Olympia, WA

Cybersecurity Jobs in Olympia, WA

3 jobs found

Include remote jobs

Today

Senior Offensive Security Engineer

Unity Technologies SF Olympia, WA

Olympia, WA

Today

$160k - $305k/yr Full time Senior Ai Security Application Security

Apply Now

Job Description

Unity Technologies SF is hiring a Senior Offensive Security Engineer to lead realistic adversary emulation and red teaming across its products and environments.

Responsibilities

Plan and run objective-based red team operations against cloud, corporate, and production environments, aligned to Unity-relevant threats.
Execute purple team exercises with Security Operations to improve detection and incident response.
Perform deep security testing across Unity products and services, including web applications and APIs, engine, editor, and client runtime, ads and monetization, and developer-facing platforms.
Discover and demonstrate attack paths across multi-cloud environments (GCP, AWS, Azure), Kubernetes and containers, CI/CD pipelines, identity, and secrets.
Test LLM integrations, AI-native products, and agent workflows for issues including prompt injection, data leakage, tool misuse, and excessive permissions.
Produce clear, prioritized findings with realistic impact; partner with owning teams on remediation and retest to confirm fixes.
Build and maintain tools, scripts, and automation to scale adversarial engineering and convert repeat findings into continuous checks.

Requirements

6+ years in offensive security (red teaming, penetration testing, purple teaming, or vulnerability research), including experience leading engagements end to end.
Hands-on experience attacking cloud environments (GCP, AWS, or Azure) including identity, Kubernetes and containers, and CI/CD.
Strong web application and API security testing skills, including ability to identify logic flaws, not only scanner output.
Solid scripting or programming ability (e.g., Python, Go, or C/C++) to build tools and exploits.
Experience running adversary emulation or red team operations against realistic objectives, plus collaboration with defenders in purple team exercises.
Clear written and verbal communication, including explaining technical risk to engineers and non-technical leaders.
Enjoys working in a team: sharing ideas, offering support, and celebrating wins.

Technologies

Python, Go, C/C++
GCP, AWS, Azure
Kubernetes, CI/CD
LLM integrations

Success looks like in the first 12 months

Create a risk-based testing plan across Unity’s highest-value targets, aligned with security leadership and owning engineering teams.
Complete several end-to-end red team and/or adversary emulation operations with executive-ready readouts and tracked remediation.
Drive measurable detection improvements through purple team exercises with Security Operations.
Deliver reusable tooling or automation that converts recurring finding classes into continuous checks.

What you bring

Experience testing LLM-based products, AI agents, or AI-assisted developer tools.
Background in reverse engineering, binary exploitation, or game client and anti-cheat security.
Experience in gaming, ad tech, or large developer-facing platforms.
Examples such as bug bounty, CVEs, conference talks, published research, or open-source security tooling.
Relevant certifications are useful (OSCP, OSEP, OSWE, CRTO) but won’t replace a track record.

How you work

Thinks like an attacker and acts as a partner.
Targets real impact over finding volume; distinguishes issues that matter from those that only look good on paper.
Operates safely in production using clear rules of engagement.
Automates work and repeatable testing.
Builds trust with engineering teams and holds a high bar on remediation completion.

Benefits

Comprehensive health, life, and disability insurance
Commute subsidy
Employee stock ownership
Competitive retirement/pension plans
Generous vacation and personal days
Support for new parents through leave and family-care programs
Office food snacks
Mental Health and Wellbeing programs and support
Employee Resource Groups
Global Employee Assistance Program
Training and development programs
Volunteering and donation matching program

Location: Olympia, WA (onsite)

Salary: USD 160,300 - 305,400 per year

Minimum experience: 6 years

View full job page →

19d ago

IT Auditor 3+ (Cybersecurity Audit - Internal Only)

Washington State Health Care Authority Olympia, WA

Olympia, WA

19d ago

$7,592 - $10,204/mo Full time Auditor Cybersecurity Audit Information Security

Apply Now

Job Description

Washington State Health Care Authority is hiring an IT Auditor 3+ for the Cybersecurity Audit team, internal only, serving clients across Washington State government.

Responsibilities

Own audit planning through the completion of cybersecurity audit deliverables, including the final audit presentation for engagements of any size and complexity.
Independently lead cybersecurity performance audits covering increasingly complex environments, potentially involving multiple state agencies, local governments, or multiple levels of government.
Provide expert technical security services as part of cybersecurity audits to improve clients’ IT security posture.
May lead larger and more complex audits and coordinate other auditors to achieve overall audit objectives under direction of an assistant audit manager or audit manager.
May lead audits and projects that include multiple IT audit staff, with responsibility for the entire audit engagement.

Requirements

Bachelor’s degree and four years of audit experience, including at least two years in IT audit.
Must have obtained at least one of the following: a relevant professional certification (including but not limited to CISA, GSEC, or CISSP) or a master’s degree in data analytics, cybersecurity, or a closely related field.
Degree in a field applicable to IT security and/or analyzing government programs is strongly preferred.
Preference may be given for experience with governments, performance auditing and/or accountability auditing, and technical knowledge related to cybersecurity.
Relevant professional work and/or volunteer experience may substitute for education on a year-for-year basis.

Team Cybersecurity Audit

Completes cybersecurity performance audits with State and Local governments to strengthen IT security.
Cybersecurity audits examine IT systems to identify weaknesses attackers could exploit and propose solutions to help harden those systems.

Mission

Collaborate with governments to provide actionable recommendations that improve the security posture of IT systems supporting essential government operations and services.

How This Will Be Accomplished

Build trust and relationships with clients and partners.
Share knowledge on cybersecurity leading practices and available resources.
Scope audits flexibly to meet each auditee’s individual needs.
Complete quality and timely audits with prioritized recommendations.
Refine methods and approaches to remain relevant and address emerging needs.

Vision

Secure government.

Location and Compensation

Location: Olympia, WA (hybrid)
Salary: USD 7,592 - 10,204 per monthly
Pay note: Pay for an IT Auditor 3+ will include assignment pay in addition to the salary listed.

Benefits

Flexible schedules and hybrid work environment
Full benefits package
Paid vacation, sick leave, and holidays
Growth and development opportunities, including 80+ hours of training each biennium
Educational and professional certification reimbursements
Agency-wide commitment to diversity, equity, inclusion, and respect in the workplace
Medical (including vision), dental, and basic life insurance
Medical flexible spending account
Basic life and long-term disability insurance (option to purchase additional coverage amounts)
Dependent care assistance
Other insurance coverage for auto, boat, home, and renter insurance through payroll deduction
Washington State Employee Assistance Program
Membership in Washington Public Employees' Retirement System (PERS)
Option of two employer-contributed retirement programs for new employees
Deferred Compensation Program (DCP)
Coverage by Social Security and Medicare
Public Service Loan Forgiveness (if eligible and meet qualifying criteria)
Paid holidays and one paid personal holiday per calendar year
Sick Leave: eight hours per month for full-time employees
Vacation (Annual Leave) accrual rates per WAC 357-31-165(1) or applicable collective bargaining agreement (CBA)
21 days paid military leave per year
Five (5) days paid bereavement leave

Application Information

Submit: (1) a completed application through careers.wa.gov, including detailed responses to supplemental questions; and (2) a letter of interest addressing how you meet the qualifications listed in the announcement.
Degrees awarded outside the United States must include a credential evaluation report.
If applying with Veteran’s Preference, attach a copy of Form DD214 showing honorable discharge.
Questions: applicationsunit@sao.wa.gov
Accommodation requests: call (360) 725-5618 or use the telecommunications relay service by dialing 7-1-1.

View full job page →

1mo ago

Senior Application Security Analyst

Washington State Health Care Authority Olympia, WA

Olympia, WA

1mo ago Closed

$99k - $148k/yr Full time Senior Application Security Cloud Platforms

This position is no longer accepting applications (closed Oct 23, 2026).

Job Description

Protect data and applications by embedding application security controls across the SDLC in Microsoft Azure and hybrid or multi-cloud environments. This Senior Application Security Analyst role supports secure software development and compliance for WAHBE, with an emphasis on threat modeling, vulnerability management, secure coding guidance, and continuous validation through CI/CD.

What you’ll do

Serve as a senior subject matter expert for application security across Microsoft Azure and cloud-native architectures, including hybrid and multi-cloud environments.
Coordinate application security assessments, including code reviews aligned to WAHBE security policies, NIST, OWASP, and regulatory compliance (including CMS and IRS), with a focus on API and microservices security.
Support implementation and continuous improvement of the Secure Software Development Lifecycle (SSDLC) by integrating security controls and best practices into development and deployment processes.
Partner with Delivery, architects, and DevOps engineers to embed security throughout the SDLC, including participation in threat modeling, security requirement reviews, and architecture discussions.
Review application and solution architectures to identify security weaknesses, attack surfaces, and insecure design patterns, and provide remediation recommendations.
Conduct security design reviews for web applications, APIs, microservices, containers, and serverless technologies to support secure implementation practices.
Develop, document, and enforce secure coding standards, secure design guidelines, and application security procedures to promote consistent and secure development.
Enhance and lead the Application Security and Penetration Testing program, including security and penetration testing and integrating automated security testing into CI/CD.
Perform vulnerability triage, validation, and risk analysis using security tools, threat intelligence, and manual analysis, including false-positive review and remediation prioritization.
Track remediation activities and work with development teams to support timely resolution or appropriate risk acceptance documentation; recommend compensating controls when needed.
Support monitoring and reporting by preparing vulnerability metrics, remediation status updates, trend analysis, and risk reports for leadership and stakeholders.
Develop and deliver secure coding awareness sessions and application security training materials for development and engineering teams.
Review Requests for Change (RFCs), product enhancements, and system modifications from a security perspective to ensure impacts and requirements are addressed.
Continuously monitor cloud and on-premises environments for security events and anomalies, investigate root causes and impacts, support containment and recovery, and contribute to incident reports including post-incident analysis and lessons learned.
Collaborate with Compliance, Risk Management, Audit, Infrastructure Security, and DevOps teams to support audits, regulatory compliance, and secure cloud adoption initiatives; ensure alignment with WAHBE security policies (including CMS and IRS).
Ensure security requirements are included in user stories and case development within Agile methodology (including misuse, abuse, and confuse cases).
Assess the security posture of new enterprise solutions for procurement by identifying security risks and providing secure cloud adoption guidance.
Provide technical consultation and assessments for cloud environments and containers, and help integrate application security into CI/CD as part of SSDLC, enforcing security in deployment workflows.
Assist in maintaining and updating security policies, procedures, and standards, support roadmap and strategy with the Application Security Lead, provide regular briefings, and stay current on emerging threats and technologies.

What you bring

Seven (7) years of information security experience in specialized roles such as security architecture and design, security control implementation, penetration testing, application security, vulnerability management, or incident response.
Knowledge of secure SDLC, secure architecture design, application security concepts, and cloud architecture, including DevSecOps practices and shift-left security integration.
Experience performing application security code reviews, roles and permissions matrix reviews, and practical application risk assessments using manual and automated secure code review methods.
Hands-on experience with vulnerability assessment tools including Nessus, Rapid7, Nmap, and Burp Suite, including SAST, DAST, and SCA.
Advanced understanding of application-layer attacks, API abuse, and software supply chain vulnerabilities.
Ability to apply strong analytical and problem-solving skills in complex scenarios.
Experience integrating security in infrastructure-as-code, CI/CD pipelines, and the software development lifecycle, including automated controls, continuous monitoring, security gates, and pipeline enforcement policies.
Interpersonal and collaboration skills with internal teams and external partners and vendors.

Technologies and standards you’ll work with

Microsoft Azure, cloud-native architectures, NIST, OWASP, CMS, IRS, Nessus, Rapid7, Nmap, Burp Suite, SAST, DAST, SCA, CI/CD, SSDLC, DevSecOps, infrastructure-as-code, and Agile.

Helpful background (desired)

Bachelor’s degree in engineering, security, or a technology-related field.
Experience with application security methodologies such as OWASP.
Experience in information security, data security, privacy, and data management, including secure handling of PII, application-level encryption, and key management.
Experience defining secure architectural requirements, security controls, and configuration standards in alignment with regulatory requirements.
Experience with threat modeling frameworks such as STRIDE and MITRE ATT&CK, including application-specific threat modeling, attack path analysis, and abuse case analysis.
Experience developing and updating security standards, procedures, awareness, and training programs, including secure coding standards and developer training.
Understanding of SIEM systems and Endpoint Detection & Response.
Experience managing cyber incident response, including coordination with development teams for rapid patching and hotfix deployment.

Working conditions

Core business hours are 8:00 a.m. to 5:00 p.m., Monday through Friday, with times requiring irregular hours.
Preferred duty station is Olympia, Washington headquarters with remote and in-person collaboration.
A hybrid remote and on-site schedule may be considered, but flexibility is required for in-office availability.
Travel is limited, with occasional trips and irregular hours for meetings or trainings.
Role requires standard office equipment, including setup for remote work, and responsibility for maintaining a safe, ergonomic, and secure workspace.

Special requirements and salary

A criminal background screen will be conducted for candidates under final consideration, and if hired, every five years of employment where highly sensitive data is processed or maintained. Results must meet Exchanges eligibility standards.
Salary: Full range $98,842 to $148,263 per year (midpoint $123,552). Hiring range $113,668 to $123,552 per year.

View full job page →

Cybersecurity Jobs in Olympia, WA

Senior Offensive Security Engineer

IT Auditor 3+ (Cybersecurity Audit - Internal Only)

Senior Application Security Analyst

Get Cybersecurity Jobs in Olympia, WA alerts