InfoSec

InfoSec Cybersecurity Jobs

600 jobs found

Today

Application Security Analyst

Stellantis Auburn Hills, MI

Auburn Hills, MI

Today

Full time Application Security Cybersecurity Tools DevSecOps

Apply Now

Job Description

Stellantis is seeking an Application Security Analyst onsite in Auburn Hills, Michigan. This role offers the chance to shape security across the software development lifecycle, support a Shift Left cybersecurity strategy, and advance DevSecOps practices that integrate security into everyday development. You will collaborate with development teams and help drive secure coding and risk reduction across the organization.

You will collaborate with development, platform, and supplier teams, provide remediation guidance, and help train teams on secure coding and application security practices.

Responsibilities

Perform security testing: SAST, DAST, IAST, mobile security, and dynamic testing
Analyze vulnerabilities and recommend secure coding fixes
Demonstrate vulnerabilities to development teams
Drive remediation efforts to closure
Work within CI/CD pipelines using tools such as Jenkins, GitLab, GitHub Actions, TeamCity; Checkmarx, GitHub Advanced Security, Burp Suite
Integrate security controls into development workflows
Lead Web Application Firewall (WAF) deployment for new and existing apps
Implement application security policies, controls, and standards
Partner with development, platform, and supplier teams
Provide clear remediation guidance
Train teams on secure coding and application security practices
Develop training materials
Conduct security assessments using standard tools
Track and report risks, milestones, deliverables, and status updates
Recommend strategies based on application risk posture

Requirements

Bachelor’s degree in Computer Science, Information Technology, or related field
3+ years of hands-on experience in application security, security testing, and DevSecOps
Application architectures (web, mobile, APIs)
Software development methodologies (Agile, SDLC)
Modern programming languages (Java, C#, Python)
SAST, DAST, IAST, SCA, and mobile security testing tools
Hands-on experience with secure code review in common languages (Java, C#, Python preferred)
Compiled code
Web applications / services
Mobile app development
NIST, ISO 27001
NIST SSDF or similar secure development frameworks
OWASP Top 10 vulnerabilities and mitigation techniques
Common attack vectors (web exploits, DDoS, bot attacks)
Akamai, Cloudflare, AWS WAF, Azure Front Door
AWS, Azure, GCP
Containers (Docker, Kubernetes)
Programming/scripting: Java, JavaScript, SQL, HTML
Scripting languages (Python, Bash preferred)
Strong analytical, problem-solving, and communication skills
Ability to explain technical risks to non-technical audiences
Experience writing security reports and documentation
Ability to work independently and cross-functionally
GIAC GWEB
ISC2 CSSLP
EC-Council CASE
Or equivalent AppSec certifications

Technologies: SAST, DAST, IAST, SCA, Java, C#, Python, JavaScript, SQL, HTML, Bash; Jenkins, GitLab, GitHub Actions, TeamCity; Checkmarx, GitHub Advanced Security, Burp Suite; Akamai, Cloudflare, AWS WAF, Azure Front Door; AWS, Azure, GCP; Docker, Kubernetes; NIST, ISO 27001, NIST SSDF

View full job page →

Today

Cybersecurity Analyst

Booz Allen Hamilton McLean, VA

McLean, VA

Today

$99k - $225k/yr Full time Analyst Cybersecurity Tools Information Security

Apply Now

Job Description

The Cybersecurity Analyst role at Booz Allen Hamilton is an on-site position in McLean, VA that emphasizes vulnerability analysis, network mapping, and offensive cyber operations to support government and national security missions.

Responsibilities

Probe targets using the latest network-based analysis tools to solve difficult technical problems and support client missions.
Evaluate available information to select attack vectors and align them with tools, capabilities, and mission intent.
Assist government and law enforcement agencies by employing advanced government and private-sector analysis tools to access and act on a defined network.
Collaborate with a team to uncover previously unknown and emerging adversary capabilities impacting global missions.
Support a client that provides valuable technical insight and operational knowledge to the U.S. government.
Share technology base and tool knowledge with the team to strengthen collective capabilities.
Develop creative solutions for classified customers within approved parameters.
Design offensive cyber operations that are essential to delivering national security now and in the future.

Requirements

3+ years of experience with cybersecurity principles for Linux, Windows, virtual platforms, networking, and cloud infrastructure
3+ years of experience with risk and vulnerability research and writing
1+ years of experience developing methods to provide best cyber defense capability practices
1+ years of experience with adversarial malicious tactics, techniques, and procedures
1+ years of experience engineering network cyber defense detection or mitigation solutions
TS/SCI clearance with a polygraph
HS diploma or GED

Technologies

Tanium
runZero
Forward Networks

Benefits

Health benefits
Life benefits
Disability benefits
Financial benefits
Retirement benefits
Paid leave
Professional development
Tuition assistance
Work-life programs
Dependent care

Nice If You Have

Bachelor's degree in Computer Science, Information Systems, Engineering, or a related field
Certified Information Systems Security Professional (CISSP) Certification
CompTIA Security+ Certification
GIAC Certified Incident Handler Certification (GCIH)

Clearance

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance with polygraph is required.

Compensation

Salary range: The projected compensation range for this position is USD 99,000.00 to USD 225,000.00 (annualized).

This posting will close within 90 days from the Posting Date.

Identity Statement

As part of the hiring process, you will complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

Candidate AI Usage Policy

AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. The use of artificial intelligence or other tools to assist with responses during interviews is prohibited unless permission is explicitly provided.

Work Model

Onsite: Work will primarily be performed at a Booz Allen office or customer facility, with collaboration with colleagues and clients as required by the role.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, protected veteran status, or any other status protected by applicable law.

View full job page →

Today

Insider Threat Senior Associate - Acquisition Cybersecurity Team

JPMorganChase Seattle, WA

Seattle, WA

Today

$133k - $185k/yr Full time Acquisitions Cloud Platforms Cybersecurity Tools

Apply Now

Job Description

Join JPMorgan Chase in Seattle for a role that blends advanced security work with strong support for your career. The Insider Threat Senior Associate on the Acquisition Cybersecurity Team focuses on proactively detecting, assessing, and responding to insider threats affecting the organization and its acquisitions, while developing detection strategies and awareness programs. We offer a competitive total rewards package including base salary, performance incentives, and discretionary compensation, plus a comprehensive suite of benefits. JPMorgan Chase is committed to diversity and inclusion and is an Equal Opportunity Employer.

Benefits

Base salary determined by role, experience, skill set and location
Commission-based pay
Discretionary incentive compensation, paid in cash and/or forfeitable equity
Comprehensive health care coverage
On-site health and wellness centers
Retirement savings plan
Backup childcare
Tuitions reimbursement
Mental health support
Financial coaching

Responsibilities

Monitor and analyze user activity and security infrastructure to detect and respond to potential insider threats
Conduct in-depth investigations of anomalous behavior, including log and network trace analysis, to identify root causes and gather evidence
Triage and remediate insider threat alerts, owning investigations end to end and participating in incident response
Create and maintain process documentation and playbooks for insider threat detection and response
Develop and update insider threat detection strategies using industry best practices and regulatory requirements
Collaborate with teams to implement insider threat awareness programs, policies, and procedures, and educate employees on best practices
Provide intelligence services to acquisitions, drafting and sharing insider threat and vulnerability reports
Liaise with acquisitions to understand their unique insider threat challenges and identify opportunities for improvement
Work a shift schedule that includes weekend coverage and comply with in-office attendance policies
Take ownership of issues affecting acquisitions and drive identified improvements to completion
Act as a point of escalation for team analysts on insider threat matters

Requirements

Experience in cybersecurity operations with a focus on insider threat detection, incident response, or vulnerability management
Proficiency in user activity monitoring, network trace analysis, log analysis, and security investigations
Ability to script for task automation, implement controls, and manipulate data
Strong understanding of security protocols, authentication, authorization, and security architecture principles
Hands-on experience with security tools such as SIEM, UEBA, IDS, EDR, and email security solutions
Knowledge of adversary tactics, insider threat indicators, and detection methods
Familiarity with enterprise security technologies and both Windows and Linux operating systems
Ability to identify signs of compromise and anomalous behavior across platforms
Excellent communication skills for presenting risks and findings to technical and non-technical audiences

Technologies

SIEM, UEBA, IDS, EDR, Email security solutions, XDR
Windows, Linux, Cloud environments

About JPMorgan Chase

JPMorgan Chase & Co is a long established financial institution offering innovative financial solutions to millions of consumers, small businesses, and prominent corporate, institutional, and government clients under the J.P. Morgan and Chase brands. With a history spanning over 200 years, the firm leads in investment banking, consumer and small business banking, commercial banking, financial transaction processing, and asset management.

About the Team

Our corporate functions cover diverse areas from finance and risk to human resources and marketing. The corporate teams are essential in ensuring that the company supports its businesses, clients, customers, and employees for long-term success.

View full job page →

Today

IT CYBERSECURITY SPECIALIST (CUSTSPT/INFOSEC)

US Defense Information Systems Agency Suffolk, VA

Suffolk, VA

Today

$91k - $118k/yr Full time Information Security Information Technology (IT) InfoSec

Apply Now

Job Description

Onsite in Suffolk, Virginia, this role supports the mission of US Cyber Command through the DISA-Joint Services Provider, focusing on cybersecurity operations. As an IT Cybersecurity Specialist in the Cyber Excepted Service, you will contribute to defense-focused IT support and help safeguard critical systems and data.

Location: Suffolk, VA (onsite). Salary: USD 90,838 - 118,092 per year.

Responsibilities

Analyze and resolve the full spectrum of issues within the activity's operations, routing highly specialized problems to the appropriate technical expert as needed.
Coordinate, implement, and maintain the installation and operation of customer application systems.
Provide guidance to customers and troubleshoot highly complex problems to minimize downtime affecting critical business activities.
Establish and maintain operation schedules; develop and manage customer performance requirements and support policies and procedures.
Apply customer support concepts and methods for troubleshooting and recovering systems and files; configure installed operating systems, network systems, applications, protocols, schedules and equipment to serve as a senior customer technical analyst.

Requirements

Must be a U.S. Citizen.
Males born after 12-31-1959 must be registered or exempt from Selective Service.
National security position requiring access to classified information; favorable suitability review and security clearance are conditions of employment.
Under DoD 8140 policy, complete Foundational Qualifications within 9 months and Residential Qualification requirements within 12 months.
Attention to detail
Customer service
Oral communication
Problem solving
Minimum of 1 year of qualifying IT experience
Qualifying experience includes IT customer service, managing unclassified and classified mobility solutions, laptop imaging and software configuration

This job is open to

The public - U.S. Citizens, Nationals or those who owe allegiance to the U.S.
Clarification from the agency - Open to U.S. Citizens

Additional Information

This position is in the Excepted Service and does NOT convey eligibility to be converted to the Competitive Service; it is being recruited under 10 U.S.C. 1599f into the Cyber Excepted Service (CES) personnel system.
Current Federal Career/Career-Conditional employees will be placed on an Excepted appointment.
The appointment does not confer eligibility for non-competitive conversion to the competitive service.
A 3-year probationary period may be required to evaluate fitness and alignment with public interest.
Telework availability depends on mission requirements and supervisory determination.
Designated positions may require urinalysis for illegal drugs prior to appointment or placement.
The agency may use this announcement to fill additional vacancies within 90 days of the closing date.
Moving costs may be paid.
Tax implications related to relocation reimbursements may apply under the Tax Cuts and Jobs Act of 2017 (RITA eligibility may vary).
Recruitment, relocation, or retention incentives may be authorized.
This position falls under DoD Manual 8140 and may be aligned with future Cyber Workforce requirements.
DoD policy on employment of annuitants applies for hires after November 24, 2003; similar rules may apply for internal transfers.
Veterans' Preference will be applied to preference-eligible candidates as defined by law; documentation may be required.
For more information on the Cyber Excepted Service and veterans' preference, reference official DoD and agency resources.
All applicants are encouraged to apply electronically; assistance is available by phone if online application is not possible.
In some circumstances, the authorized pay may exceed the stated range.

Required Documents

Resume: Two-page maximum. Guidance on the two-page limit is available from official federal hiring resources.
Complete initial Eligibility Questionnaire related to the experience requirements.
SF-50: Current and former federal employees must submit their SF-50 showing the highest grade held on a permanent basis for at least 52 weeks, along with tenure and appointment type.
Veterans Preference Documentation (if applicable): DD-214 (Member Copy 4) or a current active-duty service statement with entry/separation dates and campaign medals; verification will occur upon separation if applicable.
Military Spouse Preference (if eligible): Include completed Self-Certification Checklist with supporting documents.
Military Reserve/National Guard Technician Preference (if eligible): Include completed Self-Certification Checklist.
Military Reserve/National Guard Technician Disability Preference (if eligible): Include completed Self-Certification Checklist.
Retained Grade Preference (if applicable): Include completed Self-Certification Checklist.

How to Apply

To apply for this position, provide a complete application package including your resume and required documents. Your resume should detail job titles, duties, start and end dates, and full- or part-time status with weekly hours. Do not include restricted information or sensitive data. A complete assessment questionnaire and any additional supporting documents may be required.

Submit your resume and required documents through the official USAJOBS portal.
Ensure your resume includes all requested details for each listed role.
Complete the eligibility questionnaire and upload any necessary supporting documents.
Follow prompts to finalize your submission and use the Submit My Answers button to complete the process.
Check application status in your USAJOBS account under Application Status; if needed, return to an incomplete application to update documents.

View full job page →

Today

Cybersecurity, Privacy and Forensics - Data Protection - PKI Implementation Manager

PRICE WATERHOUSE COOPERS San Francisco, CA

San Francisco, CA

Today

$99k - $232k/yr Full time Manager Cyber Security Cybersecurity

Apply Now

Job Description

Onsite in San Francisco, this role offers a compensation range of USD 99,000 - 232,000 per year and a comprehensive benefits package that includes medical, dental, vision, 401(k), holiday pay, vacation, personal and family sick leave, and an annual discretionary bonus. The position focuses on providing PKI implementation and privacy compliance guidance to clients, with the opportunity to lead teams, shape privacy policies, and conduct privacy impact assessments.

The Opportunity

As a Cybersecurity, Privacy and Forensics - Data Protection - PKI Implementation Manager, you will specialize in advising clients on privacy laws and data protection regulations. You will help businesses navigate the privacy and data protection landscape, confirm compliance with applicable laws, assist in developing privacy policies, conduct privacy impact assessments, and implement data protection measures.

Responsibilities

Spearhead PKI deployments to strengthen data protection controls
Guide clients through privacy laws and data protection regulations to ensure regulatory alignment
Lead privacy impact assessments and draft comprehensive privacy policies
Collaborate with cross functional teams to address cybersecurity challenges and respond to data breach events
Analyze system components to map interdependencies and improve security
Own project lifecycles from planning and budgeting through execution to delivery
Mentor team members to leverage strengths and meet client expectations
Use strategic questioning to identify opportunities for strengthening privacy program development
Review legal documents and provide counsel to support compliance with data protection laws
Uphold professional and technical standards, including the firm’s code of conduct and independence requirements

Requirements

Bachelor's degree
Minimum of 4 years of experience

Technologies

Public Key Infrastructure (PKI)

Benefits

Medical
Dental
Vision
401k
Holiday pay
Vacation
Personal and family sick leave
Annual discretionary bonus

What sets you apart

Preference for one or more of the following fields of study: Accounting, Analytics/Data Science, Business Administration/Management, Communications/Media, Computer Science/Information Systems, Cybersecurity, Engineering, Government/Public Policy, Law/Legal Studies, Mathematics/Statistics, Project/Technology Management, Risk Management/Insurance, Marketing
Demonstrated competency in cybersecurity and privacy regulations
Strong analytical thinking to tackle data protection challenges
Proven ability to coach and mentor team members
Experience developing privacy program strategies for client engagements
Willingness to embrace change and innovation in data risk management
Ability to navigate legal compliance in data protection and privacy

View full job page →

Today

Cybersecurity Senior Analyst | Threat Detection & Response

Home Depot Austin, TX 🇺🇸 Remote

Austin, TX

Today

$100k - $160k/yr Full time Senior Analyst Cybersecurity Tools

Apply Now

Job Description

Based in Austin with remote work flexibility, this senior cybersecurity role sits on Home Depot's Threat Detection & Response team within the Security Operations Center. The analyst leads advanced monitoring, investigation, and incident response while mentoring junior staff and shaping playbooks and automation to strengthen defenses.

Location

Austin, TX (remote)

Compensation

USD 100,000 - 160,000 per year

Overview

The Senior Cybersecurity Analyst on the Threat Detection & Response (TDR) team is accountable for sophisticated security monitoring, detection, investigation, and incident response. The role includes mentoring junior analysts, leading multiple projects, and contributing to the development of playbooks and automation workflows.

Responsibilities

Be the front-line responder by identifying, triaging, and remediating security detections and anomalies
Provide incident response support, leading Threat Detection and Response analysts during technical investigations, effectively communicating results, analytical analysis, and mitigations to different operational teams and management
Analyze and interpret complex and high-volume data from various sources to advance investigations, quantify trends, or support analytical findings
Evaluate the type and severity of security events leveraging in-depth knowledge of exploits and vulnerabilities
Leverage technology (commercial and open source) to enrich, triage, and characterize internal insights on malware and Indicators of Compromise (IOCs)
Provide recommendations for improvements and optimizations for security tools based on experience and analytical insight
Collaborate with technical and business teams to drive TDR and SOC initiatives
Lead the development of new investigative techniques and automation workflows
Create and review playbooks for efficiency and proactively improving playbooks where necessary
Stay informed about information security trends and technologies in the technology industry and identify best practices and methodologies
Work with and train junior analysts on THD technologies, alert lifecycle, and investigative best practices
Participate in threat detection and incident response activities including threat hunting, detection creation, endpoint analysis, end-user interviews, and timeline construction
Help implement improvement measures to enhance alerting and detection practices
Refine and develop dashboards, queries, and reports to continuously improve security situational awareness
Participate in the evaluation, deployment, integration, and configuration of new networking and security solutions
Lead in the investigation of security events and incidents in collaboration with the SOC team
Search and analyze security logs for malicious and abnormal network behaviors
Ability to analyze data and communicate malicious behavior discoveries to non-technical consumers

Key Responsibilities

50% Analysis: Synthesize data to develop a solution, communicate the solution, and present it to teams and stakeholders
20% Collaborate: Partner cross-functionally to identify trends and resolve issues
20% Drive Execution: Implement solutions to meet customer expectations and ensure project goals are met in a timely manner
10% Support and Enable: Mentor junior level analysts

Requirements

Minimum of 5 years of relevant cybersecurity experience
Bachelor's degree or equivalent degree in a related field
18 years of age or older
Legally permitted to work in the United States
Core competencies: Action Oriented, Collaborates, Communicates Effectively, Customer Focus, Drives Results

Certifications

Security+, Network+
CySA+, CEH, OSCP
GIAC certifications such as GSEC, GMON, GCIH
Cloud Security Certifications from public providers (GCP, Azure, AWS)

Reporting

This position typically reports to a Manager or Senior Manager and has 0 direct reports.

Travel

Typically requires overnight travel less than 10% of the time.

Physical Requirements

Most of the time is spent sitting in a comfortable position with frequent opportunities to move. On rare occasions there may be a need to move or lift light articles.

Working Conditions

Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.

View full job page →

Today

Technology & Cybersecurity Administrator

Better Talent Orlando, FL

Orlando, FL

Today

$50k - $60k/yr Full time Business Systems Cloud Platforms Data Security

Apply Now

Job Description

Louis Berk Law is seeking a proactive Technology and Cybersecurity Systems Administrator to oversee the firm’s technology infrastructure, cybersecurity posture, and day-to-day IT operations. This role aims to keep systems secure, reliable, and scalable to support a growing team of legal professionals. The position is onsite in Orlando, Florida, with a compensation range of USD 50,000 to USD 60,000 per year and a requirement of at least three years of relevant experience.

Responsibilities

Oversee the firm’s hardware, software, networking, cloud storage, security systems, and business technology.
Administer cybersecurity initiatives including firewalls, endpoint protection, encryption, password management, and access controls.
Develop, maintain, and test incident response, disaster recovery, and business continuity plans.
Monitor system performance, backups, and overall technology health.
Ensure technology practices align with cybersecurity standards, cyber liability insurance requirements, and the protection of confidential client information.
Administer the firm’s CRM, legal case management software, Microsoft 365 environment, and third-party technology integrations.
Manage user accounts, permissions, cloud storage, and system access.
Evaluate and implement technology solutions that boost productivity and operational efficiency.
Maintain organized documentation of systems, configurations, and technology assets.
Provide day-to-day technical support for employees across hardware, software, networking, printers, and business applications.
Prepare and configure technology for new hires, ensuring equipment and accounts are ready on day one.
Coordinate secure employee offboarding by removing system access and recovering company equipment.
Troubleshoot issues quickly while delivering strong internal customer service.
Manage relationships with technology vendors and external IT service providers.
Evaluate hardware, software, licensing, and technology investments based on business needs.
Assist with vendor negotiations, software renewals, budgeting, and technology planning.
Research and recommend emerging technologies, automation opportunities, and AI solutions to enhance firm operations.

Requirements

Minimum of 3 years of experience in systems administration, network administration, cybersecurity, or IT infrastructure.
Proven ability to manage business technology environments with limited supervision.
Experience administering cybersecurity tools including endpoint protection, network security, encryption, and access management.
Experience supporting cloud-based business systems, Microsoft 365, or other enterprise software platforms.
Background working in highly regulated or data-sensitive industries such as legal, healthcare, financial services, or insurance.
Experience administering CRM, case management, or other enterprise software platforms.
Strong troubleshooting, analytical, and problem-solving abilities.
Excellent organizational skills with the ability to manage multiple priorities.
Strong written and verbal communication skills.
Security+, Network+, CISSP, or equivalent cybersecurity certification is highly preferred.

Technologies

CRM
Legal case management software
Microsoft 365

Benefits

Health, dental, and vision insurance
Paid time off including PTO, sick days, and vacation days
Retirement benefits or accounts
Employee recognition programs
Workplace perks such as recreation activities, food and coffee, and flexible schedules
Support for professional and personal development

Compensation & Benefits

Annual salary: USD 50,000 – USD 60,000, commensurate with experience, plus discretionary bonus and benefits
Health, dental, and vision insurance
Paid time off including PTO, sick days, and vacation days
Retirement benefits or accounts
Employee recognition programs
Workplace perks such as recreation activities, food and coffee, and flexible work schedules
Support for professional and personal development

What success looks like

In the first year, you will establish yourself as the trusted technology expert for Louis Berk Law by strengthening cybersecurity, improving system reliability, and streamlining technology processes. You will create scalable solutions aligned with the firm’s growth, proactively identify opportunities for improvement, and resolve technical challenges efficiently, ensuring every employee has the technology and support needed to perform at their best.