CybersecurityJobs.io - Jobs in infosec and cybersecurity.

Latest Jobs

Today

Cyber Security Analyst/ SOC Analyst

Maxonic, Inc. Nashville, TN

Nashville, TN

Today

$80k - $132k/yr Full time Cybersecurity Operations Cybersecurity Tools Data Security

Apply Now

Job Description

Maxonic, Inc. is hiring a Cyber Security Analyst / SOC Analyst to strengthen day-to-day security operations for an enterprise environment. This onsite role is based in Nashville, TN, with a salary range of USD 80,000 to 132,000 per year. The position focuses on improving security visibility, supporting investigations and incident response, and helping drive vulnerability and control improvements.

What you’ll do

Monitor security alerts and events across enterprise systems, networks, endpoints, and email environments.
Review, investigate, and triage suspicious activity and potential incidents, escalating when appropriate.
Support incident response activities, including initial analysis, containment, documentation, and remediation follow-up.
Assist with vulnerability scanning, review findings, track remediation, and coordinate follow-up with technical teams.
Monitor endpoint security and threat protection tooling, including Trend Micro or comparable platforms.
Support security investigations by gathering relevant system, endpoint, and network information.
Perform basic network and system troubleshooting as part of security investigations.
Maintain accurate incident records, investigation notes, security documentation, and operational procedures.
Support patching and security configuration reviews, contributing to ongoing security control improvements.
Assist with security audits and compliance activities, including evidence collection aligned with ISO 27001.
Partner with IT and infrastructure teams to strengthen threat detection, response processes, and security awareness.

What you’ll bring

Experience in cybersecurity, a SOC, IT support, help desk, desktop support, endpoint support, desktop engineering, or a related technical environment.
Understanding of basic security concepts, including security alerts, endpoint protection, vulnerability management, and incident handling.
Fundamental knowledge of Windows systems, endpoints, networking, IP addresses, DNS, and common troubleshooting methods.
Ability to investigate methodically, document findings, and communicate clearly when escalation is needed.
Familiarity with endpoint security and monitoring tools such as Trend Micro, Microsoft Defender, or comparable platforms.
Exposure to vulnerability scanning tools such as Tenable Nessus, Qualys, or Rapid7 is beneficial.
Strong communication and analytical thinking, with integrity and sound judgment, plus a willingness to learn.

Tools and frameworks involved

Trend Micro, Microsoft Defender
Tenable Nessus, Qualys, Rapid7
ISO 27001, NIST

Helpful background (preferred)

Previous SOC Analyst, Security Analyst, help desk, desktop support, endpoint support, or IT operations experience.
Hands-on work with security monitoring, alert triage, incident investigation, or vulnerability remediation.
Experience with Trend Micro or other endpoint detection and protection tools.
Knowledge of ISO 27001, NIST, or other information security frameworks.
Personal labs, home-lab projects, coursework, or practical cybersecurity exercises that demonstrate applied technical knowledge.
Exposure to manufacturing, industrial, or operational technology (OT) environments is beneficial, but not required.

View full job page →

Today

Security Engineer

Consumers Energy Jackson, MI

Jackson, MI

Today

Full time Application Security Azure Ad / Entra Id Cybersecurity Tools

Apply Now

Job Description

Consumers Energy is building security that keeps pace with changing threats. As a Security Engineer in a hybrid role based in Jackson, MI, you’ll help strengthen the organization’s security program through hands-on control implementation, continuous monitoring, and incident response support, while improving security processes across the system lifecycle.

This position includes opportunities to operate and secure security infrastructure, automate key workflows using SOAR and scripting, and work across teams that include Development, IT, and business stakeholders. You’ll also contribute to security documentation and compliance support, while staying current on emerging threats and industry practices.

Responsibilities

Partner with cross-functional teams, including Development, IT, and business stakeholders, to embed security best practices throughout the system lifecycle.
Automate security processes using scripting and Security Orchestration, Automation, and Response (SOAR) platforms to improve efficiency and consistency for incident response and vulnerability management.
Deploy and operate security tools across at least one security domain, such as Identity Services, Automation, Network Security Services, Security Engineering, Application Security and Penetration Testing, or Vulnerability Management.
Implement, operate, and maintain security solutions for systems, networks, and applications to improve resilience against emerging threats.
Support incident response and problem-solving by investigating security events and applying corrective actions.
Assist with maintaining security policies, procedures, and documentation aligned to regulatory and organizational standards.
Research and stay informed about emerging security threats, technologies, and industry practices to drive continuous improvement.
Develop and optimize security controls through technology and process improvements that support business objectives while meeting security requirements.

Requirements

Excellent written and verbal communication skills, with the ability to communicate and influence both technical and non-technical stakeholders.
Team-oriented approach and collaboration mindset, aligned with being humble, hungry, and people-smart.
Knowledge of cybersecurity technologies, principles, and concepts.
Hands-on experience in at least one security domain: Identity Services, Automation, Network Security Services, Security Engineering, Application Security and Penetration Testing, or Vulnerability Management.
Strong troubleshooting and problem-solving skills to navigate systems and resolve routine technical issues efficiently.

Tools and Technologies

Experience with one or more of the following is expected: SOAR platforms, AAA Services, Active Directory, Application Control, Asset Discovery and Inventory Management, Azure AD, CI/CD Platforms, DDoS Protection, Data Loss Prevention (DLP), Dynamic Application Security Testing (DAST), Email Security, Endpoint Detection and Response (EDR), Firewalls, Infrastructure as Code (IaC) Security, Logging, Multifactor Authentication Technologies, Network Access Control (NAC), Networking Protocols, Scripting Languages, Software Composition Analysis (SCA), Secure Development Practices, Security Assessment and Testing, Security Configuration Assessment, Single Sign-On (SSO), Static Application Security Testing (SAST), Threat Intelligence, Vulnerability Scanning and Assessment Tools, Virtual Private Networks (VPN), Web Proxies.

Benefits

Competitive compensation packages
Medical, Dental and Vision
401k with company match
Paid parental leave
Up to 13 paid Holidays
Paid time off
Educational Assistance Program

Location and Work Model

This is a hybrid (virtual/onsite) role with required onsite days on Monday, Tuesday and Thursday at One Energy Plaza in Jackson, MI. The selected candidate must be within commutable distance or willing to relocate (relocation package is available for those that qualify).

Immigration Sponsorship

This position is not eligible for immigration sponsorship (for example, H-1B, TN, etc.). Consumers Energy is unable to hire individuals with CPT, OPT, or STEM OPT for this role, as it is not eligible for participation in the H-1B lottery program and does not offer current or future immigration sponsorship for a work visa.

Education and Experience

You meet the baseline criteria with one of the following options:

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, with two (2) or more years of hands-on experience with technologies and disciplines listed in the requirements (including AAA Services, Active Directory, Application Control, Asset Discovery and Inventory Management, Azure AD, CI/CD Platforms, DDoS Protection, Data Loss Prevention (DLP), Dynamic Application Security Testing (DAST), Email Security, Endpoint Detection and Response (EDR), Firewalls, Infrastructure as Code (IaC) Security, Logging, Multifactor Authentication Technologies, Network Access Control (NAC), Networking Protocols, Scripting Languages, Software Composition Analysis (SCA), Secure Development Practices, Security Assessment and Testing, Security Configuration Assessment, Single Sign-On (SSO), Static Application Security Testing (SAST), Threat Intelligence, Vulnerability Scanning and Assessment Tools, VPN, and Web Proxies).
Associate degree in Cybersecurity, Computer Science, Information Technology, or a related field, with four (4) or more years of the experience outlined above.
High school diploma or GED, with six (6) or more years of the experience outlined above.

View full job page →

Today

Senior IT Security Engineer

Supernus Pharmaceuticals Inc Rockville, MD

Rockville, MD

Today

$160k - $190k/yr Full time Senior Cybersecurity Operations Data Security

Apply Now

Job Description

Supernus Pharmaceuticals Inc is hiring a Senior IT Security Engineer to architect, operate, and mature enterprise security controls that protect systems, data, and users.

Responsibilities

Operate, tune, and integrate security platforms including CrowdStrike, Zscaler, Microsoft Defender, Microsoft Endpoint Manager, Tenable, Office 365, Azure AD, and associated logging solutions to maintain enterprise-wide situational awareness.
Own triage and investigation of security alerts originating from the external Security Operations Center (SOC), distinguishing false positives from true incidents.
Coordinate and, when needed, lead incident response for events impacting confidentiality, integrity, or availability; escalate to IT Leadership with impact, risk, and recommended remediation.
Develop, review, and maintain IT security policies, standards, procedures, and technical control documentation aligned with industry best practices and regulatory requirements.
Oversee vulnerability management including analysis, prioritization, and tracking remediation across endpoints, servers, applications, and cloud workloads; partner with infrastructure and application teams to drive timely closure.
Analyze suspicious emails by ensuring accurate classification, supporting metrics and reporting, and communicating findings and preventive guidance to users.
Drive the use of the Supernus KnowBe4 platform to plan and deploy ongoing security and privacy training, phishing simulations, and awareness campaigns; provide feedback on effectiveness.
Establish and maintain secure configurations and patching standards; ensure critical security updates are evaluated, tested, and deployed rapidly.
Monitor cybersecurity intelligence feeds, news, and threat actor TTPs; translate threat information into actionable recommendations for Supernus.
Synthesize and communicate the impact of security bulletins and publicly disclosed vulnerabilities; advise leadership and technical teams on risk and mitigations.
Partner with extended IT teams to embed security by design into new systems, cloud initiatives, and modernization efforts for legacy platforms, providing guidance on secure architectures and patterns.
Lead or support technical post-incident reviews, root cause analysis, and lessons learned; ensure corrective actions are identified, tracked, and implemented.
Champion and enforce security policies, procedures, and least-privilege access control standards across IT and business units to support audit and compliance activities.
Evaluate and recommend emerging security technologies, services, and standards; build business cases where appropriate and help plan security roadmap enhancements.
Collaborate cross-functionally (infrastructure, application development, data, compliance, and business stakeholders) to design and deliver security solutions that enable business outcomes while managing risk.
Mentor, coach, and provide technical direction to other IT staff to foster continuous improvement and knowledge sharing.
Other responsibilities and projects as assigned.

Requirements

Bachelor’s degree in cyber/IT Security, Computer Science, Computer Engineering, or related field required.
12+ years of progressive experience in IT security and system administration, including considerable experience in enterprise security engineering and operations.
Microsoft Security, Certified Information Systems Security Professional (CISSP), or similar certifications highly preferred.
Proven ability implementing, managing, and optimizing security software systems and products in complex environments.
Deep knowledge of system and software management best practices with demonstrated troubleshooting and resolution of complex security and infrastructure issues.
Strong understanding of Security Operations Center processes including monitoring, incident handling, and escalation.
Demonstrated knowledge of data privacy and protection practices and relevant regulatory expectations.
Advanced working knowledge of security technologies including SIEM, intrusion detection/prevention, endpoint protection, web proxy/content filtering, Active Directory, PKI, RADIUS, and log analysis.
Ability to work independently and as part of a team while maintaining high ethical standards of integrity and quality.
Ability to take an innovative and dynamic approach to work.
Self-starter comfortable working independently and in a team environment.
Ability to consistently exhibit Supernus Values in interactions with employees, vendors, customers, and others.
Authorized to legally work in the United States without visa sponsorship.
Capable of performing other duties as assigned by Management.

Technologies

CrowdStrike
Zscaler
Microsoft Defender
Microsoft Endpoint Manager
Tenable
Office 365
Azure AD
Logging solutions
Supernus KnowBe4 platform
SIEM
Intrusion detection/prevention
Endpoint protection
Web proxy/content filtering
Active Directory
PKI
RADIUS
Log analysis

Benefits

Health
Dental
Vision
Paid time off
401k company match
Company-paid life insurance
Health and wellness benefits
Stock equity awards
Employee stock purchase programs
Participation in the Company’s discretionary annual bonus program

Work Environment / Physical Requirements / Travel

Lifting requirements: exerting up to 35 pounds of force occasionally, up to 10 pounds of force frequently, and negligible force regularly to move objects.
Close visual acuity required for preparing and analyzing data, transcribing, viewing a computer terminal, and extensive reading.
Not substantially exposed to adverse environmental conditions.
Travel to Supernus HQ as needed for meetings, projects, and other business activities.

Compensation

Expected salary range: $160,000 to $190,000 per year for fully qualified candidates.
Total compensation includes other elements such as stock equity awards, employee stock purchase programs, and participation in the Company’s discretionary annual bonus program.

Location: Rockville, MD (onsite)

Experience: 12+ years

Salary: USD 160,000 - 190,000 per yearly

View full job page →

Today

Security Engineer

World Wide Technology Holding, LLC St. Louis, MO

St. Louis, MO

Today

$92k - $138k/yr Full time Container Security Containers DevSecOps

Apply Now

Job Description

This embedded Security Engineer role strengthens the security of Kubernetes and Red Hat OpenShift platforms, with a focus on vulnerability assessment, posture improvement, and automation across software-delivery and supply-chain workflows. The position supports platform engineering teams across a hybrid footprint and works closely with enterprise security functions.

Location and Work Model

St. Louis, MO (hybrid). This role is hybrid and based in St. Louis, Missouri.

Compensation

The reasonable estimate of the current base pay range for this position is $92,000 to $138,000 annually. Actual salary depends on factors including shift, location, experience, skills, performance, licensure and certification, and business needs. The salary range may differ for other geographic locations, and variable incentive compensation may apply in some cases, which is not included in the base pay.

Salary Range Posting Note

Certain states and localities require an estimate of salary range. This role’s base pay estimate is $92,000 to $138,000, with actual compensation determined by business needs and candidate qualifications.

Core Responsibilities

Monitor emerging vulnerabilities and regularly assess the security posture of Kubernetes, OpenShift, underlying Linux hosts, container workloads, and shared platform services, then identify and prioritize risks and control gaps and drive remediation to completion.
Develop automation for continuous security posture assessment, streamline vulnerability management, and remediate repeatable, well-understood security issues where appropriate.
Implement and improve Kubernetes and OpenShift security controls, including RBAC, Security Context Constraints (SCCs), Pod Security Admission, network policies and segmentation, ingress and service mesh security (including mTLS and authorization policies), secrets and certificate management, workload identity, and policy-as-code controls.
Configure, integrate, maintain, and optimize security tools to provide accurate, actionable insight into platform vulnerabilities and risks.
Evaluate and recommend security tools and technical controls to improve vulnerability management, security monitoring, access visibility, and compliance.
Strengthen DevSecOps and software supply-chain security across CI/CD and GitOps workflows, including vulnerability and secret scanning, dependency and container image controls, SBOMs, image provenance, and workflow permissions.
Partner with platform and application engineers to interpret findings, select practical remediation approaches that balance security with reliability, developer experience, and business needs, and incorporate security into platform designs and delivery workflows.
Document security findings, control decisions, remediation approaches, exceptions, standards, and recurring processes, and communicate material risks to technical and non-technical stakeholders.
Participate in security investigations, incident response, a shared on-call rotation, and scheduled platform maintenance, including some work outside normal business hours.

Platform and Technology Scope

Work primarily with Kubernetes and Red Hat OpenShift environments across on-premises and cloud-connected infrastructure and shared application platforms running within them, including MongoDB, PostgreSQL, Redis, RabbitMQ, and Apache Solr.
Support a delivery ecosystem that includes GitHub Actions, Codefresh, Argo CD, GitOps, Helm, APIs, and configuration-as-code practices.
Use Wiz, Tenable, and Red Hat Advanced Cluster Security (ACS) for vulnerability management, Kubernetes and container security, compliance, and risk visibility. Experience with these platforms is helpful, and comparable security technology experience is also relevant.
Expected use of approved AI-assisted engineering tools to automate security analysis, triage, and remediation workflows. Sound judgment, validation of results, and secure data-handling practices are required.

Required Qualifications

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, or an equivalent combination of education, training, and practical experience.
3 to 5 years of experience in security engineering, platform security, infrastructure security, DevSecOps, vulnerability management, or a related technical field.
Hands-on experience securing Kubernetes or containerized platforms, including identity and access, workload security, network controls, secrets, images, and secure configuration.
Experience using vulnerability and security findings to assess risk, prioritize remediation, and improve security posture, including configuring or maintaining the security tools that produce those findings.
Experience scripting or building automation with Python, PowerShell, Bash, or a similar language.
Understanding of DevSecOps and secure software-delivery practices, including CI/CD, container images, application dependencies, and software supply-chain risk.
Ability to troubleshoot technical issues, analyze risk, document findings, and complete assigned work with limited direction.
Strong written and verbal communication skills, sound engineering judgment, and ability to collaborate with platform engineers, developers, security teams, and compliance partners.

Preferred Qualifications

Experience applying Kubernetes security practices in Red Hat OpenShift, including SCCs, operators, and cluster policy.
Experience with Red Hat Advanced Cluster Security (ACS), Wiz, Tenable, or comparable container security, cloud security, and vulnerability-management platforms.
Hands-on experience implementing controls such as SAST, SCA, secret scanning, SBOM generation, container scanning, image signing, or provenance.
Ability to read and review code in at least one common language such as Java, TypeScript, Python, or Go, and familiarity with common application and API vulnerability classes.
Experience securing service mesh (such as Istio), ingress, API gateways, or Linux hosts.
Experience with GitOps, Helm, Ansible, Terraform, Kubernetes operators, or YAML-based pipeline automation.
Familiarity with security standards and practices such as OWASP Top 10, OWASP API Security Top 10, NIST Secure Software Development Framework, CIS Benchmarks, SLSA, or MITRE ATT&CK.
Relevant security or cloud certifications, such as Security+, CISSP, CCSP, or Certified Kubernetes Security Specialist (CKS).

Technologies and Tools

Key technologies include: Kubernetes, containerized platforms, Python, PowerShell, Bash, DevSecOps, CI/CD, container images, software supply-chain risk, RBAC, SCCs, Pod Security Admission, network policies, ingress, service mesh, mTLS, authorization policies, secrets and certificate management, workload identity, policy-as-code, SBOMs, Wiz, Tenable, Red Hat Advanced Cluster Security (ACS), Red Hat OpenShift, GitOps, Helm, Ansible, Terraform, Istio, Linux, MongoDB, PostgreSQL, Redis, RabbitMQ, Apache Solr, GitHub Actions, Codefresh, Argo CD, YAML-based pipeline automation, SAST, SCA, secret scanning, container scanning, image signing, provenance, OWASP Top 10, OWASP API Security Top 10, NIST Secure Software Development Framework, CIS Benchmarks, SLSA, MITRE ATT&CK, Java, TypeScript, Go, service mesh (such as Istio), API gateways, and Linux hosts.

Benefits

Health (Medical & Prescription), Dental, and Vision Care
Onsite Health Centers (MO & IL)
Employee Assistance Program
Wellness program
Competitive Pay
Profit Sharing
401k Plan with Company Matching
Life and Disability Insurance
Flexible Spending Accounts
Tuition Reimbursement
PTO & Holidays
Parental Leave, Medical Leave, Military Leave
Bereavement, Day of Caring
Family Planning Benefits, Nursing Mothers Benefits
Voluntary Legal
Voluntary Supplemental Accident/Illness/Hospital
Voluntary ID Theft
Pet Insurance
Employee Discount Program

Work Authorization and Candidate Eligibility

This position requires permanent U.S. work authorization.
Candidates requiring current or future visa sponsorship, including those on OPT, CPT, or H1/H4, are not eligible.
This role is not open for staffing partners or corp-to-corp candidates.

View full job page →

Today

Sr Security Software Specialist - API Security Engineer

TIAA Dallas, TX

Dallas, TX

Today

$160k - $210k/yr Full time Senior Ai Security Api Security

Apply Now

Job Description

The Sr Security Software Development role focuses on API security engineering strategy and the delivery of horizontal enterprise security solutions across applications, APIs, and cloud platforms. The position involves designing secure architectures, leading security assessments, and applying automation, including AI-driven approaches, to strengthen cyber security practices.

Location and Employment Details

Location: Dallas, TX (onsite)
Anticipated posting end date: 2026-11-13
Career level: 9IC

Compensation

Base pay range: $160,000/yr - $210,000/yr

Role Summary

The Sr Security Software Development Engineer leads API Security engineering strategy to build well-architected, secure enterprise solutions. The role also includes leading a team to design secure architectures, perform security assessment work, and automate cyber security practices using AI.

Key Responsibilities

Design and implement secure architectures for applications, APIs, and cloud platforms, including authentication mechanisms, encryption protocols, and security monitoring frameworks
Perform security assessments using code reviews, threat modeling, and automated testing integration within CI/CD pipelines
Define and maintain security standards, best practices, and guidelines while educating development teams on secure coding
Partner with cross-functional teams to integrate security across the software development lifecycle and support compliance with relevant regulations
Identify opportunities to automate and enhance cyber security practices using Generative AI or Traditional AI mechanisms
Improve operational efficiency by automating processes or software systems
Provide technical leadership and mentorship to junior engineers within and outside the team

Required Qualifications

5+ years of experience in software engineering or application security roles
5+ years using at least one major programming language (Java, Python, C#, or Go) with secure coding practices
3+ years hands-on experience in web application and/or API security using cryptographic methods, authentication/authorization frameworks (OAuth 2.0, OIDC), and/or secure key management
2+ years experience working in Agile software development practices
2+ years experience with one or more cloud platforms (AWS, Microsoft Azure, Oracle Cloud, Google Cloud Platform)
Education: Bachelor’s Degree or Equivalent Experience Required

Preferred Skills

3+ years of full stack development experience using React JS, Next JS, and Auth JS
Hands-on experience with web application and API security testing, vulnerability assessment, and remediation
Knowledge of security standards (NIST identity & security, OWASP Top 10), hardening standards, and implementing controls for regulatory frameworks such as NY-DFS
Ability to conduct effective threat modeling and security architecture reviews for complex software systems
1+ years experience using open source Generative or traditional AI software solutions to automate or improve operational efficiency

Technologies

Java, Python, C#, Go
OAuth 2.0, OIDC
CI/CD pipelines
AWS, Microsoft Azure, Oracle Cloud, Google Cloud Platform
React JS, Next JS, Auth JS

Additional Skills

Accountability
Adaptability
Business Continuity Planning
Cloud Computing Security
Collaboration
Communication
Compliance
Consultative Communication
Cybersecurity
Detail-Oriented
General Risk Management
Network Security
Prioritizes Effectively

Benefits

Superior retirement program
Highly competitive health, wellness, and work life offerings
Comprehensive Total Rewards package

Physical Requirements

Sedentary Work

View full job page →

Today

Senior Application Security Analyst

Kemper Insurance Dallas, TX

Dallas, TX

Today

$89k - $148k/yr Full time Senior Ai Application Security Application Security

Apply Now

Job Description

Kemper Insurance is hiring a Senior Application Security Analyst in Dallas, TX (onsite). This role focuses on strengthening application and API security while helping improve software delivery practices, including safeguards for software dependencies and AI-enabled application functionality. The compensation range is USD 89,000 - 148,000 per year.

What you’ll do

You will help identify and reduce security weaknesses across applications, APIs, and the software delivery lifecycle. Your work will include threat-aware review of system designs and technical evaluation of security findings, with an emphasis on turning results into actionable remediation and durable control improvements.

Review application designs and support threat modeling.
Evaluate code, dependency, and application-testing findings to determine security risk.
Prioritize weaknesses using exploitability and business impact.
Validate that fixes address root causes and improve delivery-process controls.
Assess relevant risks tied to software dependencies and AI-enabled application functionality.

What you bring

A relevant degree or an equivalent combination of professional experience, education, and demonstrated expertise.
5+ years in application security or software engineering, including 3+ years of hands-on application-security work.
An application-security credential such as CSSLP, GWAPT, GWEB, OSWE, or a comparable certification.
Experience across secure design, API security, testing, and collaborating with developers.

Security skills and technologies

Relevant technologies and credential examples include CSSLP, GWAPT, GWEB, OSWE, and CISSP.

Benefits

Medical
Dental
Vision
PTO
401K

Location

Primary location: Dallas, TX (onsite). Additional locations listed: Chicago, Illinois, and P&C-Butterfield Road-Downers Grove-IL-AAC.

Nice to have

Relevant programming-language expertise and software supply-chain controls.
CISSP or a comparable security credential.

View full job page →

Today

Security Engineer, RF and Technical Surveillance Countermeasures

Anthropic San Francisco, CA

San Francisco, CA

Today

$320k - $405k/yr Full time Security Automation Security Detection Engineering Security Engineering

Apply Now

Job Description

Own end-to-end RF monitoring, detection, and technical surveillance countermeasures across data center sites, including evidence, alerting, and pre-opening sign-off.

Responsibilities

Design and develop on-site RF monitoring and detection for each site, including sensor, receiver, and antenna selection and placement, spectrum monitoring architecture, and RF baselines with processes to keep them current
Build detection and classification tooling, including instruments and software for checks between sweeps, plus findings and evidence records that support alert trust for security monitoring analysts
Develop tools or agents to retire review tasks that repeatedly cost time
Own technical surveillance countermeasures (TSCM) end to end: define sweep cadence by space sensitivity, set event-driven triggers (fit-out, room turnover, incident), establish per-sweep scope and acceptance criteria, and ensure findings are handled with evidence and closure that an assessor accepts
Set site posture requirements, including assessment method, zoning and separation, and shielding, filtering, and protected cabling where warranted, documented in design and build standards for implementation and assessor verification
Detect which radios are actually present by location (cellular, Wi-Fi, Bluetooth, IoT, trunked radio) and produce evidence that policy requirements hold on the floor
Define sweep and assessment scope and deliverable standards, direct work on site, and determine in the acceptance review whether a report meets requirements
Carry RF and emanations requirements into design reviews, lease terms, and pre-opening reviews; perform and sign off RF and emanations activities, including pre-opening sweep and assessment, before a site opens

Requirements

Built at least one RF monitoring or detection system end to end, from receiver and antenna selection through software that turns captures into alerts
Engineering-level understanding of propagation, modulation, spectrum analysis, and antenna behavior, with hands-on use of spectrum analyzers and software-defined radios
Planned and conducted TSCM sweeps, with ability to explain what a sweep can and cannot find and how an adversary could bypass it
Hands-on RF security, TSCM, or emanations work experience for data centers, critical infrastructure, or large hardware fleets
Ability to read and review code, understand the data systems behind monitoring and detection tooling, and build automation (often using AI coding agents) using Git and code review
Understand compromising emanations and the tradeoffs for zoning, shielding, and filtering; write requirements that construction teams or landlords can build and assessors can test
Ability to direct and validate specialist vendor work independently, including writing scope, checking results, and rejecting weak reports

Technologies

Git
Code review
AI coding agents

Benefits

Competitive compensation and benefits
Optional equity donation matching
Generous vacation and parental leave
Flexible working hours
Lovely office space for collaboration

Preferred Qualifications

Experience assessing compromising emanations and shielding or filtering tradeoffs in a live facility; applying a formal emanations or counter-surveillance standard (TEMPEST, ICD 705 style construction requirements, or a corporate equivalent)
Experience building signal classification or spectrum analysis pipelines at scale, or tuning RF detections for a security operations workflow so operators kept trusting them
Familiarity with airspace or drone RF detection, including where airspace detection ends and on-site monitoring begins
Experience at sites not fully controlled by you, such as colocation or multi-tenant facilities where the RF environment and walls are not yours alone
Experience building AI agents or automation that replaced recurring manual security work

Salary

$320,000 - $405,000 USD per year

Logistics

Location: San Francisco, CA (hybrid)
Travel: Regular travel to data center sites (critical infrastructure)
Remote consideration: Remote applicants in the US considered
Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience: Correlates with internal job level requirements
Hybrid policy: Expect all staff to be in one of our offices at least 25% of the time; some roles may require more time on site
Visa sponsorship: Visa sponsorship available; not guaranteed for every role and candidate. If an offer is made, Anthropic will make reasonable efforts and retains an immigration lawyer to help.
California hiring notice: Employment consideration applies to qualified applicants with arrest or conviction records in a manner consistent with applicable law, including the San Francisco Fair Chance Ordinance, LA Fair Chance Initiative for Hiring, LA County Fair Chance Ordinance, and the California Fair Chance Act.

Safety and application scam guidance

Anthropic recruiters contact you only from @anthropic.com email addresses
Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day