Williamsport, PA

Cybersecurity Jobs in Williamsport, PA

5 jobs found

Include remote jobs

Today

Application Security Engineer

Solventum Williamsport, PA 🇺🇸 Remote

Williamsport, PA

Today

$126k - $173k/yr Full time Application Security Cloud Platforms Cybersecurity Tools

Apply Now

Job Description

Solventum is seeking an Application Security Engineer to help protect healthcare information systems by strengthening application security processes and tooling. This remote role in Pennsylvania focuses on operating application security environments, running authenticated and unauthenticated DAST scans, and supporting validation, remediation tracking, and compliance reporting.

What You’ll Do

Operate and enhance application security tool environments.
Write automation scripts for recurring tasks, with Python preferred.
Set up and run authenticated and unauthenticated dynamic application security testing (DAST) against web applications and APIs using approved tools.
Manage scan scheduling, configuration, and coverage across application security tool environments.
Tune scanning profiles to reduce false positives and improve detection accuracy.
Ensure DAST scanning aligns with release cycles and risk-based scanning requirements.
Validate DAST findings to confirm exploitability and business impact.
Categorize vulnerabilities using industry standards such as OWASP Top 10.
Prioritize findings based on risk, application criticality, and exposure.
Eliminate false positives and duplicate findings prior to developer handoff.
Partner with development and platform teams to explain DAST findings and expected remediation.
Track remediation progress and verify fixes through re-scans or targeted validation.
Maintain accurate vulnerability records in enterprise tracking systems.
Escalate overdue or high-risk vulnerabilities according to policy.
Work with application teams to validate software meets security guidelines and compliance standards including HIPPA, SOC II, GDPR, NIST 800-53, and FedRAMP.
Build solutions that collect and present vulnerability and compliance data for Solventum leadership.

Requirements

Bachelor’s Degree and 7 years of experience in application security.
3 years experience administering, running, and analyzing DAST tools.
Knowledge of AWS or Azure cloud environments.
Familiarity with software security requirements used in industry compliance programs such as NIST, HITRUST, and FedRAMP.
Experience developing or testing RESTful APIs, including understanding Postman and/or Swagger files.
Ability to obtain and maintain a Public Trust clearance.

Tools and Technologies

Python
DAST
AWS, Azure
Postman, Swagger
RESTful APIs
Qualys, Tenable

Compensation and Work Details

Location: Pennsylvania (remote)
Work location: Remote, US only
Salary: USD 125,600 - 172,700 per year (includes base pay plus variable incentive pay, if eligible)
Travel: No travel required
Relocation assistance: Not authorized

Benefits

Medical, Dental & Vision
Health Savings Accounts
Health Care & Dependent Care Flexible Spending Accounts
Disability Benefits
Life Insurance
Voluntary Benefits
Paid Absences
Retirement Benefits

Onboarding requirement: new employees hired for this position will be required to travel to a designated company location for on-site onboarding during their initial days of employment. This applies to new hires with a start date of October 1st 2025 or later.

Application note: your application may not be considered if you do not provide your education and work history, either by uploading a resume or entering the information into the application fields directly.

View full job page →

5d ago

Security Assurance Penetration Tester

RELX Williamsport, PA

Williamsport, PA

5d ago

$72k - $119k/yr Full time Application Security Bash Burp Suite

Apply Now

Job Description

A hands-on Security Assurance Penetration Tester will join RELX/Elsevier's Security Engineering team in Pennsylvania on site. The role centers on performing security testing, validating vulnerabilities, and automating security assurance processes, with collaboration across product and development teams and a focus on GenAI security. Salary is USD 71,600 to 119,400 per year.

Responsibilities

Track and triage findings from third-party assessments, ensuring timely follow-up and remediation tracking.
Collaborate with development, platform, and product teams to communicate findings, oversee remediation efforts, and improve overall security posture.
Facilitate post‑assessment reviews and lessons learned sessions with development teams to identify recurring security issues and promote secure development practices.
Maintain program documentation, test records, and reporting artifacts.
Conduct penetration testing of web applications, APIs, cloud environments, and internal systems, escalating complex testing scenarios as needed.
Perform peer review of penetration testing deliverables, including test plans, findings, and final reports.
Participate in scoping exercises and contribute to the selection of appropriate testing methodologies.
Support security assessments of GenAI-powered applications and features, including LLM integrations, RAG pipelines, and AI agents.
Assist in testing for AI-specific vulnerabilities such as prompt injection, jailbreaking, insecure output handling, model data leakage, and training data poisoning.
Contribute to the development of internal GenAI security testing checklists and methodologies, aligned with frameworks such as OWASP Top 10 for LLMs.

Requirements

Experience in information security, penetration testing, or a related field. Experience or coursework in software development, DevOps, or scripting is highly desirable.
At least one relevant security certification (e.g., Security+, eJPT, PNPT, CEH, or equivalent) preferred; advanced offensive security certifications such as OSCP are a plus.
Foundational understanding of web application architecture, networking, and operating system security.
Familiarity with common penetration testing tools (e.g., Burp Suite, Nmap, Metasploit, Nuclei, or equivalent).
Working knowledge of OWASP Top 10, common CVEs, and vulnerability scoring frameworks (CVSS).
Scripting ability in at least one language (Python, Bash, PowerShell, or similar); development experience is a strong plus.
Basic understanding of cloud environments (AWS, Azure, or GCP) and associated security considerations.
Exposure to SAST/DAST tools and secure code review practices is desirable.
Awareness of GenAI security risks (prompt injection, LLM abuse, insecure AI integrations).

Technologies

Burp Suite
Nmap
Metasploit
Nuclei
Python
Bash
PowerShell
AWS
Azure
GCP
OWASP Top 10

Benefits

Annual incentive bonus
Country-specific benefits

About the Role

This role supports the offensive security function within Elsevier's Security Engineering team. You will perform hands-on security testing and peer review activities, validate vulnerabilities and security controls, and support the automation of security assurance processes. It is a hands-on opportunity for a motivated security professional eager to grow in a collaborative, fast-paced environment.

About the Team

The Security Assurance team supports the third-party penetration testing program, security control validation, and ongoing offensive security testing activities.

View full job page →

7d ago

Security Assurance Penetration Tester

Elsevier Williamsport, PA

Williamsport, PA

7d ago

$72k - $119k/yr Full time Application Security Cloud Platforms Cybersecurity Tools

Apply Now

Job Description

Based onsite in Pennsylvania, this security role sits within Elsevier’s Security Engineering team. The position offers a yearly salary range of USD 71,600 to 119,400 and focuses on hands-on security testing, vulnerability validation, and security control verification, with particular emphasis on GenAI security testing across LLMs, RAG pipelines, and AI agents in collaboration with development teams.

Responsibilities

Track and triage findings from third-party assessments, ensuring timely follow-up and remediation tracking.
Collaborate with development, platform, and product teams to communicate findings, monitor remediation efforts, and strengthen overall security posture.
Lead post-assessment reviews and lessons learned sessions with development teams to identify recurring security issues and promote secure development practices.
Maintain program documentation, test records, and reporting artifacts.
Conduct penetration testing of web applications, APIs, cloud environments, and internal systems, escalating complex testing scenarios as needed.
Perform peer review of penetration testing deliverables, including test plans, findings, and final reports.
Participate in scoping exercises and contribute to selecting appropriate testing methodologies.
Support security assessments of GenAI-powered applications and features, including LLM integrations, RAG pipelines, and AI agents.
Assist in testing AI-specific vulnerabilities such as prompt injection, jailbreaking, insecure output handling, model data leakage, and training data poisoning.
Contribute to the development of internal GenAI security testing checklists and methodologies aligned with OWASP Top 10 for LLMs.

Requirements

Experience in information security, penetration testing, or a related field; coursework or experience in software development, DevOps, or scripting is highly desirable.
At least one relevant security certification (e.g., Security+, eJPT, PNPT, CEH, or equivalent) preferred; advanced offensive security certifications such as OSCP are a plus.
Foundational understanding of web application architecture, networking, and operating system security.
Familiarity with common penetration testing tools (Burp Suite, Nmap, Metasploit, Nuclei, or equivalent).
Working knowledge of OWASP Top 10, common CVEs, and vulnerability scoring frameworks (CVSS).
Scripting ability in at least one language (Python, Bash, PowerShell, or similar); development experience is a strong plus.
Basic understanding of cloud environments (AWS, Azure, or GCP) and related security considerations.
Exposure to SAST/DAST tools and secure code review practices is desirable.
Awareness of GenAI security risks such as prompt injection, LLM abuse, and insecure AI integrations.

Technologies

Burp Suite
Nmap
Metasploit
Nuclei
Python
Bash
PowerShell
AWS
Azure
GCP
OWASP Top 10

Benefits

Annual incentive bonus
Country-specific benefits

About the Role

This position supports the offensive security function within Elsevier's Security Engineering team. It entails performing hands-on security testing, peer reviews, and validation of vulnerabilities and security controls, with a focus on automating security assurance processes. The role is hands-on and suited for security professionals who thrive in a collaborative, fast-paced environment and seek opportunities to grow.

About the Team

The Security Assurance team oversees the third-party penetration testing program, security control validation, and ongoing offensive security testing activities. This group collaborates across departments to elevate the organization’s security posture and ensure robust security practices are integrated throughout development and operations.

View full job page →

21d ago

Penetration Tester (Ethical Hacker) - AI Trainer

DataAnnotation Williamsport, PA 🇺🇸 Remote

Williamsport, PA

21d ago

$50 - $100/hr Contract Ai Trainer Artificial Intelligence Information Security

Apply Now

Job Description

DataAnnotation seeks a skilled Penetration Tester to join its AI training initiative as an Ethical Hacker, focusing on evaluating AI-generated security content and solving real-world security problems. This remote, contract role supports flexible scheduling and contributes to shaping how AI systems understand and respond to cybersecurity threats.

The position is remote, listed with a Pennsylvania location context, and offers an hourly rate ranging from USD 50 to 100. Eligible candidates will work on a contractual basis to help train next-generation AI security models.

Location

Remote, Pennsylvania listing

Responsibilities

Evaluate AI-generated security outputs, including threat analyses, vulnerability assessments, and offensive security techniques, for real-world accuracy and reliability.
Develop and solve security-focused technical exercises used to train AI systems.
Produce clear technical explanations and security-relevant code to support AI training.
Provide feedback that informs the next generation of AI security models.

Requirements

2+ years of hands-on cybersecurity experience in roles such as penetration testing, red teaming, incident response, detection engineering, DFIR, malware analysis, threat intelligence, or related fields, including government or military cyber operations.
Some coding experience; comfortable navigating and patching a codebase.
Fluency in English with strong writing skills (native or bilingual level).
Bachelor's degree preferred.
Cybersecurity certifications are a plus (e.g., OSCP, CRTO, GREM, GCFA, CEH, and similar).

Benefits

Fully remote: work from anywhere in the US, Canada, UK, Ireland, Australia, and New Zealand.
Flexible schedule: choose projects and working times from your own computer at home.
Competitive pay: projects are paid hourly, up to USD 60 per hour, with opportunities for higher bonus rates on certain projects.
Impact: help shape the future of AI technologies built for cybersecurity.

Note

Payment is made via PayPal. We will never ask for any money from you. This job is only available to those in the US, Canada, UK, Ireland, Australia, and New Zealand.

View full job page →

23d ago

Product Security Engineer - AI Trainer

DataAnnotation Williamsport, PA 🇺🇸 Remote

Williamsport, PA

23d ago

$50 - $100/hr Contract Ai Security Ai Training Engineer

Apply Now

Job Description

DataAnnotation is seeking an experienced Product Security Engineer - AI Trainer for a remote contract role based in Pennsylvania. This position centers on training AI security models by evaluating AI-generated cybersecurity content and solving security problems on a project-by-project basis, with compensation in an hourly range of USD 50 to 100.

Responsibilities

Assess AI-generated cybersecurity content, including threat analyses, vulnerability assessments, and offensive security techniques, for real-world accuracy and validity.
Design and solve security-focused technical problems used to train AI systems.
Produce clear technical explanations and write security-relevant code as part of the training workflow.
Offer feedback that directly informs the next generation of AI security models.

Requirements

Minimum of 2+ years in a hands-on cybersecurity role, such as penetration testing, red teaming, incident response, detection engineering, DFIR, malware analysis, threat intelligence, or related fields, including government or military cyber operations.
Some coding experience and comfort navigating and patching a codebase.
Fluency in English with strong writing skills (native or bilingual level).
Bachelor's degree preferred.
Cybersecurity certifications are advantageous (examples: OSCP, CRTO, GREM, GCFA, CEH, and similar).

Benefits

Fully remote: work from anywhere in the US, Canada, UK, Ireland, Australia, and New Zealand.
Flexible schedule: select projects and set your own hours, using your own computer from home.
Competitive pay: hourly compensation with potential higher bonus rates on select projects.
Impact: contribute to shaping AI technologies designed for cybersecurity.

Note

Payment is processed via PayPal. We do not request money from applicants. This opportunity is available to individuals located in the United States, Canada, the United Kingdom, Ireland, Australia, and New Zealand.

View full job page →

Cybersecurity Jobs in Williamsport, PA

Application Security Engineer

Security Assurance Penetration Tester

Security Assurance Penetration Tester

Penetration Tester (Ethical Hacker) - AI Trainer

Product Security Engineer - AI Trainer

Get Cybersecurity Jobs in Williamsport, PA alerts