CybersecurityJobs.io - Jobs in infosec and cybersecurity.

Latest Jobs

Today

Senior Cybersecurity Architect – Utility Grid Modernization

Cybersecurity Consulting Company Remote 🌍 Remote

Remote

Today

$100k - $165k/yr Contract Senior Data Security Engineer

Apply Now

Job Description

Work remotely (hybrid) as a senior cybersecurity architect supporting a major electric utility grid-modernization assessment. This contract role focuses on building actionable cybersecurity architecture, clarifying risk across IT and Operational Technology (OT), and translating modernization goals into a phased roadmap. You will partner with technical and executive stakeholders to shape priorities that align with grid upgrades across the utility enterprise and its field-connected systems.

What you’ll do

Assess cybersecurity risks across IT and OT domains, including SCADA, AMI, telecommunications, billing, and enterprise environments.
Review the current cybersecurity architecture and identify gaps that affect grid-modernization initiatives.
Evaluate security considerations for smart metering and related systems, including meter-data systems, DERMS, private LTE, and utility communications infrastructure.
Define cybersecurity architecture and requirements for access control, network segmentation, secure remote access, monitoring, vulnerability management, incident response, data protection, resilience, and third-party risk.
Assess integration and security implications of utility platforms such as ERP, GIS, OMS, EMS, CIS, and billing.
Produce prioritized recommendations based on risk, operational impact, and modernization objectives.
Develop a phased cybersecurity roadmap that supports the utility’s modernization program.
Participate in stakeholder interviews, technical workshops, architecture reviews, and working sessions.
Prepare technical findings, recommendations, and executive-level briefings.
Support implementation planning and help translate cybersecurity requirements into actionable modernization initiatives.

What you bring

15+ years of professional experience across cybersecurity, utility technology, OT/ICS, industrial automation, telecommunications, or critical infrastructure.
10+ years supporting electric utilities or energy-sector programs.
Proven experience with utility environments including SCADA, AMI, smart metering, meter-data systems, billing, ERP, GIS, OMS, EMS, and/or CIS platforms.
Extensive experience with OT/ICS cybersecurity architecture and risk assessments.
Strong knowledge of cybersecurity frameworks and standards, including:
- NIST SP 800-53
- NIST SP 800-82
- NIST SP 800-207
- ISA/IEC 62443
Experience developing security architecture, technical requirements, risk assessments, and cybersecurity modernization roadmaps.
Ability to communicate complex cybersecurity risks and architecture decisions to both technical teams and executive stakeholders.
Active CISSP certification.
Active PMP certification.
Ability to travel periodically during the engagement.
Fluent professional English.

Preferred

Experience with GIAC GRID, DERMS/distributed-energy technologies, private LTE, and utility telecommunications environments.
Spanish-language capability is beneficial.

Engagement details

Engagement: Contract
Work location: Remote (Hybrid)
Travel: Periodic travel internationally
Pay: USD 100,000 - 165,000 per year

How the work is framed

This is a senior consulting engagement intended for an architect with substantial electric utility and OT cybersecurity experience, focused on assessing the current environment and establishing cybersecurity architecture and priorities supporting a significant grid-modernization initiative.

View full job page →

Today

Sr Principal Cyber Systems Engineer – Cybersecurity (ISSE) (26-431) AHT

Northrop Grumman Colorado Springs, CO

Colorado Springs, CO

Today

$142k - $213k/yr Full time Senior Cyber Security Cybersecurity Tools

Apply Now

Job Description

Northrop Grumman is recruiting a Sr. Principal Cyber Systems Engineer focused on cybersecurity to support the C2BMC Missile Defense Integration program at Schriever Space Force Base in Colorado Springs, CO. The position supports cybersecurity operations by installing, administering, and assessing security capabilities, including endpoint protection, SIEM-based monitoring, STIG assessments, and vulnerability or compliance scanning, with an emphasis on validation work alongside ISSOs.

Role Focus

This NG-Only role centers on securing information systems through hands-on technical implementation and continuous support for control validation activities. You will help configure cybersecurity tooling, improve auditing and detection signal quality, and support requirements-driven compliance using relevant DoD and federal guidance.

Responsibilities

Install, configure, and administer cybersecurity software for endpoint protection (e.g., antivirus, HIPS, DLP) and endpoint monitoring (e.g., security log and auditing event collection).
Perform vulnerability and compliance scanning.
Write and maintain scripts and/or playbooks to automate deployment of cybersecurity agent software to endpoints in a large, virtualized environment.
Analyze endpoint protection events to identify and filter out false positives and non-security-relevant data, improving information system auditing and reducing alert fatigue.
Use cybersecurity software to run Security Technical Implementation Guide (STIG) assessments for Windows and Red Hat Enterprise Linux (RHEL) operating systems, virtualization platforms, and endpoint applications (e.g., browsers, word processors).
Write SIEM queries and build dashboards to visualize security-relevant data for monitoring and analysis.
Create and manage data pipelines to transform and parse data ingested into SIEM solutions, including adding security-relevant metadata, extracting fields for analysis and reporting, implementing government requirements (e.g., NISPOM, NIST, DoD, ICD), validating established cybersecurity controls, and recommending improvements based on subject matter expertise.
Support Information System Security Officers (ISSOs) with Control Validation Test (CVT) preparation, including remediating open findings and noncompliant security controls, addressing Plans of Action and Milestones (POA&Ms), and responding to Cyber Tasking Orders (CTOs).

Requirements

Education and experience: a Bachelor’s Degree in Computer Science, Cybersecurity Engineering, Mathematics, Physics, or a related field plus 8 years of experience; or a Master’s degree with 6 years of relevant work experience; or 12 years of relevant work experience may be considered as an alternative to a degree.
Maintain a current, active Government-Issued 8140 certification at IAT Level II / IAM Level I or higher (examples include Security+ CE, CCNA-Security, CySA+, CND, etc.) at the time of application, and remain responsible for maintaining 8140 certifications throughout the contract period.
Have a current, active, in-scope Top Secret security clearance at the time of application (required to start).
Travel for business needs, 10% of the time.
Security engineering skills with working knowledge of cybersecurity technology and DoD/Federal cybersecurity guidance (including DoDI 8500.01 and NIST SP 800 53).
Experience installing, configuring, or administering a SIEM solution.
Experience installing, configuring, or administering endpoint protection software.
Experience installing, configuring, or administering vulnerability and compliance scanning software.
Windows and Linux system administration skills.

Technologies

Endpoint protection (e.g., antivirus, HIPS, DLP); endpoint monitoring (e.g., security log and auditing event collection)
SIEM solutions and query/dashboard tooling, including Elastic (SPL, EQL, KQL, ES/QL, Elastic Defend)
Security Technical Implementation Guide (STIG)
Windows, Red Hat Enterprise Linux (RHEL)
NISPOM, NIST, DoD, ICD
PowerShell, Bash, Ansible
ACAS (e.g., Tenable Security Center and Nessus), SCAP Compliance Checker (SCC)
Kubernetes, containers
DoDI 8500.01, NIST SP 800 53
8140 certification (IAT Level II / IAM Level I)

Benefits

Health Plan
Savings Plan
Paid Time Off
Education Assistance
Training and Development
Flexible Work Arrangements

Work Location, Travel, and Clearance

Location: Colorado Springs, CO (onsite)
Travel: Yes, 10% of the time
Relocation assistance: Not available
On-site only: This position does not provide relocation assistance and requires on-site work with no remote options.
Clearance required for start: Yes
Clearance type: Top Secret

Salary

$142,200 - $213,200 per year (primary level salary range).

Education

Bachelor’s degree in Computer Science, Cybersecurity Engineering, Mathematics, Physics, or a related field (as specified in the requirements).

View full job page →

Today

Principal Cybersecurity Analyst

Northrop Grumman Sunnyvale, CA

Sunnyvale, CA

Today

$114k - $171k/yr Full time Cybersecurity Tools Information Security InfoSec

Apply Now

Job Description

Northrop Grumman is seeking a Principal Classified Cybersecurity Analyst to support information systems lifecycle activities for its CIDO Classified Solutions team. This role requires full-time, on-site work in Sunnyvale, CA and includes audits, continuous monitoring, assessments, A&A and RMF evidence development, and support for Security Test and Evaluation (ST&E) activities for government accrediting authorities.

Location and Work Schedule

Location: Sunnyvale, CA (onsite)
Work type: Full-time onsite; no virtual or telecommute options due to classified work
Travel: Yes, 10% of the time
Schedule: 9/80 work schedule

Salary

Primary salary range: USD 114,000 - 171,000 per year
Salary note: Northrop Grumman considers scope and responsibilities, candidate experience and education, skills, and current market conditions when determining base salary offers

Responsibilities

Conduct system audits and continuous monitoring activities across all security controls, configurations, and operational processes to evaluate the security posture of information systems.
Perform assessments of systems and networks within a networking environment or enclave, identifying deviations from acceptable configurations, enclave policy, or local policy.
Carry out analyses to validate established security requirements and recommend additional security requirements and safeguards.
Assist with implementation of required government policy, including recommendations on process tailoring, and participation in and documentation of process activities.
Establish strict program control processes to support risk mitigation and the Assessment and Authorization (A&A) of systems, including process support, analysis, coordination, security certification testing, security documentation, investigations, software research, hardware introduction and release, emerging technology research, inspections, and periodic audits.
Support formal Security Test and Evaluation (ST&E) activities required by government accrediting authorities, including pre-test preparations, test participation, analysis of test results, and preparation of required reports.
Document results of A&A activities and technical or coordination activities, and prepare the Risk Management Framework (RMF) body of evidence.

Required Qualifications

Education and experience: Master’s degree with 3 years of relevant experience; or Bachelor’s degree with 5 years of relevant experience; or Associate’s degree with 7 years of relevant experience; High School Diploma or equivalent with 9 years of relevant experience may be considered in lieu of a completed degree.
Security clearance: Current US Government Top Secret level security clearance (at a minimum), including a closed investigation date completed within the last 6 years, or enrollment in the US Government Continuous Evaluation Program (CEP). Clearance must be maintained as a condition of continued employment.
Additional clearance: Ability to obtain and maintain a Special Access Program (SAP/SAR) clearance as a condition of continued employment.
Certification: Current US Government 8570 IAM level II equivalent security certification (or higher), including options such as CAP/CGRC, CASP+/SecurityX, CISM, CISSP (or Associate), GSLC, CCISO, or HCISPP.

Preferred Qualifications

Bachelor’s degree in Information Systems or Cybersecurity.
5+ years of experience with Assessment and Authorization of classified systems and the Risk Management Framework.
Knowledge of ACAS, NESSUS, SPLUNK, SCAP, POA&Ms, NIST, DIACAP, NISPOM, system audits, vulnerability scanning, and RMF package development.

Technologies

ACAS
NESSUS
Splunk
SCAP
POA&Ms
NIST
DIACAP
NISPOM
Risk Management Framework (RMF)

Benefits

Flexible work arrangements
Phenomenal learning opportunities
Exposure to a wide variety of projects and customers
Friendly team environment
Exceptional benefits/healthcare
401k matching program
Eligible for overtime, shift differential, and a discretionary bonus in addition to base pay (depending on position)
Annual bonuses
Long Term Incentives (VP/Director positions, depending on position)
Health insurance coverage
Life and disability insurance
Savings plan
Company paid holidays
Paid time off (PTO) for vacation and/or personal business

Relocation Assistance

Relocation assistance may be available.

Clearance, Eligibility, and Application Notes

Clearance required for start: Yes
Clearance type: Top Secret
U.S. citizenship: U.S. citizenship is required for positions with a government clearance and certain other restricted positions
Classified work constraint: Due to the classified nature of the work, this position does not offer any virtual or telecommute working options. Applicants are encouraged to apply only if they are willing to work on-site.

Estimated Application Period

The application period is estimated to be 20 days from the job posting date. This timeline may be shortened or extended depending on business needs and the availability of qualified candidates.

View full job page →

Today

Cybersecurity Engineer 3

Base-2 Solutions United States

United States

Today

Full time Application Security Cloud Platforms Cybersecurity Tools

Apply Now

Job Description

Base-2 Solutions is hiring a Cybersecurity Engineer 3 for an onsite role in the United States. This position focuses on safeguarding digital assets and sensitive information by designing, implementing, and maintaining cybersecurity infrastructure under a Top Secret/SCI clearance with CI Polygraph, while collaborating across teams to integrate security into the development lifecycle.

What you’ll do

Design, implement, and manage security solutions, including firewalls, intrusion detection/prevention systems, endpoint protection, and encryption mechanisms.
Perform regular security assessments to identify vulnerabilities and weaknesses across systems, networks, and applications.
Develop and implement incident response plans to address security incidents and breaches.
Monitor network traffic, system logs, and security alerts to detect and respond to potential incidents.
Analyze and investigate anomalies and security breaches, taking appropriate actions to mitigate risks.
Collaborate with cross-functional teams to establish and enforce security policies, standards, and procedures.
Work with IT, software development, compliance, and other teams to integrate security into all phases of the development lifecycle.
Maintain thorough documentation of security processes, procedures, and configurations.
Prepare detailed reports on security findings, incidents, and actions taken.

Clearance and core requirements

Active Top Secret/SCI with CI Polygraph.
7+ years of experience as a cybersecurity engineer, with specialization in designing and building implementations of required security controls.
Experience implementing continuous monitoring and auditing of solutions for compliance with security controls.
Strong skills specifying and implementing log collection into tools such as Splunk.
Experience querying and analyzing aggregated logs to identify security-relevant anomalies or risks.
Strong experience implementing security controls from government regulatory frameworks and security standards, including NIST SP 800-53, RMF, ICD 503, FISMA, and FedRAMP.
Experience implementing controls for cloud, container, and DevSecOps services and solutions within IL5 to IL6+ environments.
Strong understanding of network protocols, operating systems, and infrastructure components.
Proficiency in incident response, security incident handling, and forensic analysis techniques.
Experience with security tools such as Fortify, Acunetix, and Prisma Cloud.
Effective communication skills to convey complex technical concepts to technical and non-technical stakeholders.
CISSP or equivalent certification to support DoD 8140 requirements.

Tools and frameworks you’ll work with

Splunk, Fortify, Acunetix, Prisma Cloud
NIST SP 800-53, RMF, ICD 503, FISMA, FedRAMP
DevSecOps, cloud, container

Compensation and benefits

Competitive fixed salary or hourly pay (based on experience, skills, location, and internal equity).
Employee referral bonuses up to $10,000 per hired referral.
Additional bonus opportunities for exceptional performance and contributions to business development and company growth (role-dependent).
100% company-paid medical premiums for employees and eligible dependents. Choose from multiple plan options with CareFirst, Kaiser, and UnitedHealthcare, including PPO, POS, HMO, and HSA-compatible plans.
100% company-paid dental premiums for employees and eligible dependents.
100% company-paid vision premiums for employees and eligible dependents.
100% company-paid premiums for short-term disability, long-term disability, and accidental death & dismemberment (AD&D).
100% company-paid life insurance up to $200,000.
401(k) with immediate vesting: 4% company match plus 4% non-elective company contribution (8% total), with pre-tax and Roth options.
Up to 20 days of flexible paid time off (PTO) and 11 paid floating holidays.
Flexible work schedules, including flex time and compressed work periods (contract and project-dependent).

View full job page →

Today

IT Statewide Infosec Analyst 1, 2

Grambling State University Baton Rouge, LA

Baton Rouge, LA

Today

Full time Cyber Threat Analysis Cybersecurity Tools Identity and Access Management

Apply Now

Job Description

The IT Statewide Infosec Analyst 1/2 will support Grambling State University’s Office of Technology Services by monitoring and responding to cyber threats across the enterprise. The role centers on centralized security event triage, incident response coordination, and hands-on technical support for systems, applications, and networks.

Key Responsibilities

Monitor, triage, and investigate real-time security alerts generated through Palo Alto Networks Cortex XSIAM and CrowdStrike Falcon Complete platforms.
Validate high-priority threat notifications, evaluate relevant context, and perform initial containment actions in alignment with enterprise incident response playbooks.
Coordinate remediation workflows with the CrowdStrike Falcon Complete managed service team and applicable OTS technical verticals.
Record investigation findings, root cause analyses, and response actions in the centralized security incident log.
Assist with tuning detection logic, correlation rules, and automated response playbooks within Cortex XSIAM to reduce false positives.
Monitor and manage the ServiceNow ticketing queue for proxy-related issues, access requests, and categorized URL reclassification tickets.
Troubleshoot and resolve web filtering issues, SSL/TLS decryption exceptions, and secure web gateway (SWG) connection anomalies for enterprise users.
Analyze user traffic patterns against acceptable use policies to identify policy violations, unauthorized application usage, or potential evasion attempts.
Maintain operational documentation and standard operating procedures (SOPs) for enterprise proxy management and ticket workflows.
Investigate suspicious internal and perimeter network traffic, protocol anomalies, and anomalous host behavior using network telemetry and logs.
Conduct proactive threat hunting using threat intelligence indicators (IoCs) and behavioral analytics to identify potential adversary activity (TTPs).
Correlate disparate log sources including firewall, DNS, VPN, authentication, and endpoint logs to reconstruct attack timelines and assess scope of impact.
Escalate confirmed intrusions or advanced persistent threats (APTs) to senior incident response personnel and OTS leadership.
Monitor identity provider signals and behavioral analytics for indications of compromised credentials, impossible travel, and unauthorized account modifications.
Coordinate with the OTS Service Desk and identity teams to initiate account locks, password resets, session revocations, and MFA step-up authentication for compromised users.
Verify post-compromise cleanup to ensure persistent access mechanisms (for example, malicious inbox forwarding rules and unauthorized OAuth applications) are identified and removed.
Advise agency points of contact and help desk personnel on remediation best practices and credential hygiene.
Perform other tasks, special projects, analysis, studies, and plans as directed by OTS Leadership.

Required Qualifications

Four years of experience in information technology; or
Six years of full-time work experience in any field plus two years of experience in information technology; or
An associate’s degree in information technology plus two years of experience in information technology; or
A bachelor’s degree plus two years of experience in information technology; or
A bachelor’s degree with twenty-four semester hours in an information technology, computer science, engineering, mathematics, or business analytics field plus one year of experience in information technology; or
A master’s degree plus one year of experience in information technology.

A certification in an approved area may be substituted for the education and/or experience requirements at the time of hire or promotion, provided the appointment is made from a Certificate of Eligibles.

Technologies

Palo Alto Networks Cortex XSIAM
CrowdStrike Falcon Complete
ServiceNow
SSL/TLS
Secure Web Gateway (SWG)
MFA
OAuth

Additional Job Information

Location: Baton Rouge, LA (onsite).
Infosec Section. Req. 226052.
Direction is provided by the Director of Information Security Engineering and Architecture to monitor, detect, analyze, and respond to cyber threats across the enterprise.
Centralized security event triage, incident response coordination, and technical support are provided across computer systems, applications, and networks.
Utilizes technical and analytical problem-resolution skills to investigate security alerts, mitigate emerging threats, and collaborate across technical support teams and state agencies.
Appointment Type: filled by new hire or by promotion of a current permanent status classified employee.
Career Progression: participates in a career progression group and may be filled as IT Statewide Infosec Analyst 1 or 2 from this recruitment.
Louisiana is a “State as a Model Employer” for People with Disabilities.

How to Apply

No Civil Service test score is required for consideration.
Click the “Apply” link above and complete an electronic application.
Resumes will not be accepted in lieu of completed education and experience sections on the application.
Applicants qualifying based on college training or a baccalaureate degree must submit an official college transcript to verify credentials claimed prior to appointment.
A criminal history check may be conducted for all new hires and employees changing positions, including promotions, demotions, details, reassignments, and transfers.
Prospective employees may be subject to pre-employment drug testing.
New hires will be subject to employment eligibility verification via the federal government’s E-verify system.

Contact

Erica R. Gay, HR Specialist, Division of Administration/Office of Human Resources
Email: Erica.Gay@la.gov

View full job page →

Today

IT Senior Security Engineer

August Schell Bethesda, MD

Bethesda, MD

Today

Full time Senior Ai Security Application Security

Apply Now

Job Description

Contribute to the National Library of Medicine’s Security Compliance team by engineering security controls and compliance capabilities across hybrid on-prem and cloud environments.

Responsibilities

Enhance and automate security and compliance checks using scripting and available tools; evaluate emerging technologies, including AI capabilities, to expand security coverage and improve operational efficiency
Lead integration efforts for AI/ML-driven capabilities with current security tooling and operations to automate assessment and remediation using LLM within NLM
Implement and maintain security controls across on-prem and cloud environments (AWS, GCP, Azure), ensuring alignment with FISMA, NIH policy, and federal security requirements
Recommend and support security services for identity access, privileged access, vulnerability management, encryption, network micro-segmentation, and centralized log management across hybrid systems
Integrate and optimize enterprise security and SIEM solutions (e.g., Splunk, Tenable) for continuous monitoring, event correlation, and compliance visibility
Perform threat modeling and security assessments for cloud deployments; identify and mitigate vulnerabilities and support secure cloud migrations
Provide security guidance, best practices, and compliance support to developers, operations teams, and system owners to improve organizational security awareness
Analyze vulnerability and assessment data to identify systemic risks, remediation trends, and opportunities to improve processes or tools; collaborate with system administrators and security teams for risk-informed remediation
Contribute to and manage documentation, standard operating procedures, and technical guidance to support consistent execution across the security program

Requirements

Extensive experience securing on-premises and cloud environments (AWS, GCP, Azure) with strong working knowledge of cloud security models, logging, tagging strategies, ephemeral resource tracking, and cross-platform operations in federal, regulated settings
10+ years securing information technology plus 7+ years in hands-on security engineering built on a systems administration foundation, including at least 3 years focused on cloud security and administration of Linux and Windows endpoints
Familiarity with AI/ML integration in security tooling and operations, supporting modern approaches to threat detection and remediation
Demonstrated expertise applying federal compliance frameworks including FISMA, NIST 800-53, FedRAMP, and RMF, including support for system authorization processes (ATO, POA&M)
Admin or engineering-level experience with at least two security tools such as Tenable, Checkmarx, or Splunk, plus strong understanding of vulnerability management, application security testing, and remediation workflows
Bachelor’s degree in computer science, cybersecurity, information technology, or related technical field (or equivalent technical experience)
CISSP certification (or ability to obtain within 6 months)
Ability to collaborate and guide multi-disciplinary teams managing servers, workstations, network and security appliances in regulated environments; ability to adapt to shifting priorities
Strong written and verbal communication skills, including producing clear security documentation and explaining technical concepts to technical and non-technical stakeholders

Technologies

AWS, GCP, Azure
Splunk, Tenable, Checkmarx
FISMA, NIST 800-53, FedRAMP, RMF
ATO, POA&M
AI/ML, LLM
PowerShell, Bash, Python
Linux, Windows, Linux and Windows endpoints
Docker, Kubernetes

Location & Employment Type

Bethesda, MD (onsite)
Onsite requirement: 3–5 days per week as needs change
Full-time

Desired Qualifications

Hands-on experience with AI/ML automation, security event correlation, asset inventory tracking, and SEIM management (preferably in Splunk), using scripting or programming such as PowerShell, Bash, Python (or equivalent) and APIs
Advanced Linux and Windows administration experience; certified in AWS/AZURE/GCP
Experience with container security (Docker & Kubernetes)
Master’s degree in computer science, cybersecurity, information technology, or a related technical field

View full job page →

Today

Cloud Application Software Security Engineer

Experis St. Louis, MO

St. Louis, MO

Today

$90 - $120/hr Contract Application Security Aws Govcloud Aws Security

Apply Now

Job Description

Stability and mission-driven work in a regulated environment: this 12-month contract role provides hands-on exposure to AWS GovCloud and security activities tied to federal-style compliance and assurance. You will contribute to application and cloud security work in a collaborative DevSecOps-focused environment, with remote potential depending on location and project needs.

Based in St. Louis, MO (hybrid preferred), this position supports the Security Engineering team by performing application security assessments, remediating vulnerabilities and compliance findings, and helping harden cloud infrastructure. The work centers on AWS GovCloud, custom applications, and support of SA&A, monitoring, and regulatory compliance efforts.

What you’ll do

Conduct application security assessments and implement remediation recommendations.
Evaluate and remediate KEVs, CVEs, and compliance-related security findings.
Review and secure custom applications built with VB.NET, SQL, and Python.
Harden and secure AWS CDK Infrastructure as Code (IaC) deployed in AWS GovCloud.
Support SA&A activities, including documentation, continuous monitoring, and regulatory compliance efforts.

What you bring

Bachelor’s degree in Computer Science, Cybersecurity, Software Engineering, or equivalent experience.
3-5+ years of application security or secure software development experience.
Hands-on experience with Python, SQL, VB.NET, AWS CDK, and AWS security services.
Experience with vulnerability management, SBOM analysis, SAST, DAST, and penetration testing.