CybersecurityJobs.io - Jobs in infosec and cybersecurity.

Latest Jobs

2d ago

Oracle Security Analyst

i360technologies, Inc. Gaithersburg, MD

Gaithersburg, MD

2d ago

$80k - $106k/yr Full time Cloud Platforms Identity and Access Management Information Security

Apply Now

Job Description

i360technologies, Inc. is hiring a Senior Oracle Security Analyst/Oracle Security Consultant to lead Oracle Fusion Cloud security architecture for a federal financial management modernization program.

Responsibilities

Design the Oracle Fusion Cloud security architecture for enterprise use
Define the enterprise RBAC (role-based access control) strategy
Design job, duty, and data roles aligned to security requirements
Develop security matrices and access-control models
Design Segregation of Duties (SoD) controls
Support IAM integrations for Oracle Fusion and related components
Define security requirements for Fusion, OIC, and PaaS components
Support security assessments and audit requirements
Support ATO documentation and remediation activities
Coordinate with cybersecurity, functional, and technical teams across the program
Maintain control effectiveness through releases and configuration changes
Use AI tools to accelerate analysis and documentation, and mentor junior team members on using AI safely

Requirements

3+ years of Oracle application security experience
Strong, hands-on experience with Oracle Fusion Cloud security
Experience designing RBAC and SoD controls
Knowledge of IAM and security integration
Experience designing enterprise Oracle security models
Strong background in audits and security controls
Demonstrated use of AI tools to accelerate analysis, documentation, or problem solving

Technologies

Oracle Fusion Cloud, Oracle Fusion, OIC
PaaS
NIST 800-53
FISMA
FedRAMP
Claude, ChatGPT, Copilot
HSPD-12 Personal Identity Verification (PIV)
FBI fingerprinting

Preferred Experience

Knowledge of FISMA, NIST 800-53, or FedRAMP
Experience supporting an ATO
Federal financial system experience

Security & Eligibility Requirements

U.S. citizenship or Lawful Permanent Residency with a minimum of three (3) years of U.S. residency
Successful completion of a Moderate Risk background investigation and FBI fingerprinting
Eligibility to obtain and maintain an HSPD-12 PIV credential
Execution of a Non-Disclosure Agreement (NDA)
Compliance with agency Security Rules of Behavior
Completion of required cybersecurity and privacy awareness training
Work performed within the United States; remote access from foreign locations is not permitted
Employment contingent upon contract award and Government approval of candidate qualifications

AI in the Role

Use AI tools such as Claude, ChatGPT, Copilot, or similar
Analyze role and access designs and draft security matrices
Accelerate ATO documentation work
Map security controls to NIST requirements
Review SoD conflicts and research Oracle security features
Support early-career colleagues in using AI safely with sensitive information
Demonstrate how AI improves speed and quality of delivery

Job Details

Location: Gaithersburg, MD (onsite)
Salary: USD 80,000 - 106,000 per year

Benefits

Referral Bonus
(401k) Matching
Holidays – Eleven
Technology Reimbursement
Short-Term & Long-Term Disability
Life Insurance (Basic, Voluntary & AD&D)
Paid Time Off (0-3 years - 15 Days PTO | 3+ years 20 Days)
80% Employer Paid Health Care Plan (Medical, Dental & Vision)

View full job page →

2d ago

Senior Information Security Analyst

Wells Fargo Irving, TX

Irving, TX

2d ago

Full time Senior Cloud Platforms Information Security

Apply Now

Job Description

Wells Fargo is seeking a Senior Information Security Analyst to support the Findings & Exposure Management Oversight team. The role provides independent oversight across the findings and exposure lifecycle, with a focus on risk-based prioritization, remediation monitoring, closure assurance, exposure reporting, and patch oversight.

Location and Work Model

Location: Irving, TX (hybrid)
Minimum experience: 3 years

Key Responsibilities

Apply lifecycle standards and risk thresholds to findings, security exposures, patch risks, and exceptions from intake through closure or risk acceptance.
Review intake records for completeness, risk-based prioritization, and assignment of accountable owners.
Independently challenge remediation plans, milestones, exception rationale, and supporting evidence.
Monitor remediation progress, identify barriers and missed commitments, and coordinate central escalation of overdue or material items.
Validate closure evidence and support independent challenge of residual-risk acceptance rationale before closure or risk acceptance decisions.
Analyze findings and exposure data to identify trends, aging, data-quality issues, and emerging risks.
Support certified metrics, executive dashboards, and recurring reporting that connect materiality, trend, ownership, required action, and source records.
Perform recurring data-quality reviews and reconciliations to assess record completeness, accuracy, ownership, and status.
Support Patch Oversight by reviewing patch-not-deployed rationale, overdue approvals, PTS data quality, and escalation requirements.
Contribute to targeted reviews, control effectiveness assessments, issue analysis, and continuous improvement of the oversight model.
Prepare clear, decision-oriented communications for leadership and governance forums.
Mentor and support less experienced team members to promote consistent application of oversight practices.

Required Qualifications

4+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of work experience, training, military experience, or education.
3+ years of experience performing information security assessments, findings reviews, security reviews, or control evaluations.
3+ years of experience analyzing security risks, reviewing remediation plans, and escalating missed commitments.

Technologies

NIST
ISO 27001
CIS Controls
COBIT
AWS
Azure
Google Cloud

Desired Qualifications

4+ years of experience in Information Security, Cybersecurity, Compliance, Findings Management, Vulnerability Management, or Information Security Analysis, or an equivalent combination of work experience, training, military experience, or education.
3+ years of experience interpreting and applying information security policies, standards, control requirements, or regulatory expectations.
Experience with enterprise findings, issue, vulnerability, exposure, or patch management processes.
Experience independently challenging remediation plans, exceptions, closure evidence, or residual-risk decisions.
Experience with compliance reviews, data-quality reviews, or control effectiveness assessments.
Experience developing security metrics, executive dashboards, trend reporting, or risk exposure analyses.
Knowledge of information security frameworks and standards such as NIST, ISO 27001, CIS Controls, COBIT, or similar frameworks.
Knowledge of vulnerability management, patch management, exception management, and remediation practices.
Experience supporting regulatory, internal audit, or external audit examinations.
Strong analytical and problem-solving skills, including reconciling data, identifying trends, assessing evidence, and translating information into actionable insights.
Strong written and verbal communication skills, including presenting complex risk information to technical and non-technical audiences.
Ability to build effective relationships, influence outcomes, and provide credible challenge while maintaining independent oversight.
Bachelor’s degree in Information Security, Cybersecurity, Computer Science, Information Technology, Business, or a related field.
Professional certification such as CISSP, CISM, CRISC, CISA, Security+, or a related certification.
Knowledge of cloud security concepts and controls within AWS, Azure, or Google Cloud environments.

Job Expectations

This position is not available for Visa sponsorship.
This position requires working in a hybrid environment from one of the posted locations.
There is no relocation allowance for this position.

View full job page →

2d ago

Enterprise IT Security Analyst 1

University of Houston Houston, TX

Houston, TX

2d ago

Full time Incident Response Information Security Information Technology (IT)

Apply Now

Job Description

The University of Houston’s UIT Security team supports the protection of university information resources through hands-on risk analysis, incident support, and security metrics reporting. This onsite role operates under direct supervision and focuses on practical day-to-day security work, including support for incident investigations and security risk assessments that help align with university policies and procedures.

What you’ll do

Provide day-to-day customer service for information security issues reported to the department.
Assist with investigations of campus information security incidents to support resolution.
Support security risk assessments to help ensure compliance with university policies and procedures.
Collect data for IT security metrics and assist with state-required information security reporting.
Maintain security department records, including policy and procedure documents and software licensing records.
Perform other job-related duties as assigned.

Security-sensitive expectations

This position is designated security sensitive and includes research and work involving critical infrastructure. Under the requirements of the State of Texas Executive Order No. GA-48, the role involves access to systems where maintaining the security or integrity of University infrastructure is required.

Personnel in this role will be routinely reviewed to determine whether criminal history or continuous connections for the government or political apparatus of a foreign adversary could prevent the employee from maintaining the security or integrity of the infrastructure. All positions at the University of Houston-System require a criminal history check.

Requirements

Pursuant to State of Texas Executive Order No. GA-48, ability to maintain the security or integrity of University infrastructure, including research, work, or access related to critical infrastructure.
Ability to meet personnel review requirements tied to criminal history and continuous connections for a foreign adversary.
Thorough understanding of theoretical and practical aspects of an analytical, technical, or professional discipline, or basic knowledge of more than one professional discipline.
Knowledge typically obtained through a formal, directly job-related 4 year degree or an equivalent in-depth specialized training program related to the work performed.
Education may be accepted in lieu of experience.
Experience may be accepted in lieu of education.
Minimum 6 months of directly job-related experience.

Location and compensation

Location: Houston, TX (onsite).
Salary: Commensurate with Experience/Education.

View full job page →

2d ago

Offensive Security Engineer - Red Team

Salesforce San Francisco, CA

San Francisco, CA

2d ago

$117k - $224k/yr Full time Ai Security Application Security Cloud Platforms

Apply Now

Job Description

Salesforce is hiring an Offensive Security Engineer to help the Red Team simulate real attackers across Salesforce products, platforms, and enterprise environments.

Responsibilities

Design and execute end-to-end red team operations simulating threat actor behavior from initial access through objective completion
Apply threat intelligence to emulate specific Advanced Persistent Threat (APT) groups and adjust tactics as defenders respond
Identify, exploit, and chain weaknesses across applications, identity, cloud, and enterprise environments
Develop custom tooling, payloads, and techniques to validate security controls and detections
Partner with the Red Team Director, Detection and Response, Detection Engineering, and Blue Teams on campaign design and purple team exercises
Support engineering teams with root cause understanding and durable security remediation guidance
Serve as the technical escalation point for complex attack paths and disputed findings; mentor other engineers
Communicate attack chains and business risk clearly to executive leadership while following rules of engagement, scoping limits, and OPSEC

Requirements

3+ years hands-on experience in red teaming, penetration testing, or adversary simulation, including executing end-to-end attack campaigns
Experience with manual exploitation, attack chaining, and custom exploit/tooling/payload development
Working knowledge of threat actor TTPs and attack surfaces across identity, applications, cloud, and hybrid enterprise environments
Experience bypassing layered security controls and detections, plus documenting findings and remediation guidance for both technical and executive audiences

Technologies

AI (Agentforce)
CVE (Common Vulnerabilities and Exposures)

What you will do with AI-driven systems

Test how attackers could abuse AI-driven systems, leveraging Agentforce integrated across the platform
Use AI tools to help accelerate scoping, documentation, and reporting to focus time on hands-on offensive work

Preferred experience (Even better if)

Published security research such as CVE credits, blog posts, or conference talks
Experience with assumed-breach or long-running adversary emulation campaigns and collaboration with Detection and Response or purple team functions
Malware analysis or exploit development background, plus familiarity with cloud-native architectures and identity-centric security models
Offensive security certifications: GIAC Exploit Researcher and Advanced Penetration Tester (GXPN), OSCP, OSEP, OSWE, CRTO, CRTL

Benefits

Time off programs
Medical
Dental
Vision
Mental health support
Paid parental leave
Life and disability insurance
401(k)
Employee stock purchasing program

Job details

Location: San Francisco, CA (hybrid)
Salary range: USD 117,200 - 223,900 per year
Minimum experience: 3 years

View full job page →

2d ago

Principal Cyber Security Engineer

MANTECH Chantilly, VA

Chantilly, VA

2d ago

Full time Cyber Security Cybersecurity Tools Data Security

Apply Now

Job Description

MANTECH is hiring a Principal Cyber Security Engineer to support mission-critical cybersecurity operations in Chantilly, VA (onsite).

Responsibilities

Troubleshoot new and existing data collection issues to keep security-relevant data ingestion accurate and reliable
Diagnose and resolve system issues that affect stability, performance, or usability
Deploy, manage, and maintain supported and unsupported Splunk Add-ons needed for specific data sources
Develop and maintain documentation and artifacts, including:
- Body of Evidence (BOE) artifacts
- Engineering documentation
- Change management records
- System security plans
- Accreditation materials
Create a comprehensive Splunk deployment document covering production specifications, deployment methods, and architectural considerations
Implement and maintain role-based access control so data is available on a validated need-to-know basis
Design and deploy Splunk forwarders using centralized configuration management through the Splunk Deployment Server

Requirements

Bachelor’s degree, or 4+ additional years of cyber experience in lieu of a degree
7+ years of experience in a cybersecurity role
Experience with Security Information and Event Management (SIEM) platforms and/or Splunk
Knowledge of Linux systems administration, general OS security practices, TCP/IP networking, and network security concepts
Knowledge of Certification and Accreditation (C&A) processes
Knowledge of DoD policy and technical security guidance for information systems
DoD Directive 8570.1 IAT Level II or higher certification, or ability to obtain within six (6) months

Technologies

Splunk
Splunk Add-ons
Splunk forwarders
Splunk Deployment Server
Security Information and Event Management (SIEM)
Linux
TCP/IP

Preferred Qualifications

Experience with Linux distributions, including Red Hat and CentOS
Experience with AWS or other cloud environments
Knowledge of ICS 500-27 audit collection requirements
Familiarity with:
- Enterprise Security Services
- Host Based Security Services
- Enterprise Vulnerability Scanning Services
- User Activity Monitoring (UAM)
Ability to modify feed creation to ingest customer logs in standardized formats to meet policy and compliance requirements
Splunk certification

Clearance Requirements

Active TS/SCI with Polygraph required

Physical Requirements

Must be able to remain in a stationary position 50% of the time
Occasionally moves about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers via email, phone, or virtual communication, which may include delivering presentations

View full job page →

2d ago

Staff Information Security Analyst

MANTECH Chantilly, VA

Chantilly, VA

2d ago

Full time Access Credentialing Data Security Identity and Access Management

Apply Now

Job Description

MANTECH is seeking a Staff Information Security Analyst to support a TIER 1 Identity and Access Management program in Chantilly, VA (onsite). This role centers on identity and credentialing support activities, including DEERS PII changes, CAC and Token-related assistance, troubleshooting, and resolving access and credentialing issues through ticketing workflows.

Role Overview

The position supports a government location team handling customer-facing identity and access needs. Core duties include processing DEERS-related PII changes, supporting CAC/Token/ID workflows, assisting with retired military ID issuance, performing PIN resets, and providing Helpdesk support. The analyst will work to resolve access and credentialing concerns using ServiceNow and JIRA, and will contribute to project milestones and deliverables as required.

Responsibilities

Support a team at a government location to provide DEERS PII changes, CAC, Token, Retired Military ID issuance, PIN reset, and Helpdesk support
Support Identity, Access, and Credentialing issues within a customer service environment
Resolve ServiceNow and JIRA tickets related to access and credentialing issues
Contribute to completion of project and group milestones
Provide input to project deliverables and reports as needed
Contribute to solutions for a variety of complex technical problems
Work off-shifts between 7 AM ET and 5 PM ET as required

Required Qualifications

High School Diploma/GED
2+ years of IT customer service support experience
Understanding of PKI
Strong troubleshooting skills to identify where customer issues originate
Prior experience working with PII information and data
Prior experience with MS Word, Excel, and SharePoint

Preferred Qualifications

Prior experience in cyber security disciplines
Prior experience working in a DoD environment
Familiarity with ticketing systems such as JIRA and ServiceNow
General understanding of Identity, Access, and Credentialing services

Technologies

DEERS
CAC
Token
ServiceNow
JIRA
MS Word
Excel
SharePoint

Security Clearance Requirements

Active TS/SCI with Polygraph is required

Physical Requirements

Must be able to remain in a stationary position 50% of the time
Needs to occasionally move about inside the office to access file cabinets, office machinery, etc.
Frequently communicates with co-workers, management, and customers, which may involve delivering presentations via email, phone, or virtual communication; must be able to exchange accurate information in these situations

View full job page →

2d ago

Identity Security Engineer

Millennium Management Miami, FL

Miami, FL

2d ago

Full time Cloud Platforms Data Security Engineer

Apply Now

Job Description

Millennium Management is seeking an Identity Security Engineer to deliver consulting and engineering for identity security solutions and authentication platforms across on-premises and cloud environments. The role emphasizes modern authentication protocols, identity risk analysis, incident support, and moving security capabilities into production through automation.

Responsibilities

Provide security consulting and engineering for PingFederate, Entra ID, and related identity security solutions, supporting analysis, design, and development of new capabilities
Design, build, and maintain authentication platforms spanning on-premises and cloud environments
Engineer and support SAML, OpenID Connect, OAuth 2.0, and Kerberos authentication across identity providers, including single sign-on, PKI, and associated security controls
Assess identity management risks and deliver threat analyses and remediation plans for both technical and business stakeholders
Evaluate emerging security and privacy technologies, trends, and threats aligned to key business initiatives, then recommend approaches that inform the identity security roadmap
Support identity-focused workstreams during firmwide information security incidents, including containment, root-cause analysis, and post-incident hardening
Coordinate with Technology, Trading, Legal, Internal Audit, and Compliance teams to implement and enforce identity and access security policies
Transition solutions from engineering into production, maintain documentation and operational runbooks, and automate identity and access workflows using scripting and infrastructure as code

Requirements

5+ years of relevant technical experience, including 3+ years focused on information security; financial services experience is preferred
Bachelor’s degree in Computer Science, Engineering, or a related field
Experience with PingFederate and Entra ID
Experience managing IaaS and SaaS solutions and services through CI/CD pipelines
Strong understanding of modern authentication protocols and identity security controls
Experience with Microsoft 365 security controls
Experience implementing data loss prevention and Azure Information Protection, including data classification, labeling, encryption, and regulatory compliance
Familiarity with EDR, SIEM, vulnerability management, and relevant security certifications is a plus