CybersecurityJobs.io - Jobs in infosec and cybersecurity.

Latest Jobs

26d ago

Senior RMF Security Analyst

Diligent Solutions Gaithersburg, MD

Gaithersburg, MD

26d ago

Full time Senior Data Security Facilities Management

Apply Now

Job Description

Diligent Solutions is seeking a Senior RMF Security Analyst to support federal information systems through RMF Steps 1–3. In this hands-on role, you will develop and maintain RMF security documentation to help systems achieve, maintain, and renew Authorities to Operate (ATOs).

This position is based in Gaithersburg, MD on a hybrid schedule, with work focused on producing accurate, complete, and review-ready authorization package artifacts.

Key Responsibilities

Collect and update general system information for federal RMF documentation.
Create and maintain system records in CSAM, including system identification information, system descriptions, and technical narratives.
Prepare and update Privacy Threshold Analyses (PTAs) and Privacy Impact Assessments (PIAs).
Perform and update FIPS 199 security categorizations.
Perform and update E-Authentication Risk Assessments.
Identify common and inherited security controls, including controls inherited from FedRAMP-authorized services.
Develop and update compliance descriptions for applicable NIST SP 800-53 controls, including tailoring decisions.
Develop and update compensating controls when required.
Develop and update Contingency Plans and related testing and training documentation.
Develop and update documentation including System of Records Notices, Configuration Management Plans, Incident Response Plans, Business Impact Assessments, and Interconnection Security Agreements.
Finalize System Security Plan compliance descriptions.
Finalize Contingency Plans, Configuration Management Plans, Incident Response Plans, and Disaster Recovery Plans, as required.
Assist government stakeholders with addressing findings and updating documentation during concurrence and authorization reviews.
Coordinate with technical and business stakeholders to ensure RMF documentation is accurate, complete, consistent, and ready for authorization review.

Requirements

U.S. citizenship.
Bachelor’s degree and at least eight years of relevant cybersecurity experience.
Experience completing all aspects of the NIST Risk Management Framework for federal information systems.
Hands-on experience developing and maintaining federal A&A and authorization packages.
Working knowledge of the NIST Risk Management Framework.
Working knowledge of FIPS PUB 199.
Working knowledge of NIST SP 800-53 Rev. 4 and/or Rev. 5.
Working knowledge of NIST SP 800-37 Rev. 2.
Working knowledge of NIST SP 800-171 Rev. 2.
Working knowledge of NIST SP 800-47 Rev. 1.
Working knowledge of other publications and guidance related to the federal RMF process.
Hands-on experience using Cybersecurity Assessment and Management System (CSAM).
Experience supporting ATOs involving FedRAMP-authorized products, solutions, or platforms.
Experience developing SSPs, contingency plans, incident response plans, configuration management plans, business impact assessments, interconnection security agreements, and privacy documentation.
Strong technical-writing skills, with the ability to produce accurate, complete, and Section 508-compliant documentation.
Ability to appropriately handle Controlled Unclassified Information and other sensitive government information.
Ability to successfully obtain and maintain the required federal background investigation, suitability determination, facility access, and PIV credential.

Technology and Standards

Cybersecurity Assessment and Management System (CSAM)
FedRAMP
NIST Risk Management Framework
FIPS PUB 199
NIST SP 800-53 Rev. 4 and NIST SP 800-53 Rev. 5
NIST SP 800-37 Rev. 2
NIST SP 800-171 Rev. 2
NIST SP 800-47 Rev. 1
Section 508

Location

Hybrid (Beltsville, Maryland)

Preferred Qualifications

Prior federal civilian-agency A&A experience.
Prior USDA cybersecurity or RMF experience is a plus.
Experience with the USDA Six-Step RMF Process or USDA CSAM instance is a strong plus.
Experience independently supporting RMF activities across multiple federal information systems.
Active certification such as CISSP, CGRC (formerly CAP), or CISM.
Current or prior federal Public Trust investigation.

View full job page →

26d ago

Cyber Security Engineer 2 (Endpoint)

Garmin International, Inc. Olathe, KS

Olathe, KS

26d ago

Full time Cyber Forensics Cybersecurity Tools Data Security

Apply Now

Job Description

Join Garmin at its U.S. headquarters in the Greater Kansas City area to support and operate cybersecurity services that help protect, detect, respond to, and recover from security incidents. In this onsite role in Olathe, KS, you will help evaluate the threat landscape, identify risks, and strengthen Garmin’s security capabilities while contributing to a team culture focused on continuous learning and improvement.

What you’ll do

Act as a trusted advisor to other cybersecurity teams and Garmin business segments across multiple cybersecurity domains
Collaborate with security professionals to promote knowledge transfer, skill development, and continuous learning
Identify opportunities to improve tool integrations and workflows using automation and scripting with APIs provided by security tools
Support project and program planning by estimating and coordinating assigned work, and maintaining accurate, timely progress updates
Design and develop complex, integrated solutions that meet business requirements and improve performance of Garmin’s security systems
Contribute to the team roadmap and priorities
Participate in evaluating and adopting emerging security technologies to improve threat detection, prevention, and response
Help implement, support, and operate key security tooling, including:
- EDR platforms
- Email security suites
- DNS security solutions
- PAM tools and enterprise password management
- Forensic tools
- Threat intelligence platforms
Develop, test, and implement Python scripts to support automation initiatives and ensure reliable operations
Troubleshoot security tool issues and coordinate with partners to improve the organization’s security posture
Stay current on scripting and automation frameworks to strengthen team capabilities
Drive innovation within the Cybersecurity Engineering team by identifying gaps and enhancing security operations through automation and integration

What you bring

Bachelor’s Degree in Computer Science, Information Technology, Management Information Systems, Business, or another relevant field, and 2+ years of relevant experience
Strong verbal, written, and interpersonal communication skills for working with team members and stakeholders
A collaborative, team-focused mindset and a proactive approach to moderately complex problem-solving
Ability to manage time, priorities, and follow-up tasks independently
Consistent delivery of well-organized, high-quality documentation aligned with team expectations
Understanding of core IT services such as networking, storage, databases, and web-based services
Experience managing security tools including EDR, email security suites, DNS security, PAM solutions, enterprise password management, forensic tools, and threat intelligence platforms
Experience with Linux-based operating systems
Experience with Windows server and desktop environments
Experience with automation and scripting, including use of APIs to integrate and enhance security tools

Technologies you’ll work with

Python
EDR platforms
Email security suites
DNS security solutions
PAM tools
Enterprise password management
Forensic tools
Threat intelligence platforms
Linux-based operating systems
Windows server and desktop environments
APIs, automation and scripting
Scripting and automation frameworks

Benefits

This position is eligible for Garmin’s benefit program.

View full job page →

26d ago

GXVM System Information System Security Engineer (ISSE)

Bowhead Crane, IN

Crane, IN

26d ago

$100k - $115k/yr Full time Engineer Information Security Information Technology (IT)

Apply Now

Job Description

Bowhead is seeking a GXVM System Information System Security Engineer (ISSE) to provide onsite support in Crane, IN. The position supports a customer team at NSWC Crane, working directly with the Program Office Technical Lead to embed cybersecurity requirements into system designs and to help manage and deliver security work across one or more SSP programs.

This role focuses on translating security expectations into practical architecture and documentation for non-enterprise systems, while coordinating with stakeholders through technical meetings, assessments, and ongoing program support.

What You’ll Do

Embed cybersecurity requirements that support system acquisition, development, test, and sustainment into SSP system designs.
Conduct requirements analysis and drive the design, development, implementation, and integration of cybersecurity system architectures that improve cyber resiliency and provide cybersecurity capabilities for SSP non-enterprise systems.
Select design alternatives that account for mission risk tied to the cyber security posture.
Develop and apply requirements for large-scale or service-specific pilot projects.
Support the Program Office Technical Lead by identifying issues and action items and participating in ISSE discussions as needed.
Provide customer interaction with Program Offices and associated contractors/subcontractors via teleconferences and on-site meetings.
Coordinate and collaborate with stakeholders, including SSP representatives and contractors/subcontractors, using assessments, subject matter expert input to proposals, technical interchange meetings, status teleconferences, email correspondence, and other required meetings.
Contribute to technical presentations by developing materials and providing comments on technical content.
Develop System Security Plans (SSPs) that document the security controls implemented for each information system.
Support SSP programs with lifecycle plan development and maintenance.
Evaluate performer deliverables and presentations.

Key Qualifications

Bachelor of Science degree in Electrical Engineering, Computer Engineering, Cybersecurity, or equivalent.
5+ years of relevant cybersecurity experience.
CompTIA Security+ or equivalent certification.
Current and valid Operating System/Computing Environment (OS/CE) certifications or certificates of training for Windows and Red Hat Enterprise Linux (RHEL).
Proficiency in RHEL.
Ability to communicate effectively with leadership and stakeholders using American English through oral and written communication.
Ability to collaborate with large, highly competent technical teams.
Strategic, high-level thinking.
Ability and/or experience planning initiatives involving large-scale, networked systems.
Must be a United States citizen to obtain clearance.
Willing and able to travel 40% or more.

Tools and Technologies

Red Hat Enterprise Linux (RHEL)
Windows

Preferred Qualifications

Prior US military experience
10+ years of relevant cybersecurity experience
Graduate degree in Cybersecurity or equivalent
Active Top Secret Clearance

Physical Demands

Ability to lift 15 to 25 pounds
Ability to stand and walk for prolonged amounts of time
Ability to twist, bend, and squat periodically

Security Clearance

Must be able to obtain a Secret level security clearance; Active Top Secret clearance is preferred.
US Citizenship is required for Secret clearance at this location.

Location: Crane, IN (onsite)
Salary: USD 100,000 - 115,000 per year

View full job page →

26d ago

Senior Network Security Engineer (Firewall/IPS)

ITC Federal, Inc. Washington, DC

Washington, DC

26d ago

$140k - $170k/yr Full time Senior Cisco Asa Cisco Firepower

Apply Now

Job Description

Onsite in Washington, DC, this full-time government contractor position supports DOJ NSD National Security Division with work focused on firewall and IPS engineering. ITC Federal, Inc. offers a stable benefits package that includes Health, Dental and Vision, 401(k), FSA, 11 paid federal holidays, PTO, and education reimbursement while you help strengthen network security for critical systems.

As a Senior Network Security Engineer (Firewall/IPS), you will plan and execute information security activities, design rule structures that meet standards, and keep firewall and IPS platforms operating at peak health. The role requires an active Top Secret clearance and deep, hands-on experience with Cisco firewall/IPS and related network security technologies.

Responsibilities

Plan, coordinate, and implement the organization’s information security.
Analyze requirements and possible solutions for technical and economic feasibility.
Design optimized firewall and IPS rule structures while ensuring standards are maintained.
Monitor and maintain health of all firewalls and IPS systems, recommending improvements as needed.
Develop and maintain documentation of firewall/IPS procedures.
Develop and maintain complex schematics related to network security.
Research, evaluate, recommend, design, test, and implement new network security technologies.
Apply expert knowledge of current security tools and practices.
Provide support to network engineers under general guidance.

Mandatory Hands-On Experience

Cisco Identity Services Engine (ISE): upgrades, licensing, maintenance, and deployment.
Cisco Firepower: upgrades, maintenance, and deployment.
Cisco migration from ASA to Firepower Threat Defense (FTD) mode.
Cisco 802.1X: ongoing deployment.
DMVPN design and deployment, compliant with CNSSP-15.
Juniper ADVPN.

Routing Protocol Knowledge

OSPF
EIGRP
BGP

Requirements

10+ years of IT experience (required).
Bachelor’s Degree (strongly preferred).
Active Top Secret clearance (required).

Preferred Certifications

CCNP Security (strongly preferred)
CCNP Enterprise (Routing & Switching) (strongly preferred)
CCDP (preferred)

Work Environment

Prolonged periods of sitting at a desk and working on a computer.
Standard office environment; ability to lift 25 pounds.

Compensation: USD 140,000 to 170,000 per year.

View full job page →

26d ago

Security Engineer

Cisco Systems Research Triangle Park, NC

Research Triangle Park, NC

26d ago

$129k - $256k/yr Full time Cloud Platforms Cloud Security Cyber Security

Apply Now

Job Description

Security Engineer role focused on designing and deploying security controls across cloud and on-prem environments, improving automated incident response, and leading deep-dive forensics and threat hunting.

Responsibilities

Design and deploy security sub-components and features across cloud and on-premises environments to intercept emerging risks.
Build and refine automated incident response playbooks to improve Mean Time to Respond (MTTR) and operational efficiency.
Conduct deep-dive forensic investigations and hypothesis-based threat hunting to detect stealthy adversaries bypassing traditional controls.
Work with DevOps and engineering teams to remediate vulnerabilities and support compliance through technical leadership and code reviews.
Mentor junior engineers and provide architectural guidance to strengthen Cisco’s security defenses and sustainability solutions.

Requirements

Bachelor’s degree in Cybersecurity, Information Assurance, or a related technical field.
3–5 years of professional experience in a Security Operations Center (SOC) or a security-focused engineering role.
Experience using SIEM, EDR, and Vulnerability Management platforms in a hybrid enterprise environment.
Ability to apply current security frameworks and secure coding principles.
Experience building or maintaining security tools and services within a formal development lifecycle.

Technologies

SIEM, EDR, Vulnerability Management platforms
Wiz.io
Tenable Nessus
Splunk
Cisco Secure Suite
Trend Micro
CrowdStrike
SentinelOne
Microsoft Defender
AWS
Azure

Preferred Qualifications

Hands-on experience with Wiz.io, Tenable Nessus, Splunk, and the Cisco Secure Suite.
Technical proficiency with Trend Micro, CrowdStrike, SentinelOne, or Microsoft Defender.
Familiarity with cloud-native security environments, specifically AWS or Azure.
Relevant certifications such as CompTIA CySA+, PenTest+, Security+, AWS Certified Cloud Practitioner, or ISC2 SSCP.
Strong communication skills for collaboration with DevOps teams on remediation and patching strategies.

Location and Employment Details

Location: Research Triangle Park, NC (onsite)
Salary: USD 128,600 - 256,000 per yearly
Application window expected to close: 10/30/2026

Benefits

Medical, dental and vision insurance
401(k) plan with a Cisco matching contribution
Paid parental leave
Short and long-term disability coverage
Basic life insurance
10 paid holidays per full calendar year, plus 1 floating holiday for non-exempt employees
1 paid day off for employee’s birthday, paid year-end holiday shutdown, and 4 paid days off for personal wellness determined by Cisco
Non-exempt employees: 16 days of paid vacation time per full calendar year (accrued at rate of 4.92 hours per pay period for full-time employees)
Exempt employees participate in a flexible vacation time off program with no defined limit on vacation usage (subject to availability and some business limitations)
80 hours of sick time off provided on hire date and each January 1st thereafter, with up to 80 hours of unused sick time carried forward
Additional paid time away may be requested to deal with critical or emergency issues for family members
Optional 10 paid days per full calendar year to volunteer
Annual bonuses for non-sales roles, subject to Cisco’s policies
Employees on sales plans: performance-based incentive pay on top of base salary (quota and non-quota components), subject to the applicable Cisco plan

Additional U.S. and/or Canada Applicant Information

Starting salary range posted: $128,600.00 to $184,900.00 (projected for new hires in U.S. and/or Canada locations; excludes incentive compensation, equity, or benefits).
Pay is determined by hiring location, market conditions, job-related skillset, experience, qualifications, education, certifications, and/or training.
U.S. benefits (subject to plan eligibility rules) include medical, dental and vision insurance, 401(k) with matching contribution, paid parental leave, short and long-term disability coverage, and basic life insurance.
Employees may be eligible for grants of Cisco restricted stock units that vest after continued employment for defined periods.
Paid time away and annual bonuses for non-sales roles are subject to Cisco’s policies; sales plans include performance-based incentive pay split between quota and non-quota components.
Applicable full salary ranges by state are listed below:
- New York City Metro Area: $155,000.00 - $256,000.00
- Non-Metro New York state & Washington state: $138,100.00 - $227,900.00
- Illinois (exempt or non-exempt): participate in a unique time off program to meet local requirements

View full job page →

26d ago

Sr. Cyber Security Analyst

FedEx Memphis, TN

Memphis, TN

26d ago

$7,488 - $15,607/mo Full time Cloud Cloud Network Firewalls Cloud Network Security

Apply Now

Job Description

FedEx is hiring a Sr. Cyber Security Analyst to design and operate security-focused Google Cloud Platform (GCP) network architectures under Zero Trust.

Responsibilities

Design, implement, and maintain highly secure GCP cloud network architectures in alignment with Zero Trust principles and internal security standards.
Deploy, configure, and manage key GCP network security services, including:
- Cloud Next-Generation Firewalls (NGFW)
- VPC Service Controls (VPC SC)
- Cloud Intrusion Detection Systems (Cloud IDS)
- Cloud Armor
Automate network security infrastructure delivery using IaC (primarily Terraform), including building and maintaining reusable secure baseline modules.
Implement and tune logging and monitoring for network traffic and handle alerting from Cloud Logging, SIEM platforms, and centralized firewall logging.
Work with Cloud Architects, Platform engineering, and application teams to embed security requirements into cloud deployments.
Maintain compliance for cloud network configurations with internal policies, audit requirements, industry regulations, and best practices.

Requirements

Hands-on experience securing GCP environments with 4+ years in a related role (for example: Network Engineering, Perimeter Security).
Strong knowledge of GCP networking constructs, including:
- Shared VPCs
- Cloud Router
- Cloud NAT
- Interconnect
- Peering
Proven expertise configuring and operating:
- GCP Cloud Firewalls (Standard and NGFW/Hierarchical)
- VPC Service Controls (VPC SC) for data exfiltration mitigation
- Cloud IDS/IPS solutions
- Cloud Armor (WAF and DDoS protection)
- Secure web gateways and proxy solutions
Proficiency with Terraform, including writing, testing, and managing complex state files, plus custom provider modules for cloud infrastructure.
Scripting experience in Python, Go, or Bash to automate security tasks, perform API integrations, and create remediation scripts.
Hands-on experience with Git workflows and integrating IaC deployments into CI/CD pipelines.

Technologies

Google Cloud Platform (GCP)
Zero Trust
Cloud Next-Generation Firewalls (NGFW)
VPC Service Controls (VPC SC)
Cloud Intrusion Detection Systems (Cloud IDS)
Cloud Armor
Terraform
Cloud Logging
SIEM platforms
Python, Go, Bash
Git
CI/CD
Shared VPCs, Cloud Router, Cloud NAT, Interconnect, Peering
GCP Cloud Firewalls (Standard and NGFW/Hierarchical)
Cloud IDS / IPS
WAF, DDoS protection

Location and Work Model

Hybrid role located in Memphis, TN (also listed as Plano, TX or Pittsburg, PA).
Candidates must live within 50 miles of the FedEx campus location.
In-person work is required at the FedEx campus location several times per week.

Preferred Qualifications

Certifications such as Google Cloud Professional Security Engineer, Google Cloud Professional Network Engineer, CISSP, or equivalent industry certifications.
Strong plus: familiarity with cross-cloud connectivity and security principles across Azure or AWS.

Minimum Education

Bachelor’s degree in computer science, information systems, or a related degree, and/or equivalent formal training or work experience.

Minimum Experience

Four (4) years of experience in IT information security.

Pay

US: $7,094.23/mo - $15,607.31/mo
CO: $7,094.23/mo - $14,957.01/mo
MD: $7,488.36/mo - $15,607.31/mo
NJ: $7,488.36/mo - $15,607.31/mo
NY: $7,488.36/mo - $15,607.31/mo
NYC: $9,064.85/mo - $15,607.31/mo
WA: $7,488.36/mo - $15,607.31/mo

For details on comprehensive benefits, click here.

View full job page →

26d ago

Cyber Security Engineer

Redlands Community Hospital - INFORMATION SYSTEMS Redlands, CA

Redlands, CA

26d ago

$104k - $151k/yr Full time Cloud Platforms Cloud Security Cloud Security Architecture

Apply Now

Job Description

This role designs, implements, and maintains cybersecurity architecture, controls, and defenses for hospital IT and connected environments. As the senior security engineering resource, you will lead key security engineering initiatives and provide technical escalation support for complex incidents.

Location

Redlands, CA 92373 (onsite)

Salary

USD 103,854 - 150,592 per year

Key Responsibilities

Design, implement, and maintain the organization’s cybersecurity architecture, controls, and defenses across servers, workstations, networks, web applications, cloud environments, medical devices (IoMT), and IT processes.
Lead the hospital’s security engineering program, including:
- Zero Trust architecture
- Identity and access management
- Security tool ownership across SIEM, EDR/XDR, DLP, CSPM, email security, and PAM
- Incident response leadership
- Penetration testing
- Regulatory compliance with HIPAA, HITECH, NIST CSF, 405(d) HICP, and applicable state and federal requirements
Serve as the senior technical cybersecurity resource for the organization.
Act as the primary technical escalation point for complex incidents.
Translate security risks into actionable strategies for leadership.

Required Qualifications

Ability to meet all job physical requirements as outlined in the job description or as agreed through a workplace accommodation.
Availability for on-call, weekends, evenings, and holidays as required.
Bachelor’s degree in computer science, Information Security, or a related field.
Minimum of 2 years of experience as a Cyber Security Engineer or similar role, with strong understanding of security principles, practices, and technologies.
In-depth knowledge of network protocols, operating systems, and common security vulnerabilities, plus familiarity with security tools and software.
Proficiency in risk assessments, vulnerability assessments, and penetration testing.
Experience with security incident response, including analysis, containment, eradication, and recovery.
Strong analytical and problem-solving skills to identify and address security issues effectively.
Excellent communication and interpersonal skills to collaborate with stakeholders at all levels and to convey complex security concepts to non-technical individuals.
Ability to work independently, prioritize tasks in a fast-paced environment, and maintain attention to detail while meeting deadlines.