CybersecurityJobs.io - Jobs in infosec and cybersecurity.

Latest Jobs

Today

Senior Security Analyst

D.R. Horton Arlington, TX

Arlington, TX

Today

Full time Senior Cybersecurity Analysis Identity and Access Management

Apply Now

Job Description

D.R. Horton is seeking a Senior Security Analyst to help keep business systems secure and running smoothly in an onsite role in Arlington, TX. In this full-time position, you will handle day-to-day IT security operations while also leading investigation, patching, and security project work, including weekly on-call coverage that involves Active Directory management, forensic operations, and other IT operations as needed.

Benefits include Medical, Dental and Vision, a 401(K), an Employee Stock Purchase Plan, Flex Spending Accounts, Life & Disability Insurance, and time off including Vacation, Sick, Personal Time and Company Holidays. The role also includes multiple voluntary and company-provided benefits.

Responsibilities

Handle daily tasks and routine processes required for IT security.
Lead efforts to address IT security concerns and help explain investigation results.
Apply expert knowledge to complex issues and delegate tasks to Security Analysts and Administrators.
Communicate outcomes of requests and security investigations to other IT Operations teams or employees.
Maintain and troubleshoot domain controllers, including Active Roles management.
Support Active Directory Federation Services (ADFS), including ADFS server maintenance, troubleshooting, and authentication work with IT Operations and Development teams.
Manage DNS zones, F5 DNS VIPs and pools, and Active Directory sites and subnets.
Manage domain trust configuration and Group Policy Management, including WMI Filters, GPO troubleshooting, and cleanup.
Perform patching operations, including research and preparation to address known vulnerabilities across company systems.
Research patch risk and value, report the Company risk rating across all layers of the environment, and coordinate with SCCM administrators to confirm patching is configured correctly.
Ensure required patches are installed on servers and workstations, and validate IT security applications function as designed after patching.
Support isolation and outbreak prevention of infected company systems.
Mitigate and block DDoS and other network attacks as needed, and conduct forensic investigations to determine root cause of compromises or exploited vulnerabilities.
Investigate infrastructure weaknesses and report malicious activity or potential risk.
Partner with security and IT operations team members for deployments and maintenance, and architect, plan, and implement assigned IT security projects.
Participate in a weekly call rotation and complete on-call response duties covering Active Directory management, Forensic Operations, and IT Operations as needed.
Mentor Security Analysts and Security Administrators, and help train team members on learned tasks related to the duties.
Write, assign, and deploy IT security projects, contribute to delegation as required, update senior members or managers on project status, and respond to escalated issues.
Provide detailed explanations of technical investigation results and incident outcomes.

D.R. Horton expects all work to be conducted in a professional and ethical manner to serve customers and increase goodwill and profit of the company.

Requirements

High school diploma or general education degree (GED).
Three to five years of experience in an IT related field.
Advanced knowledge of IT Security Operations and Forensic Operations.
Advanced knowledge of IT Networking and Network Security Operations.
Advanced knowledge of IT Infrastructure and Applications.
Advanced knowledge of cyber attackers and threat actor tactics.
Advanced experience with project management and delegation.
Advanced business communication and collaboration skills.
Advanced documentation skills, with the ability to work with teammates on projects and independently to complete assigned tasks.
Ability to interpret research into solutions for real problems and provide customer service skills.
Experienced mentoring and training skills.
Ability to apply common sense understanding to carry out instructions furnished in written or oral form or via DRH applications.
Proficiency with MS Office and email.
Attention to detail and ability to manage multiple responsibilities.
Bachelor’s degree in a Cyber Security discipline is preferred.

Other requirements: Ability to travel overnight.

On-Call & IT Operations Coverage

Monitor and assist with IT operational emergencies to help keep business applications operational.
Assist with IT operational tasks as needed.
Weekly rotation on-call schedule includes Active Directory Management, Forensic Operations, and IT Operations as needed.

Projects

Write, assign, and deploy IT security projects.
Contribute to project delegation or assign projects as required.
Update senior members or managers on project status.

Tools & Technologies

Active Directory
Active Roles
Active Directory Federation Services (ADFS)
DNS (Domain Name Service)
F5 DNS VIPs and pools
Active Directory Sites and Services
Group Policy Management
WMI Filters
GPOs
SCCM (System Center Configuration Manager)
MS Office
Email

View full job page →

Today

Application Security Engineer

Yum! Brands Louisville, KY

Louisville, KY

Today

$107k - $147k/yr Full time Application Security Cybersecurity Tools Data Security

Apply Now

Job Description

Yum! Brands is seeking an Application Security Engineer to strengthen security across web, mobile, and restaurant technology environments. In this onsite role in Louisville, KY, you will help identify, assess, prioritize, and remediate application vulnerabilities while integrating security into the software development lifecycle.

This position focuses on application security testing and scanning, continuous monitoring of emerging vulnerabilities, and clear risk communication to technical and non-technical stakeholders. You will also work across engineering and incident response to support containment, remediation, and root cause analysis when application security incidents occur.

What you’ll do

Act as a subject matter expert on application security for US teams and operate YUM! application security services for the brand.
Use a risk-based approach to work with third-party engineers and product owners to identify, prioritize, and remediate vulnerabilities in mobile and web applications across YUM! systems, including e-commerce websites, e-commerce mobile apps, and restaurant operations applications.
Review vulnerability findings using established YUM! security services, coordinate with engineering teams to communicate and remediate issues, and analyze findings for root cause, exploitability, business impact, and remediation strategies aligned to established timelines.
Maintain application security scan profiles and scan policies across baseline standards for SAST, DAST, Software Composition Analysis (SCA), container security, Infrastructure as Code (IaC), secrets detection, and crowd-sourced penetration testing platforms; onboard new applications and improve scan coverage and effectiveness.
Partner with development teams to integrate security into the SDLC, including secure coding practices, pull request workflows, automated security testing, software supply chain security, and secure release processes.
Support engineering awareness campaigns promoting secure software development practices and adherence to YUM! Global Technology Risk Management standards.
Continuously monitor publicly disclosed vulnerabilities affecting applications, frameworks, libraries, operating systems, and third-party dependencies; assess business risk, prioritize remediation, validate fixes through rescanning, and communicate recommendations to stakeholders.
Coordinate with incident response teams to contain, remediate, and perform root cause analysis for application security incidents.

Minimum qualifications

Bachelor’s degree and at least 4 years of experience in cybersecurity, software engineering, or application development.
Experience evaluating application security vulnerabilities for exploitability, business risk, and remediation planning.
Experience collaborating with software engineering teams and communicating technical topics to both technical and non-technical audiences.
Familiarity with secure software development lifecycle (SSDLC) practices and modern software delivery methodologies.
Familiarity with relevant compliance and data privacy regulations, such as PCI DSS, GDPR, and CCPA, and how they influence application security testing and remediation.

Core technical focus

Git-based development workflows, including branching strategies, pull requests, code reviews, merge approvals, and secure source code management.
CI/CD pipelines and build automation, including how security testing integrates into modern software delivery.
Application security testing methodologies: SAST, DAST, SCA, secrets detection, container security scanning, and IaC security testing.
Secure coding principles and common vulnerabilities aligned to OWASP Top 10, including secure authentication, authorization, input validation, output encoding, and session management.
Web communication fundamentals such as HTTP/HTTPS, TLS, RESTful APIs, cookies, headers, CORS, and Content Security Policy (CSP).
Modern authentication and authorization technologies including OAuth 2.0, OpenID Connect (OIDC), SAML, JWT, and RBAC.
Package management ecosystems (npm, pip, NuGet, Maven, Gradle) and software supply chain security concepts including dependency management, lock files, transitive dependencies, Software Bill of Materials (SBOMs), and package integrity.
Container and orchestration technologies, including Docker and Kubernetes, and the ability to interpret container security findings.
Infrastructure as Code technologies such as Terraform and CloudFormation, including secure configuration practices.
Ability to investigate beyond automated scanner output by validating exploitability and recommending practical remediation approaches.

Salary: USD 106,600 to 146,500 per year. Location: Louisville, KY (onsite).

View full job page →

Today

Penetration Tester

Acuity INC Virginia

Virginia

Today

$175k - $200k/yr Full time Application Security Cloud Platforms Data Security

Apply Now

Job Description

Acuity Inc is looking for a Penetration Tester to support federal clients from Virginia (onsite). This role blends hands-on testing with clear, defensible reporting, helping strengthen security defenses across servers, web applications/services, and databases. Alongside the work, Acuity Inc offers Health/Dental/Vision, 401K matching, up to $6K training and professional development annually, and corporate events and team-building.

Responsibilities

Perform internal penetration testing and vulnerability assessments covering servers, web applications, web services, and databases
Conduct security reviews and technical research, delivering provided reporting to support improved security defense mechanisms
Carry out manual exploitation to compromise operating systems, web applications, and databases
Review and validate findings from web/OS scanners, scans, and static source code analysis
Identify vulnerabilities, misconfigurations, and compliance issues
Produce final reports and defend findings, including risk or vulnerability details, mitigation strategies, and references
Provide security recommendations to developers, system administrators, project managers, and senior government stakeholders
Report vulnerabilities discovered during security assessments
Write Penetration Testing Rules of Engagement (RoE), Test Plans, and Standard Operating Procedures (SOP)

Requirements

Experience with NIST 800-53 and the Risk Management Framework
Ability to meet and coordinate with multiple audiences, including developers, system administrators, project managers, and senior government stakeholders
Experience with AWS Cloud Security
Strong writing skills
Certifications: CEH (Certified Ethical Hacker) and CPT (Certified Penetration Tester)
TS/SCI w/Poly

Compensation: USD 175,000 - 200,000 per year.

View full job page →

Today

Enterprise Application Security Engineer (Builder)

Meta New York, NY

New York, NY

Today

$122k - $181k/yr Full time Agent Agent Security Ai Security

Apply Now

Job Description

Meta’s Enterprise Application Security team is building security tooling and automation that helps enterprise teams deliver applications and services with strong security, privacy, and data protection controls. As an Enterprise Application Security Engineer (Builder), you will help shift security detection and prevention earlier in the development lifecycle and establish guardrails that enable safe adoption of third-party AI applications and agentic workflows.

This onsite role is based in New York, NY and supports enterprise-scale delivery by designing controls that protect sensitive data continuously and at scale.

What you’ll do

Conceive, design, develop, and improve security tooling, automation, and/or frameworks that enable enterprise teams at scale to ship applications and services with security controls aligned to evolving security, privacy, and data protection requirements
Identify and eliminate recurring security problem classes by shifting detection and prevention left into development workflows
Deliver just-in-time, actionable security guidance to enterprise application and service teams through activities such as code reviews, penetration tests, adversarial testing, threat modeling, and architecture design reviews
Work with cross-functional teams to ensure security priorities are addressed and kept on track
Design and build security controls and guardrails for safe enterprise adoption of third-party AI applications and agentic workflows, including controls that govern what automated systems can access and what data they can reach
Build enforcement mechanisms that protect sensitive and highly confidential data stored in enterprise applications, operating continuously and at scale

Minimum qualifications

B.S. or M.S. in Computer Science, Engineering, or a related technical discipline (or equivalent experience)
2+ years of experience developing production-level code in Python, PHP, Java, Ruby, Go, Rust, C/C++, or a similar language
2+ years of experience identifying and mitigating software security issues using Python, PHP, Java, Ruby, Go, Rust, C/C++, or a similar language, along with knowledge of best-practice secure code development
Experience owning a component, feature, or system
Experience building and securing enterprise-scale software, services, and infrastructure
Experience communicating technical security findings and recommendations in writing to both technical and non-technical stakeholders

Technologies

Python
PHP
Java
Ruby
Go
Rust
C/C++

Compensation and benefits

$122,000/year to $181,000/year + bonus + equity + benefits
Meta offers benefits

Preferred qualifications

Experience developing software that enables or evaluates security controls in complex systems
Demonstrated ability to integrate AI tools to optimize or redesign workflows and drive measurable impact (such as efficiency gains or quality improvements)
Demonstrated ongoing AI skill development (such as prompt or context engineering, agent orchestration) and staying current with emerging AI technologies
Experience fixing enterprise security problems across broad corporate boundaries using influence and relationships
Experience designing, analyzing, and conducting threat model assessments of enterprise software and services
Experience in penetration testing or red team operations
Contributions to the security community (public research, blogging, presentations, bug bounty, etc.)
Experience automating application security controls in large-scale enterprise environments
Experience adhering to and implementing responsible, ethical AI practices (such as risk assessment, bias mitigation, quality and accuracy reviews)
Broad knowledge of the security domain, including security investigations, incident management, digital forensics, offensive security, vulnerability management, application security, and other security disciplines

View full job page →

Today

Application Security Architect

INFO ORIGIN INC Richmond, VA

Richmond, VA

Today

$90 - $95/hr Full time Api Security Application Security Cloud Platforms

Apply Now

Job Description

Design and lead application security strategy across enterprise platforms and services in a hybrid Richmond, VA role.

Responsibilities

Design and lead security strategies across enterprise applications
Apply security strategy across cloud platforms
Secure and govern APIs, including API security considerations
Support security across data platforms
Address security needs for GIS
Cover security for Power Platform
Develop security approaches for Agentic AI solutions

Requirements

10+ years in software/application/security engineering
Application Security and security architecture experience
Threat modeling and architecture reviews
SSDLC / DevSecOps experience
Azure, Kubernetes, and cloud security experience
OWASP practices and application security testing methods including SAST and DAST
Software composition and risk coverage including SCA
API security experience
Authentication and authorization standards including OAuth, OIDC, SAML, JWT
Access control concepts including RBAC and ABAC
Data protection including data classification, encryption, DLP, and privacy
Experience with Microsoft Purview
Experience with SQL Server
Experience with Dynamics 365
Experience with Power Platform and ArcGIS
Experience with VITA/COV security standards is highly preferred
Bachelor’s degree or equivalent practical experience required

Technologies

Azure
Kubernetes
OWASP
SAST
DAST
SCA
API Security
OAuth, OIDC, SAML, JWT
RBAC, ABAC
Microsoft Purview
SQL Server
Dynamics 365
Power Platform
ArcGIS

Location and Work Arrangement

Richmond, VA (hybrid)
Local candidates only
Initial onsite requirement: 4 days/week for 90 days
Reduced onsite may be possible after the initial period

Compensation

USD 90–95 per hour

Application Details

Share your updated resume
Include current location
Provide work authorization
Include availability
Submit your hourly rate

View full job page →

Today

Lead Security Architect (Application Security)

Wells Fargo Irving, TX

Irving, TX

Today

$119k - $206k/yr Full time Manager Ai Security Application Security

Apply Now

Job Description

Wells Fargo is seeking a Lead Security Architect (Application Security) to help shape secure-by-design solutions at enterprise scale. This hybrid role focuses on security architecture leadership across application development, APIs, DevSecOps, and emerging technologies, with an emphasis on threat modeling, architecture reviews, security assessments, and practical guidance on security controls and standards.

Why this role at Wells Fargo

Hybrid work schedule based in Irving, TX
Competitive base pay with a range of USD 119,000 - 206,000 per year
Impact across the enterprise through architecture patterns, standards, and security requirements that influence strategic technology decisions
Modern security practices spanning secure software development lifecycle (SSDLC), application security testing, and software supply chain security
AI-enabled development workflows using AI-assisted development and analysis tools, with responsible integration and validation

Responsibilities

Lead the implementation of complex projects and initiatives with companywide scope
Drive secure-by-design practices across applications, APIs, cloud-native platforms, and AI-enabled solutions
Create architectural artifacts such as standards, reference architectures, design patterns, and security requirements
Participate in future technology architecture definition and Application Security strategy
Identify medium to high architectural impact projects and provide security architecture guidance across the project lifecycle
Conduct complex technology, security, and system assessments for architecture solutions
Perform threat modeling, architecture reviews, and risk assessments for critical applications and platforms
Provide guidance on DevSecOps, software supply chain security, CI/CD security, and application security testing
Make decisions in the development and maintenance of security architectures and controls
Understand compliance and risk management requirements for supported areas
Ensure applications adhere to Wells Fargo standards, policies, methodologies, and industry best practices
Collaborate with peers, colleagues, and managers to resolve issues and achieve goals
Demonstrate proficiency using AI-assisted development and analysis tools (including GitHub Copilot and approved code-centric agents)
Use AI to accelerate system design, coding, testing, analysis, and troubleshooting, while validating and integrating AI outputs with strong technical judgment
Account for model limitations, security risks, and operational considerations, and ensure AI usage aligns with security, compliance, privacy, and ethical standards
Serve as a trusted security architecture advisor for application and platform teams
Partner with engineering, architecture, risk, and cybersecurity teams to drive secure technology adoption
Deliver architecture reviews, threat models, and security recommendations for strategic initiatives
Support and enhance enterprise Application Security standards and secure-by-design practices
Mentor architects and engineers on application security and emerging technology risks
Operate effectively in a highly regulated and risk-driven environment, influencing security strategy and enterprise technology decisions

Requirements

5+ years of Architecture experience, or equivalent demonstrated through one or a combination of: work experience, training, military experience, education
5+ years of Information Security, Security Architecture, Application Security, or Software Security experience
Experience performing threat modeling, architecture reviews, and security assessments
Knowledge of secure software development lifecycle (SSDLC) and secure coding practices
Experience securing cloud-based applications, APIs, and modern application architectures
Strong knowledge of application security principles, OWASP Top 10, API Security, and common attack vectors
Experience with SAST, DAST, SCA, IaC scanning, and software supply chain security controls
Experience with cloud-native architectures, containers, Kubernetes, microservices, and APIs
Knowledge of Azure, AWS, or Google Cloud security architectures
Experience developing security standards, patterns, and reference architectures
Familiarity with AI/GenAI security risks and mitigation strategies
Strong verbal, written, and stakeholder management skills

Technologies

GitHub Copilot
AI-assisted development and analysis tools
OWASP Top 10
SAST, DAST, SCA, IaC scanning
Cloud-native architectures, containers, Kubernetes, microservices, APIs
Azure, AWS, Google Cloud
CI/CD

Benefits

Health benefits
401(k) Plan
Paid time off
Disability benefits
Life insurance, critical illness insurance, and accident insurance
Parental leave
Critical caregiving leave
Discounts and savings
Commuter benefits
Tuition reimbursement
Scholarships for dependent children
Adoption reimbursement

Job expectations

Hybrid work schedule
This position is not eligible for Visa sponsorship

Posting end date: 24 Sep 2026. Job posting may come down early due to volume of applicants.

Salary information

$119,000 - $187,000 - Charlotte, NC
$119,000 - $187,000 - Irving, TX
$119,000 - $187,000 - Columbus, OH
$131,000 - $206,000 - Minneapolis, MN

Pay range: Reflected is the base pay range offered for this position. Pay may vary depending on factors including demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities.

Additional information

Applicants with disabilities: To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.
Drug and alcohol policy: Wells Fargo maintains a drug free workplace. Please see the Drug and Alcohol Policy to learn more.
Third-party recordings are prohibited unless authorized by Wells Fargo.
Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.

View full job page →

Today

Director, Application Security

Intercontinental Exchange Holdings, Inc. Atlanta, GA

Atlanta, GA

Today

Full time Manager Ai Security Application Security

Apply Now

Job Description

Intercontinental Exchange Holdings, Inc. is seeking a Director, Application Security to lead an enterprise AppSec program at scale. This onsite role in Atlanta, GA focuses on building assurance through education, continuous testing, and consultative security guidance across application and cloud environments. You will help shape practical policies, secure design practices, tooling strategy, and a responsible bug bounty program, while guiding two teams and the broader development community.

What you’ll do

Differentiate legitimate business risk from fear, uncertainty, and doubt, and assign practical severity ratings to vulnerabilities and weaknesses.
Demonstrate compromise paths for detected vulnerabilities to educate and motivate development teams.
Adopt and continuously improve an education, testing, and remediation methodology.
Innovate to ensure program areas operate effectively and distill results into meaningful metrics.
Codify and communicate Application Security and Cloud Security expectations through writing and discussion.
Recruit, retain, and motivate a talented staff, balancing efficient task allocation with development, challenge, and growth.
Run an established enterprise AppSec program supporting 2,000+ applications and a large developer pool.
Coach and develop team leaders, including newer leadership hires, within a high-performing, well-structured team.
Maintain commitment to continuous education and serve as a recognized industry leader in Application and Cloud Security.

How the program is managed

Application Identification and Review: Maintain, execute, and report AppSec assurance activities from design review through operation of a bug bounty program.
Standards and Policies: Own the Application Development Security Policy, ensuring timely, practical updates, communication, and education.
Secure Design: Establish security requirements early in the SDLC and provide security subject matter expertise for new projects and releases.
Tool Management: Implement and maintain cutting-edge technology to assess and protect applications and cloud environments throughout the SDLC and after deployment.
AI in AppSec: Evaluate and apply AI and machine learning capabilities, including AI-assisted vulnerability detection, AI-powered code review and testing tooling, and securing AI-integrated development pipelines.
Developer Education: Keep software engineers current on secure coding practices and build strong rapport with ICE’s application development community.
Cloud Practitioner: Provide security leadership and solutions for business and technical teams building or buying products in the cloud.
Bug Bounty Program: Operate a responsible disclosure program that incentivizes and supports positive relationships with security researchers.

Requirements

Bachelor’s degree in Computer Science, Engineering, MIS, CIS, or a related discipline.
Hands-on or program-level experience applying AI in the AppSec space.
Software engineering experience in Java, C++, Python, and/or related languages.
Hands-on experience with information security and related technologies.

Helpful background

Background in financial services or a comparable regulated enterprise environment.
Technical expertise and understanding of AWS and/or Azure cloud platforms.
Participation and leadership in Application Security consortia such as OWASP.