CybersecurityJobs.io

Latest Jobs

Today

Cyber Security Analyst

AuraOne Human Data Remote 🇺🇸 Remote

Remote

Today

Contract Adversarial Ai Security Evaluation Ai Security Information Security

Apply Now

Job Description

This remote Cyber Security Analyst contract role supports a red-team program that stress-tests AI systems using adversarial prompts. Reviewers develop and document attack scenarios, evaluate defensive performance across conversation styles, and escalate newly observed vectors to the safety team with severity ratings.

Role Focus

The engagement centers on adversarial evaluation of AI models before they ship to customers. Reviewers take an attacker mindset, record failures in a form that can be reproduced, and help the modeling team regress-test fixes.

Responsibilities

Design adversarial prompts for assigned Cyber Security Analyst work targeting known weakness classes, including jailbreak, policy bypass, and prompt injection.
Document each successful attack with reproduction steps and the specific policy clause it violated.
Score model defenses across single-turn and multi-turn conversations.
Triage emerging attack vectors and route them to the safety team, including severity ratings.
Maintain a personal library of attack patterns and propose new red-team rubrics.
Calibrate against the broader red-team cohort to keep coverage and severity consistent.

Requirements

Demonstrated experience red-teaming AI systems, security research, or adversarial ML work for Cyber Security Analyst assignments.
Strong written communication, since reports serve as the patch ticket.
Comfort working in policy-grey areas with clear documentation of what was attempted and why.
Familiarity with prompt-injection, jailbreak, and policy-bypass taxonomies.
Reliable async availability for at least 10 hours per week.

Example Tasks

Construct a 5-turn adversarial conversation that bypasses a specific policy clause and produce a patch ticket write-up.
Score a model’s defenses against a known jailbreak pattern across 20 variants.
Propose a new red-team rubric category after identifying an emerging attack vector.
Reproduce a failure reported by another reviewer and confirm the assigned severity tag.

Nice to Have

Background in offensive security, AppSec, or trust and safety operations.
Experience publishing or reproducing public adversarial-ML research.
Multilingual fluency for cross-language attack testing.

Skills

Adversarial prompting
Red-team analysis
Policy taxonomy
Failure documentation
Cyber Security Analyst evaluation

Work Model and Eligibility

Remote (US-eligible).
Remote independent specialist contractor; employment type: CONTRACTOR.
Applicants must be authorized to work from the US.

Compensation

Hourly rate confirmed after the interview process.

Application Process

Apply through AuraOne’s specialist intake for role-specific routing and review. Final project scope, schedule, and contractor terms are confirmed before placement.

View full job page →

Today

Security Engineer

Atos Aurora, IL 🇺🇸 Remote

Aurora, IL

Today

Full time Data Security Engineer Iam Identity Automation

Apply Now

Job Description

Atos is seeking a Security Engineer to support identity governance and administration for Cook County Health in a remote setup from Aurora, IL. This role focuses on reliable day-to-day operations of SailPoint identity governance platforms, helping maintain secure, compliant access across joiner-mover-leaver lifecycle processes aligned with HIPAA, NIST, and Zero Trust requirements.

What you’ll do

Administer and maintain SailPoint Identity Security Cloud (ISC) configurations, including Identity Profiles, Access Profiles, Roles, Policies, and Lifecycle Event triggers.
Configure and support provisioning workflows, approval chains, and automated Joiner–Mover–Leaver lifecycle events.
Develop and maintain SailPoint Rules (Before/After Provisioning, Aggregation, and Correlation).
Maintain identity attribute mappings, correlation logic, and authoritative source configurations to ensure identity data quality.
Monitor and troubleshoot provisioning failures, connector alerts, and identity synchronization issues.
Support connector configuration and maintenance for enterprise systems, including Active Directory, Entra ID, Epic, FreshService, HRIS, and other applications (cloud and on-prem).
Maintain documentation for configurations, workflows, and operational procedures.

Required skills and experience

3-5+ years supporting Identity & Access Management (IAM) or IGA platforms.
Strong understanding of IGA methodologies and IAM best practices.
Hands-on experience with SailPoint Identity Security Cloud (ISC) and Non-Employee Risk Management (NERM).
Strong grasp of identity lifecycle management, including RBAC/ABAC, SoD, and access governance.
Experience with identity and integration technologies: Active Directory user administration, Entra ID, LDAP, SCIM, SSO, MFA, and HRIS.
Strong analytical and troubleshooting capabilities, with high attention to detail and data accuracy.
Clear, professional communication skills, including the ability to explain IAM concepts to technical and non-technical audiences.
Ability to manage multiple priorities in a fast-paced environment, including support in a complex, unionized healthcare environment.
Commitment to secure, compliant, and efficient identity operations, with a collaborative mindset across cross-functional teams.
Required: SailPoint Identity Security Administrator certification.
Experience with cloud identity platforms (e.g., Entra ID, AWS IAM, GCP IAM).
Experience with PowerShell for operational automation (light scripting only) and Postman.
Familiarity with healthcare regulatory requirements including HIPAA and HITECH, and experience supporting identity operations in regulated industries (healthcare or financial).
Education: Bachelor’s degree in Information Technology (IT), Computer Science, Cybersecurity, or a related field, or equivalent experience.

Technologies you’ll work with

SailPoint Identity Security Cloud (ISC), Non-Employee Risk Management (NERM), SailPoint Rules, Active Directory, Entra ID, LDAP, SCIM, SSO, MFA, HRIS, Epic, FreshService, Cerner, AWS IAM, GCP IAM, PowerShell, Postman, HIPAA, NIST, Zero Trust, RBAC/ABAC, SoD, Joiner–Mover–Leaver, plus Identity Profiles, Access Profiles, Roles, Policies, Lifecycle Event triggers, provisioning workflows, and related governance components.

Reporting line

This role supports HIS Identity and Access Management and reports to the Identity and Access Management Manager.

View full job page →

Today

Cyber Security Analyst 1

Amentum Waimea, HI

Waimea, HI

Today

$75k - $90k/yr Full time Data Security Information Security InfoSec

Apply Now

Job Description

This entry level Cyber Security Analyst 1 role at Amentum is onsite in Waimea, HI, supporting accreditation activity efforts and information system security processes. The position involves coordination and monitoring of security tasks aligned to NIST RMF and relevant DoD and Navy policies.

Location and Employment Details

Location: Waimea, HI (onsite)
Compensation: USD 75,000 - 90,000 per yearly
Experience: Minimum 2 years
Education: HS School or equivalent
Posting Dates: 08/04/2026 - Until Filled

Role Summary

The Cyber Security Analyst 1 assists in procedures intended to protect information systems assets from intentional or inadvertent access or destruction. Work includes supporting ISSO duties and participating in NIST RMF Assessment & Authorization (A&A) activities and related reviews by the ISSO or Cyber Operations Manager.

Key Responsibilities

Assist in procedures to ensure the safety of information systems assets and protect systems from intentional or inadvertent access or destruction.
Support ISSOs with duties and responsibilities aligned to DODI 8500.01, DODI 8510.01, and U.S. Navy Policy.
Complete activities related to the NIST RMF Assessment & Authorization (A&A) Process and other policies covering the administration and safeguarding of U.S. and foreign Government classified and unclassified information, including review topics for networks, standalone computer systems, and data encryption.
Perform security tasks required by 32 CFR Part 117 (NISPOM), NIST SP 800-37, DoD 8500.1, and DOD Instruction 8510.01 for review by the ISSO or Cyber Operations Manager.
Other duties and responsibilities as assigned.

Physical and Work Environment Requirements

Lifting/Movement: Lifting, pushing, and pulling with a limit of 1-10 lbs.
Movement and Positioning: Walking, standing, sitting, crawling, kneeling or working in cramped positions, repeated stooping, or frequent climbing.
Work Environment Activities: Customer contact, extended workday, confined work area, and office laboratory.

Requirements

Education: HS School or equivalent

Benefits

Health, dental, and vision insurance
Paid time off and holidays
Retirement benefits, including 401(k) matching
Educational reimbursement
Parental leave
Employee stock purchase plan
Tax-saving options
Disability and life insurance
Pet insurance

Certification

DOD 8570/8140: IAM I

Security Clearance

Must be able to obtain and maintain a Secret U.S. Government Clearance.
U.S. Citizenship is required to obtain and maintain a Secret Clearance.
Selected applicants must either currently possess a Secret clearance or be subject to a U.S. Government Security Investigation and meet eligibility requirements to obtain clearance prior to commencement of employment, with continued maintenance of a security clearance for access to classified information or Closed/Restricted Areas throughout employment.

Requisition Timing

Amentum anticipates the job requisition will remain open for at least three days, with a closing date no earlier than three days after the original posting. This timeline may change based on business needs.

View full job page →

Today

Senior Security Analyst

Zoom Remote 🇺🇸 Remote

Remote

Today

$88k - $186k/yr Full time Senior Cybersecurity Analysis Incident Response

Apply Now

Job Description

Zoom’s Detection and Response team is hiring a Senior Security Analyst to triage and investigate cybersecurity events while building automation to improve detection and response workflows.

Responsibilities

Triaging, investigating, and escalating cybersecurity events across Zoom’s environment, including identifying root causes and implementing preventive measures.
Turning deep analysis into repeatable automation to scale team output and impact, as a core focus of the role.
Partnering with the D&R team to support Incident Response service and enhance Zoom’s security posture.
Providing investigative support during active cybersecurity incidents.
Developing and implementing new processes, procedures, and automated workflows identified by D&R and SOC leadership to improve monitoring, detection, and mitigation capabilities.
Responding to security events reported by internal and external teams, escalating incidents according to Zoom’s incident response plan.
Assisting with threat containment and participating in remediation activities during and after incidents.
Maintaining awareness of the global threat landscape through close partnership with the Zoom Threat Intelligence team.

Requirements

2 to 4 years of experience working in a Security Operations Center and/or Incident Response role.
2+ years of experience in a technical role (IT, Networking, Software Engineering, Systems Administration, etc.).
Proven track record building effective automation solutions, including deterministic automation (if/then scripts) and an agentic, LLM-powered auto-triage framework.
Good programming or scripting skills in Python, Go, PowerShell, Bash, or similar.
Curiosity and a thoughtful investigative mindset with motivation to continuously learn and grow.
Hands-on query-building experience with security data platforms such as SPL, KQL, Lucene, CQL, SQL, etc.

Technologies

Python, Go, PowerShell, Bash
SPL, KQL, Lucene, CQL, SQL

Shift and Working Hours

Shift-based hours: 8:00 AM to 6:00 PM EST
Schedule: Tuesday through Friday or Wednesday through Saturday
Remote role

What You Can Expect

Investigate cybersecurity events and incidents at Zoom.
Combine hands-on security operations with automation engineering.
Opportunity to transition into a full-time automation engineer role.

Team Overview

Detection and Response (D&R) safeguards Zoom’s systems and information to protect customers, partners, and employees.
D&R assesses business risk and counter potential threats through proactive and reactive measures.
D&R includes Cyber Threat Intelligence, Security Logging, Detection Engineering, the Security Operations Center (SOC), and Incident Response.

Salary

USD 87,600 - 186,000 per year
Starting pay based on factors including qualifications and experience.
Total Direct Compensation includes base salary, bonus, and equity value.
Location-based compensation may differ by region.

Ways of Working

Structured hybrid approach centered around Zoom offices and remote work environments.
Work style (Hybrid, Remote, or In-Person) is indicated in the job description/posting.

Benefits

Benefits program includes perks and options supporting physical, mental, emotional, and financial health.
Support work-life balance and community involvement.

Our Commitment

Fair hiring practices based on skills, experience, and potential.
Accommodation available during the hiring process; assistance for interview navigation due to medical disability via an Accommodations Request Form.
Inclusive hiring welcoming people of different backgrounds, experiences, abilities, and perspectives.
Interviews supported by BrightHire, which helps create a consistent interview experience and may include recordings.

View full job page →

Today

IT Security Analyst

University of California Berkeley Berkeley, CA

Berkeley, CA

Today

$92k - $120k/yr Full time Cybersecurity Tools Endpoint Security Ids/ips

Apply Now

Job Description

UC Berkeley’s Information Security Office is hiring an IT Security Analyst to support the Security Engineering team. In this onsite role in Berkeley, you will help manage and administer security engineering systems, implement security controls, and provide technical support for investigations and incident response, including work that may occur outside standard hours.

Role Overview

As a seasoned analyst, you will research and deploy security solutions, implement best-practice controls, and support systems management through automation. The position also involves assisting with DevOps processes to provision and manage systems, as well as writing and executing complex scripts for log analysis and security operations across integrated systems.

Responsibilities

Manage Information Security Office systems, including installation, configuration, maintenance, and ongoing support for systems and software.
Implement security controls based on best practices to prevent malicious intrusion.
Research, evaluate, and implement systems, services, and technologies that support Information Security Office systems and services.
Support system and device enhancements such as software, hardware, and network configuration, including updates and installations for projects or services of moderately complex scope.
Write and execute complex scripts to support systems management, log analysis, and other duties across multiple integrated systems.
Assist in implementing and maintaining DevOps processes that automate systems provisioning and management.
Implement complex, broad-scale security controls to prevent and detect unauthorized access or changes to campus hardware, software, and network infrastructure, including FireWalls, IDS/IPS, EDR agents, vulnerability scanners, and SIEM.
Provide research, analysis, and solutions to address attempted compromises of security protocols.
Advise the campus community on security prevention, best practices, and secure software.
Act as a subject matter expert by providing analysis and context for security investigations and incidents.
Triages security incidents and support tickets as part of periodic analyst rotation; may participate in responding to security events and operational issues requiring immediate attention during and/or outside standard hours, including evenings, weekends, and holidays.
Participate in professional development and training to maintain expertise in information security, security engineering, and related technologies.
Stay current on evolving threats and tools, contribute to team knowledge sharing and documentation, and perform other duties as assigned.

Required Qualifications

Experience reading and interpreting logs from enterprise IT applications and services, with focus on security-relevant logs.
Ability to follow and/or learn department processes and procedures.
Interpersonal skills to work effectively with both technical and non-technical stakeholders at multiple levels.
Experience using IT security systems and tools, including IDS, vulnerability scanners, firewalls, and SIEM.
Advanced knowledge of computer security best practices and policies, with demonstrated experience securing server-based software.
Demonstrated skill administering complex security controls and configurations across computer hardware, software, and networks.
Knowledge of hardware, software, and network security issues and approaches.
Experience with Linux systems, particularly Red Hat Enterprise Linux.
Familiarity with web servers, load balancers, firewalls, and DNS.
Ability to write clear and concise technical documentation.
Understanding of system performance monitoring and actions to improve or correct performance.
General knowledge of other IT areas.
Thorough understanding of systems and security issues and corrective actions.
Experience automating systems build and provisioning using tools such as Ansible and Terraform.
Bachelor’s degree in a related area and/or equivalent experience or training.

Technologies

Intrusion Detection Systems, Vulnerability Scanners, Firewalls, SIEM, Linux systems, Redhat Enterprise Linux, web servers, load balancers, DNS, Ansible, Terraform, FireWalls, IDS/IPS, Endpoint Detection and Remediation (EDR agents), Kafka, Elasticsearch, containerized systems, Ruby, Python, Go, Logstash, Kibana, Elastic Security.

Preferred Qualifications

Experience in incident response and digital forensics, including data collection, examination, and analysis.
Experience designing, deploying, and maintaining distributed systems, particularly Kafka and Elasticsearch.
Experience deploying containerized systems in a production environment.
Ability to read and write code in one or more of Ruby, Python, Go.
Experience with the Elastic ecosystem, particularly Logstash, Kibana, and Elastic Security.

Compensation and Employment Details

Location: Berkeley, CA 94720 (onsite)
Salary: USD 91,500 - 120,000 per year (budgeted annual range)
Employment: Full-time (40 hours/week), exempt monthly-paid career position eligible for UC benefits

Application Review Information

First review date: August 7, 2026 (apply on or before this date for full consideration)

View full job page →

Today

Staff Security Engineer

Flock Safety Wausau, WI 🇺🇸 Remote

Wausau, WI

Today

$185k - $230k/yr Full time Application Security Cloud Security Cve Management

Apply Now

Job Description

Remote (USA) Staff Security Engineer role focused on building and running product security incident response, coordinated vulnerability disclosure, and CVE CNA operations.

Responsibilities

Own the operational model and execution of Flock’s Product Security Incident Response Team (PSIRT) for externally reported and internally discovered product vulnerabilities.
Serve as operational lead for CVE Numbering Authority (CNA), managing vulnerability intake, triage SLAs, severity rubrics, and public CVE record publishing.
Coordinate cross-functional remediation across Hardware, Firmware, Device SRE, Cloud SRE, Mobile, Legal, Communications, and Support to support timely patch delivery.
Author public security advisories, internal postmortems, and executive summaries for technical, legal, and leadership audiences.
Define metrics and operational reporting for PSIRT performance, including time-to-triage, time-to-fix, and time-to-disclose.

Requirements

Demonstrated experience leading or running a PSIRT, product security, or coordinated vulnerability disclosure program, ideally in connected hardware or IoT environments.
Deep operational experience as a CVE Numbering Authority (CNA) or implementing the FIRST PSIRT Services Framework across discovery, triage, remediation, and disclosure.
Hands-on technical background in product security across embedded or firmware security, Linux or Android device security, AWS cloud security, or mobile application security.
Expertise applying CVSS, CWE, EPSS, and SSVC to evaluate risk and set accurate vulnerability severities.
Strong written communication skills with the ability to translate complex vulnerabilities into clear guidance for customers, engineers, and executives.

Technologies

FIRST PSIRT Services Framework
CVE Numbering Authority (CNA)
CVD (Coordinated Vulnerability Disclosure)
CVSS
CWE
EPSS
SSVC
Linux
Android
AWS
Mobile application security

Compensation

USD 185,000 - 230,000 per year

Benefits

Flock Stock Options

Role scope notes

This is an individual contributor position, focused on execution and policy adherence through cross-functional influence, not people management.
This is not a corporate security or internal SOC role; the focus is on product security for field devices and embedded software platforms.
This is not passive triage; you will actively guide remediation strategies and defend severity decisions with engineering leaders and external security researchers.

View full job page →

Today

Security Engineer

Flash AI Remote 🇺🇸 Remote

Remote

Today

$120k+/yr Full time Amazon Web Services Application Security Aws Iam

Apply Now

Job Description

Flash AI is seeking a hands-on Security Engineer to help own security and compliance across the organization. This remote role focuses on maintaining continuous compliance readiness for CJIS and SOC 2, operating Vanta as the compliance source of truth, and partnering with engineering to keep both the application and AWS environment secure. The compensation starts at $120,000 USD per year, with paid time off included.

What you’ll own

SOC 2 and CJIS compliance end to end, including ongoing readiness, running the annual SOC 2 audit cycle, and meeting CJIS Security Policy requirements for handling criminal justice information.
Vanta administration as the primary source of truth for compliance posture: manage automated control tests, investigate and resolve failing tests, keep integrations healthy, and serve as the key point of contact for auditors and customer security reviews.
Maintain a living security documentation set, including policies, procedures, the risk register, access reviews, and incident response plans, updated as the platform evolves.
Vulnerability and supply-chain management by tracking dependency and container vulnerabilities from security scanning tools, prioritizing issues based on real risk, driving remediation to closure within SLA, and coordinating third-party penetration tests through the fix process.
Application security findings triage: route findings from scanners, penetration tests, and external reviews to the right owners and follow them through to closure in coordination with engineering.
Over time, take on more of the security review work directly.
Partner with engineering on AWS hardening by monitoring IAM, VPC/networking, KMS encryption, and logging (CloudTrail), flagging misconfigurations and configuration drift, and helping strengthen alerting and incident response.

What you bring

3+ years in security, compliance, or IT/cloud engineering with meaningful security responsibilities.
Hands-on experience with a compliance framework such as SOC 2, ISO 27001, FedRAMP, HIPAA, or CJIS, including audit preparation and evidence management.
Working knowledge of AWS security fundamentals: IAM, VPC, KMS, and CloudTrail.
Comfort reading code in Python or TypeScript/JavaScript to understand findings and discuss fixes with engineers.
Familiarity with vulnerability management and dependency scanning tooling.
Strong writing and organization, with documentation that can stand up under audit.
Must reside in the United States and be able to pass the state and federal fingerprint-based background checks required for CJIS-authorized access to criminal justice information.

Technologies you may work with

Vanta, SOC 2, CJIS, ISO 27001, FedRAMP, HIPAA, AWS, IAM, VPC, KMS, CloudTrail, Python, TypeScript, JavaScript

Nice to have

Direct CJIS Security Policy experience, or experience supporting government and public-sector customers.
Experience administering Vanta, Drata, Secureframe, or a comparable GRC platform.
Experience independently reviewing code or system designs for issues such as broken auth, injection, access control and multi-tenancy boundaries, or secrets handling.
Relevant security certifications such as Security+, AWS Security Specialty, CCSP, CISSP, or OSCP.
Experience securing containerized workloads, CI/CD pipelines, and infrastructure as code (Terraform).
Experience securing data pipelines or ML/AI systems that handle sensitive data.