Information Technology (IT)

Information Technology (IT) Cybersecurity Jobs

304 jobs found

Today

Lead Application Security Engineer

Carter's Atlanta, GA

Atlanta, GA

Today

Full time Senior Api Security Application Security

Apply Now

Job Description

What Carter's offers

This onsite leadership role places you at the helm of the enterprise AppSec program from a cybersecurity standpoint, with hands-on responsibilities in AI security. Based in Atlanta, GA, you will collaborate closely with engineering leadership to embed security into system design and SDLC processes, driving measurable improvements in risk reduction and security maturity. The position provides a clear path to influence architecture decisions, security tooling, and governance across the organization, while representing IT Security in audits and cross-functional planning.

Responsibilities

Define and own the enterprise application security architecture, standards, and secure-by-default patterns
Establish and maintain the AppSec tooling strategy, assess vendors, and champion adoption across engineering teams
Lead threat modeling sessions for critical applications and new product features
Serve as the final technical authority on AppSec decisions, including security design reviews and architecture signoffs
Oversee advanced secure code reviews, SAST/DAST assessments, and manual penetration testing across web, mobile, and API surfaces
Own API security standards for REST and GraphQL, enforcing OWASP API Top 10 controls and authentication/authorization design patterns
Drive vulnerability triage, risk prioritization, and remediation accountability across development teams at scale
Own the DevSecOps toolchain, designing, deploying, and maturing security gates within enterprise CI/CD pipelines
Partner with engineering leadership to embed security into system design, SDLC processes, and platform decisions
Continuously improve AppSec metrics, dashboards, and KPIs to demonstrate program maturity and risk reduction
Hands-on development and deployment of AI-powered security tooling and automation, such as AI-assisted code review or threat detection
Secure AI/ML integrations and connectors by assessing prompt injection, data leakage, model supply chain, and third‑party risks
Develop and enforce AI governance policies, defining acceptable use, security review gates, and risk acceptance criteria
Represent the IT Security team in architecture reviews, cross-functional planning, and executive risk reporting
Maintain security policy and standards documentation relevant to application security, AI use, and API governance
Lead AppSec representation in PCI DSS, NIST, and OWASP compliance audits and evidence collection

Requirements

5+ years in application security, software engineering, or secure code review
Strong proficiency in one or more languages such as Python, Java, JavaScript, or Go, with capability for deep code review and threat modeling
Experience with SAST/DAST tooling (Snyk, SonarQube, Semgrep, Checkmarx, Burp Suite, OWASP ZAP) and ownership of AppSec program design
Effective communicator with the ability to present to multilevel stakeholders
Demonstrated ability to meet deadlines and collaborate with management across disciplines
Proven collaboration with cross-functional teams
Willingness to perform on-call duties during off-hours and holidays
Adaptable and flexible attitude toward changing business needs
Bachelor's degree in computer science or a related field
Experience leading or conducting red team, penetration testing, or adversarial simulations
Experience designing and scaling security observability pipelines, including log analysis and application-layer telemetry
Working knowledge of PCI-DSS, NIST, OWASP, and other frameworks; experience representing security in audits
Proven track record securing cloud-native or hybrid-cloud environments (AWS, Azure, or GCP)
Hands-on experience building, deploying, or integrating AI/ML tools, with ability to assess and govern their security posture (prompt injection, data leakage, model supply chain risks)
Ability to define and enforce security standards across engineering organizations; prior experience owning a security capability or domain
Security certifications such as Security+, ISC2 CC, CompTIA A+, CompTIA Network+, SSCP, CCT, GWEB, CSSLP, CEH, or OSCP

Technologies

Python
Java
JavaScript
Go
Snyk
SonarQube
Semgrep
Checkmarx
Burp Suite
OWASP ZAP
REST
GraphQL
AWS
Azure
GCP
PCI-DSS
NIST
OWASP

Travel

Open to travel between Carter's offices as needed

View full job page →

Today

Staff Application Security Engineer

Publicis Groupe Holdings B.V Chicago, IL

Chicago, IL

Today

Full time Senior Ai Security Application Security

Apply Now

Job Description

Publicis Groupe Holdings B.V is seeking a Staff Application Security Engineer to provide strategic leadership for application security platforms and to weave security into the software development lifecycle. This onsite Chicago-based role collaborates with Product, Engineering, and embedded Security Champions to scale secure-by-design practices using AI-enabled engineering while upholding enterprise security standards.

Responsibilities

Oversee Epsilon's application security platforms, directing configuration, adoption, and effective use by Product and Engineering teams, with Veracode, SonarQube, and Wiz experience a plus.
Guide and review the analysis of security findings, partnering with Security Champions and engineering teams to interpret results, prioritize risk, and recommend remediation strategies.
Collaborate with Product, Engineering, and embedded Security Champions to ensure security expectations are understood, consistently applied, and aligned with Epsilon’s security policies and standards.
Integrate AI into Application Security to enable Secure-by-Design Engineering, driving the adoption of AI-enabled development practices that embed security throughout the software development lifecycle; guide teams in using AI tools to generate, review, and remediate code securely, ensuring outputs are governed and validated and aligned with enterprise standards; expand security beyond traditional tooling by leveraging AI as a scalable mechanism to improve security.
Serve as a trusted advisor to engineering teams by providing clear guidance, risk context, and actionable recommendations, translating complex security risks into practical, business-relevant decisions rather than conducting security testing directly.
Communicate with confidence and clarity across technical and non-technical audiences, effectively influencing outcomes by articulating security risks, tradeoffs, and recommendations to drive understanding and action.
Produce and deliver monthly KPI-based reporting that highlights trends, risk posture, adoption metrics, and actionable insights for technical stakeholders and executive leadership.
Educate, coach, and enable development teams and embedded Security Champions on secure coding expectations, application security platforms, and Epsilon security policies.
Drive the onboarding of new teams and applications into application security platforms, ensuring consistent implementation, accountability, and long-term adoption.
Build and maintain strong, trust-based relationships across Product, Engineering, and Security to influence outcomes, reinforce shared ownership, and continuously mature application security practices.

Requirements

Strong ability to influence decisions and collaborate across teams.
Analytical mindset with solid problem-solving capabilities.
Demonstrated organizational discipline.
Bachelor’s or Master’s degree in computer science or related field, plus at least five years of hands-on experience in application security or cybersecurity.
Experience with application security testing (SAST, DAST, MAST, RAST, IAST); direct experience in application vulnerability management; strong threat modeling knowledge.
Proficiency with Microsoft Office tools for documentation, reporting, and executive communication.
Experience applying AI-assisted tools to accelerate development, improve code quality, and embed security into the engineering lifecycle; ability to guide AI outputs, validate results, and govern usage to scale secure development.
Proficiency in Bash scripting and experience with Ansible and Terraform for cloud security automation.
Background as a software developer and familiarity with cybersecurity concepts to deliver practical, developer-friendly security guidance to engineering teams.

Technologies

Veracode
SonarQube
Wiz
Bash
Ansible
Terraform
Microsoft Office

View full job page →

Today

Application Security Analyst

Stellantis Auburn Hills, MI

Auburn Hills, MI

Today

Full time Application Security Cybersecurity Tools DevSecOps

Apply Now

Job Description

Stellantis is seeking an Application Security Analyst onsite in Auburn Hills, Michigan. This role offers the chance to shape security across the software development lifecycle, support a Shift Left cybersecurity strategy, and advance DevSecOps practices that integrate security into everyday development. You will collaborate with development teams and help drive secure coding and risk reduction across the organization.

You will collaborate with development, platform, and supplier teams, provide remediation guidance, and help train teams on secure coding and application security practices.

Responsibilities

Perform security testing: SAST, DAST, IAST, mobile security, and dynamic testing
Analyze vulnerabilities and recommend secure coding fixes
Demonstrate vulnerabilities to development teams
Drive remediation efforts to closure
Work within CI/CD pipelines using tools such as Jenkins, GitLab, GitHub Actions, TeamCity; Checkmarx, GitHub Advanced Security, Burp Suite
Integrate security controls into development workflows
Lead Web Application Firewall (WAF) deployment for new and existing apps
Implement application security policies, controls, and standards
Partner with development, platform, and supplier teams
Provide clear remediation guidance
Train teams on secure coding and application security practices
Develop training materials
Conduct security assessments using standard tools
Track and report risks, milestones, deliverables, and status updates
Recommend strategies based on application risk posture

Requirements

Bachelor’s degree in Computer Science, Information Technology, or related field
3+ years of hands-on experience in application security, security testing, and DevSecOps
Application architectures (web, mobile, APIs)
Software development methodologies (Agile, SDLC)
Modern programming languages (Java, C#, Python)
SAST, DAST, IAST, SCA, and mobile security testing tools
Hands-on experience with secure code review in common languages (Java, C#, Python preferred)
Compiled code
Web applications / services
Mobile app development
NIST, ISO 27001
NIST SSDF or similar secure development frameworks
OWASP Top 10 vulnerabilities and mitigation techniques
Common attack vectors (web exploits, DDoS, bot attacks)
Akamai, Cloudflare, AWS WAF, Azure Front Door
AWS, Azure, GCP
Containers (Docker, Kubernetes)
Programming/scripting: Java, JavaScript, SQL, HTML
Scripting languages (Python, Bash preferred)
Strong analytical, problem-solving, and communication skills
Ability to explain technical risks to non-technical audiences
Experience writing security reports and documentation
Ability to work independently and cross-functionally
GIAC GWEB
ISC2 CSSLP
EC-Council CASE
Or equivalent AppSec certifications

Technologies: SAST, DAST, IAST, SCA, Java, C#, Python, JavaScript, SQL, HTML, Bash; Jenkins, GitLab, GitHub Actions, TeamCity; Checkmarx, GitHub Advanced Security, Burp Suite; Akamai, Cloudflare, AWS WAF, Azure Front Door; AWS, Azure, GCP; Docker, Kubernetes; NIST, ISO 27001, NIST SSDF

View full job page →

Today

IT CYBERSECURITY SPECIALIST (CUSTSPT/INFOSEC)

US Defense Information Systems Agency Suffolk, VA

Suffolk, VA

Today

$91k - $118k/yr Full time Information Security Information Technology (IT) InfoSec

Apply Now

Job Description

Onsite in Suffolk, Virginia, this role supports the mission of US Cyber Command through the DISA-Joint Services Provider, focusing on cybersecurity operations. As an IT Cybersecurity Specialist in the Cyber Excepted Service, you will contribute to defense-focused IT support and help safeguard critical systems and data.

Location: Suffolk, VA (onsite). Salary: USD 90,838 - 118,092 per year.

Responsibilities

Analyze and resolve the full spectrum of issues within the activity's operations, routing highly specialized problems to the appropriate technical expert as needed.
Coordinate, implement, and maintain the installation and operation of customer application systems.
Provide guidance to customers and troubleshoot highly complex problems to minimize downtime affecting critical business activities.
Establish and maintain operation schedules; develop and manage customer performance requirements and support policies and procedures.
Apply customer support concepts and methods for troubleshooting and recovering systems and files; configure installed operating systems, network systems, applications, protocols, schedules and equipment to serve as a senior customer technical analyst.

Requirements

Must be a U.S. Citizen.
Males born after 12-31-1959 must be registered or exempt from Selective Service.
National security position requiring access to classified information; favorable suitability review and security clearance are conditions of employment.
Under DoD 8140 policy, complete Foundational Qualifications within 9 months and Residential Qualification requirements within 12 months.
Attention to detail
Customer service
Oral communication
Problem solving
Minimum of 1 year of qualifying IT experience
Qualifying experience includes IT customer service, managing unclassified and classified mobility solutions, laptop imaging and software configuration

This job is open to

The public - U.S. Citizens, Nationals or those who owe allegiance to the U.S.
Clarification from the agency - Open to U.S. Citizens

Additional Information

This position is in the Excepted Service and does NOT convey eligibility to be converted to the Competitive Service; it is being recruited under 10 U.S.C. 1599f into the Cyber Excepted Service (CES) personnel system.
Current Federal Career/Career-Conditional employees will be placed on an Excepted appointment.
The appointment does not confer eligibility for non-competitive conversion to the competitive service.
A 3-year probationary period may be required to evaluate fitness and alignment with public interest.
Telework availability depends on mission requirements and supervisory determination.
Designated positions may require urinalysis for illegal drugs prior to appointment or placement.
The agency may use this announcement to fill additional vacancies within 90 days of the closing date.
Moving costs may be paid.
Tax implications related to relocation reimbursements may apply under the Tax Cuts and Jobs Act of 2017 (RITA eligibility may vary).
Recruitment, relocation, or retention incentives may be authorized.
This position falls under DoD Manual 8140 and may be aligned with future Cyber Workforce requirements.
DoD policy on employment of annuitants applies for hires after November 24, 2003; similar rules may apply for internal transfers.
Veterans' Preference will be applied to preference-eligible candidates as defined by law; documentation may be required.
For more information on the Cyber Excepted Service and veterans' preference, reference official DoD and agency resources.
All applicants are encouraged to apply electronically; assistance is available by phone if online application is not possible.
In some circumstances, the authorized pay may exceed the stated range.

Required Documents

Resume: Two-page maximum. Guidance on the two-page limit is available from official federal hiring resources.
Complete initial Eligibility Questionnaire related to the experience requirements.
SF-50: Current and former federal employees must submit their SF-50 showing the highest grade held on a permanent basis for at least 52 weeks, along with tenure and appointment type.
Veterans Preference Documentation (if applicable): DD-214 (Member Copy 4) or a current active-duty service statement with entry/separation dates and campaign medals; verification will occur upon separation if applicable.
Military Spouse Preference (if eligible): Include completed Self-Certification Checklist with supporting documents.
Military Reserve/National Guard Technician Preference (if eligible): Include completed Self-Certification Checklist.
Military Reserve/National Guard Technician Disability Preference (if eligible): Include completed Self-Certification Checklist.
Retained Grade Preference (if applicable): Include completed Self-Certification Checklist.

How to Apply

To apply for this position, provide a complete application package including your resume and required documents. Your resume should detail job titles, duties, start and end dates, and full- or part-time status with weekly hours. Do not include restricted information or sensitive data. A complete assessment questionnaire and any additional supporting documents may be required.

Submit your resume and required documents through the official USAJOBS portal.
Ensure your resume includes all requested details for each listed role.
Complete the eligibility questionnaire and upload any necessary supporting documents.
Follow prompts to finalize your submission and use the Submit My Answers button to complete the process.
Check application status in your USAJOBS account under Application Status; if needed, return to an incomplete application to update documents.

View full job page →

Today

Technology & Cybersecurity Administrator

Better Talent Orlando, FL

Orlando, FL

Today

$50k - $60k/yr Full time Business Systems Cloud Platforms Data Security

Apply Now

Job Description

Louis Berk Law is seeking a proactive Technology and Cybersecurity Systems Administrator to oversee the firm’s technology infrastructure, cybersecurity posture, and day-to-day IT operations. This role aims to keep systems secure, reliable, and scalable to support a growing team of legal professionals. The position is onsite in Orlando, Florida, with a compensation range of USD 50,000 to USD 60,000 per year and a requirement of at least three years of relevant experience.

Responsibilities

Oversee the firm’s hardware, software, networking, cloud storage, security systems, and business technology.
Administer cybersecurity initiatives including firewalls, endpoint protection, encryption, password management, and access controls.
Develop, maintain, and test incident response, disaster recovery, and business continuity plans.
Monitor system performance, backups, and overall technology health.
Ensure technology practices align with cybersecurity standards, cyber liability insurance requirements, and the protection of confidential client information.
Administer the firm’s CRM, legal case management software, Microsoft 365 environment, and third-party technology integrations.
Manage user accounts, permissions, cloud storage, and system access.
Evaluate and implement technology solutions that boost productivity and operational efficiency.
Maintain organized documentation of systems, configurations, and technology assets.
Provide day-to-day technical support for employees across hardware, software, networking, printers, and business applications.
Prepare and configure technology for new hires, ensuring equipment and accounts are ready on day one.
Coordinate secure employee offboarding by removing system access and recovering company equipment.
Troubleshoot issues quickly while delivering strong internal customer service.
Manage relationships with technology vendors and external IT service providers.
Evaluate hardware, software, licensing, and technology investments based on business needs.
Assist with vendor negotiations, software renewals, budgeting, and technology planning.
Research and recommend emerging technologies, automation opportunities, and AI solutions to enhance firm operations.

Requirements

Minimum of 3 years of experience in systems administration, network administration, cybersecurity, or IT infrastructure.
Proven ability to manage business technology environments with limited supervision.
Experience administering cybersecurity tools including endpoint protection, network security, encryption, and access management.
Experience supporting cloud-based business systems, Microsoft 365, or other enterprise software platforms.
Background working in highly regulated or data-sensitive industries such as legal, healthcare, financial services, or insurance.
Experience administering CRM, case management, or other enterprise software platforms.
Strong troubleshooting, analytical, and problem-solving abilities.
Excellent organizational skills with the ability to manage multiple priorities.
Strong written and verbal communication skills.
Security+, Network+, CISSP, or equivalent cybersecurity certification is highly preferred.

Technologies

CRM
Legal case management software
Microsoft 365

Benefits

Health, dental, and vision insurance
Paid time off including PTO, sick days, and vacation days
Retirement benefits or accounts
Employee recognition programs
Workplace perks such as recreation activities, food and coffee, and flexible schedules
Support for professional and personal development

Compensation & Benefits

Annual salary: USD 50,000 – USD 60,000, commensurate with experience, plus discretionary bonus and benefits
Health, dental, and vision insurance
Paid time off including PTO, sick days, and vacation days
Retirement benefits or accounts
Employee recognition programs
Workplace perks such as recreation activities, food and coffee, and flexible work schedules
Support for professional and personal development

What success looks like

In the first year, you will establish yourself as the trusted technology expert for Louis Berk Law by strengthening cybersecurity, improving system reliability, and streamlining technology processes. You will create scalable solutions aligned with the firm’s growth, proactively identify opportunities for improvement, and resolve technical challenges efficiently, ensuring every employee has the technology and support needed to perform at their best.

View full job page →

Today

Special Agent: Cybersecurity/IT Expertise

Federal Bureau of Investigation Mobile, AL

Mobile, AL

Today

$103k - $133k/yr Full time Agent Cyber Investigation Cybersecurity Tools

Apply Now

Job Description

The FBI seeks a Special Agent with information security and cybersecurity expertise to investigate, safeguard national security, and pursue a specialized cyber career within federal law enforcement.

Responsibilities

Lead investigations into potential violations of federal law, cybersecurity incidents, and public safety concerns.
Apply sound judgment, ingenuity, and adaptability to meet investigative demands.
Develop and maintain effective liaison relationships with federal, state, local, tribal, territorial, and international law enforcement partners.
Maintain physical fitness to ensure readiness for law enforcement duties.

Requirements

Be a U.S. citizen.
Eligible to obtain Top Secret SCI (Sensitive Compartmented Information) clearance.
Willing to travel as required.
Meet the FBI’s Employment Eligibility requirements.
Hold a master’s degree or higher from a U.S. accredited college or university.

Technologies

SIEM

Salary

$103,236 - $133,200 per year

Job Type

Full-time

Location

Mobile, Alabama (onsite)

How to Apply

Step 1: Click the Apply button to be directed to the FBIJobs Careers website.
Step 2: Click Start to begin. Sign in to continue or register with FBIJobs if you don’t already have an account.
Step 3: Follow the step-by-step process to submit your interest. Complete all sections of the form and attach all required documents.
Resume: Include relevant work experience with start and end dates. Resume must not exceed two pages.
College transcripts: Provide if education qualifies the position.
Veterans: DD 214; Disabled Veterans: DD 214, SF-15, and VA letter dated 1991 or later.

View full job page →

Today

Special Agent: Cybersecurity/IT Expertise

Federal Bureau of Investigation New Haven, CT

New Haven, CT

Today

$103k - $133k/yr Full time Agent Cybersecurity Tools Incident Response

Apply Now

Job Description

Onsite FBI Special Agent position in New Haven, CT, centered on information security, SIEM tools experience, and cyber investigations to safeguard national security.

Responsibilities

Plan and execute investigations into potential violations of federal laws, cybersecurity incidents, and public safety concerns.
Apply sound judgment, resourcefulness, and versatility to meet investigative demands.
Establish and maintain effective liaison relationships with federal, state, local, tribal, territorial, and international law enforcement partners.
Maintain the physical fitness level required to perform law enforcement duties.

Requirements

Must be a U.S. citizen.
Must be able to obtain a Top Secret/Sensitive Compartmented Information (TS/SCI) clearance.
Must be willing to travel as required.
Must meet the FBI’s Employment Eligibility requirements.
Must hold a master’s degree or higher from a U.S. accredited college or university.

Technologies

SIEM tools

Benefits

Professional growth
Supportive work environment
Robust benefits package

Salary

Salary range: $103,236.00 – $133,200.00 per year. Salary is commensurate with base, locality, and availability pay.

Job Description

The advertised role is exempted from the federal civilian hiring freeze. As an FBI special agent with information security and SIEM tools experience, you will directly impact national security. By applying your background to federal law enforcement, you can help shape the Bureau’s approach to safeguarding the nation. The position offers an opportunity to leverage networking capabilities, certifications such as CompTIA, or ethical hacking expertise to defend against cyber threats.

How to Apply

Step 1: Click the Apply button to be directed to the FBIJobs Careers website.
Step 2: Click Start to begin. Sign in to continue or register with FBIJobs if you do not have an account.
Step 3: Complete all sections of the application form and attach all required documents. Include a resume noting relevant work experience with start and end dates (resume must not exceed two pages). Also attach college transcripts if education is the basis for qualification, and veterans documents as applicable (DD 214; for disabled veterans: DD 214, SF-15, and VA letter dated 1991 or later).