISA Cloud Computing SRG requirements, and applicable STIG baselines.
Coordinate with Primary Government Project Leads, Division ISSMs, and Security Control Assessor (SCA) representatives to defend and support security packages.
Convert DoD Zero Trust mandate requirements into verifiable security controls within the defined RMF boundary.

Required Qualifications

U.S. Citizenship
Active Secret clearance
Bachelor’s degree in Cybersecurity, Information Systems, or related field, plus 7+ years of dedicated DoD cybersecurity and accreditation experience
Extensive, hands-on experience authoring and managing packages in eMASS through successful ATO awards
Deep working command of NIST SP 800-37, NIST SP 800-53 Rev 5, and DoD Instruction 8510.01 (RMF)
Current DoD 8570/8140 IAM Level II certification (examples: CISSP, CISM, or CAP/CGRC)
Strong problem-solving skills and the ability to troubleshoot complex issues
Effective communication and collaboration skills

Technologies and Frameworks

eMASS
Azure Government
Azure Secret
RMF
NIST SP 800-37
NIST SP 800-53 Rev 5
DoD Instruction 8510.01
DISA Cloud Computing SRG
STIG

Benefits

Great health benefits (for more info contact us directly)
Leadership training
401k with generous company matching
Employee Stock Ownership Plan (ESOP)
Career professional development
Tuition reimbursement
Flexible hours
Work/Life balance
Rewards and recognition
Paid Time Off
Parental Leave

Preferred Qualifications

Active Top Secret clearance with SCI eligibility
Direct experience developing RMF authorization packages for systems hosted in Azure Government (IL5) or Azure Secret (IL6), leveraging FedRAMP High and DISA Provisional Authorizations (PAs)
Familiarity with DevSecOps accreditation pathways, automated compliance evidence generation, and DoD Continuous ATO concepts
Demonstrated experience translating DoD Zero Trust Reference Architecture requirements into eMASS control implementation statements
Prior experience supporting Joint Staff, Combatant Command, or Army/Navy cyber accreditation workflows
Strong technical documentation, briefing, and reporting experience

View full job page →

Today

Senior Software Engineer – Functional Safety & Cybersecurity

MTCA Plymouth, MI

Plymouth, MI

Today

Full time Senior Automotive Cybersecurity Engineer

Apply Now

Job Description

Lead customer-facing functional safety and cybersecurity engineering for electrification software programs in a hybrid role in Plymouth.

Responsibilities

Act as the primary technical interface for customers on software-related Functional Safety and Cybersecurity topics.
Lead technical discussions, program reviews, and issue resolution with customers, suppliers, and global engineering teams.
Analyze OEM requirements and develop implementation, compliance, and delivery plans.
Provide project updates covering status, risks, mitigation plans, and technical issues to management and customers.
Monitor software development to support compliance with ISO 26262, ISO/SAE 21434, UN ECE R155/R156, ASPICE, and customer-specific requirements.
Track Functional Safety and Cybersecurity work products, milestones, and deliverables across the development lifecycle.
Review safety and cybersecurity requirements, implementation status, verification activities, and compliance documentation.
Support cybersecurity activities including secure boot, secure flashing, HSM integration, key management, and vulnerability management.
Coordinate safety and cybersecurity assessments, audits, and customer reviews.
Review software architecture, design documentation, test results, and implementation plans.
Participate in design reviews, software reviews, and technical risk assessments.
Ensure development activities follow Mobis processes, quality standards, and ASPICE requirements.
Support root cause analysis and problem-solving using structured methods such as 5 Whys and Fishbone Analysis, including corrective action planning.
Collaborate with systems, software, hardware, Functional Safety, Cybersecurity, and validation teams to drive program execution.
Coordinate technical activities across global development centers and external suppliers.
Drive issue resolution and track action items through closure.

Requirements

7+ years of experience in automotive embedded systems, software engineering, systems engineering, or technical project leadership.
Experience working with automotive OEM customers and managing customer-facing technical communications.
Knowledge of embedded software development processes and software lifecycle management.
Good understanding of cybersecurity concepts, including:
- Secure Boot
- Hardware Security Modules (HSM)
- Secure Flashing
- PKI/KMS and key provisioning
- Secure communications
Hands-on experience with Vector tools (CANoe, CANalyzer, CANape) and automotive communication protocols including CAN, CAN FD, LIN, UDS, and XCP.
Strong analytical, organizational, and problem-solving skills.
Excellent verbal and written communication skills, with the ability to influence technical and non-technical stakeholders.
Bachelor’s degree in Computer Engineering, Computer Science, Electrical Engineering, Electronics Engineering, or a related discipline (education text is truncated in source).
Strong understanding of automotive Functional Safety and Cybersecurity standards, including:
- ISO 26262
- ISO/SAE 21434
- UN ECE R155 / R156
- ASPICE

Preferred Qualifications

Experience with electrification products such as Battery Management Systems (BMS).
Experience with electrification products such as On-Board Chargers (OBC).
Experience with electrification products such as DC-DC Converters.
Experience with electrification products such as Traction Inverters.
Familiarity with Functional Safety and Cybersecurity audits, assessments, and compliance reviews.
Experience with requirements management and traceability tools such as DOORS, Polarion, Codebeamer.
Understanding of software architecture and AUTOSAR-based systems.
Experience with embedded C software development.
Master’s degree in Computer Science, Computer Engineering, Electrical Engineering, or related field.
Korean language proficiency is a plus.

Key Competencies

Customer Relationship Management
Functional Safety Leadership
Automotive Cybersecurity Management
Program Execution and Delivery
Risk Assessment and Mitigation
Cross-Functional Team Leadership
Supplier and Global Team Coordination
Technical Communication and Presentation
Requirements Management
Problem Solving and Root Cause Analysis

Skills and Technologies

Standards: ISO 26262, ISO/SAE 21434, UN ECE R155, UN ECE R156, ASPICE
Cybersecurity: Secure Boot, Hardware Security Modules (HSM), Secure Flashing, PKI/KMS, key provisioning, secure communications
Tools: Vector CANoe, CANalyzer, CANape, DOORS, Polarion, Codebeamer
Protocols: CAN, CAN FD, LIN, UDS, XCP
Root cause methods: 5 Whys, Fishbone Analysis
Architecture: AUTOSAR

Location and Schedule

Plymouth, MI (hybrid)
Typical work week: 45 hours/week
Flexible working hours with a typical day starting 7am to 9am, Monday through Friday

Travel

Occasional international travel
Frequent local travel

Physical Demands

Prolonged periods of sitting at a desk and working on a computer
Must be able to lift 15 pounds at times
Must be able to access and navigate each department at the organization’s facilities

Candidate Sponsorship

Mobis does not provide immigration-related sponsorship for this role.
Do not apply if you will need Mobis immigration sponsorship now or in the future (including company sponsorship or work authorization requiring written submission or other support from the company).
Examples listed: H-1B, OPT, STEM OPT, CPT, TN, J-1

Accessibility

Mobis North America is committed to working with and offering reasonable accommodation to applicants with disabilities.
For assistance or accommodation: MTCA_HR@gmobis.com

EEO Statement

Mobis North America is an Equal Opportunity Employer.
Equal opportunity regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.
No discharge or discrimination for inquiries or discussions about pay.

View full job page →

Today

Cloud Compliance Specialist

Unified Business Technologies Inc Fort Belvoir, VA

Fort Belvoir, VA

Today

Full time Cloud Compliance Documentation Cloud Platforms Continuous Monitoring

Apply Now

Job Description

The Cloud Compliance Specialist at Unified Business Technologies Inc supports cybersecurity compliance obligations for Army cloud systems, including RMF activities and ATO readiness. The role focuses on audit-ready documentation, continuous monitoring coordination, risk assessment, and maintaining secure cloud environments.

Key Responsibilities

Develop, review, update, and maintain cybersecurity compliance documentation for cloud-based systems.
Prepare and maintain System Security Plans (SSPs), compliance artifacts, and supporting ATO documentation.
Coordinate continuous monitoring activities across approved cloud environments.
Review automated vulnerability scans, security findings, and configuration drift reports to support ongoing compliance.
Identify noncompliant cloud resources and coordinate remediation activities with relevant stakeholders.
Track corrective actions and verify that required security measures are implemented.
Develop and maintain Plans of Action and Milestones (POA&Ms).
Conduct formal cloud architecture risk assessments.
Interpret and apply applicable cybersecurity control requirements.
Support RMF change control activities and compliance reporting.
Evaluate the security implications of system changes, new cloud services, and updated operational practices.
Coordinate with system owners, cloud engineers, cybersecurity specialists, and government personnel.
Maintain documentation and evidence supporting audits and ongoing cloud accreditation.

Required Qualifications

Approximately 4+ years of cybersecurity compliance, information assurance, RMF, or ISSO-related experience.
Direct experience preparing or maintaining ATO documentation.
Working knowledge of RMF processes and NIST security controls.
Experience with System Security Plans (SSPs), POA&Ms, vulnerability management, and continuous monitoring.
Ability to analyze security scan results and coordinate remediation activities.
Familiarity with AWS, Azure, or comparable cloud security environments.
Strong written documentation, auditing, and technical communication skills.

Preferred Qualifications

Experience with eMASS, DISA STIGs, ACAS, Nessus, or comparable tools.
Experience supporting cloud systems within Army or other federal environments.
Security+, CySA+, CISSP, CISM, or equivalent professional certification.
Familiarity with NIST SP 800-53, NIST SP 800-37, and federal cloud authorization activities.
Previous experience as an ISSO, RMF Analyst, ATO Specialist, or Information Assurance Engineer.

Technologies and Frameworks

RMF
NIST security controls
System Security Plans (SSPs)
Plans of Action and Milestones (POA&Ms)
Vulnerability management
Continuous monitoring
AWS, Azure
eMASS
DISA STIGs
ACAS, Nessus
NIST SP 800-53, NIST SP 800-37
Security+, CySA+, CISSP, CISM

Security Clearance

T-3 required under the PWS.

View full job page →

Today

Cybersecurity Analyst IAM I - Basic

COLSA Corporation Huntsville, AL

Huntsville, AL

Today

Full time Cybersecurity Operations Cybersecurity Tools Data Security

Apply Now

Job Description

COLSA Corporation is seeking a Cybersecurity Analyst (IAM I - Basic) to support the Missile Defense Agency (MDA) under the TEAMS-Next ITCM contract in Huntsville, AL (onsite). This role combines hands-on monitoring and analysis with mission-focused documentation and continuous compliance work inside the eMASS environment, helping strengthen security posture across complex DoD systems.

Responsibilities

Analyze customer requirements to help build project schedules, set milestone targets, and support on-time delivery.
Use sound judgment when evaluating multiple courses of action, especially when assessing risk and prioritizing work.
Perform comprehensive quality control assessments across the project lifecycle and ensure standards are maintained.
Develop and deliver executive-level briefings and presentations for senior leadership and stakeholders.
Use online research and analytical tools to troubleshoot and resolve issues.
Maintain and manage Plans of Action and Milestones (POA&M) to track progress, compliance, and risk mitigation.
Work within eMASS (Enterprise Mission Assurance Support Service) to document security controls, track authorization status, and support continuous monitoring compliance.
Advise and assist the customer with improvements and corrections to future and existing policies, processes, and procedures.
Perform quality control of Prime contractor tasks and artifacts.
Demonstrate competent knowledge of the Risk Management Framework, Computer Network Defense, and Vulnerability Mgmt.
Serve as a self-starter for key tasks with some or little direction.
Maintain strong communication skills with internal motivation and professionalism.
Work directly with other contracts and government stakeholders to minimize risk to the agency.
Apply problem-solving skills to resolve issues and mitigate risk.
Train and develop Basic level employees.
Use cybersecurity tools including ACAS, ESS, Tanium, SIEM, and eMASS to produce cybersecurity reports and deliverables.
Conduct quality reviews of cyber policies and documentation, and recommend updates.
Actively pursue advanced-level knowledge and skills for an Advanced Role.
Deliver quality products that require minimal modifications.

Requirements

Associate’s Degree (or Higher) in a related field.
Minimum 4 years DoD cyber experience.
Knowledge demonstrated in cyber and missile defense related efforts or complex large DoD Programs/Projects.
Active/Current DoD IAM Level I certification (CompTIA Security+ CE or equivalent).
Ability to obtain and maintain eMASS Certification within 30 days of hire date.
U.S. Citizenship required.
Active DoD SECRET security clearance.

Technologies: eMASS (Enterprise Mission Assurance Support Service), ACAS, ESS, Tanium, SIEM, Risk Management Framework, Computer Network Defense, Vulnerability Mgmt, CompTIA Security+ CE, POA&M.