CybersecurityJobs.io - Jobs in infosec and cybersecurity.

Latest Jobs

Today

Industrial Security Analyst - Level 3

Northrop Grumman Colorado Springs, CO

Colorado Springs, CO

Today

$86k - $128k/yr Full time Data Security Facility Security Information Security

Apply Now

Job Description

Northrop Grumman offers a mission-focused role supporting industrial security for operations tied to national and global security. This 100% onsite position is based at Schriever Space Force Base, Colorado Springs, CO (no telecommute), with 10% travel and an emphasis on compliance and hands-on security program execution.

Compensation for this role is USD 85,600 - 128,400 per year, with additional potential pay depending on the position, including eligibility for overtime, shift differential, and a discretionary bonus on top of base pay.

Responsibilities

Manage destruction activities, security education and awareness, and compliance efforts while building and maintaining working relationships with internal and external customers
Develop, administer, and support security programs and procedures for classified or proprietary materials, documents, and equipment
Apply experience in program security with knowledge of implementing a multi-disciplined security program, including access control, personnel security, physical security, and OPSEC
Study and implement federal security regulations that apply to company operations
Obtain rulings, interpretations, and acceptable deviations for compliance with regulations from applicable government agencies
Prepare manuals that outline regulations and establish procedures for handling, storing, and keeping records, including granting access to restricted records and materials for personnel and visitors
Conduct security education classes and related briefings
Investigate security violations and produce reports that specify preventive actions
Apply knowledge of ICD 705 and NISPOM
Perform other duties as assigned

Requirements

Bachelor’s degree with 5 years of professional experience, or Master’s degree with 3 years of professional experience, or PhD with 1 year of professional experience
Consideration of an additional 4+ years of experience in lieu of degree
Experience working with classified industrial security programs
Experience with NISPOM and ICD 705
Requires an active Top-Secret / Sensitive Compartmented Information (SCI) clearance at time of application with ability to obtain poly

Tools and Technologies

ICD 705
NISPOM
DISS
SIMS
Lenel

Benefits

Health insurance coverage
Life and disability insurance
Savings plan
Company paid holidays
Paid time off (PTO) for vacation and/or personal business
Depending on the position, eligibility for overtime, shift differential, and a discretionary bonus in addition to base pay
Annual bonuses
Employees in Vice President or Director positions may be eligible for Long Term Incentives

Relocation assistance: No relocation assistance available.

Travel: Yes, 10% of the time.

Clearance required for start: Yes. Clearance type: Top Secret.

View full job page →

Today

Senior Network Security Engineer

HCA Healthcare Nashville, TN

Nashville, TN

Today

Full time Senior Computer Network Defense Cyber Security

Apply Now

Job Description

HCA Healthcare is hiring a Senior Network Security Engineer in Nashville, TN (onsite) to lead and improve enterprise network security controls and risk reduction initiatives.

Responsibilities

Lead implementation, modernization, standardization, and enhancement of network security controls to protect a Fortune 100 enterprise infrastructure, patients, and data from evolving risk and threats.
Perform and oversee reviews and assessments of security policies to identify risk, vulnerabilities, and hardening opportunities; provide remediation recommendations, designs, and solutions.
Implement configuration changes supporting continuous security control maturity and ongoing risk reduction.
Partner with other IT teams to apply risk management practices, optimize technology solutions, monitor infrastructure, and align with current and future needs.
Ensure compliance with regulatory requirements and support long-term security posture and control maturity planning.
Evaluate, recommend, and implement security measures including next-generation firewall capabilities, IDS/IPS, VPN, network segmentation and zero trust, and multifactor access control mechanisms.
Conduct firewall rule reviews, security audits, baseline and best-practice compliance checks, and forensic network investigations to support data transmission adherence.
Support and manage network security solutions aligned to regulatory and industry requirements such as PCI DSS, SOX, NIST, ISO 27000, and HIPAA.
Assess vulnerability findings, penetration test results, security metrics, and audit outcomes to identify hardening needs and provide remediation recommendations.
Recommend and implement complex solutions and enterprise-wide configuration changes to improve continuous security control maturity.
Participate in incident response activities and disaster recovery planning and testing.
Collaborate across IT teams to ensure network security controls integrate with other systems and applications and meet security standards.
Routinely run audits and control tests on deployed technologies; collect and consolidate performance indicators, risks, and trends; provide recommendations and baseline/regulatory compliance ratings.
Manage relationships with vendors and contractors to ensure timely delivery of security services in alignment with security policies.
Contribute to development and documentation of security policies and procedures; support training and awareness efforts.
Provide guidance and training to peers on compliance requirements and best practices.
Research security design enhancements and identify automated solutions or best-of-breed technologies; support vendor integration tests.
Stay current on threats, vulnerabilities, regulations, and industry best practices; implement recommendations to strengthen security posture and control maturity.

Requirements

Bachelor’s degree preferred
5+ years of experience required
Extensive experience with security technologies including next-generation firewalls, intrusion detection/prevention systems, VPN, network segmentation, access control mechanisms, and network security design, management, best practices, and policy standards in large 1000+ firewall environments
Expertise with Checkpoint Firewall and related platforms: CMA, Provider-1, Maestro, VSX/VSLS, CloudGuard
Cisco Network Security products and technologies such as Firepower, ASA, VPN, WSA, ISE, Stealthwatch
Strong understanding of network protocols, topologies, tools, subnetting, and architectures
Experience with network security policy management tools (Algosec, Tufin) and/or conducting risk assessments, firewall rule review, and security audits
Strong knowledge of enterprise security technologies and processes including Zscaler, advanced threat detection tools, Antibot, antimalware, threat emulation, SIEM, IDS/IPS, network packet analysis, Netflow
Experience designing solutions for security standards and frameworks including HIPAA, SOX, PCI DSS, HITECH, ISO/IEC 27001, and the NIST Cybersecurity Framework
Network security management tools/technologies such as Splunk, Trustsec, segmentation, and syslog
Excellent verbal and written communication, interpersonal, analytical, and problem-solving skills
Demonstrated leadership and mentorship skills, including ability to guide and train junior engineers
Ability to work independently and as part of a team
Relevant certifications from ISC2 (CISSP), GIAC (GISP), ISACA (CISA), Cisco Security, or CompTIA are a plus

Technologies

Next-generation firewalls
Intrusion detection/prevention systems (IDS/IPS)
VPN
Network segmentation/zero trust
Multifactor and access control mechanisms
PCI DSS, SOX, NIST, ISO 27000, HIPAA
Checkpoint Firewall, CMA, Provider-1, Maestro, VSX/VSLS, CloudGuard
Cisco security technologies: Firepower, ASA, WSA, ISE, Stealthwatch
Algosec, Tufin
Zscaler
Advanced Threat Detection Tools, Antibot, Antimalware, Threat Emulation
SIEM
Network Packet Analysis, Netflow
HITECH, ISO/IEC 27001, NIST Cybersecurity Framework
Splunk, Trustsec, segmentation, syslog
Incident response and disaster recovery planning and testing

Benefits

Comprehensive benefits for medical, prescription drug, dental, vision, behavioral health, and telemedicine services
Wellbeing support including free counseling and referral services
Time away from work programs: paid time off, paid family leave, long- and short-term disability coverage, and leaves of absence
401(k) Plan with a 100% match on 3% to 9% of pay (based on years of service), Employee Stock Purchase Plan, flexible spending accounts, preferred banking partnerships, retirement readiness tools, rollover support, and financial wellbeing counseling
Education support including tuition assistance, student loan assistance, certification support, dependent scholarships, and a partnership with Galen College of Nursing
Additional benefits for fertility and family building, adoption assistance, life insurance, supplemental health protection plans, auto and home insurance, legal counseling, identity theft protection, and consumer discounts

Physical Demands / Working Conditions

Minimal supervision required based on design, service, and support knowledge/skills
May require periodic after-hours work and light travel at times with little notice
Sitting for extended periods is required

View full job page →

Today

Senior Network Security Engineer

TECKpert Tallahassee, FL

Tallahassee, FL

Today

$85+/hr Contract Senior Cloud Platforms Cybersecurity Tools

Apply Now

Job Description

This Senior Network Security Engineer position supports a state government agency in Tallahassee, Florida as part of the Office of Information Technology integration services team. The role focuses on owning and administering network security infrastructure, leading migrations across firewall platforms, and conducting incident investigations.

Location and Job Type

Location: Tallahassee, FL (onsite)
Schedule: Monday through Friday, onsite
Employment: Contract

Role Summary

The Senior Network Security Engineer will manage firewall, VPN, and broader network security infrastructure. Key activities include migrating Palo Alto and Check Point next generation firewalls, administering access rule environments across platforms (including GlobalProtect VPN), and leading root cause analysis for complex network and security incidents.

Key Responsibilities

Perform security administration to configure and document firewall access rules across Palo Alto, Check Point, and GlobalProtect VPN environments
Lead firewall deployments, rule migrations, and conversion of existing rule-based policies onto new platforms
Administer core network security infrastructure, including next generation firewalls, VPNs, log collectors, and monitoring tools
Configure firewall and security policies for cloud network infrastructure and monitor network traffic
Design and support enterprise network infrastructure such as LAN/WAN, routing and switching, wireless, segmentation, and Internet and cloud connectivity, including data center networks
Develop segmentation strategies that limit lateral movement and assess east-west and north-south traffic flows for security risk
Monitor, analyze, and respond to security events; lead root cause analysis using logging, packet analysis, and monitoring tools
Conduct security risk assessments and provide executive-level status reporting, security metrics, and recommendations
Maintain NIST aligned documentation including network diagrams, IP addressing, VLANs, firewall rules, security configurations, and disaster recovery procedures
Provide technical leadership, establish network engineering standards, and mentor network and security staff

Required Qualifications

Experience: 5 to 10 years of combined IT and information security experience
NIST-aligned tool experience: 3 to 5 years with information security tools based on NIST standards
Hands-on administration of next generation firewalls, preferably Palo Alto Networks or Check Point
Firewall rule migrations and policy conversion between platforms
VPN technologies, including GlobalProtect or similar remote access solutions
Routing and switching, LAN/WAN, network segmentation, and wireless infrastructure
Cloud network security, including firewall and security policy configuration in cloud environments
Security monitoring, incident response, packet analysis, and vulnerability management
Network diagramming with Visio or similar schematic tools
Ability to work onsite Monday through Friday in Tallahassee, FL

Technologies

Palo Alto Networks
Check Point
GlobalProtect
NIST
Visio
LAN/WAN
Routing and switching
VLANs
Cloud network infrastructure

Compensation and Term

Pay: USD 85 per hour (commensurate with experience) or USD 176,800 per year
Term: Full-time contract position with possible extensions

Benefits

Medical, dental, vision and life insurance available after 30 days of hire

Preferred Qualifications (Not Required)

Palo Alto Networks Certified Network Security Engineer (PCNSE)
CISSP, CCNP, or CCIE certification
Check Point certification (CCSA or CCSE)
Azure or AWS network security experience
Experience in state or local government IT environments
Bachelor’s degree in Computer Science, Information Systems, or related field, or equivalent work experience

Application and Screening Process

If selected, you will be contacted for a skills assessment and a short prescreen video call
You will also be contacted for future roles your profile matches

Application Notice

Resume formatting: Ensure your resume is clearly formatted and includes all relevant details. Applications with poorly formatted resumes or missing critical information will be rejected without review.
Verification information: Include a link to your LinkedIn profile, GitHub repository (for technical roles), or other professional profiles to substantiate experience and verify identity.
Fraudulent submissions: Submitting fraudulent information, fake resumes, or any attempt to deceive will result in immediate disqualification.

Recruiting Safety Notice

All official communications from the hiring team will come exclusively from a @teckpert.com email address.
TECKpert will never ask for sensitive personal information or financial details during the initial interview phase.
If you are unsure about the authenticity of outreach, contact the team through the official website.

View full job page →

Today

Senior Network and Security Engineer

ROOT GROUP INC Broomfield, CO

Broomfield, CO

Today

$120k - $120k/yr Full time Senior Cloud Platforms Cybersecurity Tools

Apply Now

Job Description

The Senior Network and Security Engineer role at ROOT GROUP INC focuses on billable consulting for Colorado clients, delivering networking and security solutions across on-prem, hybrid cloud, and cloud environments. The position emphasizes design, optimization, troubleshooting, and ongoing technical growth.

Location and Work Model

Broomfield, CO (hybrid)

Salary

USD 120,000 - 120,000 per yearly

Role Summary

Provide senior IT network and security engineering support to client engagements, designing, optimizing, and troubleshooting networking and security infrastructure across on-prem, hybrid cloud, and cloud environments. Deliver solutions that align with client business and technical objectives while supporting clear communication throughout the project lifecycle.

Responsibilities

Deliver billable consulting services to a Colorado client base.
Collaborate with Account Managers to understand client business and technical objectives and deliver IT network and security infrastructure solutions that meet or exceed expectations.
Operate effectively in a diverse, challenging environment using a detailed understanding of interactions between infrastructure components.
Design, optimize, and troubleshoot networking and security deployments for on-prem, hybrid cloud, and cloud environments.
Create content for Statements of Work covering network and security infrastructure consulting projects and deliver services per the Statement of Work.
Maintain clear communication with clients and sales personnel during all project phases.
Maintain and expand technical expertise through training, teaming with other engineers, and broadening skill scope.
Establish or maintain subject matter expertise in assigned product areas.
Partner with sales staff to develop new business and expand existing business.
Expand knowledge of other infrastructure disciplines by teaming with engineering staff and through professional training.
Build strong vendor relationships by developing technical excellence in product understanding and the ability to position and integrate products in client environments.
Assist in development, monitoring, and management of Managed Services offerings.

Requirements

10-12 years of IT networking, security, compute, and storage experience.
Solid knowledge of the TCP/IP stack and networking protocols, including OSPF, BGP, EIGRP, MPLS, or others.
Experience architecting, deploying, managing, documenting, and monitoring networks including switches, routers, VPNs, remote access, SD-WAN, and security devices such as firewalls, IDS, A/V, SIEM, and other security or network components.
Broad experience with multiple security and networking products (Cisco, Palo Alto, Ruckus, Check Point, or Fortinet) and monitoring tools (SolarWinds, LogicMonitor, PRTG and/or other tools).
Excellent listening and communication skills for working with a wide range of personalities and varying technical and management experience levels.
Strong attention to detail with an analytical mind and outstanding problem-solving skills.

Key Technologies

TCP/IP, OSPF, BGP, EIGRP, MPLS
Switches, routers, VPNs, remote access, SD-WAN
Firewalls, IDS, A/V, SIEM
Cisco, Palo Alto, Ruckus, Check Point, Fortinet
SolarWinds, LogicMonitor, PRTG

Benefits

401(k)
401(k) matching
Health insurance
Dental insurance
Paid time off
Flexible schedule
Training & development
Company parties

View full job page →

Today

Information Security Engineer

Viavi Solutions Santa Rosa, CA

Santa Rosa, CA

Today

$81k - $150k/yr Full time Engineer Information Security InfoSec

Apply Now

Job Description

Design and operate security architectures for classified environments, with ownership of RMF and ATO activities and direct reporting to the Government Security Council.

Responsibilities

Plan, design, and build security architectures; oversee implementation of network and computer security and ensure alignment with corporate cybersecurity policies and procedures
Monitor cybersecurity requirements for LANs, WANs, VPNs, routers, firewalls, and related network devices
Conduct security assessments for applications and systems using penetration testing, vulnerability testing, and risk analysis
Configure and install firewalls and intrusion detection systems
Apply software patches to remediate vulnerabilities
Respond immediately to cybersecurity-related incidents and perform thorough post-event analysis
Investigate intrusion incidents and conduct forensic investigations
Serve as the direct security reporting line to the Government Security Council for security posture, risk status, and program effectiveness
Deliver executive-quality briefings to the OCLI President to support escalation to the Government Security Council
Lead cybersecurity operations across multiple classified systems, providing technical direction, work breakdown, cost estimates, and resource allocation
Act as COMSEC Account Manager, managing communications security materials, accounts, and procedures per government sponsor requirements
Own the full RMF lifecycle and Authority to Operate (ATO) process for accredited systems
Provide strategic direction for classified cybersecurity environments and collaborate with government agencies and internal stakeholders to prioritize and deliver mission-aligned security solutions
Architect and engineer cybersecurity solutions compliant with NISPOM, DISA STIGs, CNSSI 1253, and NIST 800-53 / 800-171
Author and maintain Body of Evidence (BOE) artifacts, including SSPs, SARs, POA&Ms, and supporting RMF documentation for ATO packages
Prepare authorization packages, enter evidence into eMASS, and execute annual government security audits and assessments
Administer enterprise access control and CCTV systems

Requirements

Must possess an active DoD clearance (SECRET or above)
2+ years of professional experience in administrative, regulatory, or compliance roles
Experience conducting trainings and briefings
Strong verbal and written communication skills, with excellent interpersonal and relationship-building skills
Strong organizational skills
Proficient in MS Office Suite
Self-motivated and able to work with minimal supervision
Able to work where cell phones are prohibited (20% of the time)
Eligibility to obtain a U.S. DoD Security Clearance; current, active U.S. DoD Security Clearance preferred

Technologies

LANs, WANs, VPNs, routers, firewalls, intrusion detection systems
Risk Management Framework (RMF), Authority to Operate (ATO)
NISPOM, DISA STIGs, CNSSI 1253, NIST 800-53, NIST 800-171
Body of Evidence (BOE), System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms)
eMASS, CCTV
MS Office Suite

Benefits

Paid time off
Health, life and disability insurance
401(k)
Bonus program

Location: Santa Rosa, CA (onsite)

Experience: 2+ years

Salary: USD 80,500 - 149,500 per year

View full job page →

Today

Information Systems Security Engineer (ISSE)

General Dynamics Information Technology Fort Belvoir, VA

Fort Belvoir, VA

Today

$108k - $146k/yr Full time Engineer Information Security Information Systems Security

Apply Now

Job Description

Grow your security engineering impact supporting RMF compliance through Assessment and Authorization (A&A) and Continuous Monitoring (ConMon) activities across multi-level classification environments. This onsite role at Fort Belvoir, VA pairs critical security engineering work with access to cutting-edge technologies and a team that coordinates across cybersecurity, technical services, and customer stakeholders.

Compensation for this position is USD 107,950 - 146,050 per year. The role is Secret clearance required and requires U.S. citizenship, with less than 10% travel.

What you’ll do

Coordinate with other DSMS program teams to plan and create cybersecurity architecture and design documents, ensuring compliance with DoD and other organizational IA policies and guidance.
Apply best practices for implementing security controls within an IS using software engineering methodologies, system/security engineering principles, secure design and architecture, and secure coding techniques.
Develop cybersecurity architecture and design plans for communication and collaboration products, operating system platforms (servers, devices, and management products), applications, and security considerations for product implementation.
Provide security engineering support for DSMS Network accreditation.
Integrate cybersecurity expertise into lifecycle management, including planning architecture and design management, migration and deployment, and system testing and implementation.
Research, develop, test, and document architectures and solutions for implementing new cybersecurity technologies to improve information collaboration and cybersecurity capabilities for the program and its user base.
Develop and deliver criticality analysis for logic-bearing system components (hardware, firmware, and software) and the functions they implement, protect, or that may introduce vulnerabilities.
Develop and maintain mission criticality analyses, vulnerability assessments, and risk assessments, including identification and countermeasure implementation for mission-critical functions, ensuring updated assumptions, rationale, results, supply chain risk information, and mitigations are available for Government review.
Prepare and submit Interim Authorization to Test (IATT) and Authority to Operate (ATO) requests with Plans of Action and Milestones (PoAMs).
Develop, maintain, and coordinate Body of Evidence (BoE) documentation for system assets.
Collaborate with Technical Services and Security Services teams, plus customer agency stakeholders, to support compliance.
Track lien remediation/resolution workflow and enter tracking tool updates; evaluate system change requests and assess both system and organizational risks tied to modifications.
Execute ConMon activities on established timelines, including BoE collection and tracking tool updates.
Conduct recurring reviews of system state and security posture to ensure secure operation and that information systems security policies and procedures are followed.
Recommend security control implementation and identify countermeasures or mitigating controls; respond to security information queries and report requests.
Support security incident investigations and report findings as needed.
Assist with communication, implementation, and enforcement of security policies and plans for data, applications, hardware, and telecommunications systems.
Advise stakeholders on information assurance standards, dependencies, and emerging security technologies; use Enterprise Security Services tools such as Trellix and ACAS to track and remediate vulnerabilities and compliance deficiencies.

What you’ll need

Bachelor of Arts / Bachelor of Science
2+ years of related experience
Secret security clearance level
U.S. citizenship required
Travel: less than 10%

Tools and technologies

Trellix
ACAS
Plans of Action and Milestones (PoAMs)
Body of Evidence (BoE)

Benefits and growth

401K with company match
Comprehensive health and wellness packages
Internal mobility team dedicated to helping you own your career
Professional growth opportunities, including paid education and certifications
Cutting-edge technology you can learn from and apply to solve real world problems

Additional details

Location: Fort Belvoir, Virginia (onsite / on customer site)
REQ#: RQ229469
Requisition type: Regular
Category: Cyber and IT Risk Management
Public trust: None
Work requirements: U.S. Citizenship Required; Travel Required: less than 10%

Identity verification process

You are expected to be on camera during virtual interviews.
We reserve the right to take your picture to verify your identity and prevent fraud.
You authorize the collection, processing, and use of your biometric data for identity verification and security purposes.

View full job page →

Today

Cyber Security Engineer With Python & API Integration

EAPPS TECH LLC dba Magicforce Portland, OR

Portland, OR

Today

$60 - $70/hr Full time Backend Developer Python API

Apply Now

Job Description

Join an Agile team working on healthcare applications, delivering new features with secure coding practices and hands-on Python and API integration.

Responsibilities

Design, implement, and troubleshoot REST APIs in production environments
Use API documentation to read requirements, build requests, and validate responses
Work with authentication mechanisms including OAuth, API keys, and bearer tokens
Apply practical, production-ready Python skills to build tool integrations and automations
Gain hands-on experience with at least three of the following security platforms:
- Tenable Nessus or Tenable VM (vulnerability management)
- Imperva WAF (web application firewall)
- Brinqa (SOAR: security orchestration, automation, and response)
- Synopsys Polaris or similar SCA tools (software composition analysis)
- Microsoft Defender for Endpoint (EDR/MDR)
- Crowdstrike Falcon or Falcon Shield (endpoint protection/detection and response)
- IBM Guardium (database activity monitoring and security)
- Trend Micro VisionOne (threat intelligence and incident response)
- Zscaler ZIA or ZPA (cloud-based security, optional but valuable)