CybersecurityJobs.io - Jobs in infosec and cybersecurity.

Latest Jobs

2mo ago

Cybersecurity Engineer

Los Angeles Times Remote 🌍 Remote

Remote

2mo ago Closed

$125k - $140k/yr Full time Cybersecurity Tools Data Security Engineer

This position is no longer accepting applications (closed Sep 15, 2026).

Job Description

The Cybersecurity Engineer will implement, maintain, and support cybersecurity technologies and processes designed to protect systems, networks, applications, and data. This role supports security operations, vulnerability management, incident response, and security compliance across digital publishing platforms, newsroom systems, and corporate technology, with the goal of sustaining reliable and auditable security operations.

Responsibilities

Monitor security tools and platforms to identify threats, vulnerabilities, and suspicious activity.
Investigate security alerts and support incident response activities.
Support implementation and maintenance of security technologies across the enterprise to ensure tools perform at full effectiveness; promptly identify gaps and escalate issues with supporting information.
Perform security reviews and system health checks, document findings, and track follow-up actions to maintain a consistent security baseline.
Conduct vulnerability scans and assist with security risk assessment.
Track and coordinate remediation work with technology teams, ensuring fixes are completed within defined SLA windows and remediation status is documented for reporting and audit purposes.
Validate security fixes and support ongoing risk reduction efforts.
Assist with penetration testing activities and remediation initiatives.
Administer identity and access management processes, including account provisioning and privileged access controls, ensuring access rights remain accurate, timely, and aligned with organizational policy.
Assist with endpoint, network, and cloud security control maintenance.
Configure and manage security tools according to organizational standards.
Support implementation of security policies and technical safeguards.
Assist with security incident investigation and document findings.
Collect and analyze system and security logs during investigations.
Support incident containment, recovery, and remediation to minimize operational impact and restore secure, stable operations efficiently.
Escalate significant threats and vulnerabilities to senior security personnel.
Maintain accurate, current security documentation, procedures, and operational records to support audit readiness and knowledge continuity.
Support compliance audits, assessments, and security reviews by delivering timely, accurate data and documentation aligned to applicable security frameworks.
Contribute to security awareness initiatives and technical training efforts that strengthen security culture and reduce enterprise risk.
Collaborate with IT, Engineering, and business teams to support secure technology operations.
Provide recommendations to improve operational security control effectiveness.
Participate in projects requiring security reviews or implementation support.
Perform other duties as assigned.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field, plus 3+ years of experience in cybersecurity, information security, systems administration, network administration, or related technical roles; OR 5+ years of experience in the same related roles.
Experience supporting enterprise security technologies and security operations processes.
Knowledge of network security, endpoint security, identity management, and cybersecurity best practices.
Hands-on experience with security monitoring tools, vulnerability scanning solutions, and endpoint protection technologies.
Experience with identity and access management (IAM) platforms and privileged access management processes.
Hands-on experience configuring and managing enterprise security tools.
Knowledge of incident response frameworks and procedures.
Proven ability to maintain accurate technical documentation and standard operating procedures.
Familiarity with cloud security concepts and modern technology environments.
Understanding of security frameworks and regulatory requirements.
Strong analytical, troubleshooting, and problem-solving abilities.
Excellent organizational and communication skills.
Ability to work independently and collaboratively in a team environment.
Strong attention to detail and commitment to maintaining security standards.

Preferred Qualifications

Security certifications such as Security+, CySA+, SSCP, GSEC, or equivalent.
Experience supporting digital media, publishing, or online content platforms.
Familiarity with scripting, automation, or AI-enabled security tools used to improve operational efficiency and threat detection capabilities.

Role Details

Location: Remote (remote)
Salary: USD 125,000 - 140,000 per year
Minimum Experience: 3 years
Education: Bachelor’s degree

View full job page →

2mo ago

Cybersecurity Analyst

TurnPoint Services Remote 🌍 Remote

Remote

2mo ago Closed

$70k - $80k/yr Full time Cloud Platforms Cloud Security CompTIA Security+

This position is no longer accepting applications (closed Sep 15, 2026).

Job Description

TurnPoint Services is hiring a Cybersecurity Analyst (Remote) to monitor threats, support incident response, and improve identity and access security across enterprise and cloud environments.

Responsibilities

Monitor and investigate security alerts across corporate infrastructure, including cloud and network environments
Lead and support incident response activities, including investigations and reporting
Administer and strengthen Identity and Access Management (IAM) across corporate systems
Configure and support Single Sign-On (SSO), access reviews, and user lifecycle management
Support security architecture and configuration reviews for Azure and AWS cloud environments
Maintain and improve alignment with the NIST Cybersecurity Framework (CSF) 2.0
Support regulatory compliance work and company audits
Assist with vendor management and third-party security risk assessments
Review security questionnaires and support contract security reviews
Maintain security documentation, policies, procedures, and standard operating procedures
Contribute to security awareness initiatives across a primarily field-based, non-desk workforce
Communicate security risks and recommendations to both technical and non-technical stakeholders

Requirements

2–3 years of hands-on experience in an enterprise cybersecurity role
CompTIA Security+ certification
Working knowledge of the NIST Cybersecurity Framework (CSF) 2.0
Experience supporting or preparing for regulatory and compliance audits
Hands-on experience with Azure and AWS
Experience with IAM concepts and SSO configuration/administration
Familiarity with firewall and network security log review
Experience with incident response processes
Exposure to vendor and third-party risk management
Strong documentation, communication, and organizational skills
Ability to explain technical risks and security concepts to non-technical audiences
Self-motivated and comfortable working independently in a fast-changing environment

Technologies

Azure
AWS
NIST Cybersecurity Framework (CSF) 2.0
Identity and Access Management (IAM)
Single Sign-On (SSO)
CompTIA Security+
Firewall
Incident response processes

Preferred Qualifications

CompTIA CySA+
CISSP
AWS or Azure security certifications
Other relevant cybersecurity certifications or equivalent experience

Compensation

USD 70,000 - 80,000 per year
Location: Remote

Benefits

Medical, Dental, and Vision Insurance
HSA and FSA options
Company-Paid Life Insurance
Short-Term and Long-Term Disability Coverage
401(k) Retirement Plan with Company Match
Paid Time Off (PTO) and Paid Holidays
401(k) matching
Dental insurance
Flexible spending account
Health insurance
Health savings account
Life insurance
Paid time off
Vision insurance

View full job page →

2mo ago

Cybersecurity Analyst

UnitedHealth Group Raleigh, NC 🇺🇸 Remote

Raleigh, NC

2mo ago Closed

$73k - $130k/yr Full time Cybersecurity Analysis Cybersecurity Tools Data Security

This position is no longer accepting applications (closed Sep 15, 2026).

Job Description

UnitedHealth Group is seeking a Cybersecurity Fraud Analyst to strengthen proactive detection and prevention for call center activity and to investigate risks to the organization. The role focuses on analyzing security signals, correlating information across sources, and supporting investigations with enterprise-approved AI tooling. This position is based in Raleigh, NC with remote work available.

In this position, you will review logs and indicators for suspicious or policy-inconsistent behavior, translate business risk into alert monitoring use cases, and help stakeholders act on perceived threats. You will also document findings, support legal or incident needs where chain of custody may be required, and mentor other analysts on investigation techniques.

Responsibilities

Review logs and indicators to identify, analyze, document, and report on risky actions or behaviors observed in security logs
Correlate data points from multiple sources to support identification of anomalous behavior using critical thinking
Alert relevant stakeholders with clear, detailed information to support corrective actions and resolution after reporting
Continually learn and adapt by feeding forward findings on what is and is not risky behavior based on prior notifications, policy changes, and updates in security logs, including lessons learned from past incidents
Translate business risks into threat monitoring use cases for alerting, including conducting risk assessments on data sources for ingestion into monitoring tools
Collaborate with partner teams to support investigation processes, provide technical expertise, and communicate risks to the business
Mentor and train other analysts on investigative techniques, analytical skills, and technical skills
May assist with sophisticated cybersecurity incidents and investigations, including maintaining chain of custody when needed to support legal requirements

Requirements

High School Diploma/GED
1+ years of experience interpreting and analyzing data to uncover potential cyber threats
1+ years of experience with cybersecurity principles, technologies, and tools
1+ years of experience with careful monitoring of systems and analysis of data
1+ years of experience handling sensitive information ethically and responsibly
1+ years of experience staying agile and responsive as cyber threats evolve

Technologies

Enterprise-approved AI tools
Monitoring tools

Benefits

Comprehensive benefits package
Incentive and recognition programs
Equity stock purchase
401k contribution (all benefits are subject to eligibility requirements)

Preferred Qualifications

Pindrop experience
Effective verbal and written communication abilities
Demonstrated ability to tackle and resolve intricate issues efficiently
All telecommuters must follow UnitedHealth Group’s Telecommuter Policy

Pay and Application Details

Salary: USD 72,800 - 130,000 per year for full-time employment
Pay is based on several factors including local labor markets, education, work experience, and certifications (ET).
Application deadline: posted for a minimum of 2 business days or until a sufficient candidate pool has been collected; the posting may come down early due to applicant volume

Other Eligibility / Compliance Statements

Telecommuters must adhere to UnitedHealth Group’s Telecommuter Policy
Under the San Francisco Fair Chance Ordinance, qualified applicants with arrest and conviction records will be considered
UnitedHealth Group is a drug-free workplace and candidates must pass a drug test before beginning employment

View full job page →

2mo ago

Sr Infrastructure & Security Engineer

VizyPay Waukee, IA

Waukee, IA

2mo ago Closed

$80k - $100k/yr Full time Azure DevOps CI/CD Cloud Infrastructure

This position is no longer accepting applications (closed Sep 15, 2026).

Job Description

VizyPay is seeking a senior infrastructure and security engineer to own the systems that keep the organization connected, protected, and audit-ready. This role combines cloud infrastructure, enterprise networking, security posture, operational reliability, and end-user support into a single accountable mandate, with direct reporting to the CIO.

Working in a cloud-first, security- and compliance-driven payments environment, you will help maintain availability and resilience (including RTO/RPO alignment), strengthen detection and response readiness, and contribute to PCI DSS and enterprise BCP/DR efforts. The position is based onsite in Waukee, IA.

What you’ll do

Architect, build, and operate secure, scalable cloud infrastructure across Microsoft Azure, AWS, and DigitalOcean, covering compute, virtual networking, storage, and managed data services for VEXIS and enterprise systems.
Expand infrastructure-as-code as the default provisioning path, including Terraform, GitOps automation, policy-as-code, and IaC security scanning; implement CI/CD pipelines (for example, GitHub Actions and Azure DevOps) with automated testing and controlled promotion to remove manual, unrepeatable changes.
Manage infrastructure cost and capacity through rightsizing, reserved-capacity strategy, usage monitoring, and performance optimization, with spend reported against approved budget while keeping capacity ahead of business growth.
Provide hands-on technical leadership across InfraSec and in partnership with Software Engineering through engineering standards, design and architecture reviews, and mentorship.
Administer and support the enterprise network, including firewalls, SD-WAN, switches, wireless access points, and overall network infrastructure, with design, configuration, monitoring, and lifecycle management.
Own network segmentation design and enforcement, deploy TLS 1.2+ everywhere, and manage secure connectivity including site-to-site and remote-access VPN, DNS, load balancing, and WAF/CDN (such as Cloudflare) aligned with least privilege.
Maintain network documentation, configuration baselines, and audit-ready change records, while managing network capacity, performance, and availability.
Own key security platforms and services such as IAM, endpoint security, MDM, password management, security monitoring, and Microsoft 365 security posture, including email security controls (for example anti-phishing, DMARC, DKIM, SPF) with administration, integration, and continuous improvement.
Lead security monitoring and detection engineering across enterprise SIEM, EDR, and file integrity monitoring (FIM) platforms, including log-source onboarding, detection tuning, alert refinement, and response runbooks.
Operate vulnerability and patch management programs, manage asset/configuration inventory, and own identity lifecycle management (joiner/mover/leaver), conditional-access administration, and privileged access management (PAM). Enforce vault-based secrets management and MFA-inclusive authentication, and lead threat modeling and security-by-design with Software Engineering and Product.
Define and operate SLOs, error budgets, and availability/performance monitoring; own observability end to end across metrics, structured logging, distributed tracing, and alert design (for example Prometheus/Grafana, CloudWatch, Azure Monitor) with centralized log management and retention aligned with compliance needs, driving automation-first operations to reduce toil.
Own incident response for infrastructure and security, covering detection, escalation, mitigation, and blameless postmortems with tracked corrective actions; participate in the on-call rotation and operate production changes under formal change management.
Act as the Tier 2/3 escalation point for end-user support in partnership with the InfraSec Help Desk, including endpoint engineering and lifecycle management, Microsoft 365 administration and troubleshooting across devices and business systems, and automation of support workflows with measured service quality.
Participate in the annual PCI DSS assessment and audit process, including evidence collection, remediation activities, control validation, coordination with stakeholders and external assessors, and external penetration test coordination and remediation tracking. Maintain audit-ready evidence year-round for configuration standards, access reviews, segmentation validation, monitoring coverage, and recovery-test results.
Design and validate resilience with RTO/RPO alignment, backup and recovery, failover architecture, and graceful degradation, and plan disaster-recovery exercises consistent with enterprise BCP/DR standards.
Contribute to security policy, standards, and risk assessments, and support employee security-awareness enablement in partnership with the CIO while aligning controls with PCI DSS and financial-industry obligations.

What you bring

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent).
7+ years of professional experience across infrastructure, cloud, network, security, or site reliability engineering, including 4+ years operating production infrastructure and security controls at scale with accountability for availability, cost, risk, and outcomes.
Ability to operate with a high degree of autonomy while owning infrastructure and security strategy, priorities, and execution, reporting directly to executive leadership.
Experience in security- or compliance-constrained environments (such as PCI DSS or financial services regulation), including participation in compliance assessments and audit evidence collection, delivering under formal SDLC and change management.
Demonstrated incident-response ownership across infrastructure and security domains, including on-call participation, incident command or mitigation leadership, and postmortem-driven improvement.
Ability to translate infrastructure, security, and reliability tradeoffs into recommendations for technical and executive stakeholders.
Production engineering experience on Microsoft Azure, AWS, and/or DigitalOcean across compute, virtual networking, IAM, storage, and managed database services.
Infrastructure automation skills with Terraform (or equivalent), GitOps, configuration management, and CI/CD engineering (for example GitHub Actions and Azure DevOps) with security scanning and progressive delivery; operational tooling using Python, PowerShell, and/or Bash with strong Git fluency.
Expertise in containers and orchestration/managed container services, including Docker and Kubernetes (such as AKS, EKS, or DigitalOcean Kubernetes) and serverless/edge compute (such as AWS Lambda and Cloudflare Workers).
Understanding of operating systems and directory services, including Windows Server, Linux, Active Directory/Microsoft Entra hybrid identity, and Microsoft 365 administration.
Network infrastructure experience covering enterprise firewalls, SD-WAN, switching, and wireless, including routing/switching fundamentals (such as VLANs, routing protocols, and QoS) and VPN.
Network and cloud security knowledge including segmentation, firewall policy management, DNS, TLS certificate management, WAF/CDN (for example Cloudflare), encryption in transit and at rest, and cloud security posture management (CSPM).
Security monitoring, detection, and vulnerability management experience with enterprise SIEM/log analytics, EDR, and FIM, including detection content development, alert tuning, response integration, plus scanning, risk-based prioritization, and remediation workflow design.
Knowledge of identity, endpoint, and end-user platforms including least-privilege RBAC, MFA-inclusive authentication, identity lifecycle management and PAM, directory and identity platforms (including Microsoft Entra ID and AWS IAM), endpoint security, MDM, password management, and vault-based secrets management.
Reliability engineering experience including SLO/error-budget practice, observability tooling, database backup/recovery, replication, and point-in-time restore (for example PostgreSQL, SQL Server, MySQL).
Track record of technical leadership such as mentoring, architecture or design review, or engineering standards ownership.

Technologies you may work with

Microsoft Azure, AWS, DigitalOcean, Terraform, GitOps, policy-as-code, IaC security scanning
GitHub Actions, Azure DevOps, Microsoft 365, IAM, MDM, DMARC, DKIM, SPF
SIEM, EDR, file integrity monitoring (FIM), Prometheus, Grafana, CloudWatch, Azure Monitor
SLOs, PCI DSS, RTO/RPO, TLS 1.2+, SD-WAN, Cloudflare, VPN, DNS, WAF
Privileged access management (PAM), vault-based secrets management, MFA-inclusive authentication, Active Directory, Microsoft Entra, AWS IAM
Docker, Kubernetes, AKS, EKS, AWS Lambda, Cloudflare Workers
Windows Server, Linux, VLANs, QoS, CSPM, RBAC, Python, PowerShell, Bash, Git, CI/CD, distributed tracing, structured logging, PostgreSQL, SQL Server, MySQL

Compensation and benefits

Salary: USD 80,000 - 100,000 per year
401(k)
401(k) matching
Dental insurance
Flexible spending account
Health insurance
Health savings account
Paid time off
Retirement plan
Vision insurance

View full job page →

2mo ago

Penetration Tester

Xcelerate Solutions Alexandria, VA

Alexandria, VA

2mo ago Closed

Full time Cybersecurity Tools Incident Response Information Security

This position is no longer accepting applications (closed Sep 15, 2026).

Job Description

Xcelerate Solutions is hiring a Penetration Tester to support CyberPRIMES cybersecurity, privacy, records and information management, and related enterprise support for DHRA, including DMDC and OUSD(P&R), from Alexandria, VA onsite.

Responsibilities

Conduct Government-selected penetration-testing assessments and threat-hunting exercises following CSD-SOP-054 and NIST SP 800-115.
Create test plans and testing methodologies, execute assessments, and produce post-assessment out-briefs and final reports.
Support cooperative testing with cyber-tool administrators, SOC and incident-response analysts, and SIEM content developers to validate detection and alerting.
Perform pre-audit penetration testing.
Maintain Government-furnished penetration-testing laptops and tools.
Research emerging and existing threats and develop approaches to identify risk areas likely to be targeted by an intruder.
Use established penetration-testing methodologies and commercial or open-source offensive tools across networks, web applications, applications, and code.
Provide support to Red and Blue Team activities as needed.
Provide reporting and cooperative testing support for enterprise cybersecurity efforts tied to DHRA, including DMDC and OUSD(P&R).

Requirements

Bachelor’s degree and 3 years of experience.
U.S. Citizen.
Active Secret clearance.
Secret clearance is required when assigned duties involve classified information or SIPRNet access.

Technologies / Standards

NIST SP 800-115
CSD-SOP-054
SIEM
SIPRNet

Location

Alexandria, VA (onsite)

View full job page →

2mo ago

Penetration Tester

Convergence Networks Portland, OR

Portland, OR

2mo ago Closed

$130k - $150k/yr Full time Cloud Platforms Cybersecurity Tools Identity and Access Management

This position is no longer accepting applications (closed Sep 15, 2026).

Job Description

Convergence Networks is seeking a Penetration Tester (SE) to deliver intermediate and advanced offensive security work that supports client security services. This is a client-facing role focused on vulnerability assessments, penetration testing, and social engineering engagements, with independent delivery of standard testing while coordinating with Security Engineers and Analysts.

Location

Portland, OR (onsite)

Compensation

USD 130,000 - 150,000 per year

Responsibilities

Plan and execute technical security tasks that support critical elements of client security services.
Perform Open-Source Intelligence (OSINT) gathering and reconnaissance activities against target organizations.
Independently conduct standard external and internal network penetration testing engagements.
Assess Microsoft Active Directory environments, including enumeration, privilege escalation, credential abuse, lateral movement, and common attack paths.
Conduct authenticated and unauthenticated vulnerability assessments against client environments.
Validate vulnerabilities via manual testing and, when authorized, controlled exploitation and post-exploitation techniques on Windows and Linux systems.
Carry out standard web application penetration testing and support advanced application testing based on engagement requirements and experience.
Depending on experience and specialization, perform wireless security assessments targeting corporate wireless infrastructure.
Depending on experience and specialization, execute physical penetration testing engagements to evaluate physical security controls.
Depending on experience and specialization, conduct cloud penetration testing and security assessments within Microsoft Azure and Amazon Web Services (AWS) environments.
Depending on experience and specialization, perform advanced social engineering or adversary-simulation assessments to evaluate organizational security controls.
Provide security consulting and technical guidance to clients.
Lead project kickoff meetings and communicate engagement objectives, scope, and methodologies.
Present findings, explain security risks, and deliver detailed engagement debriefs to technical and non-technical stakeholders.
Develop and maintain strong client relationships through professional communication and subject matter expertise.
Assist clients with remediation planning and security improvement initiatives.
Produce professional penetration testing reports documenting vulnerabilities, business impact, exploitation details, and remediation recommendations.
Ensure all reports meet internal quality standards and industry best practices.
Maintain accurate project documentation and engagement notes across the testing lifecycle.
Assess and scope customer environments to determine testing requirements and engagement complexity.
Maintain and secure penetration testing infrastructure, tools, and testing equipment.
Manage assigned projects, tickets, and deliverables while meeting established deadlines.
Collaborate with internal teams as needed and contribute to continuous improvement initiatives.

Requirements

High school diploma or equivalent.
3+ years of relevant information technology, cybersecurity, or offensive security experience, including demonstrated hands-on penetration testing or security assessment experience.
Advanced understanding of computer and networking concepts, services, and protocols including TCP/IP, the OSI networking model, DNS, e-mail flow, operating systems, firewall technologies, network switching, and identity services.
Ability to communicate effectively with technical and non-technical client stakeholders, orally and in writing.
Strong documentation and technical reporting skills, including the ability to explain vulnerability evidence, business impact, exploitation details, and remediation recommendations.
Industry-recognized cybersecurity certification or equivalent demonstrated professional experience. Security+ or a higher-level cybersecurity certification may satisfy this requirement.
Demonstrated practical penetration testing competency through professional experience, a technical assessment, or a hands-on offensive security certification.
Foundational or junior practical penetration testing certifications are acceptable evidence of offensive security fundamentals, such as: Practical Junior Penetration Tester (PJPT), eLearnSecurity Junior Penetration Tester (eJPT), or an equivalent hands-on entry-level offensive security certification.
A junior-level certification alone does not establish intermediate-level competency; candidates relying on a junior credential should demonstrate sufficient hands-on experience to independently conduct standard client penetration testing engagements.
Must possess or be willing to obtain within the first 12 months of employment a professional-level practical penetration testing certification such as Practical Network Penetration Tester (PNPT), Offensive Security Certified Professional (OSCP/OSCP+), CREST Registered Penetration Tester (CRT), or an approved equivalent.
Equivalent combinations of professional experience, demonstrated technical capability, education, certifications, labs, research, or other offensive security experience may be considered.

Relevant Technologies

Kali Linux
Microsoft Active Directory
Microsoft 365
Metasploit
Windows
Linux
Microsoft Azure
Amazon Web Services (AWS)
nmap
Nessus

Benefits

Competitive salary with profit sharing bonuses
Great PTO plan with 8 additional paid holidays each year
Education and certification reimbursement program
Company-matched 401k plan
Health insurance options described as among the best available, including free healthcare plans for you and your family

What Successful Performance Includes

Deliver high-quality penetration testing engagements on time and within scope.
Produce clear, actionable, and client-focused security reports.
Build trusted client relationships through professionalism and technical excellence.
Continuously improve offensive security skills and contribute to growth of the security practice.
Demonstrate commitment to lifelong learning and professional development.

Skills and Competencies

Experience using Kali Linux or comparable penetration testing distributions.
Knowledge of common network ports, protocols, and network topologies.
Hands-on familiarity with Microsoft Active Directory environments, common attack paths, and associated security controls.
Working knowledge of Microsoft 365 security controls and cloud security concepts; deeper Azure/AWS testing experience is desirable for specialized engagements.
Experience working with exploitation frameworks such as Metasploit.
Understanding of post-exploitation, privilege escalation, credential access, and lateral movement techniques on Windows and Linux systems.
Ability to perform vulnerability analysis, validate findings through manual testing, and separate exploitable issues from scanner output and false positives.
Ability to independently plan and execute standard internal and external network penetration tests within approved scope and rules of engagement.
Strong written and verbal communication skills.
Ability to translate technical findings into business-relevant risk discussions.
Excellent problem-solving and analytical thinking abilities, including creative approaches to challenges.
Self-motivated ability to work independently, with strong time management and organizational skills.
Ability to collaborate effectively with internal teams and external stakeholders.

Helpful Qualifications

Associate degree or higher in Information Technology, IT Assurance, or Information Security (Cybersecurity).
Certified Ethical Hacker (CEH), CEH Practical, or CEH Master.
CompTIA PenTest+ or other supporting cybersecurity/offensive security certifications.
Professional or advanced offensive security certifications including PNPT, OSCP/OSCP+, CREST CRT, GPEN, advanced OffSec or CREST certifications, or other recognized practical penetration testing credentials.
Specialized certifications in red teaming/adversary simulation (including RTO/CRTO), web application testing, Active Directory exploitation, cloud security testing, wireless security, or social engineering.
Advanced knowledge and experience with utilities such as nmap, Nessus, and Kali Linux.

Work Environment

Typical working hours include Monday through Friday, 8 AM to 5 PM, with off-hours work during projects.
Expected weekly workload is typically about 40-45 hours.
In-office, hybrid, and remote options are available, with accommodations based on preferred work style.
Occasional onsite travel may be required for company meetings, visits to client sites, and assessments.
Remote work requires willingness to travel.
Essential functions include standing, walking, sitting, using hands, seeing, reaching, talking, and hearing.
May need to lift and/or move up to 50 pounds occasionally.
Reasonable accommodations may be made for individuals with disabilities.
Some after-hours work will be required.
Work likely can be completed remotely.

Performance Feedback

90-day, six-month, and annual (12-month) performance reviews, with yearly reviews including performance and salary review.
Bi-weekly 1:1 meeting with the Manager.
Manager and employee set performance review goals.

Company Feedback Process

A 60-day check-in after the start date to confirm onboarding support and identify gaps.
An opportunity to share feedback to course-correct and improve the onboarding process.
Annual stay interview to provide unfiltered, honest feedback in a safe environment.
Regularly scheduled 1:1 meetings with a Team Leader.
Leadership Team outings for lunch, including for employees who do not report directly to leadership.
100% open-door policy to Leadership and Human Resources.

Education

High school diploma or equivalent

View full job page →

2mo ago

Senior to Staff Application Security Engineer

Motion Recruitment Phoenix, AZ

Phoenix, AZ

2mo ago Closed

Full time Senior Application Security Bug Bounty

This position is no longer accepting applications (closed Sep 15, 2026).

Job Description

Motion Recruitment is hiring a Senior to Staff Application Security Engineer in Phoenix, AZ (onsite) to establish and scale an application security program.

Responsibilities

Establish and build the application security program from the ground up
Identify vulnerabilities in APIs, web applications, and internal services
Run and extend SAST and DAST pipelines
Manage the bug bounty program
Join new feature design efforts early to ensure security is incorporated during implementation planning

Requirements

8+ years of experience in appsec, product security, or devsecops
Strong software development background
Hands-on experience with SCA, DAST, SAST, and code reviews
Ability to communicate effectively
Prior experience building application security programs from the ground up
Applicants must be currently authorized to work in the US on a full-time basis now and in the future