IT Operations

IT Operations Cybersecurity Jobs

18 jobs found

Today

Security Engineer

Horizontal Talent East Bethel, MN

East Bethel, MN

Today

$57 - $92/hr Full time Automation Containerization Cybersecurity Tools

Apply Now

Job Description

Security Engineer role in East Bethel, MN onsite, focused on hands-on engineering and Tanium platform administration to strengthen enterprise environments.

Responsibilities

Administer the Tanium platform with emphasis on server administration, module configuration, and ongoing maintenance.
Develop and maintain custom Tanium content, including sensors, packages, and saved questions.
Utilize automation tools such as PowerShell and Python to improve endpoint management workflows.
Integrate with Tanium REST and GraphQL APIs to streamline operations.
Troubleshoot and resolve issues across Windows, macOS, and Linux environments.
Support production environments and manage operational incidents effectively.
Contribute to security logging and observability initiatives through telemetry.

Requirements

Proven Tanium administration experience in large enterprise settings.
Solid knowledge of endpoint security concepts and incident response.
Proficiency in scripting and automation, especially PowerShell and Python.
Experience with Git for source control and collaborative workflows.
Ability to work effectively in a team-oriented environment.

Technologies

Tanium
PowerShell
Python
GraphQL
REST
Git
Logstash
Elasticsearch
Docker
Kubernetes

Benefits

Competitive compensation
Medical, dental, vision, and retirement benefits

View full job page →

1d ago

IT SPECIALIST (ENTARCH/INFOSEC)

US Washington Headquarters Services Arlington, VA

Arlington, VA

1d ago

$122k - $158k/yr Full time Automation Building Automation Industrial Automation

Apply Now

Job Description

The IT Specialist position onsite in Arlington, VA supports the Pentagon’s Facilities Operations Group, delivering cybersecurity within the Facility Related Control Systems program while overseeing building utility operations for a large facility. The role combines hands-on IT and SCADA oversight with project leadership, and offers a salary range of USD 121,785 to 158,322 per year for qualified candidates.

Responsibilities

Act as an IT Specialist and SCADA System Integrator, applying cybersecurity measures to protect data and networks within the Facility Related Control Systems environment; develop plans and procurement packages for SCADA and Building Automation Systems (BAS).
Review network diagrams, firewall rules, and other IT requirements for Pentagon utilities; plan long-range maintenance schedules and capital improvements such as upgrading PLCs and network topology.
Serve as the technical authority in designing SCADA networks for the Pentagon reservation; explore and develop advanced HMI utility applications to enhance methods for operating and maintaining building utility systems.
Perform project and contract management for large-scale IT support projects, including defining customer needs, managing technical requirements, and providing customer support services such as installation, configuration, and training.

Requirements

U.S. Citizenship is required.
Males born after 12-31-1959 must be registered or exempt from Selective Service.
Total salary varies depending on location of position.
May be required to successfully complete a probationary/trial period.
Must be determined suitable for federal employment.
Required to participate in the direct deposit program.
Position is subject to pre-employment and random drug testing.
Requires obtaining and maintaining a Top Secret security clearance with SCI and SAP components. A Special Background Investigation (SBI) is required with favorable adjudication.
May require work outside normal duty hours, including evenings, weekends, holidays, and/or overtime.
Must submit a Financial Disclosure Statement (OGE-450) upon entering the position and annually.
The employee is designated as a Mission Critical Employee and may be required to report for or remain at work during adverse weather conditions.
One year of specialized experience equivalent to the GS-12 in the Federal Service (experience may be gained in the private sector).
All qualifications and education requirements must be met by the closing date and clearly documented in the resume; resume must not exceed two pages.
Include months and hours worked per week for each employment listed to support qualification determinations.
Education cannot be substituted for experience.
Additional guidance on federal resume content is available from USAJOBS.
Active duty service members may submit a certification of active service in lieu of a DD-214 if discharge is expected within 120 days.
Nepotism rules apply; individuals may not be appointed into a position within the supervisory chain of a relative.
Additional vacancies may be filled by this announcement.
DoD Priority Placement Program documentation may be required; other documentation may apply.

Technologies

SCADA
Building Automation Systems (BAS)
HMI
PLCs

Benefits

Comprehensive federal benefits package; eligibility depends on the type of position and whether full-time, part-time, or intermittent.

This job is open to

The public: U.S. Citizens, Nationals or those who owe allegiance to the United States.
Career transition (CTAP, ICTAP, RPL): Federal employees whose job, agency or department was eliminated and are eligible for priority over other applicants.

Clarification from the Agency

Open to US Citizens and Nationals and PPP Eligibles.

How You Will Be Evaluated

Applicants will be evaluated on how well they meet the listed qualifications.
Note: Under this DHA, veteran's preference does not apply.
Applications, resumes, and supporting documentation will be reviewed to determine if the minimum qualifications are met as listed.
Military Reserve (MR) and National Guard (NG) Technicians PPP Eligible: MR and NG technicians must be selected and placed at the full performance level if determined well qualified; include the Military Reserve and National Guard Technician PPP Self-Certification Checklist (DD-3145-3) to verify eligibility.
MR and NG technicians with disability retirement PPP eligibility: include the Disability PPP Self-Certification Checklist (DD-3145-2).
Retained Grade PPP Eligible: include the Retained Grade PPP Self-Certification Checklist (DD-3145-1) to verify eligibility.

View full job page →

2d ago

Cybersecurity Operations Specialist -SIEM Services (Evergreen)

General Dynamics Information Technology Springfield, VA

Springfield, VA

2d ago

$128k - $173k/yr Full time Analytics Arcsight Cybersecurity Tools

Apply Now

Job Description

Onsite Cybersecurity Operations Specialist role in Springfield, VA focused on SIEM services within the CSOC, ensuring high availability and collaboration with government partners.

Responsibilities

Perform preventative and corrective maintenance to sustain secure, reliable service availability. This includes managing vendor RMA processes, proper disposal of failed equipment/software, installing and testing new hardware/software, and configuring new assets.
Maintain system availability at or above 99.99%.
Identify and ticket degradations in SIEM data flows within 60 minutes of onset.
Conduct daily and scheduled maintenance driven by vendor advisories, patches, and approved change management; keep documentation, change logs, and service bulletin libraries updated in the CSOC knowledge base.
Lead emergency maintenance actions to minimize outage durations, with Government approval and coordination through CSOC and ESC governance.
Perform development, engineering, testing, integration, and implementation actions for major vendor revisions.
Continuously assess engineering to improve performance, coverage, and maturity of the service.
Document instances of lost event logs, including occurrences like DNS logs not ingested during specific windows.
Configure all service assets within the Government Furnished Information - Software Tools list in accordance with federal, DoD, IC, and NCE policies.
Execute total integration actions to ensure interoperability among all GFI software tools assets, enabling proper parsing and ingestion of data for internal and external reporting systems.
Use agency approved ticketing systems to document, track, assign, update, and coordinate engineering, integration, configuration, and maintenance actions.
Utilize monitoring, analysis, and visualization tools to track effectiveness, status, and metrics as required by Government staff and related Cybersecurity Operations and Readiness teams.

Requirements

Hands-on SIEM experience with ArcSight, ElasticSearch, Splunk, Event Broker, or UBA.
Experience supporting CSOC operations by creating alerting rules.
Author SIEM playbooks.
Expert level Linux (RHEL) administration and engineering.
Proficient in tuning SIEM filters to detect malicious or atypical activity and reduce false positives.
Experience developing content within ArcSight and Kibana to aid analysts investigating events.
Develop ArcSight rules based on malicious-event use cases.
Tune and aggregate queries and filters.
Skilled in troubleshooting event flow through Enterprise Audit infrastructure.
Skilled in troubleshooting event formats and parsing for ingestion into data storage and SIEM tools.
Active TS/SCI clearance.
DoD 8570.01-M IAT Level II and CSSP Infrastructure Support certifications.
6+ years of experience with SIEM and development projects.
6+ years of experience providing SIEM support for projects and technical exchange meetings.
6+ years of experience developing and maintaining enterprise audit projects.
Kibana experience.
Data analytics experience.

Technologies

ArcSight
ElasticSearch
Splunk
Event Broker
User Behavioral Analysis (UBA)
Kibana
Linux (RHEL)
DoDIN – Joint Incident Management System

Your Impact

Contribute to national safety by applying expertise to protect critical infrastructure from cyber threats and by ensuring robust SIEM operations within the CSOC framework.

Work Requirements

Years of Experience: 6+ years of related experience
May vary based on technical training, certifications, or degree
Travel Required: None
Citizenship: U.S. Citizenship Required
Active TS/SCI Clearance
DoD 8570.01-M IAT Level II and CSSP Infrastructure Support certifications
6+ years experience with SIEM and development projects
6+ years experience with SIEM support for projects and technical exchange meetings
6+ years experience developing and maintaining enterprise audit projects

Salary and Benefits

The likely salary range is $128,039 - $173,229 per year. Final compensation depends on experience, location, and contractual requirements and may fall outside this range.
View information about benefits and our total rewards program.

View full job page →

4d ago

Enterprise Cybersecurity Analyst

Booz Allen Hamilton McLean, VA

McLean, VA

4d ago

$99k - $225k/yr Full time Cloud Platforms Cybersecurity Tools Data Security

Apply Now

Job Description

Join Booz Allen Hamilton in a role dedicated to protecting critical government infrastructure. This on site opportunity in McLean, VA offers a competitive annual salary range of USD 99,000 to 225,000, plus a comprehensive benefits package. You will support IL5 security operations, operate advanced security tooling, and advance proactive threat containment in a government environment. The culture emphasizes collaboration, professional development, and a commitment to secure, resilient systems.

Responsibilities

Provide security operations support for an IL5 environment by administering advanced tools such as CrowdStrike Falcon EDR/AV, Tenable Cloud Security Enterprise, and BigID.
Deploy and maintain endpoint detection and response capabilities to identify and mitigate threats in real time.
Perform vulnerability assessments across cloud and hybrid infrastructure.
Implement data loss prevention strategies to safeguard sensitive information.
Collaborate with IT, risk, and operations teams to ensure operational excellence and DoD security standards, supporting ongoing improvement of the security posture.
Drive zero trust and proactive threat mitigation initiatives within a high-sensitivity government environment.

Requirements

5+ years of experience in cybersecurity operations or security engineering.
Experience administering security tools such as EDR, vulnerability management, and DLP platforms, including CrowdStrike Falcon, Tenable, or BigID.
Experience performing threat detection, incident analysis, and response activities in enterprise environments.
Experience supporting vulnerability scanning, remediation workflows, and risk assessments.
Ability to collaborate with IT, risk, and operations teams to maintain secure and compliant environments.
Bachelor's degree.

Technologies

CrowdStrike Falcon EDR/AV, Tenable Cloud Security Enterprise, BigID
SIEM, SOAR
Python, PowerShell
AWS, Azure, Google Cloud
RMF, NIST 800-53, DFARS

Work Model

Onsite work in Booz Allen facilities or at customer facilities as required by the role. Occasional in-person collaboration may be needed to align with leadership expectations and project needs.

Identity verification and candidate policy

As part of the hiring process, Booz Allen uses an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and prevent fraud. You may be required to be on camera during interviews and assessments, and Booz Allen may take your photo to verify identity.

AI usage in the workplace is managed carefully. AI tools may be used in daily work, but candidate responses during interviews are evaluated based on your own skills and knowledge unless explicit permission is provided.

Non-discrimination

All qualified applicants will receive consideration for employment without regard to disability, protected veteran status, or any other status protected by applicable law.

Nice to have

Experience deploying and managing security tools in IL5 or other high classification environments.
Familiarity with DoD frameworks such as RMF, NIST 800-53, or DFARS.
Experience integrating security tools with SIEM or SOAR platforms.
Scripting or automation experience using Python, PowerShell, or similar.
Knowledge of cloud security architectures in AWS, Azure, or Google Cloud, including hybrid environment controls.
Certifications such as Security+, CISSP, GIAC, or CCFA.

Compensation and benefits aside, this role emphasizes collaboration, continuous security improvement, and the opportunity to contribute to secure government operations in a dynamic IL5 context.

View full job page →

5d ago

Lead Infrastructure Engineer (Microsoft Cloud & Cybersecurity)

PCG Systems Denver, CO

Denver, CO

5d ago

$110k - $125k/yr Full time Azure Cloud Cloud Platform

Apply Now

Job Description

In Denver, PCG Systems is seeking a Lead Infrastructure Engineer who specializes in Microsoft Cloud and cybersecurity. This senior role blends hands-on architectural work with mentorship, guiding multi-client environments through cloud modernization, security hardening, and operational excellence. You will collaborate with business leaders to translate technology initiatives into reliable, secure infrastructure.

Compensation

USD 110,000 - 125,000 per year

Location

Denver, CO (hybrid)

Responsibilities

Architect, deploy, and support Microsoft 365 environments
Design, implement, and support Microsoft Azure infrastructure
Design and administer Microsoft Entra ID and Microsoft Intune
Lead Microsoft 365 tenant migrations and cloud modernization projects
Design, configure, and support Fortinet security solutions
Configure business networking including VLANs, routing, switching, VPNs, wireless, and network security
Implement and support SentinelOne, Check Point Harmony Email & Collaboration, and other cybersecurity solutions
Design and support cloud backup and disaster recovery solutions
Develop PowerShell automation and scripting to improve efficiency
Lead infrastructure projects from planning through implementation
Troubleshoot and resolve complex Tier III infrastructure issues
Mentor engineers and help develop technical standards
Improve documentation and engineering processes within Hudu
Work directly with business owners and executive leadership on strategic technology initiatives

Requirements

7+ years of professional IT experience
5+ years working for a Managed Services Provider (MSP)
Demonstrated experience leading Microsoft 365 migrations
Advanced Microsoft Azure administration experience
Advanced Fortinet administration experience
Strong networking design and troubleshooting experience
Experience leading infrastructure projects
Excellent written and verbal communication skills
Strong documentation habits
Valid driver's license and reliable transportation
Ability to travel throughout the Denver Metro area as needed
Bachelor's degree in Computer Science or related field

Technical Proficiencies

Microsoft 365, Exchange Online, SharePoint Online, Microsoft Teams, OneDrive, Microsoft Entra ID, Microsoft Intune, Microsoft Azure, Azure Virtual Machines, Conditional Access, Multi-Factor Authentication, Microsoft Defender, Microsoft 365 Tenant Migrations, Fortinet Firewalls, FortiSwitch, FortiAP, VLAN Design, Routing & Switching, VPN Configuration, DNS, DHCP, Wireless Networking, Network Security Best Practices, Windows Server, Active Directory, Group Policy, Hyper-V and/or VMware, Storage & Virtualization, Server Migrations, SentinelOne, Check Point Harmony Email & Collaboration (Avanan), Endpoint Detection & Response (EDR), Email Security, Identity Security, Vulnerability Remediation, Security Hardening, Incident Response, Cove Data Protection, Datto BCDR, Axcient, Veeam, Microsoft 365 Backup Solutions, Cloud-to-Cloud Backup, Disaster Recovery Planning & Testing, Halo PSA (Preferred), NinjaOne (Preferred), Hudu, ConnectWise Control, ConnectWise Manage, Datto RMM, AutoTask, N-able, PowerShell, Microsoft Graph, Scripting, Process Automation, Terraform, Ansible, Puppet, Chef, MySQL, PostgreSQL, Oracle Database, Microsoft SQL Server, RESTful APIs, Web Services, VMware, OpenStack, Citrix, Rackspace, Docker, Kubernetes, Linux, Windows, Bash, Python, Go, Ruby, Jenkins, CI/CD

Benefits

Health insurance
401(k)
401(k) matching
Flexible schedule
Paid time off
Paid holidays
Tuition reimbursement
Monthly Healthcare Reimbursement
Company-provided equipment
Company-paid certifications and professional development
Hybrid work environment

Application Questions

How many M365 tenant migrations have you personally led?
How many Fortinet firewall/network deployments have you personally completed?
How would you rate your Microsoft Azure administration experience? (Intermediate, Advanced, Expert)
How many years have you administered Microsoft Intune?
Which PSA and RMM platforms have you used?
Describe the most technically complex infrastructure project you personally designed and implemented
Describe a PowerShell script or automation you've written that improved operations or eliminated manual work
What is your current compensation and desired compensation?

Experience

MSP: 5 years (Required)

Licenses & Certifications

CDL (Required)

Location

Denver, CO 80202 (Required)

Work Location

Hybrid remote in Denver, CO 80202

View full job page →

5d ago

Cloud Security Engineer (Secret Clearance)

Deloitte Arlington, VA

Arlington, VA

5d ago

$108k - $188k/yr Full time Azure Cloud Cloud Architecture

Apply Now

Job Description

Deloitte seeks a Cloud Security Engineer to safeguard AWS, GCP, and Azure environments for the GPS team, onsite in Arlington, VA, and requires an Active Secret Clearance.

Responsibilities

Assess cloud environments across AWS, GCP, and Azure to identify security risks, control gaps, and misconfigurations.
Design, implement, and continually improve cloud security controls, covering identity and access management, network security, encryption, logging, and monitoring.
Support cloud security architecture reviews for new and existing solutions and provide recommendations aligned to security and compliance requirements.
Investigate cloud security events, perform root-cause analysis, and support remediation activities with engineering and operations teams.
Develop and maintain technical documentation, standards, baselines, and reports related to cloud security controls and cloud risk management.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a similar technical field
Active Secret Clearance
Local to the DMV area and able to work onsite up to five days per week
Travel up to 20 percent on average, depending on client and project assignments
2+ years of experience in:
- Supporting cloud security, cloud engineering, or cloud infrastructure
- Implementing or assessing security controls in AWS, GCP, and Azure
- Cloud identity and access management, network security, encryption, logging, monitoring, and configuration management
- Using cloud-native security tools, security posture management tools, or infrastructure as code tools
- Legal authorization to work in the United States without employer sponsorship now or in the future

Technologies

AWS
GCP
Azure
Python
PowerShell
Bash
Terraform
Kubernetes

Benefits

Discretionary annual incentive program

Compensation

Salary: USD 107,925 - 188,000 per year

View full job page →

5d ago

Cybersecurity Automation Engineer

General Dynamics Information Technology Fort Bragg, NC

Fort Bragg, NC

5d ago

$128k - $173k/yr Full time Automation Cybersecurity Tools Engineer

Apply Now

Job Description

General Dynamics Information Technology is seeking a Senior Principal Cybersecurity Automation Engineer to lead the engineering and operation of Splunk Phantom SOAR for federal missions. This onsite role at Fort Bragg, NC focuses on integrating security use cases, building reusable Python-based playbooks, and advancing automation across incident handling, threat analysis, and other cyber operations.

Responsibilities

Oversee and maintain the Splunk Phantom SOAR platform and related automation workflows.
Incorporate security use cases into Phantom playbooks and workflows.
Create modular, testable Python-based playbooks that are reusable and efficient.
Configure integrations to ensure Phantom works smoothly with enterprise systems.
Extend Phantom capabilities by developing Security Apps.
Coach security development teams on Phantom functionality.
Leverage Phantom tools to enable automation and orchestration.
Collaborate with the customer to identify integration strategies and advance their Phantom proficiency.
Define requirements for innovative integrations and playbooks.
Partner with security operations, threat intelligence, and incident response teams.
Translate workflows into automated playbooks.
Develop and implement Phantom's flexible app model using various tools and APIs.
Use Python scripts, PowerShell, and Linux commands for integrations.
Facilitate efficient communication via integrated collaboration tools.
Leverage Phantom event and case management for rapid event triage.
Notify CND managers and responders of suspected incidents with detailed histories, statuses, and potential impacts.
Coordinate with higher authorities on intrusions, malware, and related events.
Implement and enforce CND policies and procedures in line with applicable laws and regulations.
Provide incident reports, summaries, and situational awareness to higher headquarters.
Manage incidents from inception through after-action reporting.

Requirements

8+ years of relevant experience
8570 Certification: Minimum IAT level II (e.g., CCNA Security, CySA+, GICSP, GSEC, Security+ CE, SSCP); Level III preferred (e.g., CISSP, GCIH, GCFA, GCIA, GNFA, Linux+, CCNA R&S, Splunk Power User)
Experience with Splunk Phantom, Linux, and PowerShell

Technologies

Splunk Phantom
Python
PowerShell
Linux

Benefits

Growth opportunities through an AI-powered career planning tool that maps steps and learning opportunities
Internal mobility team to help achieve career goals
Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off
Award-winning culture of innovation and a military-friendly workplace

Work Requirements

8+ years of related experience
May vary based on technical training, certification(s), or degree
10-25%

Citizenship and Security

US Citizenship
TS/SCI Required

IT Specialist (SYSADMIN/INFOSEC)

US Defense Logistics Agency Whitehall, OH

Whitehall, OH

1mo ago Closed

$93k - $121k/yr Full time Cloud Platforms Information Security Information Technology (IT)

1mo ago

Cybersecurity/IT Support Technician

AIT Chesterfield, MI

Chesterfield, MI

1mo ago Closed

Full time Application Support CAD Catia V5

IT Operations Cybersecurity Jobs

Get IT Operations Cybersecurity Jobs alerts