Opsec

Opsec Cybersecurity Jobs

10 jobs found

4d ago

Sr Infrastructure & Security Engineer

VizyPay Waukee, IA

Waukee, IA

4d ago

$80k - $100k/yr Full time Azure DevOps CI/CD Cloud Infrastructure

Apply Now

Job Description

VizyPay is seeking a senior infrastructure and security engineer to own the systems that keep the organization connected, protected, and audit-ready. This role combines cloud infrastructure, enterprise networking, security posture, operational reliability, and end-user support into a single accountable mandate, with direct reporting to the CIO.

Working in a cloud-first, security- and compliance-driven payments environment, you will help maintain availability and resilience (including RTO/RPO alignment), strengthen detection and response readiness, and contribute to PCI DSS and enterprise BCP/DR efforts. The position is based onsite in Waukee, IA.

What you’ll do

Architect, build, and operate secure, scalable cloud infrastructure across Microsoft Azure, AWS, and DigitalOcean, covering compute, virtual networking, storage, and managed data services for VEXIS and enterprise systems.
Expand infrastructure-as-code as the default provisioning path, including Terraform, GitOps automation, policy-as-code, and IaC security scanning; implement CI/CD pipelines (for example, GitHub Actions and Azure DevOps) with automated testing and controlled promotion to remove manual, unrepeatable changes.
Manage infrastructure cost and capacity through rightsizing, reserved-capacity strategy, usage monitoring, and performance optimization, with spend reported against approved budget while keeping capacity ahead of business growth.
Provide hands-on technical leadership across InfraSec and in partnership with Software Engineering through engineering standards, design and architecture reviews, and mentorship.
Administer and support the enterprise network, including firewalls, SD-WAN, switches, wireless access points, and overall network infrastructure, with design, configuration, monitoring, and lifecycle management.
Own network segmentation design and enforcement, deploy TLS 1.2+ everywhere, and manage secure connectivity including site-to-site and remote-access VPN, DNS, load balancing, and WAF/CDN (such as Cloudflare) aligned with least privilege.
Maintain network documentation, configuration baselines, and audit-ready change records, while managing network capacity, performance, and availability.
Own key security platforms and services such as IAM, endpoint security, MDM, password management, security monitoring, and Microsoft 365 security posture, including email security controls (for example anti-phishing, DMARC, DKIM, SPF) with administration, integration, and continuous improvement.
Lead security monitoring and detection engineering across enterprise SIEM, EDR, and file integrity monitoring (FIM) platforms, including log-source onboarding, detection tuning, alert refinement, and response runbooks.
Operate vulnerability and patch management programs, manage asset/configuration inventory, and own identity lifecycle management (joiner/mover/leaver), conditional-access administration, and privileged access management (PAM). Enforce vault-based secrets management and MFA-inclusive authentication, and lead threat modeling and security-by-design with Software Engineering and Product.
Define and operate SLOs, error budgets, and availability/performance monitoring; own observability end to end across metrics, structured logging, distributed tracing, and alert design (for example Prometheus/Grafana, CloudWatch, Azure Monitor) with centralized log management and retention aligned with compliance needs, driving automation-first operations to reduce toil.
Own incident response for infrastructure and security, covering detection, escalation, mitigation, and blameless postmortems with tracked corrective actions; participate in the on-call rotation and operate production changes under formal change management.
Act as the Tier 2/3 escalation point for end-user support in partnership with the InfraSec Help Desk, including endpoint engineering and lifecycle management, Microsoft 365 administration and troubleshooting across devices and business systems, and automation of support workflows with measured service quality.
Participate in the annual PCI DSS assessment and audit process, including evidence collection, remediation activities, control validation, coordination with stakeholders and external assessors, and external penetration test coordination and remediation tracking. Maintain audit-ready evidence year-round for configuration standards, access reviews, segmentation validation, monitoring coverage, and recovery-test results.
Design and validate resilience with RTO/RPO alignment, backup and recovery, failover architecture, and graceful degradation, and plan disaster-recovery exercises consistent with enterprise BCP/DR standards.
Contribute to security policy, standards, and risk assessments, and support employee security-awareness enablement in partnership with the CIO while aligning controls with PCI DSS and financial-industry obligations.

What you bring

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent).
7+ years of professional experience across infrastructure, cloud, network, security, or site reliability engineering, including 4+ years operating production infrastructure and security controls at scale with accountability for availability, cost, risk, and outcomes.
Ability to operate with a high degree of autonomy while owning infrastructure and security strategy, priorities, and execution, reporting directly to executive leadership.
Experience in security- or compliance-constrained environments (such as PCI DSS or financial services regulation), including participation in compliance assessments and audit evidence collection, delivering under formal SDLC and change management.
Demonstrated incident-response ownership across infrastructure and security domains, including on-call participation, incident command or mitigation leadership, and postmortem-driven improvement.
Ability to translate infrastructure, security, and reliability tradeoffs into recommendations for technical and executive stakeholders.
Production engineering experience on Microsoft Azure, AWS, and/or DigitalOcean across compute, virtual networking, IAM, storage, and managed database services.
Infrastructure automation skills with Terraform (or equivalent), GitOps, configuration management, and CI/CD engineering (for example GitHub Actions and Azure DevOps) with security scanning and progressive delivery; operational tooling using Python, PowerShell, and/or Bash with strong Git fluency.
Expertise in containers and orchestration/managed container services, including Docker and Kubernetes (such as AKS, EKS, or DigitalOcean Kubernetes) and serverless/edge compute (such as AWS Lambda and Cloudflare Workers).
Understanding of operating systems and directory services, including Windows Server, Linux, Active Directory/Microsoft Entra hybrid identity, and Microsoft 365 administration.
Network infrastructure experience covering enterprise firewalls, SD-WAN, switching, and wireless, including routing/switching fundamentals (such as VLANs, routing protocols, and QoS) and VPN.
Network and cloud security knowledge including segmentation, firewall policy management, DNS, TLS certificate management, WAF/CDN (for example Cloudflare), encryption in transit and at rest, and cloud security posture management (CSPM).
Security monitoring, detection, and vulnerability management experience with enterprise SIEM/log analytics, EDR, and FIM, including detection content development, alert tuning, response integration, plus scanning, risk-based prioritization, and remediation workflow design.
Knowledge of identity, endpoint, and end-user platforms including least-privilege RBAC, MFA-inclusive authentication, identity lifecycle management and PAM, directory and identity platforms (including Microsoft Entra ID and AWS IAM), endpoint security, MDM, password management, and vault-based secrets management.
Reliability engineering experience including SLO/error-budget practice, observability tooling, database backup/recovery, replication, and point-in-time restore (for example PostgreSQL, SQL Server, MySQL).
Track record of technical leadership such as mentoring, architecture or design review, or engineering standards ownership.

Technologies you may work with

Microsoft Azure, AWS, DigitalOcean, Terraform, GitOps, policy-as-code, IaC security scanning
GitHub Actions, Azure DevOps, Microsoft 365, IAM, MDM, DMARC, DKIM, SPF
SIEM, EDR, file integrity monitoring (FIM), Prometheus, Grafana, CloudWatch, Azure Monitor
SLOs, PCI DSS, RTO/RPO, TLS 1.2+, SD-WAN, Cloudflare, VPN, DNS, WAF
Privileged access management (PAM), vault-based secrets management, MFA-inclusive authentication, Active Directory, Microsoft Entra, AWS IAM
Docker, Kubernetes, AKS, EKS, AWS Lambda, Cloudflare Workers
Windows Server, Linux, VLANs, QoS, CSPM, RBAC, Python, PowerShell, Bash, Git, CI/CD, distributed tracing, structured logging, PostgreSQL, SQL Server, MySQL

Compensation and benefits

Salary: USD 80,000 - 100,000 per year
401(k)
401(k) matching
Dental insurance
Flexible spending account
Health insurance
Health savings account
Paid time off
Retirement plan
Vision insurance

View full job page →

8d ago

Security Analyst Senior

Donnelly & Moore Corporation New York, NY

New York, NY

8d ago

Full time Senior Application Security Azure

Apply Now

Job Description

Secure enterprise cloud environments as a senior security analyst, partnering with engineering teams to strengthen controls across multiple providers.

Responsibilities

Support security for cloud environments spanning Azure, AWS, GCP, and Oracle Cloud Infrastructure (OCI)
Operate and assist with Cloud Security Posture Management (CSPM) tooling to identify and remediate security risks
Review cloud configurations and architectures to promote security best practices
Coordinate with engineering teams to address security findings and reduce organizational risk
Provide security support for cloud-hosted applications, platforms, and container environments
Assist with securing container platforms and orchestration technologies
Support cloud network security and secure access solutions, including SASE-related controls
Investigate cloud security alerts and incidents; coordinate remediation efforts
Help develop and maintain cloud security standards and policies
Support security reviews for AI and emerging cloud technologies
Automate security processes to improve visibility across cloud environments

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent work experience)
5+ years of experience in cybersecurity with a focus on cloud security or cloud platforms
Experience with one or more major cloud providers: Azure, AWS, GCP, or Oracle Cloud
Familiarity with cloud security tooling, including CSPM solutions
General understanding of cloud identity, networking, and security best practices
Experience supporting application, container, or platform security in cloud environments
Experience participating in security investigations and incident response activities
Strong problem-solving skills and ability to collaborate across teams
Clear written and verbal communication skills

Technologies

Azure
AWS
Google Cloud Platform (GCP)
Oracle Cloud Infrastructure (OCI)
Cloud Security Posture Management (CSPM)
Splunk
SASE

Preferred Qualifications

Experience supporting multi-cloud environments
Familiarity with container platforms and cloud-native architectures
Experience using SIEM tools such as Splunk
Interest or experience securing AI or emerging cloud technologies

Location: New York, NY (onsite)

View full job page →

26d ago

Operational Technology Systems Engineer- Cybersecurity

Korn Ferry for SABIC (Saudi Aramco) SMB-RPO Mount Vernon, IN

Mount Vernon, IN

26d ago

Full time Cybersecurity Tools Data Security Engineer

Apply Now

Job Description

This role focuses on maintaining site cybersecurity controls, implementing policy requirements, and delivering reporting and periodic reviews for SABIC’s Operational Technology Systems cybersecurity program.

Responsibilities

Configure, maintain, monitor, and troubleshoot Control and Automation System Infrastructure, including cybersecurity controls, backups, networks, and ongoing system maintenance.
Ensure site compliance with applicable cybersecurity and systems infrastructure requirements and standards, such as SABIC Engineering Standards (SES), SABIC Operating Management System (OMS), Manufacturing Standards, and Cyber Security policies.
Develop and maintain technical documents related to cybersecurity and systems infrastructure, such as Architecture, Network IP Schema, procedures, and guidelines.
Analyze and assess vulnerabilities in the site infrastructure, ensuring the effectiveness of available tools and countermeasures to remediate detected issues.
Investigate, analyze, and report damages to data and system infrastructure arising from cybersecurity incidents or other failures.
Maintain and verify the effectiveness of disaster recovery plans.

Requirements

BS Degree in Computing Engineering, Computer Science, Control Systems, or another Engineering discipline.
Preferred Cyber Security and Industrial Automation & Control Systems Certifications or equivalent experience.
Minimum of 3 years’ experience in Industrial Automation and Control Systems, computer networks, and communications.
Good knowledge of Operating Systems, server maintenance, and database administration.
Submit your application online to be considered. Please submit your resume using the "Apply Now/Apply" option on this page.
You must be 18 years or older.
Applicants must be currently authorized to work for SABIC in the United States on a full-time basis.
You should have worked in your current position for at least 18 months and meet the prerequisites of the position you are applying for.
Your Manager should be informed about your intent to apply for internal opportunities.
Manufacturing employees who are in a certification, journeyman, or other similar program are not eligible to post without prior manager approval.
Where an employee does not notify their manager before applying, they should review the matter with the applicable HR Partner.
You must have unrestricted authorization to work in the United States.

Work Availability

Regular, predictable attendance is essential. Applicants must be available and willing to work Monday through Friday during assigned hours of operation, plus such other hours as the company determines are necessary to meet business needs.

View full job page →

27d ago

Staff Security Engineer

Bain & Co. Boston, MA

Boston, MA

27d ago

$141k - $177k/yr Full time Senior Application Security Azure

Apply Now

Job Description

Based in Boston, MA with a hybrid work arrangement, Bain & Co. offers a compelling security leadership role that directly influences the resilience of the private equity platform deployed on Azure AKS. You will advance zero trust, strengthen supply chain protections, enforce data boundaries, and govern AI egress controls while weaving security into the development lifecycle across cross-functional teams. This position pairs hands-on engineering with collaboration across Platform Engineering, Data Governance, and AI security disciplines, backed by a robust benefits package and a culture that prioritizes secure, scalable delivery.

Responsibilities

Oversee the platform’s security posture end to end, covering core controls such as HashiCorp Vault or Azure Key Vault, Istio mTLS, Cilium network policies, Pod Security Standards, and OPA/Gatekeeper policies.
Architect and implement a zero-trust security model across the estate, applying defense in depth and least privilege principles.
Perform lightweight STRIDE threat modeling for new services and major features, documenting risks, mitigations, and residual risk decisions.
Manage supply chain security controls, including image scanning and signing, SBOM generation, and dependency vulnerability management.
Define and enforce identity and access controls with SAML/OIDC patterns, JWT/OAuth concepts, and enterprise IdP integration guidance (Okta/Entra).
Establish data classification controls at the platform layer with governed access, masking/tokenization, and API-layer enforcement.
Own runtime detection controls by maintaining Falco rules, establishing escalation pathways, and integrating signals with the central SIEM to keep alerts actionable.
Lead security incident response for the platform, guiding containment, remediation, and post-incident reviews with clear follow-up actions.
Conduct regular security reviews of the AI layer, focusing on Agent Gateway egress controls, prompt injection risks, PII handling, and data exfiltration controls for model interactions.
Maintain security runbooks and drive quarterly internal security reviews across teams, ensuring controls are tested, auditable, and kept current.
Engage in select PE squad ceremonies to surface security concerns early and define testability and operability requirements for security controls.
Collaborate with Platform Engineering on secure-by-default templates and guardrails, including policy-as-code libraries, reusable CI checks, and pre-commit hooks.
Partner with the Data Governance Lead on PII classification, tokenization policy, and regulatory requirements (SOC 2 Type II, ISO 27001, GDPR).
Work with the centralized Application Security team to promote secure AI tooling, accelerate threat modeling, draft security policies, and triage CVEs with expert judgment before adoption.
Communicate security risks in business terms and prioritize controls that meaningfully reduce risk.

Requirements

Hybrid work model with in-office presence at least one day per week in Boston, MA.
Bachelor’s degree in Computer Science, Engineering, Information Systems, Cybersecurity, or a related field, or equivalent practical experience.
Minimum six years of security engineering, infrastructure security, SRE/DevOps with security focus, or platform engineering with hands-on security ownership.
Proven experience implementing and operating security controls in Kubernetes production environments, including policy enforcement, workload isolation, network controls, and runtime detection.
Experience designing and operating secrets management and identity/access controls (HashiCorp Vault and/or Azure Key Vault, PKI, OIDC/SAML patterns, enterprise IdP integration).
Experience implementing supply chain security practices (scanning, signing, SBOMs, dependency management) and integrating controls into CI/CD pipelines.
Experience leading or contributing to security incident response, including post-incident reviews and remediation planning.
Demonstrated ability to work cross-functionally as an enabling partner, raising security standards without unduly blocking delivery.

Technologies

HashiCorp Vault, Azure Key Vault, Istio, Cilium, Pod Security Standards, OPA, Gatekeeper
SAML 2.0, OIDC, JWT, OAuth 2.0
Okta, Azure AD
Falco, Trivy, Cosign, Sigstore, Syft, Dependabot, Renovate
Kubernetes, Kyverno, Rego
Python, Bash
AWS Macie

Benefits

Health coverage for medical, dental, and vision premiums paid in full for the employee
Paid time off including parental leave, sick leave, and holidays
Fully vested employer contribution to the 401(k) plan
Employer 401(k) contribution at 4.5 percent, increasing after three years and fully vested from day one
Life insurance and long-term disability coverage
Annual fitness reimbursement

Compensation

In Boston, Massachusetts, the target annual salary range is $147,250 to $176,750. In Chicago, Illinois, the range is $141,000 to $169,250. Compensation includes a discretionary annual performance bonus, plus Bain's 401(k) plan with employer contributions and the comprehensive benefits package described above.

View full job page →

27d ago

Cybersecurity, Senior (ISSM)

Torch Technologies Kettering, OH

Kettering, OH

27d ago

Full time Manager Senior Application Security

Apply Now

Job Description

Responsibilities

Provide the PMO/ Capability Development Manager (CDM) cybersecurity support per DoWI 8500.01 to include assessing and continuously monitoring cybersecurity risk ensuring that legacy and new capabilities adhere to enterprise standards such as RMF, CSF, and NIST and per Authorization Official’s Information System’s Continuous Monitoring (ISCM) strategy.
Complete and maintain required cybersecurity certifications IAW AFMAN 17-1303.
Ensure all AF IT cybersecurity-related documentation is current and accessible to properly authorized individuals.
Support the PM or ISO in maintaining current authorization to operate, approval to connect (if required), and implementing corrective actions identified in the plan of actions and milestones.
Coordinate, with the PM and AO staffs, development of an ISCM strategy and monitor any proposed or actual changes to the system and its environment.
Continuously monitor the IT and environment for security-relevant events.
Assess proposed configuration changes for potential impact to the cybersecurity posture.
Assess the quality of security controls implementation against performance indicators.
Ensure cybersecurity-related events or configuration changes that impact AF IT authorization or adversely impact the security posture are formally reported to the AO and other affected parties, such as IOs, stewards, and AOs of interconnected IT.
Ensure all ISSOs and privileged users receive necessary technical training and obtain cybersecurity certification IAW AFMAN 17-1301, AFMAN 17-1303, and maintain proper clearances IAW DoWI 8500.01.
Ensure the AF IT is acquired, documented, operated, used, maintained, and disposed of properly IAW DoWI 5000.02 and DoWI 8510.01.

Requirements

U.S. Citizenship
Master's or Doctorate Degree in a related field and 10 years of experience in the respective technical/professional discipline, five years of which must be in the DoW OR
Bachelor's Degree and 12 years of experience in the respective technical/professional discipline, five of which must be in the DoW OR
15 years of directly related experience with proper certifications as described in the PWS labor category performance requirements, eight of which must be in the DoW.
Knowledge, experience, and demonstrated ability to be highly skilled in the technical/professional field.
Ability to perform tasks independently and oversee junior and journeyman contractor personnel within the technical/professional discipline, with advanced knowledge of applicable standards, procedures, and practices.
Access control; configuration management; system and communications protection; contingency planning; incident handling; system and information integrity; security and privacy training and awareness; and software development activities related to cybersecurity.
Experience performing cybersecurity duties as outlined in DoDI 8500.01, AFI 17-130, and AFI 17-1301 for assigned AF IT.
Experience validating, evaluating, and analyzing findings and developer adjudications using automated testing tools (Fortify, Checkmarx, SonarQube, AppScan).
Experience utilizing DoD tracking systems to document cybersecurity deficiencies, vulnerabilities, and change requests in programs' tracking systems (e.g., Jira, HP ALM, eMASS).
Experience conducting information security continuous monitoring (ISCM) to support organizational risk management decisions per approved ISCM strategy.
Certifications: ISACA CISM, United America Technologies CISSO, FITSP-M, GIAC GCIA, GCSA, GCIH, GSLC, GICSP, (ISC)2 CISSP-ISSMP, CISSP.

Technologies

Fortify
Checkmarx
SonarQube
AppScan
Jira
HP ALM
eMASS
Confluence
Mavin
Jenkins
Bitbucket

Benefits

ESOP participation
401(k) match and safe-harbor contribution
Medical, dental, vision, and life insurance
Short-term and long-term disability
Flexible spending accounts, Health Savings Accounts, and Health Reimbursement Accounts
EAP
Education assistance
Paid time off and holidays

Preferred Qualifications

Certified SCRUM Master
Other Agile Certifications
Working knowledge of Agile Development methodology
Experience using tools such as CheckMarx, SonarQube, Jira, Confluence, Mavin, Jenkins, Bitbucket

Schedule

40 Hrs/week

Work Location

Kettering, OH

Travel

0-10%

Relocation Assistance Available

Position Contingent Upon Award of Contract

View full job page →

29d ago

Program Security Analyst

MANTECH Quantico, VA

Quantico, VA

29d ago

Full time Classification Guide Critical Program Information Information Security

Apply Now

Job Description

At MANTECH, this on-site Program Security Analyst position supports the Marine Corps Systems Command in Quantico, Virginia. The role centers on program protection and security planning, with coordination duties that connect the Acquisition Program Security Lead (APSL) to external agencies and cross-functional teams throughout the program lifecycle.

Responsibilities

Support the MCSC Acquisition Program Security Lead (APSL) to ensure that technology protection documents are developed, updated, and staffed as depicted in the program’s Integrated Master Schedule (IMS) and described in the Department of Defense Technology and Program Protection Guidebook and the MCSC Acquisition Security Guidebook.
Participate in Security Working Groups to identify critical program information (CPI) and mission critical functions and components as required by DoD Directive 5200.39 and described in DoD Instruction 5200.44.
Develop and update Program Protection Plans (PPP) as required by DoD Instruction 5000.83 and described in the PDUSD Memorandum, “Document Streamlining – Program Protection Plan (PPP),” July 16, 2011, and the MCSC Acquisition Guidebook.
Assist the APSL in developing a Security Classification Guide (SCG), as needed.
Review program documents for proper classification and markings of classified and controlled unclassified information.
Assist the APSL with development of a system-specific Operations Security (OPSEC) plan.
Coordinate with the APSL for all outside agency support to the programs (e.g., Marine Corps Intelligence Activity, NCIS, DCSA, and others).

Requirements

Bachelor’s Degree and at least 4 years of related experience; an additional 2 years of experience may be substituted in lieu of a degree.
Traditional security (0080) background: Information Security, Operational Security, Physical Security, and Industrial Security.
Administrative skills with advanced working knowledge of Office 365 products.
Experience planning, executing, and managing multiple projects.
Ability to interpret policy and provide recommendations.
Ability to work in a fast-paced, high-pressure environment to meet critical timelines.

Technologies

Office 365

Preferred Qualifications

Basic understanding of acquisitions
Critical thinking
Problem solving

Physical Requirements

Sedentary work

View full job page →

30d ago

Principal Industrial Security Analyst

Northrop Grumman Baltimore, MD

Baltimore, MD

30d ago Closed

$90k - $135k/yr Full time Information Security InfoSec Opsec

This position is no longer accepting applications (closed Aug 20, 2026).

Job Description

Northrop Grumman offers a competitive salary in the range of USD 89,900 to 134,900 per year for an onsite Principal Industrial Security Analyst in Baltimore, MD. This role emphasizes professional growth, collaborative culture, and a benefits package that supports employees and their families. You will help design and administer security programs for classified materials, ensure regulatory compliance, and partner with both internal and external stakeholders to safeguard critical programs.

Responsibilities

Support a fast-paced, high profile program
Build and sustain working relationships with internal and external customers
Develop and administer security programs and procedures for classified or proprietary materials, documents, and equipment
Apply program security expertise to implement a multi-disciplined security program, including access control, personnel security, physical security, and OPSEC
Study and implement federal security regulations applicable to company operations
Obtain rulings, interpretations, and acceptable deviations for regulatory compliance from government agencies
Prepare manuals outlining regulations and establish procedures for handling, storing, and maintaining records, and for granting personnel and visitor access to restricted materials
Deliver security education classes and related briefings
Investigate security violations and prepare reports with recommended preventive actions
Demonstrate working knowledge of DoD 5205.07 SAP Manual, ICD 705, ICD 704, and/or NISPOM sponsor procedures

Requirements

Bachelor's degree with 6+ years of CPSO, Security or related experience or MS Degree with 4+ years of CPSO, Security, or related experience
An additional 4 years of applicable work experience may substitute for a Bachelor's degree
Current Active Top Secret Clearance
US Citizenship