CybersecurityJobs.io - Jobs in infosec and cybersecurity.

Latest Jobs

29d ago

Principal Technical Advisor for Cybersecurity Incident Response

Microsoft Redmond, WA

Redmond, WA

29d ago

$131k - $304k/yr Full time Azure Cloud Platform Cloud Platforms

Apply Now

Job Description

Build higher-impact incident response capabilities with a role focused on delivery excellence and customer outcomes. As a service delivery-focused subject matter expert, you will provide deep incident response guidance while strengthening technical readiness, process compliance, and cross-team communication across global operations.

Responsibilities

Apply expert problem-solving, case management, and customer service skills to strategize technical triage and deliver actionable feedback to key partners and stakeholders.
Lead complex escalations, partner with product teams to drive fixes, and surface trends from customer feedback to support future product enhancements.
Improve and refine processes through collaboration with senior leadership across global teams, including leading efforts to enhance diagnostic data logging and facilitating communication between engineering and support teams.
Operate as an early warning system by putting plans in place to mitigate issues and proactively drive solutions.
Define and evolve engagement models, capability readiness, and service delivery frameworks for incident response.
Serve as a recognized expert in incident response and threat investigation across Cloud (Azure, Microsoft 365) and Windows, focusing on adversary behaviors, compromise analysis, and detection techniques.
Provide technical leadership in time-sensitive investigations requiring advanced forensic and investigative judgment, making decisions with incomplete data and high business impact while influencing standards for data handling, investigative rigor, and compliance across CIRT operations.

Requirements

Bachelor’s Degree in Information Technology (IT), Computer Science, Business Administration, Electrical Engineering, or a related field, AND 8+ years of system development, network operations, software support, IT, consulting, or technical troubleshooting experience (or equivalent experience).
8+ years prior product, customer support, and/or technical support experience.
Ability to meet Microsoft, customer and/or government security screening requirements for this role, including the Microsoft Cloud Background Check, required upon hire/transfer and every two years thereafter.
Provide proof of country of citizenship or proof of U.S. permanent residency or other protected status for eligibility to access export-controlled information. Citizenship verification is required with a valid passport.
Role classification is Microsoft Confidential; citizenship verification will be performed with a valid passport due to citizenship-based legal restrictions.

Preferred qualifications

Bachelor’s Degree (as listed above) AND 15+ years of related system development, network operations, software support, IT, consulting, or technical troubleshooting experience (or equivalent experience).
5+ years experience in Cybersecurity Incident Response.
SC-900 and ISC2 CC certifications; CISSP is a plus.
10+ years prior product, customer support, and/or technical support experience.
AI-900 certification or AI-901 certification.
Relevant technology certifications for the business area (for example: M365 Technologies, security certifications, or Azure certifications).

Technologies

Azure
Microsoft 365
Windows

Location and compensation

Location: Redmond, WA (onsite). Salary: USD 130,900 - 303,600 per year.

Typical base pay range across the U.S.: USD $130,900 - $277,200 per year. Different ranges apply to specific work locations: San Francisco Bay area and New York City metropolitan area: USD $165,600 - $303,600 per year.

Application timeline

This posting is open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

View full job page →

29d ago

Senior Cybersecurity Engineer

Geoengineers Inc Redmond, WA

Redmond, WA

29d ago

$98k - $169k/yr Full time Senior Cybersecurity Tools Data Security

Apply Now

Job Description

Geoengineers Inc is hiring a Senior Cybersecurity Engineer to design, implement, and manage enterprise security capabilities across compliance, Microsoft 365 security, vulnerability management, and incident response.

Responsibilities

Assist with CMMC Level 1 and CMMC Level 2 compliance initiatives, including implementation, documentation, assessment preparation, and ongoing control management
Administer and enhance Microsoft 365 security capabilities using tools such as Microsoft Purview, Microsoft Defender, and eDiscovery with related compliance tooling
Act as a primary information security point of contact, supporting security awareness, risk identification, and system security requirements
Engineer, implement, and monitor security controls to protect computer systems, networks, applications, and organizational information
Design security architecture and produce detailed security designs aligned to organizational needs and industry best practices
Maintain and update documentation for core security functions, operational processes, and standard operating procedures
Configure, maintain, and troubleshoot security infrastructure devices and related systems
Develop and implement technical security solutions and tools to identify, reduce, and mitigate vulnerabilities
Lead incident response, forensic analysis, and post-incident investigation activities for security events and suspected compromises
Build and maintain tools, processes, and infrastructure to support automation of incident response activities
Create comprehensive reports summarizing assessment findings, outcomes, risks, and recommendations for security improvement
Support third-party audit activities by preparing evidence, coordinating responses, and assisting with remediation efforts
Collaborate with internal teams across GeoEngineers to deploy security tools, improve processes, and standardize security practices
Serve as Incident Response and Crisis Management Lead during declared security incidents
Manage vulnerability mitigation strategies and maintain vulnerability scanning efforts across internal and external resources
Provide support for network engineering and administration activities as needed

Requirements

Experience with Arctic Wolf, Cisco Meraki, KnowBe4, Cisco Umbrella, Cisco DUO, and Nexpose
Bachelor’s degree in computer science, Information Technology, Cybersecurity, or related field from an accredited college or university (equivalent combinations of education, certification, and relevant work experience may be considered)
5+ years of related IT experience, including at least two years in an information security-focused role (corporate or professional services environment preferred)
One or more recognized industry certifications preferred (examples: CCNA, CISSP, Security+, or similar)
Strong technical expertise implementing security solutions aligned with current principles, techniques, protocols, and best practices
Demonstrated experience building and maintaining security systems such as firewalls, intrusion detection and prevention, endpoint protection, authentication platforms, log management, and content filtering
Solid foundation in higher-level information security concepts, assessment methodologies, and integration of security practices into an organization
Knowledge of network and web protocols including TCP/IP, UDP, IPSEC, HTTP, TLS, SSL, and BGP
Experience across information security technologies/processes including intrusion detection systems, web application firewalls, centralized logging, endpoint security, data loss prevention, SIEM, content delivery, load balancers, single sign-on, cloud platforms, threat intelligence, event correlation, virtualization technologies, and system/application vulnerability assessment tools
Ability to work effectively under pressure with strong problem-solving, analytical, and decision-making skills
Excellent interpersonal and written and verbal communication skills
Availability to participate in 24/7 incident response

Technologies

Microsoft 365, Microsoft Purview, Microsoft Defender, eDiscovery
Arctic Wolf, Cisco Meraki, KnowBe4, Cisco Umbrella, Cisco DUO, Nexpose
CMMC Level 1, CMMC Level 2
TCP/IP, UDP, IPSEC, HTTP, TLS, SSL, BGP
Intrusion detection and prevention systems, firewalls, endpoint protection, authentication platforms, log management, content filtering
Web application firewalls, data loss prevention systems, SIEM, content delivery platforms, load balancers, single sign-on systems
Cloud platforms, threat intelligence, event correlation, virtualization technologies, system and application vulnerability assessment tools
Security awareness, incident response, incident response and crisis management

Benefits

Healthcare (with travel benefit for care not locally available)
401(k) with company match
Short-term and long-term disability
Life insurance
Wellbeing benefits
Paid vacation and sick time
Paid holidays
Annual year-end bonus (subject to program eligibility requirements)

Work Environment / Physical Requirements

Normal office environment with moderate noise levels
Occasional lifting up to 25 lbs
Prolonged sitting and regular walking, bending, standing, and reaching
Ability to perform consistent work on a PC with prolonged view of a monitor/screen
Willingness and ability to travel occasionally as needed

Location: Redmond, WA (onsite) | Salary: USD 98,000 - 169,000 per year

View full job page →

29d ago

Cybersecurity Engineer

Skywalk Global Richmond, VA

Richmond, VA

29d ago

Full time Cloud Platforms Cloud Security Cyber Forensics

Apply Now

Job Description

Richmond, VA (onsite) role focused on Splunk SIEM operations, detection engineering, and incident investigation.

Responsibilities

Continuously review network traffic, endpoint logs, and cloud security events to identify anomalies and potential incidents
Build, maintain, and tune Splunk correlation searches, alerts, and dashboards to reduce false positives and strengthen detection quality
Investigate potential incidents using forensic evidence and coordinate with IT and network teams to remediate threats
Create and refine detection and response playbooks informed by threat intelligence and frameworks such as MITRE ATT&CK
Partner with infrastructure teams to onboard new data sources, ensuring log integrity, parsing, and normalization across the SIEM platform
Support audit readiness by collecting SIEM control evidence and producing compliance reports aligned with internal policies and standards

Requirements

Minimum 8+ years hands-on cybersecurity experience operating, building, and investigating threats within a SIEM or Splunk
Critical thinking, problem-solving, and communication skills; able to operate calmly under pressure and manage multiple security tickets
Proficiency writing SPL (Splunk Processing Language)
Strong understanding of networking, firewalls, EDR, and cloud platforms including AWS, Azure, or GCP
Knowledge of security frameworks such as MITRE ATT&CK and security compliance standards including NIST, HIPAA, or SOC 2
Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field
Relevant certifications such as Splunk Core Certified User and Splunk Core Certified Advanced Power User (highly preferred)

Technologies

Splunk SIEM
Splunk Enterprise Security
SPL (Splunk Processing Language)
Splunk correlation searches
MITRE ATT&CK
AWS, Azure, GCP
EDR
NIST, HIPAA, SOC 2

View full job page →

29d ago

Network & Cloud Security Engineer

Apolis Plano, TX

Plano, TX

29d ago

$50 - $55/hr Contract Cloud Cloud Native Cloud Platforms

Apply Now

Job Description

Manage secure network access and cloud-native security controls across on-prem and multi-cloud environments.

Key Responsibilities

Configure, maintain, and troubleshoot VPN gateways for secure remote access.
Monitor VPN performance, capacity, and user access logs.
Maintain compliance with encryption, authentication, and access control policies.
Implement and manage Prisma Cloud to protect cloud-native applications, workloads, and data.
Monitor multi-cloud environments for misconfigurations, vulnerabilities, and threats across AWS, Azure, and GCP.
Set and enforce security policies, perform compliance audits, and handle/respond to alerts.
Integrate Prisma Cloud with CI/CD pipelines and security tools.
Configure, deploy, and manage Palo Alto firewalls and other perimeter defense tools.

Requirements

Hands-on experience designing, implementing, and managing security solutions.
Experience with Palo Alto technologies (including firewalls) in security operations.
Experience managing secure remote access using VPN gateways.
Experience administering Prisma Cloud for cloud-native application, workload, and data protection.
Ability to monitor and improve security posture across AWS, Azure, and GCP.
Experience integrating cloud security tools with CI/CD pipelines.

Technologies

Prisma Cloud
Palo Alto (firewalls)
VPN gateways
AWS
Azure
GCP
CI/CD pipelines

Work Details

Job type: Contract
Schedule: 8 hour shift
Expected hours: 40 per week
Work location: In person
Locations: Plano, TX; Wellington, DE; Columbus, OH; Jersey City or NYC

Pay

Hourly rate: USD 50.00–55.00 per hour
Overtime pay: Yes

Benefits

Dental insurance
Health insurance
Life insurance
Vision insurance

Commute and Relocation

Ability to commute: New York, NY 10001 (Preferred)
Ability to relocate: New York, NY 10001 (Preferred) - relocate before starting work

View full job page →

29d ago

Information Security Analyst

One Community Bank McFarland, WI

McFarland, WI

29d ago

Full time Information Security InfoSec Security

Apply Now

Job Description

One Community Bank is seeking an Information Security Analyst to help validate that technology controls operate as intended and to support ongoing improvements to the organization’s security posture. This entry-level role focuses on testing, documentation, and coordination across teams, with work that supports audits/exams, incident response, and security awareness activities.

The role is based in McFarland, WI and is performed onsite. The position is open to candidates with 1+ years of experience in information security or IT, and it requires a Bachelor’s degree in Information Systems (or related field).

What you’ll do

Perform internal control testing and document results
Review penetration testing outcomes and track remediation efforts
Test and assess new technologies against established security requirements
Advise on IT security requirements and contribute to control design
Support audits/exams, including both internal and external processes
Contribute to incident response, business continuity, and security awareness efforts

What you bring

Bachelor’s degree in Information Systems (or related field)
1+ year in information security or IT
Proficiency with Microsoft applications
Strong written and verbal communication
Familiarity with patch management, firewalls, antivirus, IDPS, and security documentation

Tools and technologies

Microsoft applications
Patch management
Firewalls
Antivirus
IDPS
Security documentation

Schedule and day-to-day flow

Monday–Friday, 8am–5pm, onsite
Check in on open security items and coordinate with teammates and internal partners on what needs attention
Review findings, organize evidence for auditors, and maintain clear notes in shared documentation
Gather feedback from end users, translate it into actionable improvements, and help make security guidance easy to understand
Validate changes as new tools or updates roll out to ensure controls remain effective and well-supported

Benefits

Medical, Dental, and Vision coverage
401(k)
Life Insurance
Flexible Spending Account (FSA)
Paid Time Off
Bank-paid Short-term and Long-term disability insurance

About One Community Bank

They serve clients, support colleagues, and invest in communities, with aspirations to be the Best Billion Dollar Bank in the World
Grew from a single location in Oregon, Wisconsin in 1976 to 19 locations
Voted a Top Work Place eight years in a row

View full job page →

29d ago

Senior Penetration Tester (WebApp and Network)

Rapid Strategy Charlotte, NC 🇺🇸 Remote

Charlotte, NC

29d ago

$50 - $65/hr Part time Senior Application Security Cybersecurity Tools

Apply Now

Job Description

Support security validation for web applications and network environments through hands-on penetration testing and vulnerability discovery.

Responsibilities

Perform thorough penetration tests targeting web applications to uncover security vulnerabilities.
Use penetration testing tools and established methodologies to simulate real-world cyber attacks.
Identify weaknesses and vulnerabilities in web applications using a mix of manual and automated testing approaches.
Test and exploit common web application vulnerabilities, including SQL injection, Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), and others.
Produce detailed penetration test reports documenting findings and recommendations for security improvements.
Partner with development teams to advise on security best practices.
Stay current on evolving cybersecurity threats and new testing methodologies.

Requirements

Bachelor’s degree in Computer Science, Information Security, or a related field.
5+ years of experience in penetration testing or security assessment.
Relevant industry certifications, such as CEH, OSCP, or GIAC Web Application Penetration Tester (GWAPT).
Strong working knowledge of web application technologies and protocols (including HTTP/HTTPS, HTML, JavaScript, etc.).
Hands-on proficiency with tools such as Burp Suite, OWASP ZAP, Metasploit, and SQLMap.
Experience working with known exploits and understanding their mitigation.
Ability to analyze penetration test outcomes and communicate results effectively through reporting.
Strong problem-solving and analytical skills.
Excellent communication skills to collaborate with cross-functional teams.

Technologies & Skills

HTTP/HTTPS, HTML, JavaScript
Burp Suite, OWASP ZAP, Metasploit, SQLMap
SQL injection, Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF)
Python, Ruby

Desirable Skills

Experience with scripting or programming languages such as Python, JavaScript, or Ruby.
Knowledge of network security and operating systems.
Familiarity with cloud environments and container technologies.

Location: Charlotte, NC (remote). Job type: part time (1099 part-time positions available). Travel: possible. Compensation: USD 50 - 65 per hourly.

View full job page →

29d ago

Penetration Tester

Leidos Herndon, VA

Herndon, VA

29d ago

$131k - $237k/yr Full time Enterprise Risk Information Security InfoSec

Apply Now

Job Description

Join Leidos to support an enterprise IT program by delivering high-impact penetration testing and ethical hacking. This onsite role in Herndon, VA helps senior decision makers understand risk and make strategic investment choices, with documented findings and actionable results. Salary range: $131,300 - $237,350 per year.

What you’ll do

Provide highly technical, in-depth penetration testing in support of enterprise cyber security objectives.
Specialize in penetration testing and ethical hacking to target, assess, and exploit risks and vulnerabilities in information systems.
Deliver documented and actionable data to senior decision makers to support strategic investment decisions.
Document identified system risks, planned test procedures, and results; analyze vulnerabilities found during testing; and review program-level documentation such as requirements specifications, system architecture and design documents, test plans, and security plans.
Recommend changes to program-level documentation to help reduce system vulnerabilities; create and document penetration testing plans and procedures, including approved plans used to conduct hands-on testing.
Analyze test results, document risks, recommend countermeasures, and support or lead technical exchange meetings and application review boards. Capture and document action items, results, and brief management on status and outcomes.

Skills and experience needed

Active TS/SCI with Poly to be considered
10+ years of relevant experience in cyber security or a related IT field
Experience with cyber penetration testing and applying computer attack methods and system exploitation techniques
Working knowledge of cyber security principles for Linux, Windows, and virtual platforms
Experience designing, testing, or implementing IT security architecture
Experience performing network security analysis and analyzing network architectures
Experience using network management tools
Experience leveraging adversarial tactics for hands-on security testing
Experience developing risk management methodologies and analyzing test results to develop risk and threat mitigation plans
Experience testing or reviewing system configuration, development, and design for enterprise systems and hypervisors
Experience designing, testing, or implementing complex Windows installations

Relevant technologies

Linux
Windows
Virtual platforms
Hypervisors

Benefits

Health and Wellness programs
Income Protection
Paid Leave
Retirement

Preferred qualifications

Experience participating in public and private information security groups and organizations
Experience communicating vulnerability results and risk posture to senior executives
Experience researching, evaluating, and developing security policies and guidance
Experience performing complex technical tasks with minimal direction

Education

Bachelor’s degree or Masters in Computer Science, Information Systems, Engineering, or other related scientific or technical field.

Additional information

Original posting: June 26, 2026

Pay range: $131,300.00 - $237,350.00

Security and privacy notices

Leidos will never ask you to provide payment-related information during the employment application process, nor will it advance money as part of hiring.
Leidos will communicate through emails generated by the Leidos.com automated system, not via free commercial services or messaging apps.
If you receive an email requesting payment-related or other personal information, contact LeidosCareersFraud@leidos.com.
If you believe you are a victim of a scam, contact local law enforcement and report to the U.S. Federal Trade Commission.

Non-discrimination commitment

Leidos provides equal employment opportunities without regard to protected characteristics and will consider qualified applicants with criminal histories consistent with relevant laws.