Wilmington, DE

Cybersecurity Jobs in Wilmington, DE

3 jobs found

Include remote jobs

Today

Senior Information Security Engineer

Berkley Wilmington, DE

Wilmington, DE

Today

Full time Backend Developer Senior Analytics

Apply Now

Job Description

Help lead enterprise SIEM engineering and cloud security enablement in a Wilmington, DE onsite role.

Responsibilities

Lead engineering, deployment, administration, and continuous enhancement of Microsoft Sentinel as the organization’s enterprise SIEM platform (workspace architecture, RBAC, retention management, ingestion cost optimization).
Design, build, maintain, and troubleshoot security data ingestion pipelines and Sentinel connectors using Azure Monitor Agent, Data Collection Rules, CEF/Syslog, APIs, Event Hubs, Azure Functions, Logic Apps, and custom integration patterns.
Validate and troubleshoot ingested data using KQL and other tools; address data quality, schema, parsing, normalization, latency, performance, and ingestion reliability issues.
Engineer and support log routing, filtering, parsing, and transformation through Cribl, including upstream ingestion issue troubleshooting and onboarding new data sources into Sentinel.
Establish scalable, supportable patterns for onboarding security telemetry from on-premises, cloud, SaaS, and third-party platforms, with automated monitoring and validation of ingestion pipelines.
Apply engineering best practices across Sentinel configurations and content, including source control, testing, peer review, CI/CD deployment, technical documentation, and lifecycle management.
Identify repeatable manual tasks across security engineering platforms and develop automation to reduce operational effort and improve consistency and response times.
Design, build, and maintain security automation and orchestration using Sentinel Automation Rules, Logic Apps, Azure Functions, PowerShell, Python, REST APIs, and Infrastructure as Code (Bicep, ARM, Terraform).
Develop and maintain detection-as-code and automation-as-code practices by integrating security content deployment into CI/CD pipelines and measuring outcomes such as operational efficiency and time savings.
Design, implement, and maintain Azure security controls and security architecture standards, including Microsoft Defender for Cloud, Azure Policy, Entra ID, Conditional Access, Key Vault, network security controls, and secure landing zone architectures.
Translate business, regulatory, and security requirements into technical controls, monitoring requirements, and security baselines across Azure, hybrid, and on-premises environments.
Provide technical guidance and hands-on support to infrastructure, cloud, and application teams on secure architecture patterns, cloud security best practices, and risk mitigation strategies.
Design, implement, and maintain Microsoft Purview data protection capabilities (DLP, sensitivity labels, information protection, Insider Risk Management, and auditing solutions).
Prepare and maintain technical standards, procedures, security documentation, runbooks, and operational guidance for Sentinel, cloud security, automation, and data protection capabilities.
Monitor emerging threats and industry trends, translating findings into new detections, automation opportunities, and security control improvements.
Prepare and present project status, risks, and security initiatives to leadership with actionable recommendations and clear communication of technical concepts.
Lead and mentor junior security engineers through design reviews, technical guidance, knowledge sharing, and career development support.
Provide Person in Charge (PIC) coverage on a rotational basis as the senior escalation point for complex security incidents and operational decisions.
Collaborate with Security Operations, Infrastructure, Cloud, DevOps, and IT teams to design, implement, and continuously improve security controls, monitoring capabilities, automation solutions, and data protection across the enterprise.

Requirements

5+ years’ experience as a Cloud Security Engineer, Information Security Engineer, or Devsecops Engineer.
5+ years’ experience in network, cloud, and computer system security, including user access controls, RBAC, SSO, file permissions, firewall policies, and audit logs.
5+ years’ experience with security systems: firewalls, intrusion detection systems, endpoint protection systems, web application firewalls, vulnerability scanning software, privilege access management, data loss protection, log management, and content filtering.
5+ years’ experience developing and deploying security solutions to defend against advanced cyber threats.
5+ years’ experience reviewing and monitoring security systems to ensure proper and secure operation.
5+ years’ experience investigating intrusion incidents, conducting investigations, and handling security incidents.

Technologies

Microsoft Sentinel, Azure Monitor Agent, Data Collection Rules
CEF/Syslog, APIs, Event Hubs
Azure Functions, Logic Apps, Azure Monitor
KQL, Cribl, Sentinel connectors
Sentinel Automation Rules, PowerShell, Python, REST APIs
Infrastructure as Code (Bicep, ARM, Terraform), CI/CD
Microsoft Defender for Cloud, Azure Policy, Entra ID, Conditional Access, Key Vault
Secure landing zone architectures
Microsoft Purview, Data Loss Prevention (DLP), sensitivity labels, Insider Risk Management
Log management, SSO, RBAC, SaaS, on-premises

Location

Wilmington, DE (onsite)

Sponsorship

Sponsorship not offered for this role

We do not accept unsolicited resumes from third party recruiting agencies or firms.

View full job page →

24d ago

Cybersecurity Senior Threat Analyst

Bancorp Bank, The Wilmington, DE

Wilmington, DE

24d ago

Full time Senior Ai Security Cybersecurity Tools

Apply Now

Job Description

Hybrid in Wilmington, DE, with a role built for independent, advanced technical leadership. This Senior Threat Analyst position operates as a senior technical escalation layer for complex cybersecurity events and investigations, with hands-on ownership across detection, threat intelligence, vulnerability analysis, threat hunting, penetration testing support, and audit technical response. The role also helps raise the team’s capability through standards, coaching, and measurable operational improvements.

What you bring matters here: advanced security operations expertise, the ability to evaluate complex evidence, and the communication skills to translate technical findings into actionable recommendations for technical and nontechnical stakeholders.

Open for at least five days from the posting date.

Responsibilities

Serve as the senior technical escalation point for complex, high-impact, or ambiguous cybersecurity events, independently leading investigation, scoping, evidence analysis, containment, mitigation, eradication, recovery validation, and post-incident technical review.
Conduct advanced threat intelligence analysis with minimal oversight, correlating intelligence sources, campaigns, vulnerabilities, attacker behaviors, targeting information, and environmental exposure.
Develop actionable intelligence to support detection, incident response, threat hunting, vulnerability prioritization, and management decision-making.
Define and lead proactive threat-hunting activities and establish detection priorities.
Develop, test, tune, validate, and review security-monitoring rules, queries, correlation logic, and use cases, including identifying telemetry gaps and reducing false positives.
Lead complex vulnerability analysis using exploitability, active threat intelligence, asset criticality, exposure, attack paths, business context, and existing controls.
Perform validation, remediation review, retesting, and technical closure.
Independently perform or lead assigned penetration tests, security assessments, and technical testing activities with minimal oversight, including preparation, execution, analysis, documentation, remediation guidance, and retesting.
Provide senior technical support for internal and external audits, regulatory examinations, and control assessments by identifying required evidence, validating control operation, responding to complex technical requests, explaining security processes and findings, and supporting remediation of audit issues.
Provide advanced technical support for cybersecurity platforms, integrations, queries, dashboards, scripts, automation, and analytical workflows, and lead technical evaluations of security products and capabilities.
Establish and improve standards for investigation, incident response, threat hunting, detection, vulnerability analysis, and technical documentation.
Develop and review procedures, playbooks, runbooks, and analytical guidance.
Mentor Cybersecurity Threat Analyst I and II personnel by reviewing complex work, providing technical coaching, and helping develop capabilities across investigation, detection, threat intelligence, vulnerability analysis, scripting, incident response, and penetration testing.
Lead significant operational improvement initiatives in collaboration with cybersecurity engineering, infrastructure, application, cloud, identity, data, audit, risk, and other teams to resolve complex security issues and improve controls.
Develop advanced threat assessments, vulnerability reports, incident summaries, technical briefings, metrics, and recommendations, and communicate significant findings to management and stakeholders.
Use approved AI-assisted capabilities for advanced analysis, threat research, detection development, vulnerability analysis, scripting, automation, and documentation, and evaluate generated conclusions for accuracy, provenance, unsupported assumptions, and potential security impact before use.
Perform other duties as assigned.

Requirements

Bachelor’s degree in cybersecurity, information technology, computer science, or a related field, or an equivalent combination of education, training, and progressively responsible experience.
Minimum of 5 years of cybersecurity, security operations, incident response, threat analysis, vulnerability management, penetration testing, system administration, networking, or related security experience.
Demonstrated experience independently leading complex cybersecurity investigations or technical response activities.
Advanced working knowledge of security monitoring, incident response, threat intelligence, vulnerability management, threat hunting, and common attacker techniques.
Strong understanding of TCP/IP networking, DNS, web protocols, authentication, operating systems, cloud environments, and enterprise security technologies.
Significant hands-on experience with technologies such as SIEM, EDR/XDR, SOAR, vulnerability management, threat intelligence, and comparable enterprise security platforms.
Demonstrated ability to develop advanced security queries, detections, analytical content, scripts, or automation using AQL, KQL, SPL, SQL, Python, PowerShell, APIs, or comparable tools.
Ability to evaluate incomplete or conflicting evidence and develop defensible technical conclusions.
Ability to perform technical activities during high-pressure security events with minimal oversight.
Demonstrated ability to mentor personnel and communicate complex technical issues effectively.
Working knowledge of AI and machine-learning capabilities and threats relevant to cybersecurity, including governance, privacy, reliability, security, and human-review considerations.
One or more advanced or role-relevant certifications such as CISSP, GCIH, GCIA, GCFA, CEH, or comparable credentials preferred.

Technologies

SIEM, EDR/XDR, SOAR, AQL, KQL, SPL, SQL, Python, PowerShell, APIs, TCP/IP, DNS, AI, machine-learning

Work Arrangement

Hybrid role in the Wilmington, DE office.

Why This Role Matters

Acts as the team’s senior technical escalation layer for complex events, advanced analysis, and technical response.
Provides independent technical depth across threat intelligence, penetration testing, audit support, detection engineering, threat hunting, and vulnerability analysis.
Helps develop the analyst bench and gives management technical leverage without a direct people-management requirement.

Company Culture & Background Screening

Company Culture at The Bancorp Bank: https://www.thebancorp.com/company/company-culture/
The Bancorp Bank, N.A. is an Equal Opportunity Employer and does not discriminate based on protected categories in recruitment, hiring, training, promotion, or other employment terms.
Employment includes successful background check completion, including credit, criminal, education, employment, OFAC, and social media background history.

Tags: #LI-PJ1, #LI-Hybrid

View full job page →

3mo ago

Security Engineer III

JPMorganChase Wilmington, DE

Wilmington, DE

3mo ago Closed

Full time Senior Ai Enabled Security Application Security

This position is no longer accepting applications (closed Aug 24, 2026).

Job Description

Security Engineer III role at JPMorgan Chase, onsite in Wilmington, DE, focused on designing and delivering secure software solutions while ensuring tamper-resistant, audit-defensible security and leveraging AI within the SDLC to accelerate security analysis.

Responsibilities

Designs, develops, and troubleshoots security solutions, applying existing security controls to satisfy internal client requirements across products, platforms, and applications.
Delivers secure, high-quality production code and maintains algorithms that operate in sync with the relevant systems.
Optimizes latency and cost while handling load, caching, concurrency, and data growth.
Leverages enterprise-approved AI tools to accelerate security analysis and vulnerability documentation, validating outputs and ensuring proper handling of sensitive data.
Leads continuity awareness programs, training initiatives, and related exercises.
Adopts reuse-first, AI-assisted approaches in the SDLC and toolchains to enhance security testing, control validation, and ensure traceability and auditability aligned with resiliency and security standards.
Refactors code, reduces technical debt, improves CI/CD pipelines, and contributes to engineering best practices.

Requirements

Formal training or certification in security engineering with practical application knowledge and at least three years of hands-on experience.
Hands-on coding experience in Java or Go, with solid understanding of the Software Development Life Cycle.
Experience building security engineering solutions.
Proven use of enterprise-authorized AI tools to support security engineering workflows, with strong validation practices and awareness of data sensitivity.
Ability to review and validate AI-generated code and security recommendations before use, escalate when uncertain, and adhere to security and data handling requirements.
Solid understanding of agile practices including CI/CD, application resiliency, and security.
Proven ability to manage moderately ambiguous requirements and own features through delivery.

Technologies

Java
Golang
LLM-powered agents

Benefits

Comprehensive health care coverage
On-site health and wellness centers
Retirement savings plan
Backup childcare
Tuition reimbursement
Mental health support
Financial coaching
Base salary
Commission-based pay and/or discretionary incentive compensation (cash and/or forfeitable equity)

View full job page →

Cybersecurity Jobs in Wilmington, DE

Senior Information Security Engineer

Cybersecurity Senior Threat Analyst

Security Engineer III

Get Cybersecurity Jobs in Wilmington, DE alerts