Madison, WI

Cybersecurity Jobs in Madison, WI

6 jobs found

Include remote jobs

6d ago

Security Analyst

Experis Madison, WI

Madison, WI

6d ago

Contract Cybersecurity Operations Cybersecurity Tools Endpoint Security

Apply Now

Job Description

Experis is seeking a Security Analyst for a contract role supporting an IT Security Program tied to the Wisconsin Department of Financial Institutions (DFI). Based in Madison, WI (hybrid), this position contributes to day-to-day security operations, advanced security analysis, and incident response support through policies, reporting, and remediation initiatives.

The work centers on administering and improving security tooling and processes across enterprise environments, including endpoint and vulnerability management, security design and monitoring, and risk assessments that drive actionable remediation strategies.

Responsibilities

Administer and support CrowdStrike and Tenable to strengthen endpoint and vulnerability management across networks, servers, storage, applications, databases, and endpoints.
Perform advanced security analysis to manage security design, implementation, monitoring, and incident response activities.
Lead projects to implement new security controls and technologies, coordinating with other teams to remediate issues and improve overall security posture.
Conduct IT security risk assessments and develop, recommend, and implement remediation strategies based on findings and changes in the threat landscape.
Author and support security policies, procedures, standards, and guidelines; monitor incident response queues and produce reports and metrics.

Requirements

4 to 7 years of IT Security experience.
Expert knowledge of CrowdStrike administration.
Expert knowledge of Tenable administration (often missed, and expected to be clearly demonstrated in your submission).
Strong attention to detail, with the ability to independently manage complex security tasks.
Excellent written and verbal communication skills to document findings, recommendations, and outcomes clearly.

Technologies

CrowdStrike
Tenable

Benefits

Opportunity to grow and operate an agency IT Security Program under the general guidance of the IT Strategy and Governance Officer.
Hands-on involvement in security design, implementation, monitoring, and incident response responsibilities that require advanced analysis and judgment.
Ability to lead and direct security control and technology implementation projects that directly affect organizational risk.
After a trial period, potential eligibility for remote work up to three days per week (must be a current WI resident; no relocation).
Contract timeline through 6/30/2027 with potential for at least a 1-year extension.

Location: Madison, WI (hybrid) | Job type: Contract | Experience: 4+ years

View full job page →

10d ago

Security Analyst

Beacon Technologies Madison, WI

Madison, WI

10d ago

$32 - $37/hr Contract Cyber Threat Analysis Cybersecurity Analysis Data Security

Apply Now

Job Description

The Security Analyst role at Beacon Technologies supports the ongoing growth and operation of the agency IT Security Program. This contract position combines advanced security analysis with hands-on administration of core security tools, plus participation in incident response, reporting, and the rollout of new security controls.

Location and Employment Details

Location: Madison, WI (hybrid)
Job type: Contract
Pay: USD 32 - 37 per hour
Minimum experience: 4 years
Contract duration: 6/30/2027, with potential for at least a 1-year extension
Residency requirements: Candidates must be current WI residents; Madison area candidates are strongly preferred; no relocation allowed
Remote eligibility: After a trial period, remote work may be available up to three days per week

Responsibilities

Administer CrowdStrike, Tenable, and Zscaler.
Conduct IT security risk assessments and develop, recommend, and implement remediation strategies.
Research vendor solutions and execute proof of concepts.
Coordinate with other teams to implement new technologies and remediate identified issues.
Monitor asset inventory, installed agents, and device status.
Review vulnerability dashboards and evaluate organizational impact as the threat landscape changes.
Monitor data inventories and policy violations, and produce reports and metrics.
Author IT security and compliance policies, procedures, standards, and guidelines.
Monitor and process incident response queues.
Manage endpoint firewall operations and adjust configurations as necessary.
Perform work both independently and as part of a team.

Required Qualifications

IT Security experience: 4 to 7 years
CrowdStrike administration: expert knowledge
Tenable administration: expert knowledge
Skills: strong attention to detail
Communication: excellent written and verbal communication skills

Technology Focus

CrowdStrike
Tenable
Zscaler

Nice to Have

CISSP or equivalent: 1 year

Benefits

Cover parking costs, or arrange a reimbursement agreement with the supplier
Some free street parking in the vicinity, or paid onsite daily parking

Interview Process

Interviews conducted with teams and camera on

View full job page →

1mo ago

Principal Application Security Analyst

Wis Phys Svc Ins Corp Madison, WI

Madison, WI

1mo ago Closed

$135k - $165k/yr Full time Application Security Ci/cd Security Cybersecurity Tools

This position is no longer accepting applications (closed Oct 22, 2026).

Job Description

The Principal Application Security Analyst will design and run WPS’s enterprise application security program with a focus on reducing application risk across the SDLC. This individual-contributor role sits within the Cyber Threat Management team and combines application security testing, triage, developer enablement, and risk-focused reporting.

Role Overview

This position builds and operates the enterprise Application Security program, using secure-development standards to improve application risk posture throughout the software development lifecycle. The analyst manages day-to-day application-security testing and triage, engages developers to support secure coding, and helps translate enterprise security requirements into practical testing criteria.

Key Responsibilities

Build and operate WPS’s enterprise Application Security program to reduce application risk by operationalizing secure-development standards, strengthening developer secure-coding practices, running application-security testing tools, and reporting outcomes to technical, managerial, and executive audiences.
Partner with Cyber Trust & Architecture to translate enterprise security standards into developer guidance and actionable testing criteria.
Work independently with developers to interpret application security findings and communicate risk across multiple levels of the organization.
Manage day-to-day application-security testing, triage, and developer engagement independently, while collaborating with Cyber Trust & Architecture on standards interpretation and with the Manager, Cyber Threat Management on program priorities.
Operationalize secure-development standards by strengthening secure-coding practices, executing application-security testing using approved tooling, and providing reporting to technical, managerial, and executive stakeholders.
Coordinate remediation of application vulnerabilities with developers and system owners, prioritize using actual exploitability and business risk, and validate fixes through retesting.

Required Qualifications

U.S. Citizenship required due to Department of Defense restrictions.
Bachelor’s degree in Cybersecurity, Computer Science, Software Engineering, Information Technology, Information Systems, or a related field, or an equivalent combination of education and relevant work experience.
5 or more years of progressive experience in application security, software security, DevSecOps, or a related technical security discipline.
Hands-on experience with application-security testing technologies such as SAST and DAST, including the ability to tune tools, independently validate findings, and translate cybersecurity standards and technical requirements into developer guidance and secure-coding training.
Proficient knowledge of common application vulnerabilities and attack techniques, potentially including Authentication / Authorization, Injection, Session management, API security, insecure dependencies, and related topics.
Knowledge of modern software development methodologies, CI/CD pipelines, APIs, and cloud-based application environments to integrate security testing into the development lifecycle.
Strong analytical skills to distinguish exploitable vulnerabilities from false positives and prioritize remediation based on actual risk.
Strong communication, problem solving, and decision-making skills.
Wired (ethernet cable) internet connection from your router to your computer, with high speed cable or fiber and minimum internet performance of 10 Mbps downstream and 1 Mbps upstream (verifiable at https://speedtest.net).
Please review Remote Worker FAQs: https://secure.wpsic.com/files/remote-work-faqs.pdf.

Preferred Qualifications

Knowledge of OWASP Top 10, OWASP API Security Top 10, CWE, CVSS, and MITRE ATT&CK.
Professional certification such as CSSLP, GWAPT, GWEB, or OSWE.

Technologies

SAST, DAST, SCA
API and secrets scanning
CI/CD pipelines, APIs, cloud-based application environments
OWASP Top 10, OWASP API Security Top 10, CWE, CVSS
MITRE ATT&CK
CSSLP, GWAPT, GWEB, OSWE

Work Location

Hybrid work available; employees should live within the state of Wisconsin.
Employees within 45 miles of WPS Headquarters (1717 W. Broadway in Madison, WI, 53713) are expected to work in office 3 days per week on a regular basis.

Compensation and Benefits

Salary: USD 135,000 - 165,000 per yearly
Remote and hybrid work options available
Performance bonus and/or merit increase opportunities
401(k) with a 100% match for the first 3% of your salary and a 50% match for the next 2% of your salary (100% vested immediately)
Competitive paid time off
Health insurance, dental insurance, and telehealth services start DAY 1
Professional and Leadership Development Programs
Additional benefits available at: https://www.wpshealthsolutions.com/careers/

How You Know This Role Fits

Operate, tune, and continuously improve enterprise application security testing capabilities (SAST, DAST, SCA, API and secrets scanning), distinguishing exploitable vulnerabilities from false positives and integrating testing into the development and CI/CD lifecycle.
Translate enterprise application-security standards and secure-by-design requirements into practical developer guidance, testing criteria, and implementation practices across the software-development lifecycle with Cyber Trust & Architecture.
Develop and deliver developer-focused secure-coding education using real vulnerability trends and hands-on guidance to help developers meet enterprise security standards.
Create and maintain technical, managerial, and executive reporting that converts application-security findings, vulnerability trends, and standards adoption into actionable, risk-based information.
Coordinate vulnerability remediation with developers and system owners by prioritizing based on exploitability and business risk, then validate fixes through retesting.
Apply current threat intelligence and attacker techniques to application-security testing and priorities in partnership with Cyber Trust & Architecture, Cyber Risk & Assurance, and development teams.

View full job page →

1mo ago

Cybersecurity Analyst

University of Wisconsin–Madison Madison, WI

Madison, WI

1mo ago Closed

$95k - $105k/yr Full time Cyber Investigation Cyber Threat Analysis Cybersecurity Tools

This position is no longer accepting applications (closed Sep 30, 2026).

Job Description

Cybersecurity Analyst role at the University of Wisconsin-Madison for onsite work in Madison, WI supporting CALS security operations, threat monitoring, and incident coordination.

Responsibilities

Perform vulnerability-scanning analysis, test security controls, and document results from risk assessments
Recommend procedures to reduce the likelihood of future security incidents
Coordinate and support incident response efforts, escalating security incidents to senior staff
Develop and modify cybersecurity tools
Monitor daily system operations using intrusion detection and prevention systems and assess findings
Receive, process, and implement security change requests, including privilege access
Report application security concerns and support escalation paths
Support CALS IT staff with security-related endpoint and risk management questions
Assist with creation and adoption of divisional security policies, processes, and procedures
Facilitate security awareness training
Represent CALS in the cybersecurity community at UW Madison

Requirements

1 year of cybersecurity experience including:
- Vulnerability management
- Investigating and remediating virus or malware incursions
- Applying technical controls to endpoint devices
- Creating documentation to support these processes
Demonstrated strength in verbal and written communication skills for professional emails, documentation, and reports to internal and external audiences
Ability to respond to inquiries from colleagues, clients, and vendors and adjust communication style as needed
Attention to detail
Bachelor’s Degree preferred
Entry-level cybersecurity certification (CC, Sec+) preferred

Technologies

Intrusion detection and prevention systems

Compensation and Employment Details

Location: Madison, WI (onsite)
Employment type: Regular
Job category: Academic Staff
Job profile: Information Security Analyst II
Salary: USD 95,000 - 105,000 per year
Final salary depends on experience and qualifications

Benefits

Generous vacation, holidays, and paid time off
Competitive insurances and savings accounts
Retirement benefits

Preferred Qualifications

Experience working in IT in a higher education environment
Experience with data classification and cybersecurity risk management
Experience assessing and documenting technical compliance

License or Certificate

Entry-level cybersecurity certification (CC, Sec+) preferred

Application Process

Submit: Cover letter and Resume
Only one attachment field is available; upload all documents into the same field
All listed application materials must be received to be considered
Finalists may be asked to provide contact information for three references (one must be a current or former supervisor)
References will not be contacted without prior notice
Cover letter and resume should reflect experience related to the Qualifications section
Successful applicants are responsible for ensuring eligibility to work in the United States on or before the effective date; University sponsorship is not available

Additional Information

Criminal Background Check may be required
Evaluation Period may be required
Work schedule: 7:45am – 4:30pm, Monday through Friday
Occasional nights and weekends may be required

Contact

Sonia Parker, CALS HR Generalist
sonia.parker@wisc.edu
608-890-2547

View full job page →

2mo ago

Senior IT Security Analyst

Wis Phys Svc Ins Corp Madison, WI

Madison, WI

2mo ago Closed

$90k - $115k/yr Full time Ai Security Cloud Platforms Information Security

This position is no longer accepting applications (closed Sep 14, 2026).

Job Description

Wis Phys Svc Ins Corp is hiring a Senior IT Security Analyst to strengthen security governance across the organization, including policy management, compliance tracking, and reporting. This hybrid role is based in Madison, WI, and focuses on applying structured frameworks such as NIST CSF while supporting security awareness and responsible AI initiatives.

The Senior Security Policy Analyst will use ServiceNow and related modules to streamline how policies and controls are maintained, assessed, and monitored, helping the business stay prepared for audits and regulatory expectations.

Key Responsibilities

Develop, implement, and maintain security policies, standards, and procedures using ServiceNow to streamline policy administration, compliance tracking, and reporting.
Create and maintain corporate security policies, standards, procedures, and guidelines aligned to NIST CSF, regulatory requirements, and industry best practices.
Own the integration and management of security policies, controls, and risk assessments within ServiceNow IRM and Managed Documents.
Perform risk assessments, control evaluations, and gap analyses mapped to NIST CSF to support audit readiness and compliance initiatives.
Partner with IT, Risk, Compliance, and Business teams to support organization-wide policy adoption and awareness.
Produce clear, concise, and actionable security documentation, including policies, procedures, guidance, and reports.
Monitor adherence to internal policies and external regulatory requirements, identify gaps, and drive remediation efforts.
Generate reports and analytics on policy adherence, exceptions, and trends using ServiceNow dashboards and workflows.
Act as a subject matter expert for security governance, NIST CSF implementation, and security risk management best practices.
Mentor junior analysts on policy development, implementation, and effective use of ServiceNow.
Develop and maintain security awareness training programs to educate employees on corporate security policies, procedures, and best practices.
Support AI governance awareness programs covering responsible AI use, ethical considerations, and applicable regulatory requirements.
Update training materials as policies, regulations, and emerging AI or cybersecurity threats evolve.
Assess and monitor third-party vendors to ensure compliance with company security policies and applicable industry regulations.

Requirements

U.S. citizenship is required due to Department of Defense restrictions.
Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Network Security, or a related field (or equivalent combination of education and experience).
5+ years of experience in security policy, governance, risk, and compliance roles.
Strong knowledge of NIST CSF and AI governance principles, plus experience with frameworks such as ISO 27001, CIS, or SOC 2.
Knowledge of cloud security policies, configuration standards, and best practices for AWS, Azure, GCP, or SaaS applications to apply governance.
Demonstrated experience with ServiceNow IRM modules, including policy, risk, audit, and compliance workflows.
Ability to create professional, actionable security and risk governance documentation.
Experience developing and delivering security awareness training programs.
Excellent communication skills with the ability to engage technical and non-technical stakeholders.
Demonstrated experience developing and implementing security policies and standards in a highly regulated environment.
Strong analytical, organizational, and project management skills, with the ability to drive initiatives independently.

Technologies

ServiceNow, ServiceNow IRM, Managed Documents
ServiceNow dashboards and workflows
NIST CSF, AI governance principles
ISO 27001, CIS, SOC 2
AWS, Azure, GCP, SaaS

Location and Work Model

Hybrid work based in Wisconsin, with first consideration given to candidates living in the state.
Employees within 45 miles of WPS Headquarters (1717 W. Broadway in Madison, WI, 53713) are expected to work in office 3 days per week on a regular basis.
Second consideration will be given to remote candidates in Wisconsin, Illinois, Michigan, Minnesota, and Iowa.
If not regionally local, frequent monthly travel to WPS Headquarters is likely.

Compensation

USD 90,000 - 115,000 per year.

Benefits

Remote and hybrid work options available.
Performance bonus and/or merit increase opportunities.
401(k) with a 100% match for the first 3% of salary and a 50% match for the next 2% of salary (100% vested immediately).
Competitive paid time off.
Health insurance, dental insurance, and telehealth services start DAY 1.
Professional and Leadership Development Programs.
Review additional benefits: https://www.wpshealthsolutions.com/careers/

Remote Work Requirements

High speed cable or fiber connection.
Minimum internet speed: 10 Mbps downstream and 1 Mbps upstream (can be checked at https://speedtest.net).
Review Remote Worker FAQs: https://secure.wpsic.com/files/remote-work-faqs.pdf.

Additional Compliance and Screening Notes

From time to time, the role may provide support to federal health care programs and other governmental or regulated industries.
In accordance with law and/or contractual requirements, personnel may be subject to applicable federal regulations, agency contract requirements, and WPS internal policies covering data security, privacy, confidentiality, and program integrity.
WPS personnel are subject to mandatory enhanced screening and background investigation prior to access to information systems and/or sensitive data.

Preferred Qualifications

Familiarity with KnowBe4 or other security awareness platform tools.
Familiarity using AI to facilitate automated workflows.

View full job page →

2mo ago

Offensive Security Analyst

Sprocket Security Madison, WI

Madison, WI

2mo ago Closed

Full time Application Security Cybersecurity Tools Dynamic Application Security Testing

This position is no longer accepting applications (closed Sep 3, 2026).

Job Description

Sprocket Security is seeking an Offensive Security Analyst to act as the human judgment layer in an offensive automation pipeline for client-ready results.

Responsibilities

Triage, validate, and QA findings surfaced by Sprocket’s automation workflow
Reproduce and confirm true positives while eliminating false positives before results reach a client
Author and refine findings to client-ready quality, maintaining the Sprocket voice, then publish through the platform
Calibrate severity to real business impact using Sprocket standards, prioritizing practical impact over theoretical risk
Handle roughly 90% of findings independently, making accurate handle-versus-escalate decisions using platform workflow
Escalate the hard 10% to an Adversarial Engineer with full context attached
Provide pattern-level feedback to R&D and the Adversarial Engineering team to tune attack automations and reduce false positives
Log validation notes, flag false-positive patterns, and contribute to the knowledge base
Script away repetitive validation tasks wherever they appear
Collaborate with R&D and the Service Delivery team to improve the automation feedback loop and client experience
After triage is complete and capacity allows, help programmatically enhance the automation pipeline with new or updated capabilities, pairing with an Adversarial Engineer as needed
Attend daily standups, weekly 1:1s, monthly company calls, and all-hands

Requirements

Demonstrated experience triaging or reproducing vulnerabilities surfaced by a security tool (vulnerability scanner, SAST/DAST/SCA/IAST, or similar automation) in a professional setting
Some software programming experience, with Python preferred
Exposure to using Generative AI tools for day-to-day tasks, with Claude preferred
Strong Development, IT, or Infosec foundation plus genuine self-directed security study
Hands-on validation depth across common vulnerability classes, including OWASP Top 10, network, and authentication issues
Clear, detail-oriented written communication that remains effective under volume
Self-direction to manage a high-volume queue independently without hourly guidance

Technologies

Python
Claude
Generative AI
SAST
DAST
SCA
IAST
OWASP Top 10
Vulnerability scanner

Benefits

Unlimited and mandatory PTO for healthy work/life balance
Company matched 401k with immediate eligibility
75% company contribution for health insurance for employees and 50% for dependents
100% company contribution for dental and vision
Flexible working hours
Hardware and tools of your choice
Paid training, conferences, and certifications to support career development

Mission and Product Context

Company mission: help secure as many companies as possible by prioritizing penetration testing
Emphasis: offensive security for enterprises, building robust defense strategies based on individual business risk
Platform approach: an expert-driven Continuous Penetration Testing platform combining automated and manual testing
Your role: the human judgment layer who decides what is real, calibrates severity, and ensures findings read in the Sprocket voice before client delivery

Preferred

Security+, eJPT, CPTS, PNPT, or similar foundational credential
CTF achievements (HackTheBox, TryHackMe, PortSwigger Academy)
Degree in computer science, engineering, or IT
Interest in working toward OSCP or an equivalent hands-on certification over time

Location: Madison, WI (onsite)

View full job page →

Cybersecurity Jobs in Madison, WI

Security Analyst

Security Analyst

Principal Application Security Analyst

Cybersecurity Analyst

Senior IT Security Analyst

Offensive Security Analyst

Get Cybersecurity Jobs in Madison, WI alerts