Pennsylvania

Cybersecurity Jobs in Pennsylvania

34 jobs found

Include remote jobs

Today

IT CYBERSECURITY SPECIALIST (INFOSEC)

US Defense Information Systems Agency Pennsylvania

Pennsylvania

Today

$115k - $180k/yr Full time Industrial Cybersecurity Information Security InfoSec

Apply Now

Job Description

The U.S. Defense Information Systems Agency is recruiting an IT Cybersecurity Specialist (InfoSec) to support the U.S. Cyber Command mission within CRED J10 and the DoD Cyber Defense Command (DCDC). Hired under the Cyber Excepted Service recruitment authority in 10 USC 1599f, this onsite role in Pennsylvania focuses on discovering and evaluating cybersecurity risks across critical infrastructure IT and OT environments, then translating findings into actionable guidance, policy, training, and technical analysis.

This position operates in a national security context and supports efforts to strengthen cybersecurity and improve security posture for critical facilities and control systems.

Core Responsibilities

Leads comprehensive discovery and evaluations of critical infrastructure, including Control Systems (CS), Industrial Control Systems (ICS), and Operational Technology (OT), to identify unique risks and vulnerabilities.
Provides expert guidance on IT/OT network and control system architecture, advising on cybersecurity measures that support the confidentiality, integrity, and safety of industrial environments.
Develops and implements policies and procedures to support the reliability and security of critical infrastructure and facility-related control systems.
Leads development of training materials and mentorship for junior assessors within the Critical Infrastructure Discovery and Evaluation (CIDE) program to build a certified and capable team.
Conducts in-depth technical analysis of industrial control systems and operational technology, producing detailed reports and recommendations to enhance security posture.

Minimum Eligibility and Qualifications

Must be a U.S. Citizen.
Males born after 12-31-59 must be registered with Selective Service or be exempt.
National security role that may require access to classified information; employment is contingent on a favorable suitability review and security clearance.
Per DoD 8140 policy series: completes Foundational Qualifications within 9 months and completes Residential Qualification requirements overall in 12 months.
Requires travel away from the normal duty station to locations within the continental United States (CONUS) up to 50% of the time.
Requires alternative or shift work schedule.
Requires IT-related experience demonstrating Attention to Detail, Customer Service, Oral Communication, and Problem Solving.
Education does not substitute for qualifying experience at the GG-12/13 grade level; combination of education and experience is not applicable.
Qualification at GG-12 requires work such as participating on teams conducting vulnerability assessments of control systems, assisting in development of OT security procedures, or analyzing industrial systems under supervision.
Qualification at GG-13 requires leading discovery or evaluations of ICS/OT environments, writing security policies for critical infrastructure, or designing training programs for assessors of non-traditional IT systems such as CS/ICS.

Assessment Criteria

Vulnerabilities Assessment
Technical Credibility
IT Policy and Planning (PLCYPLN)
Teaching Others
Analysis

Pay, Service Type, and Appointment Notes

Location: PA (onsite).
Salary: USD 114,695 - 180,186 per year (includes a Targeted Local Market Supplement (TLMS) per 10 USC 1599f and DoDI 1400.25, Volume 3006).
Excepted Service position; does not confer eligibility to be converted to the Competitive Service.
Recruited into the Cyber Excepted Service (CES) personnel system under 10 USC 1599f.
Current Federal Career/Career-Conditional employees are placed on an Excepted appointment.
A three-year trial period may be required if you have not previously completed a trial or probationary period in the excepted or competitive service.
Management may select at either grade level; recruitment may provide promotion opportunity to a targeted position without further competition when eligible and recommended by management.
Drug testing may apply for designated positions, including urinalysis prior to appointment or placement for required candidates.
The posting may be used to fill additional vacancies within 90 days of the closing date.

Required Documents

Resume: maximum two pages.
Completed initial Eligibility Questionnaire as instructed, with your resume demonstrating how your experience meets the requirements.
Transcripts (if applicable): required if substituting education for specialized experience.
SF-50: required for current and former federal employees, showing highest grade held on a permanent basis for at least 52 weeks, tenure, and appointment type.
Veterans Preference Documentation (if applicable): DD-214 (Member Copy 4), or a statement of service with dates and campaign medals; if service-connected disability, a VA letter dated 1991 or later.
PPP Self-Certification Checklists (if applicable) for Military Reserve (MR) and National Guard (NG) Technicians, MR and NG Technicians receiving disability retirement, and Retained Grade PPP eligible applicants.

How to Apply

Your resume must include, for each job listed: job title, duties, month and year start/end dates, and full-time or part-time status (including hours per week).
Do not include classified or government sensitive information, Social Security Number, photos, personal information such as age/sex/religious affiliation, or encrypted and digitally signed documents.
Complete the assessment questionnaire prompts and upload required documents, then submit by selecting Submit My Answers.
All applicants are encouraged to apply electronically.

View full job page →

1d ago

Cybersecurity Privileged Access Technical Analyst

Penn Medicine Philadelphia, PA

Philadelphia, PA

1d ago

Full time Cyberark Cybersecurity Tools Identity and Access Management

Apply Now

Job Description

This role focuses on engineering and operations for a Privileged Access Management (PAM) environment centered on CyberArk.

Responsibilities

Act as Vault Admin for onboarding accounts into CyberArk according to Penn Medicine requirements
Resolve CyberArk technical issues using debugging, research, and investigation
Carry out day-to-day duties in line with Penn Medicine and entity values, policies, and procedures
Maintain full operability of the CyberArk application
Execute project tasks supporting the PAM discipline at Penn Medicine
Promote CyberArk adoption across all Active Directory (AD) domains
Gather and translate business requirements into technical requirements and solution designs aligned to tactical and strategic approaches
Partner with internal teams to integrate CyberArk and expand use cases and features, supporting business value and risk reduction
Provide support to end users of the CyberArk application
Perform other duties as assigned to support the unit, department, entity, and health system organization

Requirements

Bachelor's Degree required
4+ years of IT and Cybersecurity experience required
1+ years of IAM cybersecurity experience required
1+ years of hands-on CyberArk experience required
2+ years of healthcare or related experience preferred
Certified Information Systems Security Certification preferred

Technical/Tooling Focus

CyberArk
CyberArk Vault Administrator capabilities (adding/removing users, onboarding/offboarding credentials, creating reports, troubleshooting)
PAM (Privileged Access Management)
AD (Active Directory)

Hours and Location

M-F, 8 hr days
Hybrid
3535 Market Street, Philadelphia, PA

Reporting and Organizational Details

Reports to the Cybersecurity Privileged Access Manager
Entity: Corporate Services
Department: Cybersecurity - IAM

Benefits

Comprehensive compensation and benefits program
Prepaid tuition assistance program

View full job page →

2d ago

Sr. SecOps Security Engineer

Police and Fire Federal Credit Union Bensalem, PA

Bensalem, PA

2d ago

Full time Cybersecurity Tools Data Security Endpoint Security

Apply Now

Job Description

Police and Fire Federal Credit Union is hiring a Sr. SecOps Security Engineer reporting to the Manager SecOps for an onsite role in Bensalem, PA.

Responsibilities

Design, implement, and manage Splunk SIEM for centralized security monitoring, advanced threat detection, and incident response
Manage and monitor IDS/IPS systems and respond to suspicious activity
Deploy and maintain network-based DLP solutions and develop policies to support data privacy
Perform regular vulnerability assessments using tools such as Nessus and support remediation efforts
Deploy zero-day threat protection and develop response strategies
Manage endpoint protection technologies to help guard against malware
Implement identity and access management solutions including Okta and RSA
Architect and configure secure network solutions, including firewalls, NGFW, and Web Content Filtering
Maintain security architecture documentation and generate regular security posture reports
Collaborate with IT and compliance teams by providing guidance on security best practices
Work with IT and compliance teams to assess and reduce security risk and support regulatory compliance

Requirements

Bachelor’s degree in Computer Science, Information Technology, or a related field
5+ years of hands-on information security engineering and administration experience
Demonstrated technical knowledge of perimeter security devices and configuration
Proficiency in virtualized environments, including substantial experience with VMware and other virtualization technologies
Analytic ability and good judgment to assess problems and situations
Effective business communication and technical writing skills
In-depth knowledge of financial institution regulations, including NCUA, GLBA, and PCI DSS
In-depth working knowledge of network perimeter security technologies, including:
- Web Filter (ForcePoint)
- SIEM (Splunk)
- Intrusion Detection/Protection Systems
- Network-based DLP
- Vulnerability scanners (Nessus)
- Zero Day technologies (FireEye/Trellix)
- Email security technologies
- Cisco Secure Workload (CSW)
- Cisco Identity Services Engine (ISE)
- XDR solutions (Cisco AMP, Trellix, MS Defender)
- FireEye (NX and CMS)
- MFA (Okta and RSA)
- StealthWatch
Working knowledge of Security Risk Assessment Methodology, vulnerability analysis, and strong knowledge of SIEM technology (Splunk)
Monitor and maintain network security appliances to ensure system integrity from internal and external entities
Document current and future InfoSec systems configuration and changes following PFFCU change control guidelines
Tier 2 problem escalation contact including rotating afterhours support
Develop a working knowledge of the business side of PFFCU and interface effectively with other IT teams
Strong project skills, including completing multi-month projects while maintaining focus
Experience working with third-party service providers
Ability to handle multiple projects, prioritize tasks, and think logically while visualizing abstract concepts
Ability to communicate technical information clearly to stakeholders at all levels and with vendors
Ability to work varying hours, including evenings and weekends
Participation in an on-call rotation
Core hours: Monday-Friday, 8:00 AM – 4:00 PM

Technologies

Splunk
Firewalls, NGFW
Web Content Filtering, ForcePoint
Intrusion detection/protection systems
Data Loss Prevention, network-based DLP
Nessus
Zero-day threat protection, FireEye/Trellix
Endpoint protection technologies
Okta, RSA
Security Information and Event Management (SIEM)
Identity and access management (IAM) solutions
VMware, virtualization technologies
NetFlow Visibility
Zero Day platform
FireEye (NX and CMS)
StealthWatch
MFA (Okta and RSA)
Cisco Secure Workload (CSW)
Cisco Identity Services Engine (ISE)
XDR solutions (Cisco AMP, Trellix, MS Defender)

Benefits

Excellent medical, dental, vision benefits: 75% to 90% of premiums covered by PFFCU
401K: PFFCU contributes an automatic 6% after 1 year regardless of employee contribution

View full job page →

3d ago

Application Security Engineer

Solventum Williamsport, PA 🇺🇸 Remote

Williamsport, PA

3d ago

$126k - $173k/yr Full time Application Security Cloud Platforms Cybersecurity Tools

Apply Now

Job Description

Solventum is seeking an Application Security Engineer to help protect healthcare information systems by strengthening application security processes and tooling. This remote role in Pennsylvania focuses on operating application security environments, running authenticated and unauthenticated DAST scans, and supporting validation, remediation tracking, and compliance reporting.

What You’ll Do

Operate and enhance application security tool environments.
Write automation scripts for recurring tasks, with Python preferred.
Set up and run authenticated and unauthenticated dynamic application security testing (DAST) against web applications and APIs using approved tools.
Manage scan scheduling, configuration, and coverage across application security tool environments.
Tune scanning profiles to reduce false positives and improve detection accuracy.
Ensure DAST scanning aligns with release cycles and risk-based scanning requirements.
Validate DAST findings to confirm exploitability and business impact.
Categorize vulnerabilities using industry standards such as OWASP Top 10.
Prioritize findings based on risk, application criticality, and exposure.
Eliminate false positives and duplicate findings prior to developer handoff.
Partner with development and platform teams to explain DAST findings and expected remediation.
Track remediation progress and verify fixes through re-scans or targeted validation.
Maintain accurate vulnerability records in enterprise tracking systems.
Escalate overdue or high-risk vulnerabilities according to policy.
Work with application teams to validate software meets security guidelines and compliance standards including HIPPA, SOC II, GDPR, NIST 800-53, and FedRAMP.
Build solutions that collect and present vulnerability and compliance data for Solventum leadership.

Requirements

Bachelor’s Degree and 7 years of experience in application security.
3 years experience administering, running, and analyzing DAST tools.
Knowledge of AWS or Azure cloud environments.
Familiarity with software security requirements used in industry compliance programs such as NIST, HITRUST, and FedRAMP.
Experience developing or testing RESTful APIs, including understanding Postman and/or Swagger files.
Ability to obtain and maintain a Public Trust clearance.

Tools and Technologies

Python
DAST
AWS, Azure
Postman, Swagger
RESTful APIs
Qualys, Tenable

Compensation and Work Details

Location: Pennsylvania (remote)
Work location: Remote, US only
Salary: USD 125,600 - 172,700 per year (includes base pay plus variable incentive pay, if eligible)
Travel: No travel required
Relocation assistance: Not authorized

Benefits

Medical, Dental & Vision
Health Savings Accounts
Health Care & Dependent Care Flexible Spending Accounts
Disability Benefits
Life Insurance
Voluntary Benefits
Paid Absences
Retirement Benefits

Onboarding requirement: new employees hired for this position will be required to travel to a designated company location for on-site onboarding during their initial days of employment. This applies to new hires with a start date of October 1st 2025 or later.

Application note: your application may not be considered if you do not provide your education and work history, either by uploading a resume or entering the information into the application fields directly.

View full job page →

6d ago

Lead Security Engineer

NTT DATA Services, LLC Fort Washington, PA

Fort Washington, PA

6d ago

$126k - $210k/yr Full time Senior Cybersecurity Tools Data Security

Apply Now

Job Description

NTT DATA Services, LLC is seeking a Lead Security Engineer to oversee day-to-day security operations, alert response, and platform maintenance from a hybrid site in Fort Washington, PA. This senior role provides technical leadership in security operations and incident response, guiding investigations, containment, and remediation. The position offers a salary range of USD 126,225 to 210,375 annually.

Responsibilities

Serve as the technical lead for security operations and incident response
Assist in investigation, containment, and remediation of severity incidents
Design, implement, and tune security controls across identity, endpoint, email, network, and SIEM platforms
Maintain and improve detection quality, response playbooks, and operational documentation
Participate in after-hours on-call rotation and provide escalation leadership

Requirements

7+ years of security engineering or security operations experience

Technologies

SIEM platforms

Benefits

Medical, dental, and vision insurance with an employer contribution
Flexible spending or health savings account
Life and AD&D insurance
Short-term and long term disability coverage
Paid time off
Employee assistance
Participation in a 401k program with company match
Additional voluntary or legally-required benefits
Incentive compensation eligibility

Additional Skills

Strong incident response and remediation background
Experience designing and maintaining enterprise security controls
Excellent troubleshooting and communication skills

View full job page →

6d ago

Systems Sales Engineer - IT, Networking, & Cybersecurity

Lutron Electronics Co., Inc Coopersburg, PA

Coopersburg, PA

6d ago

Full time Building Technology Cybersecurity Training Data Security

Apply Now

Job Description

Join Lutron Electronics as a Systems Sales Engineer within the Commercial Applications team at our Global Headquarters in Coopersburg, PA. This role blends technical problem solving with a customer-focused mindset to deliver technology solutions and support strategic IT, networking, and security initiatives. You’ll collaborate across IT, engineering, and customer networks to drive design, validation, and successful outcomes on complex projects.

Overview

Lutron is seeking a Systems Sales Engineer to join the Commercial Applications team at our Global Headquarters in Coopersburg, PA. In this role, you will combine technical expertise, problem-solving abilities, and a customer-focused mindset to help deliver exceptional technology solutions. Working closely with customers, sales professionals, and internal IT, networking, and security teams, you’ll play a key role in supporting strategic projects and solving complex technical challenges. This position offers an opportunity to expand skills across multiple IT disciplines within a collaborative and innovative environment.

Responsibilities

Collaborate with Lutron’s IT and engineering teams as well as the customer’s IT/Networking/Security departments to lead technical solution design, validation, and sales success.
Act as a trusted technical advisor, providing system application expertise and solving complex customer challenges to remove sales barriers.
Develop and deliver training that improves the ability of Lutron sales and support teams to discuss networking and cybersecurity topics with customers.
Translate complex technical concepts into clear, practical language that can be understood by both technical and nontechnical audiences.
Continuously build knowledge and expertise across a broad range of IT and building technology domains.

Requirements

Bachelors degree in Computer Science/Engineering, Information Systems Technology, Management Information Systems, or related field of study required
Minimum 3.00 cumulative GPA required
Minimum 5 years work experience working in computer systems, programming language, operating systems, and/or databases required
Willingness to travel 10% of the time, sometimes with little or no notice
You are authorized to work in the U.S. and will not require Lutron to sponsor you for any work visa, such as an H-1B, either immediately or at any time in the future. Lutron does not offer work visa sponsorship for this position.

View full job page →

8d ago

Cybersecurity Analyst, Associate (Entry Level)

Naval Nuclear Laboratory West Mifflin, PA

West Mifflin, PA

8d ago

$64k - $98k/yr Full time Analyst Cloud Platforms Cybersecurity Tools

Apply Now

Job Description

Join Naval Nuclear Laboratory's Cybersecurity Operations Center onsite in West Mifflin, PA, where you will monitor security events in real time and develop your skills in a mission-driven environment. This entry level role provides hands-on incident response experience, collaboration with cybersecurity professionals and cross-functional IT teams, and a clear path to grow as a defender of the organization's security posture.

What you will do

Monitor and respond in real time to security tools (SIEM, IDS, IPS, firewalls, EDR), networks, and systems to identify potential incidents, threats, and vulnerabilities.
Perform initial triage and investigation to assess and respond to possible security events.
Collaborate with cybersecurity analysts, engineers, and cross-functional IT teams to strengthen the organization's security posture.
Troubleshoot and resolve issues with security systems and tooling.
Represent cybersecurity professionally on cross-functional IT project teams.
Support operations within a 24x7 Security Operations Center (SOC).

Requirements

Bachelor's degree from an accredited college or university in a related field
Master's degree from an accredited college or university in a related field

Technology we use

SIEM, IDS, IPS, EDR
Microsoft Sentinel
Defender XDR
Azure Automation
Azure Policy

Compensation and location

Salary range: USD 63,900 to USD 97,800 annually. Salary information provided is a general guideline; final compensation is based on candidate experience, qualifications, market conditions, and business considerations. Location: West Mifflin, PA onsite.