Engineer

Engineer Cybersecurity Jobs

1,161 jobs found

Today

Product Compliance Engineer – Product Safety & Cybersecurity

Qualitrol Fairport, NY

Fairport, NY

Today

$83k - $155k/yr Full time Compliance Officer Data Security Engineer

Apply Now

Job Description

Own compliance for Qualitrol’s Service platform and related products, driving safety and cybersecurity requirements from planning through release.

Responsibilities

Lead product compliance across applicable standards and certifications, including: UL, CSA, Intertek, TÜV, IEC, IEEE, CE, FCC, UKCA, RoHS, REACH
Support product certification and regulatory approvals for global releases
Partner with Product Engineers and DevOps to embed compliance requirements throughout development
Build and maintain compliance roadmaps for new products and analytics services
Stay current on emerging regulations impacting industrial platforms and connected devices
Review product requirements and contribute to design reviews
Conduct risk assessments and support verification activities
Coordinate and drive certification testing
Prevent compliance work from becoming a launch bottleneck
Create repeatable compliance processes that enable rapid releases while maintaining regulatory confidence
Introduce AI-assisted compliance workflows where appropriate to improve efficiency and documentation quality

Requirements

8+ years of product compliance engineering
Strong understanding of IEC/EN 61000 EMC and IEC/UL 61010 safety standards
Experience with industrial electronics
Experience working directly with UL, TÜV, Intertek or equivalent certification agencies
Strong understanding of functional safety and product cybersecurity
Experience supporting global product launches

Primary responsibility focus

Product Safety
Cybersecurity
Secure Development Lifecycle
Vulnerability Management
Regulatory Strategy
Product Development Support
Continuous Improvement

Technologies

AI-assisted compliance workflows
IEC 62443
IEC 61508
NIST Cybersecurity Framework

Preferred experience

Experience with IEC 62443
Experience with IEC 61508
Experience with NIST Cybersecurity Framework
Experience with Industrial IoT
Experience with Cloud software compliance
Experience with Secure software development

Success measures (12-month targets)

Integrate compliance into the development lifecycle
Improve product certification timelines
Standardize compliance reviews
Streamline regulatory documentation
Achieve zero critical compliance issues that delay product releases

Location: Fairport, NY, United States (onsite)

Compensation: USD 83,400 - 155,000 per year

Minimum experience: 8 years

View full job page →

Today

Server Security Engineer

Hilti Tulsa, OK

Tulsa, OK

Today

Full time Cloud Platforms Cloud Security Cybersecurity Operations

Apply Now

Job Description

Drive continuous improvements for global Windows Server and Azure security services in a hybrid environment.

Responsibilities

Lead planning, engineering, operations, and continuous improvement of Windows Server security services across a global hybrid infrastructure landscape.
Manage assessment, deployment, and validation of Windows Server security updates using enterprise patch management and automation tools.
Manage and continuously enhance endpoint protection, detection, and response capabilities for the Windows Server environment.
Provide advanced troubleshooting, resolution, and root cause analysis for Windows Server security incidents and configuration issues.
Develop and maintain secure Windows Server configuration and hardening practices, operational procedures, and security baselines aligned with company cybersecurity standards.
Collaborate with Global IT, cybersecurity teams, application owners, vendors, and other stakeholders to implement consistent, scalable security controls.
Partner with the Product Owner to define requirements, prioritize initiatives, manage technical risks, and deliver Windows Server security roadmap objectives.
Monitor industry trends, emerging threats, and technology developments to support ongoing service improvements.

Requirements

Authorized to work in the United States at the time of application and remain authorized for the duration of employment without employer-sponsored work authorization or visa sponsorship (including initial, transfer, or extension).
Bachelor’s degree in Information Technology, Computer Science, or Engineering (Master or PhD is an added advantage).
Minimum 5 years of experience managing and securing an enterprise-scale Windows Server estate in a hybrid infrastructure landscape.
Hands-on engineering experience with Microsoft Configuration Manager (SCCM/MECM), Windows Server endpoint protection, and EDR technologies in enterprise environments.
Experience with cloud-based infrastructure services, preferably Microsoft Azure, including virtual machine platforms, monitoring, and infrastructure operations.
Strong understanding of server security best practices, standards, controls, and compliance requirements.
Strong analytical, troubleshooting, and problem-solving skills with an affinity for infrastructure and security technologies.
Willingness to learn, adapt, and continuously improve in a rapidly evolving technology landscape.
Ability to translate business requirements into secure, reliable, value-creating technical solutions.
Excellent interpersonal, organizational, communication, and team skills in an international environment.
Fluent English (verbal and written).

Technologies

Windows Server
Azure
Microsoft Configuration Manager (SCCM/MECM)
Endpoint Detection and Response (EDR)
Enterprise patch management
Automation tools

Benefits

Competitive base salary and bonus potential
Generous paid time off policy including vacation, personal days, and health & wellness
2 days per year to give back in your local community
Paid family leave
Educational reimbursement
401(k) matching
Medical/dental/vision coverage
Variety of other benefits

View full job page →

Today

Senior Security Engineer- Security Operations

GE Appliances Louisville, KY

Louisville, KY

Today

Full time Senior Cloud Platforms Cybersecurity Operations

Apply Now

Job Description

Senior Security Engineer (Security Operations) to serve as the senior technical lead for GE Appliances’ detection and response capability, focused on SOC engineering, automation, telemetry, and Tier 3 escalation.

Responsibilities

Act as senior technical lead and subject-matter expert for security operations, owning detection and response platform architecture, configuration, and operational health, plus the technical standards the MSSP operates against.
Design, build, test, and maintain detection content including correlation rules, behavioral analytics, and IOC/BIОC rules mapped to MITRE ATT&CK, using detection-as-code practices (version control, testing, peer review, and documentation).
Own telemetry coverage: identify visibility gaps, onboard and normalize log sources across endpoints, identity, Microsoft 365, cloud, network, email, DLP, and OT; monitor ingestion health and manage data volume and retention cost.
Engineer security automation and orchestration (SOAR) playbooks and integrations to enrich alerts, automate containment, and connect security tooling with IT service management and collaboration platforms to reduce manual work and MSSP handling time.
Provide technical oversight of MSSP output in partnership with the Information Security leader who owns the MSSP commercial relationship: review triage and investigation quality, escalation accuracy, and run-book adherence.
Drive false-positive reduction and tuning, and update MSSP run books and playbooks as detections and the environment change.
Serve as the Tier 3 escalation point for complex or high-severity incidents escalated by the MSSP, performing hands-on investigation, endpoint and log analysis, scoping, and containment, and coordinating with an external incident response retainer when engaged.
Lead hypothesis-driven threat hunting using threat intelligence and manufacturing-relevant threats, converting hunt findings into durable detections and hardening recommendations.
Operationalize threat intelligence by translating advisories, vulnerability disclosures, and adversary reporting into detections, hunts, and blocking actions, tracking threat actors relevant to GE Appliances.
Validate detection and response effectiveness through purple-team exercises, adversary emulation, and breach-and-attack simulation, measuring coverage against MITRE ATT&CK and confirming expected MSSP detection and response.
Maintain EDR/XDR platform health across endpoint and server estate: agent coverage, prevention and exploit-protection policies, exclusions governance, and response actions.
Strengthen the technical side of vulnerability operations run by the MSSP: scan coverage and authenticated scanning, risk-based prioritization using exploitability and threat intelligence (CISA KEV, EPSS), correlate vulnerabilities with active threat activity, and automate remediation workflows.
Partner with Cloud, Network, and Identity security engineers to integrate CNAPP, network, and identity signals into detection and response, including identity threat detection for account takeover, MFA fatigue, and AiTM phishing.
Partner with OT Security to extend monitoring and detection into manufacturing in a production-safe manner aligned with ISA/IEC 62443 and NIST SP 800-82.
Author and maintain incident response playbooks, technical run books, and tabletop exercise scenarios; lead technical portions of post-incident reviews to drive corrective actions to closure.
Define, automate, and report operational metrics and KPIs (MTTD, MTTR, ATT&CK detection coverage, false-positive rate, log source health, MSSP escalation quality) to the CISO and Information Security leadership.
Contribute to the security operations roadmap: evaluate emerging capabilities including AI-assisted triage and agentic SOC automation; support platform evaluations, proofs of concept, and TCO analyses.
Provide technical evidence for logging, monitoring, and incident response controls in SOX, C-SOX, PCI-DSS, and other audits, and drive remediation of related findings.
Mentor engineers and transfer knowledge to MSSP analysts on GE Appliances environment, detections, and response procedures.

Requirements

Bachelor’s degree in Information Systems, Cybersecurity, Computer Science, or a related technical field, or equivalent practical experience.
6–10 years progressive experience in IT or information security, including 4+ years hands-on experience in security operations, detection engineering, or incident response in a large enterprise environment.
Deep hands-on experience engineering and administering SIEM/SOAR and EDR/XDR platforms, including writing detection rules and queries (XQL, SPL, KQL), with examples such as Cortex XSIAM/XDR, Splunk, Microsoft Sentinel/Defender, and CrowdStrike.
Proven experience building detection content mapped to MITRE ATT&CK and tuning it for fidelity at enterprise scale.
Experience building SOAR playbooks and integrations; proficiency in Python and/or PowerShell and working with REST APIs and JSON.
Hands-on incident response experience with significant enterprise incidents such as ransomware, BEC, and account takeover, including endpoint, log, and network analysis.
Experience in a MSSP/MDR technical oversight role, including tuning, escalation quality review, and run-book development.
Strong understanding of log sources and telemetry across Windows, Linux, network, cloud (AWS, Azure, and/or GCP), Microsoft 365, and identity providers.
Working knowledge of MITRE ATT&CK, NIST SP 800-61, NIST CSF, and CIS Controls.
Excellent verbal and written communication skills for both technical and executive audiences.

Technologies

Palo Alto Networks Cortex XSIAM/XDR
Splunk
Microsoft Sentinel/Defender
CrowdStrike
XQL, SPL, KQL
Python, PowerShell
REST APIs, JSON
MITRE ATT&CK, SOAR, SIEM, EDR, XDR
Microsoft 365, CNAPP
CISA KEV, EPSS
ISA/IEC 62443, NIST SP 800-82, NIST SP 800-61, NIST CSF
CIS Controls
SOX, C-SOX, PCI-DSS
Detection-as-code, Git, Sigma, Atomic Red Team, MITRE Caldera

Preferred Qualifications

Certifications such as GIAC (GCIH, GCIA, GCDA, GCFA, GCTI), Palo Alto Networks Cortex certifications, CISSP, or similar.
Experience with detection-as-code practices, Git, CI/CD pipelines, and Sigma or other vendor-neutral rule formats.
Experience with threat hunting, purple teaming, and adversary emulation (Atomic Red Team, MITRE Caldera, breach-and-attack simulation platforms).
Familiarity with OT/ICS monitoring frameworks such as ISA/IEC 62443 or NIST SP 800-82.
Experience integrating cloud security (CNAPP/CSPM) and identity telemetry into detection and response.
Experience applying AI and large language models to security operations, with familiarity of AI security frameworks such as MITRE ATLAS and the OWASP Top 10 for LLM Applications.
Experience in manufacturing, critical infrastructure, or global multinational organizations.

Working Conditions

Normal office environment.
Occasional weekend and/or evening work, including after-hours escalation for major security incidents and participation in an on-call rotation.

Location: Louisville, KY (onsite), USA

View full job page →

Today

Cyber Security Engineer

Regions Nashville, TN

Nashville, TN

Today

$89k - $123k/yr Full time Cloud Platforms Cyber Security Engineer Cybersecurity Tools

Apply Now

Job Description

Support security solutions across cloud applications, infrastructure, platforms, and related technologies within the Cyber Security organization at Regions.

Responsibilities

Design, implement, and support relevant cyber security technology solutions
Provide technical administration, including troubleshooting, break-fix support, patching, and day-to-day application activities
Stay current on industry trends and assess organizational objectives and needs
Maintain operational documentation and reports to support monthly trend analysis and project components
Assist with research, proof-of-concept, selection, and implementation of technology solutions; analyze pros and cons and evaluate build vs buy options
Identify opportunities to implement new technologies and methods that improve business processes, efficiency, effectiveness, and customer value
May support security incident response activities and post-event reviews
Partner with subject-matter experts to design, implement, and maintain security solutions for business areas, project teams, and vendors
Participate in evaluating the technology vision, opportunities, challenges, and the impact on security standards within the Cyber Security organization
Support relevant metrics, controls, and governance administration related to cyber security technologies
Participate in on-call rotation for relevant cyber security technologies
Adhere to operational processes, standards, and procedures
Ensure compliance with risk management programs, rules and regulations, and cybersecurity practices; support process improvements and apply disciplined change management practices
May provide guidance and advice to junior engineers

Requirements

High School Diploma or GED
Six (6) years of related post-secondary education and/or experience in Information Security and/or Information Technology

Technologies

CISSP, CompTIA Security+, CCNA, MCSA
RedHat Linux, AIX, Solaris, Oracle Linux, UNIX
IAM, BoKS, CyberArk, Delinea, VAS, SailPoint, Okta
PAM, SUDO, Role Based Access Control
AWS IAM, Azure AD
Python

Skills and Competencies

Ability to interpret and ensure compliance with applicable rules, regulations, and industry guidance
Ability to prioritize conflicting demands
Knowledge of common web technologies, cloud technologies, and enterprise and network architecture
Knowledge of defense in depth, trust levels, privileges, and permissions
Knowledge of modern security tools and controls
Problem-solving skills to develop sound solutions to issues
Strong verbal, written communication, and organizational skills
Strong analytical and evaluative thinking capability

Preferred Qualifications

Bachelor’s degree in Information Technology, Information Security, Information Systems Management, Computer Science, Engineering, or related field
Applicable technology and/or security certifications (e.g., CISSP, CompTIA Security+, CCNA, MCSA)
Experience supporting more than one OS type (RedHat Linux, AIX, Solaris, Oracle Linux, etc.) in an enterprise environment
Advanced understanding of IAM concepts, especially Least Privilege
Experience with at least one UNIX Identity Management solution (BoKS, CyberArk, Delinea, VAS, etc.) preferred
Familiarity with enterprise tools such as SailPoint and Okta, or similar
Advanced understanding of UNIX permissions, file ownership, PAM, user/group management
Understanding of SUDO policies and privilege delegation
User provisioning and deprovisioning processes
Shell scripting experience (Python experience a plus)
Familiarity with Role Based Access Control
Understanding of Cloud IAM concepts (AWS IAM, Azure AD)

Benefits

Paid Vacation/Sick Time
401K with Company Match
Medical, Dental and Vision Benefits
Disability Benefits
Health Savings Account
Flexible Spending Account
Life Insurance
Parental Leave
Employee Assistance Program
Associate Volunteer Program

Position Details

Exempt from timekeeping requirements under the Fair Labor Standards Act; not eligible for overtime pay
Onsite role, now or in the near future
Regular work hours, including full days in the office three or more days a week
Manager sets the work schedule, including in-office expectations
No relocation assistance provided; relocation would be at your expense
Available locations: Birmingham, AL; Atlanta, GA; Nashville, TN; or Charlotte, NC
No work visa sponsorship for this position at this time
Applicants must be currently authorized to work in the United States full-time
May be filled at a higher level depending on qualifications and relevant experience

Compensation

USD 89,329 - 122,940 per year

Location

Riverchase Operations Center, Hoover, Alabama
Nashville, TN (onsite)

View full job page →

Today

Senior Security Engineer II

Strava San Francisco, CA

San Francisco, CA

Today

$230k - $250k/yr Full time Senior Application Security Ci/cd Security

Apply Now

Job Description

Senior Security Engineer II role on Strava’s Security Team in San Francisco (hybrid) focused on securing applications and infrastructure across regions with proactive, automated risk reduction.

Responsibilities

Help protect a platform used by millions of athletes by ensuring Strava applications and infrastructure are secure, resilient, and compliant across regions.
Partner with Engineering, Infrastructure, and Security teams to design and implement secure architectures and development practices.
Drive high-leverage improvements to how application and infrastructure risks are managed in the US and EU, with remediation that is fast, accurate, and consistent.
Build automated workflows to identify vulnerabilities early, enforce secure configurations, and strengthen CI/CD and cloud security controls.
Coordinate with the global security team on incident response, vulnerability triage, and remediation validation.

Requirements

Highly self-motivated and detail-oriented, with strong ownership of Strava’s application, infrastructure, and network security posture.
Ability to drive secure-by-design practices across engineering teams, including threat modeling, architecture reviews, and vulnerability management.
Comfort applying generative AI tools to daily work.
Partner effectively with Engineering and Infrastructure to embed automated security checks into CI/CD pipelines and infrastructure-as-code deployments.
Hands-on experience in application and infrastructure security, including code review, threat modeling, and securing cloud-native environments (AWS preferred).
Experience designing or implementing automated security controls in CI/CD pipelines using tools such as GHAS, Snyk, Semgrep, Trivy, etc.
Understand securing containerized and distributed environments, including Kubernetes, IAM, and network segmentation.
Capability to run vulnerability management end-to-end, from detection and prioritization through engineering remediation.
Collaborative and pragmatic approach, able to influence engineering teams through partnership, technical credibility, and clear communication.

Technologies

AWS
GHAS
Snyk
Semgrep
Trivy
Kubernetes
IAM
CI/CD
Infrastructure-as-code
Generative AI

Location

San Francisco, CA (hybrid)

Employment Type

Full time

Compensation

USD 230,000 - 250,000 per year
Offers equity
Base compensation range only; excludes equity and benefits
Recruiter can share details about the full compensation package during hiring

About Strava

Strava is the app for active people.
Over 200 million athletes in more than 185 countries.
This role is on the Strava Security Team, which protects Strava’s people, business, and data through integrated, proactive security practices.

View full job page →

Today

Cyber Security Engineer I

Textron Systems Hunt Valley, MD

Hunt Valley, MD

Today

$79k - $119k/yr Full time Cyber Security Engineer Cybersecurity Tools Engineer

Apply Now

Job Description

Textron Systems offers an onsite role in Hunt Valley, MD supporting cybersecurity engineering for technologies used to protect the warfighter. You will work in an engineering environment that uses process to guide day-to-day work, with opportunities to contribute to assessments and authorization efforts aligned to RMF. Flexible work schedules, education support, training for DoDD 8140.01 / DoD 8570.01-M certification, wellness benefits, and company-funded retirement contributions are included.

Compensation: USD 79,300 - 119,000 per year.

Responsibilities

Provide cybersecurity engineering support across next-generation technologies and proven platforms that support and protect the warfighter
Support the Cyber Security team in assessment and authorization activities for products in accordance with Risk Management Framework (RMF), working toward Interim Authorization To Test (IATT) or Authorization To Operate (ATO)
Run and interpret results from vulnerability and compliance efforts using tools such as ACAS, Nessus, EvaluateSTIG, NMAP, and SCC, including in-depth analysis against STIGs and SRGs
Develop remediation and mitigation plans and create implementation packages for those plans
Occasionally travel to support cybersecurity activities (less than 10%)
Work effectively both independently and as part of a cohesive team using established process to manage daily responsibilities

Requirements

Must hold a bachelor’s or master’s degree in computer science/Cybersecurity/Information Assurance/Computer Engineering/Information Systems or a related field
Basic understanding of technical writing
Ability to obtain a U.S. government Secret security clearance
Ability to obtain a DoDD 8140.01 / DoD 8570.01-M IAT II or higher certification (examples include Security+, SSCP, CySA+, CCNA Security, or GSEC) within the first six months following employment

Education, Tools, and Technologies

Work may involve Windows and Linux environments and align with security engineering processes using ACAS, Nessus, EvaluateSTIG, NMAP, SCC, STIGs, SRGs, and RMF, along with certification requirements under DoDD 8140.01 and DoD 8570.01-M.

Benefits

Flexible Work Schedules
Education Assistance
Career Development & Training Opportunities, including support for DoDD 8140.01 / DoD 8570.01-M certification preparation labor, exam, and continuing education (CEU/CPE)
Wellness Program including Fitness Reimbursement
Medical, Dental, Vision & 401(K) with Company Funding
Paid Parental Leave

AI Readiness

Textron Systems expects employees to use AI-enabled tools responsibly and effectively. Candidates should be comfortable learning and applying these tools, evaluating AI-generated output with sound judgment, and using AI in line with company policy and ethical standards. Prior experience with specific tools is not required; curiosity, adaptability, and good judgment are valued.

View full job page →

Today

Senior Infrastructure Security Engineer / Systems & Storage Administrator

NextGen Solutions Corp Washington, DC

Washington, DC

Today

$80 - $100/hr Contract Senior Backup And Disaster Recovery Cloud Platforms

Apply Now

Job Description

NextGen Solutions Corp is hiring a Senior Infrastructure Security Engineer / Systems & Storage Administrator for a hybrid role serving the DMV area from Washington, DC. This contract position offers an hourly rate of $80.00 to $100.00 and a consistent schedule of 40 hours per week, with work supported remotely in Washington, DC 20024.

You will help safeguard IT infrastructure through proactive security strategies, incident response support, and hands-on management of complex systems and storage solutions, including on-premises and cloud environments using Azure.

Responsibilities

Identify network problems and recommend improvements to support optimal performance.
Monitor and analyze data traffic patterns within the OCFO Network infrastructure.
Improve security by staying current on latest threats, including worms and malware, and advise on deterrence.
Enhance network reliability through security and infrastructure actions.
Develop strategic systems architecture plans based on enterprise needs.
Support storage infrastructure, including NetApp environments and technologies such as virtualization/arrays, FC/FCOE, NFS, and iSCSI.
Design and administer VMware Infrastructure, including integration with SAN for vMotion and VMware SRM multi-site administration.
Apply advanced disaster recovery and business continuity knowledge, including the processes and tools required.
Manage Active Directory for operational stability, maintenance, and continuity.
Design and build solutions using on-premises computer, networking, and storage technologies, with cloud design and support for large-scale projects in Azure.
Configure routers, switches, firewalls, and other appliances in compliance with OCFO security standards.
Monitor perimeter security controls to help prevent breaches and safeguard information.
Determine enterprise information assurance and security standards, and develop and implement security standards and procedures.
Coordinate, develop, and evaluate organizational security programs; recommend information assurance and security solutions aligned to customer requirements.
Identify, report, and resolve security violations.
Establish and satisfy information assurance and security requirements based on analysis of user, policy, regulatory, and resource demands.
Support customers at the highest level in developing and implementing doctrine and policies.
Apply security expertise across government and commercial common user systems, plus dedicated systems requiring specialized security features and procedures.
Perform analysis, design, and development of security features for system architectures, including defining security requirements for mainframes, workstations, and personal computers.
Analyze general information assurance technical issues and provide basic engineering and technical support.
Conduct vulnerability and risk analyses across all phases of the system development life cycle, and ensure information systems remain functional and secure.

Requirements

16+ years developing, maintaining, and recommending enhancements to IS policies/requirements (Required).
16+ years performing vulnerability/risk analyses of computer systems and applications (Required).
16+ years identifying, reporting, and resolving security violations (Required).
Experience in complex Enterprise-level projects (Required).
Expert understanding of Windows server operating systems (Required).
Knowledge of on-premises and cloud security productions (Required).
Good understanding of IP Networks/Security (Required).
Extensive experience troubleshooting NetApp SAN (Required).
Hands-on experience managing storage on VMware ESXi (Required).
Good understanding of server/endpoint operating systems (Required).
Windows 2016 AD Enterprise troubleshooting experience (Required).
In-depth experience with Disaster Recovery & Avoidance planning (Required).
Cloud Azure (Highly Desired).
In-depth knowledge of SAN replication/Disaster Recovery (Highly Desired).
VMware Site Recovery Manager experience (Highly Desired).
Excellent understanding of troubleshooting IT infrastructure (Highly Desired).
Bachelor’s Degree in IT or related field or equivalent experience (Required).
Master’s Degree in IT or related field (Highly desired).
Security CISSP, Security+, CEH (Required).