CybersecurityJobs.io - Jobs in infosec and cybersecurity.

Latest Jobs

2mo ago

Network Security Engineer

WCC Technologies Group Chino, CA

Chino, CA

2mo ago Closed

$65 - $80/hr Full time Cisco Cloud Security Cloud Security Architecture

This position is no longer accepting applications (closed Sep 12, 2026).

Job Description

WCC Technologies Group is seeking a Network Security Engineer with strong, hands-on enterprise network security experience to support both pre-sales and post-sales consulting engagements. This onsite role is focused on advising customers and delivering advanced firewall, SD-WAN, and SASE solutions, spanning design through deployment, validation, and troubleshooting. You will also provide customer-facing escalation support for complex incidents and contribute to technical documentation and automation efforts.

Key responsibilities

Assist the sales team during pre-sales consulting by advising customers on security requirements, recommending best-fit technologies, and designing firewall, SD-WAN, and SASE solutions.
Design, configure, and deploy next-generation firewalls and secure network architectures using Palo Alto Networks (PAN-OS, Panorama), Fortinet (FortiGate, FortiManager), Cisco, and other leading platforms.
Architect and implement SD-WAN and SASE solutions, including ZTNA, SWG, CASB, and cloud-delivered security services such as Prisma Access, Cisco Umbrella, and Fortinet SASE.
Join customer discovery calls, support RFP reviews, gather requirements, and help create Bills of Materials (BoMs) for firewall, SD-WAN, and SASE projects.
Configure and troubleshoot advanced routing and switching environments, including BGP, OSPF, VLANs, and enterprise WAN/LAN architectures.
Implement site-to-site and remote access VPNs, including IPsec and GRE tunnels, and apply Zero Trust access policies across hybrid and multi-cloud environments.
Conduct security policy audits, optimize firewall rules, and help remediate vulnerabilities to strengthen customer security postures.
Support post-sales delivery, including staging, configuration, validation, on-site installation, and assistance during network cutovers.
Produce and maintain customer-facing technical documentation such as network diagrams, firewall rule sets, configuration standards, and implementation runbooks.
Act as a client-facing technical resource, mentor junior engineers, and escalate or resolve complex customer security incidents as needed.
Build and maintain network automation workflows and monitoring integrations using Ansible, n8n, Python, and tools like Zabbix or PRTG to improve visibility and reduce manual work.

What you bring

5-10 years of hands-on experience in enterprise network security engineering, ideally within a consulting or MSP environment.
Relevant certifications strongly preferred: PCNSE, Fortinet NSE 4-7, CCNP (Enterprise or Security), or CCIE.
Working knowledge of cloud networking constructs across AWS, Azure, or GCP (for example, VPC/VNet peering, Transit Gateway, ExpressRoute).
Comfort working with IPAM/DCIM tools such as NetBox and ITSM/ticketing platforms like ServiceNow and Jira.
Strong communication and presentation skills for explaining technical concepts to both technical and executive stakeholders.
Ability to manage multiple concurrent client engagements and shifting priorities in a fast-paced consulting environment.
Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent practical experience.

Technologies you may work with

Palo Alto Networks (PAN-OS, Panorama), Fortinet (FortiGate, FortiManager), Cisco
SD-WAN, SASE, ZTNA, SWG, CASB; Prisma Access, Cisco Umbrella, Fortinet SASE
BGP, OSPF, VLANs, IPsec, GRE, Zero Trust
Ansible, n8n, Python, Zabbix, PRTG
NetBox, ServiceNow, Jira
AWS, Azure, GCP; VPC/VNet peering, Transit Gateway, ExpressRoute

Location: Chino, CA (onsite)
Compensation: $65.00 - $80.00 per hour
Experience: 5-10 years hands-on

View full job page →

2mo ago

Staff AI Security Engineer

Okta San Francisco, CA

San Francisco, CA

2mo ago Closed

$180k - $248k/yr Full time Agent Agentic Ai Ai Security

This position is no longer accepting applications (closed Sep 12, 2026).

Job Description

Okta is seeking a Staff AI Security Engineer to strengthen its Security team. In this senior individual contributor role, you will shape the technical vision and implement hands-on security controls for AI models, agentic workflows, and autonomous systems.

Role Focus

You will define scalable AI security infrastructure, establish security architectures for both local and hosted agents, and enable engineering teams to build and deploy AI capabilities safely. The position also includes mentoring engineers and coordinating closely with product, security, and infrastructure stakeholders.

Responsibilities

Design and deploy enterprise AI guardrails, gateways, and controls to protect agentic workflows from emerging threats.
Set up security architectures for local and hosted agents to address tool-calling, prompt injection, goal misalignment, and data exfiltration risks.
Create secure design patterns and developer tools that help teams implement AI features quickly while maintaining safety.
Lead threat modeling and security reviews for agentic AI systems, enterprise deployments, and agent ecosystems.
Build systems to discover, inventory, and assess AI usage and data flows across the enterprise.
Design and operate internal AI security platforms and develop integrated AI capabilities that automate complex security operations.
Drive technical alignment across product, security, and infrastructure teams, while mentoring engineers and security practitioners across domains.

Requirements

Deep knowledge of the AI threat landscape, including OWASP, MITRE ATLAS, and NIST AI RMF, with practical experience addressing prompt injection, excessive agency, and other AI-related threats.
8+ years of experience in security engineering or backend software development, with strong coding proficiency in Python or Go and hands-on cloud experience.
Experience securing or auditing agentic frameworks, including LangChain, Strands, Claude Agent SDK, or custom tool-calling agents, especially when operating within sandboxed environments.
Experience designing scalable cloud infrastructure on AWS or GCP, including API gateways, proxy architectures, and enterprise access controls.
A track record of building developer-first security tools and platform controls that support engineering velocity.
Strong communication skills, including experience driving technical strategy, influencing engineering leaders, and mentoring engineers.
Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or equivalent practical experience.

Technologies

Python, Go
OWASP, MITRE ATLAS, NIST AI RMF
LangChain, Strands, Claude Agent SDK
AWS, GCP

Location and Employment Details

Location: San Francisco, CA (hybrid). Compensation: USD 180,000 - 247,500 per year. Experience level: 8+ years. Education: Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or equivalent practical experience.

The Okta Experience

Supporting Your Well-Being
Driving Social Impact
Developing Talent and Fostering Connection + Community

View full job page →

2mo ago

Staff Application Security Engineer – AI & Agentic Systems

CVS Health Denver, CO

Denver, CO

2mo ago Closed

$107k - $284k/yr Full time Agent Agentic Ai Ai Enabled Security

This position is no longer accepting applications (closed Sep 12, 2026).

Job Description

Join CVS Health in a hands-on security role focused on protecting AI-enabled applications, LLM integrations, and agentic systems. This Staff Application Security Engineer position embeds security into design, development, and operations by partnering closely with engineering, product, platform, and data teams to shape secure patterns and practical guardrails across the enterprise.

Location: Denver, CO (onsite). Pay range: USD 106,605 - 284,280 per year, with eligibility for additional incentive and equity components.

What you’ll do

Develop and maintain application and AI security standards, best practices, and guardrails.
Promote secure-by-design principles across application and AI development lifecycles.
Establish secure design patterns for AI agents, prompt management, tool integrations, memory handling, and autonomous workflows.
Partner with engineering teams to identify and mitigate AI-specific risks including prompt injection, model abuse, data leakage, and unauthorized agent actions.
Serve as a subject matter expert for the security of AI-enabled applications and agentic systems.
Review and guide architectures using large language models, retrieval augmented generation (RAG) pipelines, AI agents, and AI-powered workflows.
Define and recommend controls for AI environments including identity, authorization, data protection, observability, and governance.
Conduct threat modeling, architecture reviews, and security assessments for applications and AI-enabled systems, including analysis of AI workflows, model integrations, agent interactions, and data flows.
Support remediation by partnering with engineering teams to prioritize and address security findings.
Evaluate emerging AI security tools and technologies to improve organizational security posture and influence engineering teams to integrate controls into development processes and product roadmaps.
Align with privacy, compliance, legal, and risk teams so security controls meet organizational requirements.
Support investigation and response efforts for application and AI-related security events, including identifying root causes and driving long-term improvements.
Mentor security engineers and development teams on secure coding, threat modeling, and AI security best practices.

What you’ll need

7+ years of experience designing, building, or securing enterprise-scale applications and platforms.
5+ years of application security experience, including threat modeling, secure design, code review, and vulnerability management.
5+ years programming experience in one or more of: Python, Java, JavaScript, C#, or Go.
3+ years developing or securing AI, machine learning, or generative AI solutions.
3+ years experience with public cloud platforms: AWS, Azure, or Google Cloud Platform.
Education: Bachelor’s degree from an accredited college or university, or equivalent combination of education and relevant work experience (High School Diploma/GED plus 4 years of related experience).

Bonus considerations (preferred)

Experience securing modern architectures such as APIs, containers, microservices, and serverless technologies.
Strong understanding of secure software development lifecycle practices and application security testing methodologies.
Hands-on experience securing AI agents, RAG solutions, and large language model integrations.
Experience conducting threat modeling and security assessments for AI-enabled systems.
Familiarity with responsible AI principles, AI governance, and emerging AI security frameworks.
Experience integrating security controls into CI/CD pipelines.
Knowledge of common compliance frameworks including PCI DSS, HIPAA, NIST, HITRUST, and CSA.
Ability to influence technical decisions across multiple teams and organizations.
Experience contributing to security research, open-source projects, or industry communities.

Technologies you’ll work with

Python, Java, JavaScript, C#, Go
AWS, Azure, Google Cloud Platform
Large language models, retrieval augmented generation, AI agents

CVS Health benefits

Comprehensive benefits package designed to support the physical, emotional, and financial well-being of colleagues and their families.
Medical, dental, and vision coverage (based on eligibility).
Paid time off (based on eligibility).
Retirement savings options (based on eligibility).
Wellness programs (based on eligibility).
Other resources (based on eligibility).

Compensation details

The typical pay range for this role is $106,605.00 - $284,280.00.
This position may be eligible for a CVS Health bonus, commission, or short-term incentive program in addition to the base pay range.
This position also includes an award target in the company’s equity award program.

View full job page →

2mo ago

Lead Penetration Tester

Revolutional, LLC Fort Collins, CO

Fort Collins, CO

2mo ago Closed

$110k - $150k/yr Full time Manager Application Security Data Security

This position is no longer accepting applications (closed Sep 12, 2026).

Job Description

Lead operational security assessment and penetration testing efforts for a federal agency portfolio, delivering evidentiary results to CIO and CISO-level stakeholders.

Responsibilities

Lead operational security assessments across federal agencies using the ISC Security Assessment Methodology and applicable rules of engagement; manage approximately 6–7 agency assessments per year
Perform web application security assessments using OWASP methodology; assess approximately 3–4 applications per year across a range of agency environments
Create end-to-end test plans for each engagement, including scope definition, objectives, methodology selection, rules of engagement, and timeline
Develop criticality matrices that prioritize findings by risk, asset value, and mission impact to support remediation planning
Author security assessment reports with findings, evidence, risk ratings, and actionable remediation guidance aligned to federal evidentiary and reporting expectations
Develop and deliver executive out-briefs to agency CIO/CISO and senior leadership audiences, explaining complex technical results clearly
Conduct FedRAMP-qualified penetration testing in support of cloud service authorization, following FedRAMP pen testing requirements and documentation standards
Apply NIST SP 800 series guidance and DISA STIG methodology across assessment planning, execution, and reporting
Coordinate with agency stakeholders before, during, and after assessments to manage expectations and ensure findings are understood and acted upon
Maintain currency on vulnerability research, offensive techniques, and emerging attack surfaces relevant to federal civilian environments

Requirements

Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience)
5+ years of hands-on penetration testing experience, including demonstrated experience leading assessments in federal environments
CISA AES (Authorized External Security) certification required, or actively in process of obtaining
FedRAMP penetration testing experience required
Active Secret clearance
Ability and willingness to travel to agency sites as required
Deep experience conducting operational security assessments aligned to ISC Security Assessment Methodology and federal rules of engagement
Proficiency applying OWASP methodology to web application assessments in federal environments
Working knowledge of NIST SP 800 series for security assessment planning, execution, and reporting
Experience applying DISA STIG methodology to assessment scope and findings documentation
Experience producing test plans, criticality matrices, and security assessment reports meeting federal evidentiary and leadership reporting standards
Demonstrated ability presenting technical security findings to CIO, CISO, and senior agency leadership audiences
FedRAMP-qualified penetration testing experience, including familiarity with FedRAMP pen test requirements, documentation, and cloud authorization processes
Proficiency with industry-standard penetration testing toolsets for network, application, and infrastructure assessments

Strongly Preferred / Additional Credentials

GPEN (GIAC Penetration Tester), GXPN (GIAC Exploit Researcher and Advanced Penetration Tester), OSCP (Offensive Security Certified Professional), or equivalent offensive security credential
GWAPT (GIAC Web Application Penetration Tester) or equivalent web application security certification

Nice to Have

Experience conducting CISA AES assessments as Assessment Lead across multiple federal civilian agencies
Familiarity with FedRAMP High, Moderate, and Low authorization boundaries and associated penetration testing implications
Background in Red Team operations or adversary emulation alongside structured assessment methodology
Experience with cloud-native application security assessments (AWS, Azure, GCP, or GovCloud)
Active TS/SCI clearance

Benefits

Traditional and HSA-eligible medical insurance plans
100% employer-paid dental and vision insurance options
100% employer-sponsored STD, LTD, and life insurance
5% 401(k) company matching
Flexible schedules and teleworking options
Paid holidays and PTO accrual plans
Paid Parental Leave
Professional development and career growth opportunities

Location / Terms

Onsite in Fort Collins, CO (project-based; onsite)
Also listed: Washington, DC, Ft. Collins, CO, or Kansas City, MO
Full-time position

Compensation / Clearance

$110,000 - $150,000 per year (DOE)
Active Secret clearance required

Travel

Yes – travel to agency sites required

View full job page →

2mo ago

Intermediate Penetration Tester

Cyber Defense Technologies Denver, CO

Denver, CO

2mo ago Closed

$102k - $138k/yr Full time Information Security InfoSec Intermediate

This position is no longer accepting applications (closed Sep 12, 2026).

Job Description

Join Cyber Defense Technologies (CDT) supporting a government customer onsite in Denver, CO. This Intermediate Penetration Tester role offers a comprehensive benefits package including health, dental, and retirement plans, along with professional development and career advancement opportunities. Compensation is competitive and based on experience, with a salary range of $102,000 - $138,000 per year.

Work is focused on applying established testing methodologies to reconnaissance, vulnerability scanning, and penetration activities. An active Top Secret/SCI with CI poly is required, and OSCP is highly recommended.

Responsibilities

Perform basic reconnaissance and vulnerability scanning following established testing methodologies.
Identify common vulnerabilities that may be exploitable, document findings, and report results.
Use basic scripting skills and apply knowledge of network fundamentals and vulnerability scanning tools.
Support more complex penetration tests by performing deeper vulnerability analysis, including misconfigurations and zero-day exploits, and improving exploitation techniques.
Lead penetration tests, mentor junior testers, and provide technical guidance to stakeholders.
Apply expertise across network protocols, application security, social engineering, and advanced scripting.

Requirements

Bachelor’s degree or higher and 3 years of Pen Tester experience.
Associate’s degree and 4 years of relevant work experience, or Bachelor’s degree and 3 years of relevant work experience, or Master’s degree and 2 years of relevant work experience.
Experience in cybersecurity with a focus on red teaming, penetration testing, or threat hunting.
Clearance: An active Top Secret/SCI with CI poly is required.
Certification: OSCP is highly recommended.

Compensation and Benefits

Salary range: $102,000 - $138,000 per year.
Benefits: Comprehensive benefits package including health, dental, and retirement plans.
Growth: Opportunities for professional development and career advancement.

View full job page →

2mo ago

Junior Penetration Tester

Cyber Defense Technologies Denver, CO

Denver, CO

2mo ago Closed

$79k - $108k/yr Full time Information Security InfoSec Offensive Security

This position is no longer accepting applications (closed Sep 12, 2026).

Job Description

Join a government-focused team onsite in Denver, Colorado to support penetration testing activities as a junior tester.

Responsibilities

Perform basic reconnaissance and vulnerability scanning following established testing methodologies
Identify common vulnerabilities that may be exploitable, then document and report findings
Use basic scripting abilities to support testing tasks
Apply an understanding of network fundamentals and vulnerability scanning tools

Requirements

Education and experience options:
- High School Diploma/GED + Associates Degree + 3 years of relevant work experience
- Bachelor’s Degree + 0-2 years of relevant work experience
Experience in cybersecurity with a focus on red teaming, penetration testing, or threat hunting
Active clearance requirement: Top Secret/SCI with CI poly

Clearance

Active Top Secret/SCI with CI poly is required
Candidates who do not meet the clearance requirement will not be considered

Benefits

Competitive salary based on experience (USD 79,000 - 108,000 per year)
Comprehensive benefits package, including health, dental, and retirement plans
Professional development and career advancement opportunities

Location and Work Setup

Denver, CO onsite

Certifications

OSCP certification is highly recommended

View full job page →

2mo ago

Senior Penetration Tester

JPMorganChase New York, NY

New York, NY

2mo ago Closed

$157k - $260k/yr Full time Senior Application Security Burp Suite

This position is no longer accepting applications (closed Sep 12, 2026).

Job Description

The role focuses on planning, executing, and reporting penetration tests for high-impact banking applications, platforms, and services. You will partner with internal teams to identify vulnerabilities, support remediation, and improve the firm’s security posture.

Penetration Testing Scope

Plan, scope, and execute penetration testing engagements across web applications, APIs, cloud platforms, infrastructure, thick-client applications, and/or mobile applications.
Collect and validate engagement pre-requisites, ensuring required access, documentation, and approvals are in place.
Perform manual and automated testing to identify vulnerabilities, misconfigurations, and security weaknesses using industry-standard tools and custom scripts.

Reporting and Peer Review

Document and communicate findings through comprehensive reports including technical details, risk assessments, and actionable remediation recommendations.
Conduct peer reviews of penetration test reports to ensure accuracy, consistency, and overall quality of deliverables.

Collaboration and Offensive Security Expertise

Collaborate with development, infrastructure, and security teams to clarify findings and support remediation efforts.
Provide subject matter expertise on offensive security during vulnerability resolution and related security activities.

Staying Current and Improving Methodologies

Stay current with emerging threats, vulnerabilities, and attack techniques using threat intelligence, security research, and participation in relevant industry groups.
Contribute to continuous improvement of penetration testing methodologies, tools, and frameworks to enhance effectiveness and alignment with firm strategy and regulatory requirements.

Required Qualifications

5+ years of hands-on penetration testing experience in offensive security, including proven ability to scope, execute, and report on complex engagements.
Expertise in manual penetration testing across web, API, cloud (AWS/Azure/GCP), infrastructure, thick-client, and/or mobile applications (android/iOS), using tools such as Burp Suite, Nmap, Metasploit, and other industry-standard solutions.
Strong understanding of security assessment methodologies such as OWASP Top Ten, NIST Cybersecurity Framework, and other relevant standards.
Ability to identify and explain systemic security issues tied to threats, vulnerabilities, and risks, with clear remediation recommendations.
Exceptional organizational and communication skills, including detailed technical report writing and presenting findings to both technical and non-technical stakeholders.
Experience conducting peer reviews of penetration test reports and mentoring junior testers.
Demonstrated commitment to continuous learning across offensive security trends, tools, and techniques.

Technologies

Burp Suite, Nmap, Metasploit
OWASP Top Ten, NIST Cybersecurity Framework
AWS, Azure, GCP
android, iOS
Python, Java, Rust
Windows, Unix-like operating systems
OSWE, CREST (CRT, CCT), OSCP, OSCE
GXPN, GWAPT, GPEN, GMOB, BSCP

Preferred Qualifications

Knowledge of cybersecurity practices, operational risk management, and incident response methodologies within the US financial services sector, including relevant regulations, threats, and risks.
Proficiency in penetration testing and security concepts for both Windows and Unix-like operating systems.
Experience conducting security-focused source code reviews (e.g., Python, Java, Rust).
Experience in reverse engineering thick-client and mobile applications to identify vulnerabilities.
Relevant certifications such as OSWE, CREST (CRT, CCT), OSCP, OSCE, GXPN, GWAPT, GPEN, GMOB, or BSCP.

Compensation and Benefits

Base salary determined based on the role, experience, skill set, and location.
Commission-based pay and/or discretionary incentive compensation in the form of cash and/or forfeitable equity, based on eligible roles and individual achievements.
Comprehensive health care coverage and on-site health and wellness centers.
A retirement savings plan.
Backup childcare and tuition reimbursement.
Mental health support and financial coaching.

About the Team

Consumer & Community Banking serves customers with services including personal banking, credit cards, mortgages, auto financing, investment advice, small business loans, and payment processing.
The division supports digital solutions and customer satisfaction, including leadership in credit card sales and deposit growth.