Overland Park, KS

Cybersecurity Jobs in Overland Park, KS

4 jobs found

Include remote jobs

3d ago

Global Application Security Lead

Lockton, Inc. Overland Park, KS

Overland Park, KS

3d ago

Full time Manager Ai Security Application Security

Apply Now

Job Description

Lockton, Inc. is hiring a Global Application Security Lead for a hybrid role in Overland Park, KS. This position drives application security and DevSecOps execution across business units and regions, with ownership of secure SDLC controls, security tooling operations, testing, and production hardening. You will lead hands-on technical work while managing an application security engineering function, partnering across engineering and security stakeholders, and translating technical outcomes into executive and audit-ready reporting.

Responsibilities

Own day-to-day execution of the application security and DevSecOps program across all business units and regions.
Embed security controls throughout the software development lifecycle, from secure design and threat modeling through static and composition analysis, dynamic testing, secrets management, and production hardening.
Manage the application security engineering team; set working standards for engineering teams; run the AppSec tooling estate; and perform and direct application-level testing.
Execute the phased application security roadmap set by the Global Enterprise Security Architect, including milestone delivery, dependencies, and status reporting.
Operate tiered application governance (T1/T2/T3), including risk tiering intake, tier-based control expectations, and periodic re-tiering of the application portfolio.
Define and maintain secure SDLC standards, secure coding guidelines, and pipeline control gates.
Track and report AppSec operational metrics including scan coverage, finding volume by severity, mean time to remediate, SLA adherence, and exception backlog.
Maintain the application security exception and risk acceptance register, escalating material risk to the Global Enterprise Security Architect.
Own the AppSec tooling estate end to end (SAST, SCA, DAST, secrets scanning, and container and IaC scanning), including deployment, tuning, rule management, and pipeline integration.
Lead tooling proof of concept exercises by defining evaluation criteria, running technical bake-offs, and producing recommendations for architecture review.
Perform and direct internal application penetration testing, manual code review, and threat modeling for Tier 1 and high-risk applications.
Triage findings across all sources, validate exploitability, remove false positives, and drive remediation with engineering teams.
Manage third-party penetration testing scoping, vendor coordination, finding validation, and retest closure.
Maintain guardrails for AI-assisted development, including approved AI coding tools, agentic tooling, MCP server usage, and dependency provenance controls covering supply chain and slopsquatting risk.
Provide technical mentorship on secure code review, exploitation technique, tooling operation, and finding write-up quality.
Build and develop the application security engineering team, including onshore staff and LGCC offshore engineering resources.
Own hiring and people practices for the function, including role definition, interview loop design, candidate assessment, onboarding, performance reviews, and career development.
Define career paths, technical skill matrices, and individual development plans for application security engineers, and manage team capacity against roadmap and inbound intake demand.
Build runbooks and playbooks to reduce dependence on individual knowledge for AppSec operations.
Coordinate across US, UK, MENA, and APAC time zones and partner with Engineering, DevOps, Platform, and Product teams to embed controls with minimal friction to release velocity.
Act as first-line technical escalation for application security findings, remediation disputes, and release blocking decisions, escalating unresolved risk decisions upward.
Support GRC and audit teams with evidence, control narratives, and testing artifacts for NYDFS 23 NYCRR 500, HITRUST, GDPR, and DORA obligations.
Support incident response for software-related incidents, including vulnerability triage, exploit analysis, and root cause contribution.
Translate technical findings into business impact for application owners and non-technical stakeholders.
Operate the Security Champions program with champion selection, enablement content, and recurring working sessions.
Deliver secure coding training and targeted enablement based on observed defect patterns.
Drive shift-left adoption so security defects are found and fixed during development rather than at release gates.

Requirements

10 years in application security, product security, or secure software engineering, including 2 years in a lead or management capacity.
Demonstrated people management experience, including hiring, performance management, and career development of security or engineering staff.
Experience leading distributed teams across multiple time zones, including offshore engineering resources.
Hands-on experience operating SAST, SCA, DAST, and secrets scanning tooling at enterprise scale, including pipeline integration and rule tuning.
Proven ability to perform manual secure code review and application penetration testing, with working command of Burp Suite Pro or equivalent.
Working knowledge of at least two of: .NET, Java, Python, JavaScript/TypeScript, Go.
Practical experience securing CI/CD pipelines and cloud-native workloads, with preference for Azure and Azure DevOps or GitHub Actions.
Fluency with OWASP Top 10, OWASP ASVS, OWASP SAMM or BSIMM, and CWE.
Experience supporting regulatory or certification audits in a regulated industry.
Ability to write clear, structured technical findings and standards documentation for both engineering and audit audiences.

Technologies

SAST, SCA, DAST, secrets scanning, container scanning, IaC scanning, Burp Suite Pro
.NET, Java, Python, JavaScript/TypeScript, Go
CI/CD pipelines, Azure, Azure DevOps, GitHub Actions
OWASP Top 10, OWASP ASVS, OWASP SAMM, BSIMM, CWE
AI-assisted development, agentic tooling, MCP server usage
SBOM, dependency provenance controls
NYDFS 23 NYCRR 500, HITRUST, GDPR, DORA

Position Details

Reports to: Global Enterprise Security Architect, Security Architecture and Engineering (SA&E).
Location: Kansas City, MO (in-office three days per week).
Travel: Periodic travel to regional technology hubs.
Coverage: US, UK, MENA, and APAC time zones.
Direct reports: 2 application security engineers, plus technical direction of LGCC offshore engineering resources.

Preferred Qualifications

Financial services, insurance, or other regulated industry experience.
Experience with software supply chain security, SBOM generation, and dependency provenance controls.
Experience defining controls for AI-assisted development tooling and AI-generated code review.
Certifications such as OSWE, OSCP, GWAPT, CSSLP, or CISSP.

First 12 Months - Success Measures

AppSec tooling deployed and integrated across 80% of Tier 1 and Tier 2 repositories with agreed scan coverage.
Risk tiering completed for the full application portfolio and control expectations published per tier.
Remediation SLAs defined, agreed with engineering leadership, and reported monthly.
Security Champions program operating with named champions in each major engineering group.
AI-assisted coding guardrails implemented and adoption measured across the developer population.
Team structure, role expectations, and individual development plans established for all direct reports.

View full job page →

4d ago

Senior Security Analyst

TENEX.AI Overland Park, KS

Overland Park, KS

4d ago

Full time Senior Ai Security Cyber Security

Apply Now

Job Description

Senior Security Analyst role on the Security Operations Center (SOC) team focused on threat monitoring, incident response, and AI/ML-enhanced detection using Google SecOps and Chronicle.

Responsibilities

Monitor security alerts and events across the enterprise network using traditional tools and AI/ML-powered detection systems.
Perform triage, investigation, and event correlation to assess severity and potential impact.
Use Google Chronicle for threat intelligence and log analysis to improve visibility and incident insights.
Apply AI to detect patterns, anomalies, and behaviors that may indicate security incidents, with a focus on reducing false positives and improving detection accuracy.
Participate in on-call rotations and support team scheduling for critical incidents as needed.
Investigate and analyze security incidents and breaches, using AI to automate initial analysis and strengthen threat hunting.
Respond to incidents according to established procedures, including containment, eradication, and recovery.
Conduct root cause analysis and forensic investigations to identify attack vectors and recommend mitigations.
Leverage Google SecOps and Chronicle to centralize security data, correlate events, and speed up response workflows.
Use machine learning approaches to identify emerging threats and trends and provide actionable guidance for response.
Work with Google SecOps platform tools to streamline operations, improve threat visibility, and automate workflows.
Collaborate with IT, Security, and Data Science teams to integrate Chronicle capabilities into the SOC.
Optimize Chronicle for log management, threat hunting, and advanced analytics.
Develop and maintain automated workflows for common security incidents using AI for intelligent decision-making and faster response.
Automate routine SOC tasks including log analysis, incident classification, and threat intelligence enrichment via Google SecOps and Chronicle integrations.
Create detailed incident and threat intelligence reports that integrate AI-driven findings.
Prepare performance and security posture reporting for internal stakeholders, including highlights of AI-driven improvements and mitigation outcomes.
Generate and present reports on threat trends and SOC operations for internal stakeholders and customers.
Recommend security improvements and contribute to SOC playbook development.
Share knowledge of AI-powered security techniques and Google SecOps tooling with SOC team members to improve detection and response capabilities.

Requirements

Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent work experience.
Relevant certifications are a plus (examples: CISSP, CISM, CEH).
4+ years of experience in a Security Operations Center (SOC) or similar security-focused role.
Hands-on experience with security analytics, log management, threat hunting, and incident response.
Interest in applying automation, artificial intelligence, and machine learning to cybersecurity tasks (threat detection, anomaly detection, security automation).
Strong understanding of cybersecurity concepts and frameworks (examples: NIST, Mitre, ISO, Kill Chain).
Experience with security tools such as IDS, SIEM, and security automation platforms.
Proficiency in scripting languages for automation and integration (examples: Python, PowerShell).
Knowledge of security technologies including firewalls, endpoint protection, IDS/IPS, and threat intelligence platforms.
Strong analytical and problem-solving skills.
Excellent communication skills for working with internal teams and external customers.
Ability to work under pressure in a fast-paced, dynamic environment.

Preferred Skills

Experience with SOAR (security orchestration, automation, and response) platforms.
Exposure to cloud security platforms (examples: AWS, Azure, Google Cloud) and associated risks.
Hands-on experience with Google SecOps and Chronicle for centralized threat intelligence and event correlation (preferred).
Hands-on experience with Microsoft security platforms (examples: Sentinel, Defender) is a plus.

Technologies

Google Chronicle, Google SecOps, AI, machine learning (ML)
Python, PowerShell
NIST, Mitre, ISO, Kill Chain
SIEM, intrusion detection systems (IDS), IDS/IPS
Firewalls, endpoint protection, threat intelligence platforms
SOAR (security orchestration, automation, and response)
AWS, Azure, Google Cloud
Microsoft security platform (Sentinel, Defender)
CISSP, CISM, CEH

Benefits

Competitive salary and benefits package.
Opportunity to work with cutting-edge AI-driven cybersecurity technologies and Google SecOps solutions.
Collaboration with a team focused on continuously improving security operations.
Growth and development culture with opportunities to expand knowledge in AI, cybersecurity, and emerging technologies.

Location: Overland Park, KS (onsite) | Experience: 4+ years

View full job page →

1mo ago

Network Cybersecurity Architect

Black & Veatch Family of Companies Overland Park, KS

Overland Park, KS

1mo ago Closed

Full time Computer Network Defense Cybersecurity Architecture Cybersecurity Tools

This position is no longer accepting applications (closed Oct 25, 2026).

Job Description

Lead network cybersecurity architecture and engineering for critical-infrastructure clients, with technical leadership across the full delivery lifecycle and a focus on secure, resilient IP networks and OT/network security transitions.

Responsibilities

Perform network infrastructure cybersecurity assessments, including vulnerability assessments, risk evaluations, and architecture reviews
Produce technical reports documenting findings, risk impacts, and prioritized remediation actions
Support adversarial testing and security validation activities, including red team-style exercises where applicable
Partner with other teams to evaluate and secure SCADA, DCS, and industrial network architectures
Create and review system designs and provide cybersecurity input aligned with operational requirements such as availability and safety
Lead implementation of network cybersecurity infrastructure solutions, including configuration, integration, and deployment of security technologies such as firewalls, IDS/IPS, segmentation, and secure remote access for resilient OT environments
Support development and enhancement of cybersecurity standards, methodologies, and testing procedures
Contribute to business development, including proposal support, scope development, and client presentations
Attend internal and external project meetings and deliver cybersecurity subject matter expertise
Support cybersecurity assessments, including vulnerability scanning and, when applicable, penetration testing across network, system, application, and OT/ICS environments
Deliver high-quality technical work while aligning with project budgets, schedules, and quality requirements
Mentor junior staff and support knowledge sharing across teams
Stay current on cybersecurity technologies, threats, and industry trends relevant to IT and OT environments

Requirements

8+ years of relevant experience in network cybersecurity, penetration testing, or cyber assessments
Hands-on experience with network cybersecurity solutions including firewalls, IDS/IPS, NAC, secure remote access, zero trust network architectures, and SIEM
Strong networking fundamentals, including routing, switching, segmentation, and firewalls
Ability to complete pre-employment onboarding requirements if selected, which may include background check, drug screen, and motor vehicle records search, in compliance with applicable laws and regulations

Relevant Technologies

Firewalls, IDS/IPS, segmentation, secure remote access, NAC, zero trust network architectures, SIEM
SCADA, DCS, OT/ICS, NERC CIP, NIST CSF, IEC 62443
Penetration testing methodologies, vulnerability assessment tools
OSCP, GPEN, GWAPT, CISSP, CISM, GICSP

The Opportunity

Lead and expand Black & Veatch’s network cybersecurity architecture and engineering capabilities for critical-infrastructure clients
Provide technical leadership across the full project lifecycle, including pursuit development, requirements definition, network cybersecurity assessments, architecture and detailed design, implementation oversight, testing, commissioning, and operational transition with a network security focus
Lead cybersecurity design and delivery of secure, resilient IP network environments, including segmentation, industrial DMZs, electronic security perimeters, network access controls, secure remote access, network management security, encryption, monitoring integration, and related network cybersecurity technologies
Help develop NCS standards, methodologies, quality processes, service offerings, and personnel for the Network & Cybersecurity Services team
Coordinate with the Industrial Cybersecurity Services team on engagements involving cybersecurity program strategy, governance, risk, compliance, policy, application or system security, incident-response planning, managed security services, or broader adversarial testing

Team and Work Environment

BV Operations: skills aligned to projects across all BV supported market sectors
Instrumentation & Control department: global team specializing in instrumentation, control systems, wireless communications, networks, and cybersecurity for BV Market Sectors and Solutions
Hybrid or flexible work options may be offered after the first 90 days based on manager discretion, job performance, and work assignments

Preferred Qualifications

Bachelor’s degree in Cybersecurity, Information Systems, Engineering, or related discipline preferred, or equivalent experience
Familiarity with Industrial Control Systems technologies including SCADA, PLCs, and industrial networks
Knowledge of standards and frameworks such as NERC CIP, NIST CSF, and IEC 62443
Experience developing cybersecurity standards, tools, or internal methodologies
Relevant certifications such as OSCP, GPEN, GWAPT, CISSP, CISM, or GICSP
Strong consulting and client-facing experience
Ability to translate complex technical concepts into clear, actionable recommendations
Familiarity with penetration testing methodologies and vulnerability assessment tools, with ability to contribute to testing across IT and OT/ICS environments

Benefits

Health care benefits including medical, dental, and vision insurances
Disability
Robust wellness program
Flexible work schedules
Paid vacation and holiday time
Sick time; dependent sick time
Company-matched 401k plan
Adoption reimbursement; tuition reimbursement
Vendor discounts
Employment referral program
AD&D insurance
Pre-taxed accounts
Voluntary legal plan
B&V Credit Union
Performance-based bonus program (professionals may be eligible)
100 percent ESOP-owned company (stock ownership)

View full job page →

2mo ago

Security Analyst Future

Netsmart Technologies Overland Park, KS

Overland Park, KS

2mo ago Closed

Internship Cloud Platforms Cloud Security Cybersecurity Tools

This position is no longer accepting applications (closed Sep 3, 2026).

Job Description

Netsmart Technologies’ FUTURES internship program offers an 8 week, onsite experience in Overland Park, Kansas, built around hands on learning, professional development, and real collaboration. As a Security Analyst Future intern, you’ll work closely with IT Security and Compliance and other IT and business teams to help raise and support the organization’s security posture, with exposure to a broad set of security technologies and how security requirements are applied day to day.

What you’ll do

Build working relationships with members of IT Security and Compliance, Enterprise Architecture, Network Engineering, Support Operations, and teams across IT and the business to strengthen the company’s security posture.
Develop exposure to enterprise firewall clusters, VPN devices, IDS/IPS, SIEM, and vulnerability assessment tools and solutions, along with security systems and solutions.
Learn how security engineering requirements, standards, guidelines, and processes support consistent practices across the enterprise.
Participate in team review of applicable security support models and identify opportunities for ongoing process improvement.
Monitor and review requests with teammates to help ensure changes do not introduce security and/or compliance risks and align with security requirements, guidelines, and compliance expectations.

Learning and technology exposure

During the internship, you will gain familiarity with security and cloud-related environments, including AWS concepts and services such as VPCs, SES, RC2, R3, Route 53, and Cloud Formation, plus Azure equivalents. You’ll also work with Identity Management, Access Management, and Directory Services technologies including LDAPv3, along with SQL and NoSQL.

What we’re looking for

Working toward a bachelor’s degree in Information Security or Computer Science with emphasis in Information Security.
Demonstrated passion for cybersecurity, technology, solution design, and self-study.
Involvement in school clubs or organizations related to security.
Programming/scripting experience is a plus.
Desire to learn regulatory compliance requirements including PCI, HIPAA, SSAE Option 18, and NIST standards.

FUTURES internship program details

8 week program based at the Netsmart Solutionarium in Overland Park, Kansas (onsite).
Balanced learning approach including on the job learning, hands on client based work, professional development opportunities, and leadership exposure.
Includes several social and networking events throughout the summer.
Housing options are available for candidates not local to the Kansas City metro, based on criteria.

Notes

This position is not available for visa sponsorship.

View full job page →

Cybersecurity Jobs in Overland Park, KS

Global Application Security Lead

Senior Security Analyst

Network Cybersecurity Architect

Security Analyst Future

Get Cybersecurity Jobs in Overland Park, KS alerts