Engineering

Engineering Cybersecurity Jobs

35 jobs found

Today

Lead Application Security Engineer

Carter's Atlanta, GA

Atlanta, GA

Today

Full time Senior Api Security Application Security

Apply Now

Job Description

What Carter's offers

This onsite leadership role places you at the helm of the enterprise AppSec program from a cybersecurity standpoint, with hands-on responsibilities in AI security. Based in Atlanta, GA, you will collaborate closely with engineering leadership to embed security into system design and SDLC processes, driving measurable improvements in risk reduction and security maturity. The position provides a clear path to influence architecture decisions, security tooling, and governance across the organization, while representing IT Security in audits and cross-functional planning.

Responsibilities

Define and own the enterprise application security architecture, standards, and secure-by-default patterns
Establish and maintain the AppSec tooling strategy, assess vendors, and champion adoption across engineering teams
Lead threat modeling sessions for critical applications and new product features
Serve as the final technical authority on AppSec decisions, including security design reviews and architecture signoffs
Oversee advanced secure code reviews, SAST/DAST assessments, and manual penetration testing across web, mobile, and API surfaces
Own API security standards for REST and GraphQL, enforcing OWASP API Top 10 controls and authentication/authorization design patterns
Drive vulnerability triage, risk prioritization, and remediation accountability across development teams at scale
Own the DevSecOps toolchain, designing, deploying, and maturing security gates within enterprise CI/CD pipelines
Partner with engineering leadership to embed security into system design, SDLC processes, and platform decisions
Continuously improve AppSec metrics, dashboards, and KPIs to demonstrate program maturity and risk reduction
Hands-on development and deployment of AI-powered security tooling and automation, such as AI-assisted code review or threat detection
Secure AI/ML integrations and connectors by assessing prompt injection, data leakage, model supply chain, and third‑party risks
Develop and enforce AI governance policies, defining acceptable use, security review gates, and risk acceptance criteria
Represent the IT Security team in architecture reviews, cross-functional planning, and executive risk reporting
Maintain security policy and standards documentation relevant to application security, AI use, and API governance
Lead AppSec representation in PCI DSS, NIST, and OWASP compliance audits and evidence collection

Requirements

5+ years in application security, software engineering, or secure code review
Strong proficiency in one or more languages such as Python, Java, JavaScript, or Go, with capability for deep code review and threat modeling
Experience with SAST/DAST tooling (Snyk, SonarQube, Semgrep, Checkmarx, Burp Suite, OWASP ZAP) and ownership of AppSec program design
Effective communicator with the ability to present to multilevel stakeholders
Demonstrated ability to meet deadlines and collaborate with management across disciplines
Proven collaboration with cross-functional teams
Willingness to perform on-call duties during off-hours and holidays
Adaptable and flexible attitude toward changing business needs
Bachelor's degree in computer science or a related field
Experience leading or conducting red team, penetration testing, or adversarial simulations
Experience designing and scaling security observability pipelines, including log analysis and application-layer telemetry
Working knowledge of PCI-DSS, NIST, OWASP, and other frameworks; experience representing security in audits
Proven track record securing cloud-native or hybrid-cloud environments (AWS, Azure, or GCP)
Hands-on experience building, deploying, or integrating AI/ML tools, with ability to assess and govern their security posture (prompt injection, data leakage, model supply chain risks)
Ability to define and enforce security standards across engineering organizations; prior experience owning a security capability or domain
Security certifications such as Security+, ISC2 CC, CompTIA A+, CompTIA Network+, SSCP, CCT, GWEB, CSSLP, CEH, or OSCP

Technologies

Python
Java
JavaScript
Go
Snyk
SonarQube
Semgrep
Checkmarx
Burp Suite
OWASP ZAP
REST
GraphQL
AWS
Azure
GCP
PCI-DSS
NIST
OWASP

Travel

Open to travel between Carter's offices as needed

View full job page →

Today

Virtru Security Engineer

Booz Allen Hamilton Fort Meade, MD

Fort Meade, MD

Today

$99k - $225k/yr Full time Ansible Application Security Automation

Apply Now

Job Description

Benefits

Health, life, disability, financial, and retirement benefits
Paid leave
Professional development
Tuition assistance
Work-life programs
Dependent care
Recognition awards program

The Opportunity

This onsite role in Fort Meade, MD focuses on zero trust across multi classification networks. You will support the cyber architecture development, implementation, and sustainment, collaborating with stakeholders and engineering teams to understand the details and dependencies of critical processes and user roles.

You will drive security compliance initiatives and automate control validation across cloud environments using Infrastructure as Code, including Terraform and Ansible. In addition, you will build security automation for CI/CD pipelines, conduct regular security reviews and risk assessments of cloud infrastructure and applications, and partner with development and operations teams to implement security controls without slowing delivery. You will develop and maintain security monitoring capabilities and respond to security events, plus create and maintain security documentation, training, and guidelines for engineering teams.

Responsibilities

Contribute to cyber architecture development, deployment, and sustainment across networks with different classifications
Collaborate with stakeholders and engineering teams to analyze critical processes and user roles
Lead security compliance programs and automated validation across cloud environments with Infrastructure as Code
Develop security automation for CI/CD pipelines, including vulnerability scanning and compliance checks
Perform ongoing security reviews and risk assessments of cloud infrastructure and applications
Work with development and operations teams to implement security controls without hindering velocity
Design and maintain security monitoring solutions and respond to security events
Create and maintain security documentation, training materials, and engineering guidelines

Requirements

3+ years of experience designing, deploying, and configuring data security solutions
Experience with data security tools, including Virtru
Experience with data-centric security models and ongoing maintenance
Experience designing, implementing, configuring, operating, or testing IT systems or security infrastructure
Experience deploying and troubleshooting Kubernetes and Docker
Experience with data tagging and classification
Knowledge of Zero Trust principles and solutions
Ability to travel to CONUS and OCONUS locations up to 20% of the time
Active Secret clearance
High school diploma or GED

Technologies

Virtru
Terraform
Ansible
Kubernetes
Docker
Varonis
BigID
Titus Data Classification
CNAP
SIEM
CSPM
CWPP
Go
Python
Node.js

Location

Fort Meade, MD (onsite)

Clearance

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information. Secret clearance is required.

Compensation

Salary is determined by factors including location, education, knowledge, skills, competencies, and experience. The projected range for this position is $99,000.00 to $225,000.00 annually. This posting will close within 90 days from the posting date.

Identity Statement

As part of the hiring process, an identity verification process using advanced biometrics and artificial intelligence may be employed to ensure authenticity. You may be required to be on camera during interviews and assessments, and we may take your picture to verify identity and prevent fraud.

CANDIDATE AI USAGE POLICY

AI tools may be used in daily workflows, but a fair candidate process is maintained by evaluating your skills and knowledge. The use of AI or other tools to assist with interview responses is prohibited unless explicit permission is provided.

Work Model

Onsite roles are performed primarily at a Booz Allen facility or customer site, with potential in person requirements at Booz Allen or customer facilities as needed.

Commitment to Non-Discrimination

All qualified applicants will be considered for employment without regard to disability, protected veteran status, or any other status protected by applicable law.

View full job page →

Today

Space Systems Security Engineer

Booz Allen Hamilton Colorado Springs, CO

Colorado Springs, CO

Today

$113k - $257k/yr Full time Engineer Engineering Information Security

Apply Now

Job Description

Booz Allen Hamilton offers a mission-focused environment where advanced space systems security meets real world impact. This onsite role in Colorado Springs supports the US Space Force by leading cyber risk management and secure-system design for Space Mission Systems, guiding teams to balance security with mission needs. The position offers a competitive salary range of USD 112,800 to 257,000 per year, along with a robust set of benefits and a path for professional growth.

Our benefits package prioritizes your health, financial security, and continuous development, including health benefits, life insurance, disability benefits, financial benefits, retirement benefits, paid leave, professional development, tuition assistance, work-life programs, dependent care, and a recognition awards program.

Responsibilities

Lead cross-functional teams in designing systems that mitigate risk to Space Mission Operations.
Coordinate with development teams to identify the right mix of tools and techniques, translating customer IT needs into secure, effective solutions.
Advise on modern security approaches, moving beyond legacy models to align with industry directions.
Guide risk management by presenting alternatives and tailoring solutions to maintain balance between security and mission requirements.

Requirements

8+ years of experience supporting cyber risk management on space mission systems through systems engineering and design.
5+ years of experience working with space transport networks.
4+ years of experience leading teams to evaluate and prioritize cyber threats to inform space mission owners on design and engineering decisions.
Ability to communicate cyber risks in terms of engineering and programmatic risk.
TS/SCI clearance.
Bachelor’s degree in Engineering, Mathematics, Computer Science, or Cybersecurity.
DoD 8140 Intermediate Certification such as Security+, CCSP, or GSEC.

Technologies

Jira
Confluence
MS Teams

Nice to have

10+ years of experience supporting cyber risk management on space mission systems through systems engineering and design.
4+ years of experience executing process improvement.
Knowledge of DoD cyber risk management processes such as RMF or the Cybersecurity Framework.
Ability to manage team activities using Jira, Confluence, and MS Teams.
Master's degree in Engineering, Mathematics, Computer Science, or Cybersecurity.
DoD 8140 Advanced Certification such as CISSP, GDSA, or CCNP.

Work model

Onsite: work will primarily be performed at a Booz Allen office or customer facility, where employees collaborate directly with colleagues and customers as required by the role.

View full job page →

1d ago

Senior Security Engineer

The Hartford Charlotte, NC

Charlotte, NC

1d ago

$128k - $193k/yr Full time Senior Ai Security Analytics

Apply Now

Job Description

The Hartford is seeking a Senior Security Engineer to lead AI driven cyber security initiatives within the Enterprise Cyber Focal Office. This role focuses on applying advanced AI and machine learning solutions across application security, vulnerability management, and enterprise resilience, with a hybrid in office schedule in Charlotte, NC; Columbus, OH; or Hartford, CT.

Responsibilities

Act as a trusted technical advisor to the Enterprise Cyber Focal Lead, translating security strategy into scalable, high impact technical solutions.
Design and deploy complex cyber solutions that leverage AI and ML to enhance threat detection, vulnerability management, risk prioritization, and automation.
Oversee end to end solution architecture for cyber platforms and tooling, including design reviews, implementation, and operational readiness.
Apply full stack application development expertise to deliver secure, resilient, and high performing cyber applications and services.
Architect and deliver cloud native solutions on AWS, following well engineered security principles.
Hands on AI/ML work, with a preference for GCP, to build and operationalize intelligent security capabilities such as analytics, anomaly detection, automation, and decision support.
Collaborate with data, AI, and platform teams to ensure solutions are scalable, secure, and production ready.
Demonstrate hands on experience with enterprise security, logging, and monitoring platforms such as Splunk, Dynatrace, Orca Security, and Akamai to drive threat detection and observability at scale.
Leverage expertise in security telemetry, application logging, and runtime monitoring to design and optimize application level security across the enterprise.
Utilize GitHub Copilot as a productivity and quality accelerator for secure software development while maintaining enterprise security standards.
Own and lead application vulnerability management, including tooling, integrations, automation, and remediation workflows.
Partner with the CISO and Engineering organization to modernize vulnerability intake, prioritization, and reporting using AI and data driven techniques.
Embed vulnerability remediation within SDLC and CI/CD pipelines in collaboration with application teams.
Serve as a trusted partner to Security, Platform, Reliability, and Software Engineers to enable secure and resilient delivery of applications.
Define and promote application security best practices, including secure coding, dependency management, secrets handling, logging, and monitoring.
Influence engineering teams through standards and reference architectures with practical guidance rather than mandates.
Provide technical leadership to offshore engineering teams, including design guidance, code reviews, mentoring, and delivery oversight.
Ensure high engineering quality, operational stability, and adherence to security and compliance standards.
Contribute to roadmap planning, prioritization, and ongoing improvement of cyber platforms and capabilities.

Requirements

Six plus years of experience in cyber focused application development with time in technical leadership roles.
Proven security oriented application development experience across frontend, backend, APIs and integrations, including modern frameworks such as Angular, React, or Vue.js with CSP and XSS prevention, and Node.js or NestJS using security modules like Helmet, Jose, and express-validator.
Proven track record designing and delivering enterprise scale cyber, security, or application platforms.
Experience leading distributed or offshore technical teams, and working with logging and monitoring tools such as Splunk, Dynatrace, Akamai, or similar.
Ability to operate as a trusted partner and influencer across Cyber, Engineering, and Infrastructure groups.
Experience across logging and monitoring, edge and application security, AI assisted development, ITSM workflows, CI/CD pipelines, and automated deployment platforms to sustain scalable and secure engineering practices.
Knowledge of application security, vulnerability management, and secure SDLC practices is preferred.
Expertise in API design (REST or GraphQL), database technologies (SQL and NoSQL), and cloud native development on Azure or AWS. A full stack tech lead is proficient in CI/CD, infrastructure as code, containerization (Docker, Kubernetes), and secure coding with hands on experience integrating security, logging, monitoring, and performance tools.
Strong problem solving, system level thinking, and ability to collaborate across product, security, and operations teams.
Extensive hands on experience with AWS cloud architecture and related services. Demonstrated AI/ML implementation experience with a preference for GCP (Vertex AI, BigQuery, ML pipelines or equivalent).
Authorization to work in the United States without company sponsorship is required.

Technologies

AWS, GCP, Vertex AI, BigQuery, Azure
Frontend frameworks: Angular, React, Vue.js
Backend & Security: Node.js, NestJS, Helmet, Jose, express-validator
API design: REST, GraphQL
Databases: SQL, NoSQL
Cloud and DevOps: Docker, Kubernetes, CI/CD, Infrastructure as Code
Security and Observability: Splunk, Dynatrace, Orca Security, Akamai
AI/ML tooling and platforms: Vertex AI, BigQuery, AI/ML pipelines
Code assistance: GitHub Copilot

Benefits

Short term or annual bonuses
Long term incentives
On the spot recognition

Required Certifications

One or more security certifications focused on application security (examples include CSPM, CSSM, CISSP, CISM, CSSLP, CCSP, CompTIA, ISC2, GIAC, EC Council)
One or more cloud security certifications, such as AWS Certified Security Specialty and Google Professional Cloud Security Engineer

Preferred Certifications

AI or ML certifications from AWS, GCP, or equivalent
Additional AWS certifications such as Solutions Architect or DevOps Engineer

Compensation

The listed base pay range reflects market analysis for similar roles. Actual base pay may vary based on factors including performance, skills, and demonstrated competencies. The base pay is one component of The Hartford's total compensation package, which may also include short term or annual bonuses, long term incentives, and on the spot recognition. The Hartford is an Equal Opportunity Employer and considers applicants without regard to sex, race, color, veterans status, disability, sexual orientation, gender identity or expression, religion, or age.

View full job page →

1d ago

Lead Cybersecurity Architect

JPMorganChase Chicago, IL

Chicago, IL

1d ago

$133k - $185k/yr Full time Agent Ai Enabled Security Ai Security

Apply Now

Job Description

Lead Cybersecurity Architect role at JPMorgan Chase in Chicago, onsite; salary range USD 133,000 to 185,000 per year.

Responsibilities

Collaborate with technical teams and business stakeholders to shape approaches that meet current and future cybersecurity needs.
Define the technical target state for the cybersecurity product and drive delivery of the strategic plan.
Develop software and leverage firmwide AI/ML tools to enhance secure design and threat assessment workflows.
Own and guide SDRs for AI/ML platforms, agentic systems, and MCP integrations; document decisions, required controls, and risk acceptances.
Apply enterprise authorized AI capabilities to support architecture workflows with strong validation practices and awareness of data sensitivity.
Evaluate and validate AI-assisted security recommendations before adoption, escalating uncertainty and aligning outcomes with security, resiliency, and auditability expectations.
Define and govern secure reference architectures for agentic systems and MCP-enabled workflows, covering isolation, segmentation, encryption, and identity management.
Specify security requirements for authentication, authorization, data classification, and encrypted communications for MCP servers and agentic workflows.
Develop and maintain threat models for agentic systems, MCP servers, and LLM Suite integrations, mitigating risks such as prompt injection, data leakage, and supply chain threats.

Requirements

5+ years of cybersecurity architecture experience with hands-on delivery of enterprise-grade solutions and controls.
Advanced proficiency in one or more programming languages.
Hands-on experience coding and using AI/ML and agents to enhance security assessments; willingness to work on proofs of concept for new ideas.
Proven ownership of Security Design Reviews, security requirements, and architecture governance for large-scale platforms.
Expertise in threat modeling and mitigating AI/ML risks such as prompt injection, data poisoning, model extraction/inversion, training data leakage, and third‑party/supply‑chain exposure.
Strong practical depth across cloud and application security: IAM/least privilege, encryption and key management, secrets, network segmentation, secure APIs, logging/monitoring, and secure SDLC/CI/CD.
Experience securing agentic AI systems and tool integrations, including MCP-based tool/data connectivity, with the ability to set guardrails for tool access, data handling, and runtime controls.
Proficiency across all phases of the Software Development Life Cycle.
Demonstrated ability to apply software applications and processes within a technical discipline such as public cloud, artificial intelligence, machine learning, or mobile.
Deep knowledge of the financial services industry, IT systems, and experience communicating with senior leaders.
Ability to evaluate current and emerging technologies to recommend future-state architecture.

Technologies

LLM Suite
MCP
AI/ML tools

Benefits

Comprehensive health care coverage
On-site health and wellness centers
Retirement savings plan
Backup childcare
Tuition reimbursement
Mental health support
Financial coaching
Commission-based pay
Discretionary incentive compensation
Cash and/or forfeitable equity

View full job page →

1d ago

Cloud Security Engineer (Secret Clearance)

Deloitte Baltimore, MD

Baltimore, MD

1d ago

$108k - $188k/yr Full time Azure Cloud Cloud Native

Apply Now

Job Description

Cloud Security Engineer (Secret Clearance) in Baltimore, onsite, concentrates on designing, implementing, and strengthening security controls across AWS, GCP, and Azure.

Responsibilities

Evaluate cloud environments across AWS, Google Cloud Platform, and Microsoft Azure to surface security risks, control gaps, and misconfigurations.
Design, deploy, and continuously improve cloud security controls including identity and access management, network security, encryption, logging, and monitoring.
Provide support for cloud security architecture reviews of new and existing solutions and offer recommendations aligned to security and compliance requirements.
Investigate cloud security events, determine root causes, and assist remediation activities with engineering and operations teams.
Create and maintain technical documentation, standards, baselines, and reports related to cloud security controls and cloud risk management.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field
Active Secret Clearance
Local to the DMV area and able to work onsite up to 5 days a week
Ability to travel roughly 20% of the time, depending on client engagements
2+ years of experience in cloud security, cloud engineering, or cloud infrastructure
Experience implementing or assessing security controls in AWS, GCP, and Azure
Experience with cloud identity and access management, network security, encryption, logging, monitoring, and configuration management
Experience using cloud-native security tools, security posture management tools, or infrastructure as code tooling
Legally authorized to work in the United States without sponsorship now or in the future

Technologies

AWS, Google Cloud Platform, Microsoft Azure
Cloud-native security tools, security posture management tools, infrastructure as code tools
Terraform, Python, PowerShell, Bash, Kubernetes
NIST, CIS, ISO

Benefits

Discretionary annual incentive program

The Team

Deloitte's Government & Public Services GPS practice focuses on delivering impact for federal, state, and local government clients as well as public higher education institutions. The team blends people, ideas, technology, and outcomes to help clients anticipate disruption and fulfill their mission.

Our Enterprise Security offering embeds security across digital transformations, safeguarding a client's technical backbone while enabling secure progress and innovation.

View full job page →

3d ago

Lead Infrastructure Engineer (Microsoft Cloud & Cybersecurity)

PCG Systems Denver, CO

Denver, CO

3d ago

$110k - $125k/yr Full time Azure Cloud Cloud Platform

Apply Now

Job Description

In Denver, PCG Systems is seeking a Lead Infrastructure Engineer who specializes in Microsoft Cloud and cybersecurity. This senior role blends hands-on architectural work with mentorship, guiding multi-client environments through cloud modernization, security hardening, and operational excellence. You will collaborate with business leaders to translate technology initiatives into reliable, secure infrastructure.

Compensation

USD 110,000 - 125,000 per year

Location

Denver, CO (hybrid)

Responsibilities

Architect, deploy, and support Microsoft 365 environments
Design, implement, and support Microsoft Azure infrastructure
Design and administer Microsoft Entra ID and Microsoft Intune
Lead Microsoft 365 tenant migrations and cloud modernization projects
Design, configure, and support Fortinet security solutions
Configure business networking including VLANs, routing, switching, VPNs, wireless, and network security
Implement and support SentinelOne, Check Point Harmony Email & Collaboration, and other cybersecurity solutions
Design and support cloud backup and disaster recovery solutions
Develop PowerShell automation and scripting to improve efficiency
Lead infrastructure projects from planning through implementation
Troubleshoot and resolve complex Tier III infrastructure issues
Mentor engineers and help develop technical standards
Improve documentation and engineering processes within Hudu
Work directly with business owners and executive leadership on strategic technology initiatives

Requirements

7+ years of professional IT experience
5+ years working for a Managed Services Provider (MSP)
Demonstrated experience leading Microsoft 365 migrations
Advanced Microsoft Azure administration experience
Advanced Fortinet administration experience
Strong networking design and troubleshooting experience
Experience leading infrastructure projects
Excellent written and verbal communication skills
Strong documentation habits
Valid driver's license and reliable transportation
Ability to travel throughout the Denver Metro area as needed
Bachelor's degree in Computer Science or related field

Technical Proficiencies

Microsoft 365, Exchange Online, SharePoint Online, Microsoft Teams, OneDrive, Microsoft Entra ID, Microsoft Intune, Microsoft Azure, Azure Virtual Machines, Conditional Access, Multi-Factor Authentication, Microsoft Defender, Microsoft 365 Tenant Migrations, Fortinet Firewalls, FortiSwitch, FortiAP, VLAN Design, Routing & Switching, VPN Configuration, DNS, DHCP, Wireless Networking, Network Security Best Practices, Windows Server, Active Directory, Group Policy, Hyper-V and/or VMware, Storage & Virtualization, Server Migrations, SentinelOne, Check Point Harmony Email & Collaboration (Avanan), Endpoint Detection & Response (EDR), Email Security, Identity Security, Vulnerability Remediation, Security Hardening, Incident Response, Cove Data Protection, Datto BCDR, Axcient, Veeam, Microsoft 365 Backup Solutions, Cloud-to-Cloud Backup, Disaster Recovery Planning & Testing, Halo PSA (Preferred), NinjaOne (Preferred), Hudu, ConnectWise Control, ConnectWise Manage, Datto RMM, AutoTask, N-able, PowerShell, Microsoft Graph, Scripting, Process Automation, Terraform, Ansible, Puppet, Chef, MySQL, PostgreSQL, Oracle Database, Microsoft SQL Server, RESTful APIs, Web Services, VMware, OpenStack, Citrix, Rackspace, Docker, Kubernetes, Linux, Windows, Bash, Python, Go, Ruby, Jenkins, CI/CD

Benefits

Health insurance
401(k)
401(k) matching
Flexible schedule
Paid time off
Paid holidays
Tuition reimbursement
Monthly Healthcare Reimbursement
Company-provided equipment
Company-paid certifications and professional development
Hybrid work environment

Application Questions

How many M365 tenant migrations have you personally led?
How many Fortinet firewall/network deployments have you personally completed?
How would you rate your Microsoft Azure administration experience? (Intermediate, Advanced, Expert)
How many years have you administered Microsoft Intune?
Which PSA and RMM platforms have you used?
Describe the most technically complex infrastructure project you personally designed and implemented
Describe a PowerShell script or automation you've written that improved operations or eliminated manual work
What is your current compensation and desired compensation?