CybersecurityJobs.io

Latest Jobs

Today

Supervisory IT Specialist (INFOSEC)

US National Institutes of Health Montgomery County, MD

Montgomery County, MD

Today

$144k - $187k/yr Full time Manager Information Security Information Technology (IT)

Apply Now

Job Description

At the National Institutes of Health, specifically within the NIDDK division, the Supervisory IT Specialist (INFOSEC) role sits at the crossroads of leadership and technical excellence. This position drives security architecture decisions, oversees critical security initiatives, and ensures enforcement of federal policies across complex information systems in a high-stakes environment.

Responsibilities

Advise management on security architecture matters and strategic direction
Lead and oversee projects to implement or update enterprise security architecture or system components
Serve as the principal point of contact for coordination, implementation, and enforcement of information security policies
Perform comprehensive risk and vulnerability analyses on all systems
Contribute to the development and maintenance of system security plans, contingency plans, risk assessments, and certification statements
Coordinate, review, and ensure compliance with the Integrated Technology Policy for contracts

Requirements

U.S. Citizenship or proof of being a U.S. National by the closing date; foreign nationals are not eligible
Background investigation, qualification verification, onboarding forms, submission of required documents, and any other job-related requirements before or after appointment
All qualification requirements must be met by the closing date
Males born after December 31, 1959 must be registered with the Selective Service
A one-year supervisory trial or probationary period may be required upon selection/placement
Confidential Financial Disclosure Report, OGE Form 450, is required
Attention to detail, customer service, oral communication, and problem solving skills
IT-related experience demonstrating four competencies, or an alternative path: one year of specialized experience equivalent to GS-13 in Federal service

Overview

Location: Montgomery County, MD (onsite)
Salary: $143,913 to $187,093 per year
Pay scale: GS-14; Promotion potential: 14
Work schedule: Full-time
Travel: Occasional travel
Telework eligibility: Yes, as determined by agency policy; remote work is not available
Designation: Tier II, non-emergency/teleworker position

Education

No education qualification is required for this position.

How to Apply

Submit your online application through USAJOBS by the stated deadline and include all required documents. The complete package must be received by 11:59 PM Eastern Time on 07/13/2026. Follow the prompts to attach your resume and supporting materials, answer eligibility questions, and complete the application questionnaire. You may also attach a cover letter, transcripts, and applicable certifications or licenses.

Agency Contact Information

NIH HR Service Desk Branch G
Email: hrservicedeskbranchg@od.nih.gov
Address: National Institutes of Health, 6701 Rockledge Drive, Bethesda, MD 20892, US

Next Steps

You will receive an acknowledgement email after submitting your application and will be notified of the status via email. Application progress can be tracked in your USAJOBS account. You may be contacted for an interview or to provide additional information up to several months after the closing date.

View full job page →

Today

Cybersecurity Engineer

All In Solutions Remote 🌍 Remote

Remote

Today

Up to $150k/yr Full time Application Security Aws Govcloud Cloud

Apply Now

Job Description

Remote work opportunity with competitive compensation and the chance to safeguard a mission-critical cloud platform hosted in AWS GovCloud. This role emphasizes Zero Trust, ongoing compliance with NIST, FISMA, FIPS, HIPAA, and VA requirements, and the integration of security into the DevSecOps lifecycle. You will play a key part in shaping secure, resilient cloud capabilities across environments and authorization boundaries.

Responsibilities

Apply and maintain baseline NIST security controls across all platform environments.
Integrate SAST, DAST, SCA, container scanning, and Infrastructure as Code scanning into CI/CD pipelines.
Remediate vulnerabilities identified by scans within government-defined timelines.
Enforce secure coding standards and approved dependency management across development activities.
Implement and uphold Zero Trust Architecture and least-privilege access across all components and tenant boundaries.
Configure and manage container security including image signing, vulnerability scanning, runtime protection, and registry security.
Operate centralized secrets management with automated rotation for production secrets where automation is supported.
Support zero-trust and least-privilege controls in pipeline and deployment configurations.
Validate security control effectiveness through automated testing, configuration validation, and periodic assessments.
Support penetration testing, red team activities, and independent security assessments as required.
Implement encryption in transit and at rest across all data flows, storage, and backups using FIPS 140-3 modules.
Configure per-region KMS keys for multi-region deployments to prevent cross-region data confidentiality issues.
Support cybersecurity incident response activities in coordination with VA security operations, including forensic analysis and root-cause determination.
Implement and maintain firewall configurations, security group definitions, and network access controls in line with VA policies.
Support continuous monitoring activities including configuration validation, security event correlation, and anomaly detection.
Ensure all platform components comply with VA Critical Security Controls and are authorized before connecting to the VA network.
Support FICAM requirements including PIV-based authentication, automated provisioning, and assurance-level compliance.
Contribute to security documentation such as Security Impact Assessments, Vulnerability Management Plans, Security Assessment Plans, and Security Assessment Reports.
Participate in security audits and assessments providing technical evidence, documentation, and remediation support.
Participate in Agile and SAFe ceremonies including sprint planning, backlog refinement, demos, and retrospectives.

Requirements

Minimum 5 years of cybersecurity engineering experience in complex, mission-critical cloud environments, Federal or enterprise settings.
Hands-on experience implementing security controls in AWS, including EKS, IAM, KMS, security groups, VPC security, and encryption services.
Experience integrating SAST, DAST, SCA, and container scanning tools into CI/CD pipelines.
Strong knowledge of Zero Trust Architecture principles and practical implementation.
Experience with container security, including image scanning, runtime protection, and Kubernetes security policies.
Hands-on experience with secrets management tools such as AWS Secrets Manager, HashiCorp Vault, or Kubernetes secrets.
Familiarity with FIPS 140-3 cryptographic requirements and their cloud deployments.
Experience implementing and validating NIST SP 800-53 Rev. 5 controls.
Exposure to penetration testing, red team methodologies, and vulnerability remediation practices.
Experience with incident response including forensic analysis, evidence collection, and corrective action development.
Knowledge of Federal identity and access management requirements including FICAM, PIV, and multi-factor authentication.
Experience configuring firewalls, network security, and secure external connections in Federal cloud environments.
Understanding of HIPAA, Privacy Act, FISMA, and federal data protection requirements.
Experience working in Agile or SAFe environments with sprint-based cadences.
Certifications such as CISSP, CEH, GIAC, or equivalent are required.
AWS Security Specialty or equivalent cloud security certification preferred.
Certified Kubernetes Security Specialist (CKS) or equivalent certification preferred.
Bachelor's Degree with at least 5 years of cybersecurity engineering experience, including minimum 2 years implementing security controls for cloud-native platforms in Federal or enterprise IT environments.
Alternatively, an Associate's Degree with at least 7 years of cybersecurity engineering experience, including minimum 3 years implementing security controls for cloud-native platforms in Federal or enterprise IT environments.

Technologies

AWS GovCloud
AWS EKS
AWS IAM
AWS Secrets Manager
AWS KMS
HashiCorp Vault
Kubernetes
Kubernetes secrets
SAST
DAST
SCA
Infrastructure as Code scanning
SNOWCAM
TRM
BPE
FIPS 140-3
PIV-based authentication

Benefits

Department of Veterans Affairs (VA) experience
Active Personal Identity Verification (PIV) card
Experience with VA Critical Security Controls and VA Handbook 6500 security requirements
Experience implementing security controls across multi-tenant authorization boundaries
Experience with VA tools and governance processes including SNOWCAM, TRM, and BPE

Compensation

Up to USD 150,000 per year

View full job page →

Today

Special Agent: Cybersecurity/Technology Expertise

Federal Bureau of Investigation Philadelphia, PA

Philadelphia, PA

Today

$103k - $133k/yr Full time Agent Federal Agencies Information Security

Apply Now

Job Description

The Federal Bureau of Investigation seeks professionals with cybersecurity and technology expertise to transition into Special Agent duties, applying technical competencies to investigations that defend the nation against cyber threats.

Responsibilities

Plan and conduct investigations of potential violations of federal laws, cybersecurity concerns, and public safety matters.
Exercise judgment, resourcefulness, and versatility to meet investigative demands.
Create and maintain effective liaison relationships with federal, state, local, tribal, territorial, and international law enforcement agencies.
Maintain a level of physical fitness to ensure readiness to perform law enforcement duties.

Requirements

Must be a U.S. citizen.
Must be able to obtain a Top Secret Sensitive Compartmented Information (SCI) Clearance.
Must be willing to travel as required.
Must meet the FBI’s Employment Eligibility requirements.

Education

Bachelor's degree or higher.

Job Description

The advertised position is exempt from the federal civilian hiring freeze.
Leverage your cybersecurity background to become an FBI special agent.
The transition from technology to a special agent role represents an opportunity to upskill and become an expert in your field.
At the FBI, you will apply more than your technical support experience, building on it by working on cases that challenge you to think critically, adapt quickly, and collaborate with elite professionals addressing national security threats.
Your ability to uncover crucial information, solve problems, and apply technical knowledge will help protect the nation from cyberattacks, terrorism, fraud, and evolving threats.
With specialized training, real-world investigative experience, and access to cutting-edge technology, you will refine troubleshooting and information security skills, deepen your expertise, and develop a foundation to become a leader in the field.

How to Apply

Click on the “Apply” button to be directed to the FBIJobs Careers website.
Click the “Start” button to begin. You will be prompted to sign in to continue or register with FBIJobs if you do not already have an account.
Follow the step-by-step process to submit your interest. Complete all sections of the form and attach all required documents to successfully submit.

Your resume should note relevant work experience with corresponding start and end dates and must not exceed two pages. Additional documents include college transcripts if education is a qualifying factor, and veteran documentation (DD 214 for veterans; DD 214, SF-15, and VA letter dated 1991 or later for disabled veterans).

Salary

Pay range: $103,326.00 to $133,200.00 annually. Salary is commensurate with base, locality, and availability pay.

Job Type

Full-time

Work Location

On the road

Location

Philadelphia, PA (onsite)

View full job page →

Today

Special Agent: Cybersecurity/Technology Expertise

Federal Bureau of Investigation Richmond, VA

Richmond, VA

Today

$103k - $133k/yr Full time Agent Federal Agencies Information Security

Apply Now

Job Description

The FBI seeks a Special Agent who stands at the intersection of cybersecurity and law enforcement to investigate cyber threats and national security concerns. This role blends technical expertise with investigative training to protect the nation and support ongoing professional advancement within the Bureau.

Responsibilities

Plan and conduct investigations of potential violations of federal laws, cybersecurity, and public safety.
Exercise judgment, resourcefulness, and versatility in meeting investigative demands.
Create and maintain effective liaison relationships with federal, state, local, tribal, territorial, and international law enforcement agencies.
Maintain a level of physical fitness to ensure the readiness required to perform law enforcement duties.

Requirements

Must be a U.S. citizen.
Must be able to obtain a Top Secret Sensitive Compartmented Information (SCI) Clearance.
Must be willing to travel as required.
Must meet the FBI’s Employment Eligibility requirements.

Education

Bachelor's degree or higher.

Job Type

Full-time

Salary

USD 103,326 - 133,200 per year

Location

Richmond, VA (onsite)

Work Location

On the road

View full job page →

Today

Cybersecurity Technical Writer - AI Trainer

DataAnnotation Portland, OR 🇺🇸 Remote

Portland, OR

Today

$50 - $100/hr Full time Ai Content Review Ai Security Ai Training

Apply Now

Job Description

DataAnnotation is seeking a remote cybersecurity technical writer and AI trainer to evaluate AI generated security content, design security focused evaluation problems, and provide feedback to shape the next generation of AI security models.

Location

Oregon (remote)

Compensation

USD 50 - 100 per hour

Responsibilities

Assess AI generated cybersecurity content, including threat analyses, vulnerability assessments, and offensive security techniques, for real world accuracy and reliability.
Develop and solve security focused technical challenges used to train AI systems.
Produce clear technical explanations and security oriented code.
Provide actionable feedback that influences the next generation of AI security models.

Requirements

2+ years of hands on cybersecurity experience in roles such as penetration testing, red team operations, incident response, detection engineering, DFIR, malware analysis, threat intelligence, or related fields, including government or military cyber programs.
Some coding experience required; comfortable navigating and patching a codebase.
Fluency in English with strong writing skills (native or bilingual level).
A bachelor’s degree is preferred.
Cybersecurity certifications are a plus (for example OSCP, CRTO, GREM, GCFA, CEH, and similar).

Benefits

Fully remote: work from anywhere in the US, Canada, UK, Ireland, Australia, and New Zealand.
Flexible schedule: select projects and determine when you work, using your own computer from home.
Competitive pay: projects are paid hourly, up to $60 USD per hour, with opportunities for higher bonus rates on certain projects.
Impact: contribute to shaping AI technologies designed for cybersecurity.

Notes on payment and eligibility

Payment method: PayPal. The employer will never request money from applicants. This position is available to candidates located in the United States, Canada, United Kingdom, Ireland, Australia, and New Zealand.

View full job page →

Today

Container Security Engineer

Deloitte Dallas, TX

Dallas, TX

Today

$103k - $159k/yr Full time Application Security Build Tools CI/CD

Apply Now

Job Description

As a Container Security Engineer, you will support the Cloud Security Engineering Pod to deliver secure container platform capabilities and drive architecture, design, and operations for OpenShift and Kubernetes environments in a hybrid Dallas, TX setting.

Responsibilities

Design, develop, and refine an Unauthorized Lateral Movement solution for a large-scale OpenShift deployment.
Own security solutions built to operate at enterprise scale in an automated, seamless, and operationally secure manner.
Collaborate with engineering, operations, and cross-functional teams to deliver secure container platform capabilities across the organization.
Coordinate with stakeholders and partner teams across time zones to support design decisions, implementation planning, and issue resolution.
Contribute to the architecture, design, reliability, and scalability of new and existing container security systems.
Support the full lifecycle of enterprise security solution delivery, from design through implementation and ongoing operations.
Advance secure platform engineering practices across Kubernetes and container environments through automation and disciplined operations.
Work closely with technical teams to ensure solutions are resilient, maintainable, and aligned with platform security objectives.
Maintain regular communication with Engagement Managers, project teams, and functional/technical representatives, escalating matters that require attention from engagement management.
Lead client engagement workstreams, independently and collaboratively, focused on process improvement, optimization, and transformation, including implementing leading practice workflows and driving operational outcomes.

Requirements

6+ years of relevant experience in security engineering, platform engineering, infrastructure engineering, or related technical disciplines.
6+ years of hands-on experience with large-scale platform-level OpenShift or similar Kubernetes platforms.
6+ years of experience across the full lifecycle of enterprise software solutions, including design, implementation, and operational support in cross-functional environments.
6+ years of experience contributing to architecture and design decisions, including patterns, reliability, and scaling considerations.
6+ years of experience with Kubernetes and container technologies such as Docker, Podman, and OpenShift.
6+ years of security fundamentals as they relate to Kubernetes and containerized platforms.
6+ years of expertise in a major programming language such as Python or Java, along with tooling such as Git, Maven, IDEs, Jenkins, or Bitbucket.
6+ years of experience working with DevOps, CI/CD, and Agile methodologies in enterprise environments.
Bachelor's degree, preferably in Computer Science, Information Technology, Computer Engineering, or related IT discipline, or equivalent experience.
Limited immigration sponsorship may be available.
Ability to travel up to 10 percent on average based on client needs.
Must be able to start by 8/17/2026.
Hybrid work model requires a minimum of 3 days onsite at the client location in Dallas, TX.

Technologies

OpenShift
Kubernetes
Docker
Podman
Python
Java
Git
Maven
IDEs
Jenkins
Bitbucket

Benefits

Discretionary annual incentive program

The Team

The Deloitte Cyber team addresses the evolving cybersecurity landscape by delivering strong solutions and managed services that help clients navigate threats with resilience. The Cyber Operate Offering provides fully managed services or partnerships to operate client cyber capabilities, covering the identity lifecycle, security operations, threat intelligence, application security transformation, and continuous compliance. This structure enables clients to operate securely, grow with confidence, and achieve ongoing protection against emerging risks.

View full job page →

Today

Red Team Penetration Tester IV

DirectViz Solutions, LLC Virginia Beach, VA

Virginia Beach, VA

Today

Full time Senior Cybersecurity Tools Information Security

Apply Now

Job Description

Senior red team penetration tester role at DirectViz Solutions, LLC, based in Virginia Beach, VA (onsite), focused on advanced penetration testing, red team operations, and threat emulation, requiring active secret clearance or higher.

Responsibilities

Conduct advanced penetration tests and replicate sophisticated adversary TTPs.
Develop and leverage custom tools and frameworks using Metasploit, NMAP, Kali Linux, and Cobalt Strike.
Model threat behavior and run realistic cyber-attack simulations to gauge organizational resilience.
Exploit vulnerabilities across Linux, Windows, and macOS environments.
Perform Active Directory enumeration and exploitation.
Engage in exploit development and identify gaps in current red team tools and methodologies.
Scripting and programming in at least three languages such as Python, C++, Java, Rust, or Assembly to support offensive operations.
Collaborate with blue teams and stakeholders to communicate findings and propose mitigations.

Requirements

Bachelor of Science in Information Systems, Information Technology, Computer Science, or Computer Engineering.
DoD 8570.01-M Baseline Certification, minimum SSCP Auditor level (per DFARS 252.239-7001).
Offensive Security Certified Professional (OSCP).
Plus one of the following: Offensive Security Certified Expert (OSCE), Offensive Security Exploitation Expert (OSEE), or Offensive Security Wireless Professional (OSWP).
Minimum 10 years of full-time professional experience in penetration testing or offensive cyber operations.
Experience with offensive tool development and exploitation.
Experience in threat simulation and red team engagements.
Proficiency with varied operating systems and security tools.
Scripting and exploit development capabilities.
Active Secret Clearance or Higher.

Technologies

Metasploit
NMAP
Kali Linux
Cobalt Strike
Python
C++
Java
Rust
Assembly
Linux
Windows
macOS
Active Directory
MITRE ATT&CK

Benefits

Competitive compensation
Comprehensive medical benefits
401(k) match
Generous PTO accrual
Professional development reimbursement
Corporate-funded technology certifications
Robust employee recognition and appreciation programs

Physical and Mental Qualifications

Maintain focus and awareness throughout scheduled working hours.
Perform tasks requiring prolonged sitting or standing at a desk with computer equipment.
Lift and move objects up to 15 pounds as needed.
Excellent verbal and written communication skills in English.
Ability to work independently and collaboratively within a team.
Quickly learn and retain routine tasks and processes.
Strong organizational skills, attention to detail, business correspondence proficiency, and self-management capabilities.
Perform essential functions with reasonable accommodation available on request.
Adapt to additional responsibilities or changes to duties as directed by DirectViz Solutions.