Secret Management

Secret Management Cybersecurity Jobs

2 jobs found

Today

Cybersecurity Engineer

All In Solutions Remote 🌍 Remote

Remote

Today

Up to $150k/yr Full time Application Security Aws Govcloud Cloud

Apply Now

Job Description

Remote work opportunity with competitive compensation and the chance to safeguard a mission-critical cloud platform hosted in AWS GovCloud. This role emphasizes Zero Trust, ongoing compliance with NIST, FISMA, FIPS, HIPAA, and VA requirements, and the integration of security into the DevSecOps lifecycle. You will play a key part in shaping secure, resilient cloud capabilities across environments and authorization boundaries.

Responsibilities

Apply and maintain baseline NIST security controls across all platform environments.
Integrate SAST, DAST, SCA, container scanning, and Infrastructure as Code scanning into CI/CD pipelines.
Remediate vulnerabilities identified by scans within government-defined timelines.
Enforce secure coding standards and approved dependency management across development activities.
Implement and uphold Zero Trust Architecture and least-privilege access across all components and tenant boundaries.
Configure and manage container security including image signing, vulnerability scanning, runtime protection, and registry security.
Operate centralized secrets management with automated rotation for production secrets where automation is supported.
Support zero-trust and least-privilege controls in pipeline and deployment configurations.
Validate security control effectiveness through automated testing, configuration validation, and periodic assessments.
Support penetration testing, red team activities, and independent security assessments as required.
Implement encryption in transit and at rest across all data flows, storage, and backups using FIPS 140-3 modules.
Configure per-region KMS keys for multi-region deployments to prevent cross-region data confidentiality issues.
Support cybersecurity incident response activities in coordination with VA security operations, including forensic analysis and root-cause determination.
Implement and maintain firewall configurations, security group definitions, and network access controls in line with VA policies.
Support continuous monitoring activities including configuration validation, security event correlation, and anomaly detection.
Ensure all platform components comply with VA Critical Security Controls and are authorized before connecting to the VA network.
Support FICAM requirements including PIV-based authentication, automated provisioning, and assurance-level compliance.
Contribute to security documentation such as Security Impact Assessments, Vulnerability Management Plans, Security Assessment Plans, and Security Assessment Reports.
Participate in security audits and assessments providing technical evidence, documentation, and remediation support.
Participate in Agile and SAFe ceremonies including sprint planning, backlog refinement, demos, and retrospectives.

Requirements

Minimum 5 years of cybersecurity engineering experience in complex, mission-critical cloud environments, Federal or enterprise settings.
Hands-on experience implementing security controls in AWS, including EKS, IAM, KMS, security groups, VPC security, and encryption services.
Experience integrating SAST, DAST, SCA, and container scanning tools into CI/CD pipelines.
Strong knowledge of Zero Trust Architecture principles and practical implementation.
Experience with container security, including image scanning, runtime protection, and Kubernetes security policies.
Hands-on experience with secrets management tools such as AWS Secrets Manager, HashiCorp Vault, or Kubernetes secrets.
Familiarity with FIPS 140-3 cryptographic requirements and their cloud deployments.
Experience implementing and validating NIST SP 800-53 Rev. 5 controls.
Exposure to penetration testing, red team methodologies, and vulnerability remediation practices.
Experience with incident response including forensic analysis, evidence collection, and corrective action development.
Knowledge of Federal identity and access management requirements including FICAM, PIV, and multi-factor authentication.
Experience configuring firewalls, network security, and secure external connections in Federal cloud environments.
Understanding of HIPAA, Privacy Act, FISMA, and federal data protection requirements.
Experience working in Agile or SAFe environments with sprint-based cadences.
Certifications such as CISSP, CEH, GIAC, or equivalent are required.
AWS Security Specialty or equivalent cloud security certification preferred.
Certified Kubernetes Security Specialist (CKS) or equivalent certification preferred.
Bachelor's Degree with at least 5 years of cybersecurity engineering experience, including minimum 2 years implementing security controls for cloud-native platforms in Federal or enterprise IT environments.
Alternatively, an Associate's Degree with at least 7 years of cybersecurity engineering experience, including minimum 3 years implementing security controls for cloud-native platforms in Federal or enterprise IT environments.

Technologies

AWS GovCloud
AWS EKS
AWS IAM
AWS Secrets Manager
AWS KMS
HashiCorp Vault
Kubernetes
Kubernetes secrets
SAST
DAST
SCA
Infrastructure as Code scanning
SNOWCAM
TRM
BPE
FIPS 140-3
PIV-based authentication

Benefits

Department of Veterans Affairs (VA) experience
Active Personal Identity Verification (PIV) card
Experience with VA Critical Security Controls and VA Handbook 6500 security requirements
Experience implementing security controls across multi-tenant authorization boundaries
Experience with VA tools and governance processes including SNOWCAM, TRM, and BPE

Compensation

Up to USD 150,000 per year

View full job page →

Today

Application Security Engineer

Wolfe, LLC Pittsburgh, PA

Pittsburgh, PA

Today

$110k - $120k/yr Full time Api Security Application Security Bot Management

Apply Now

Job Description

The Application Security Engineer role at Wolfe, LLC is a hands-on position based in Pittsburgh, PA, onsite five days a week. The role collaborates with developers and DevOps to embed security into software delivery, encompassing code reviews, CI/CD hardening, and vulnerability management across applications, containers, and cloud infrastructure. Salary is USD 110,000 to 120,000 per year.

Responsibilities

Perform code reviews, SAST/DAST testing, basic penetration tests, and basic threat modeling, partnering with developers to remediate vulnerabilities across application code, libraries, containers, and infrastructure as code.
Integrate and run automated security tooling such as Snyk, SemGrep, or Cycode within CI/CD pipelines across code repositories (GitHub, GitLab, Jenkins, AWS DevOps), and assist with triage and reporting of findings.
Manage a vulnerability management program, vulnerability scanning tools, and the enterprise Bug Bounty program, tracking and prioritizing remediation against defined SLAs.
Support operation and improvement of Bot Management, WAF, secrets management, and API security controls across Wolfe's applications.
Apply and promote secure coding standards aligned to OWASP and SANS CWE Top 25, and contribute to measuring DevSecOps maturity using DSOMM or BSIMM.
Collaborate with developers, security operations, product management, and incident response teams, sharing secure-coding and vulnerability-management practices while growing personal expertise.

Requirements

Minimum 2 years of experience in application security, DevSecOps, or software development with security exposure; equivalent experience accepted in lieu of a degree; Bachelor's in Information Security, Cybersecurity, Computer Science, or related field.
Hands-on coding background with knowledge of secure coding principles (OWASP Top 10, SANS CWE Top 25).
Some hands-on exposure to CI/CD pipelines (GitHub, GitLab, Jenkins, or AWS DevOps) and an interest in integrating security tooling into them.
Strong verbal and written communication skills, with the ability to explain security concepts to both technical and non-technical teammates.
Eagerness to learn enterprise security tooling (vulnerability scanners, Bot Management, SAST/DAST/SCA) and maturity frameworks like DSOMM or BSIMM; deep prior experience with these is a plus, not a requirement.
No certifications required; experience with CISSP, OSCP, GCSA, AWS Security Specialty, or CSSLP is a plus, and Wolfe will support earning them.

Technologies

Snyk
SemGrep
Cycode
GitHub
GitLab
Jenkins
AWS DevOps
DSOMM
BSIMM
OWASP Top 10
SANS CWE Top 25
SAST
DAST
SCA
Bot Management
WAF

Benefits

Restricted Stock Units (RSUs)
Profit share and/or incentive bonus
Medical, Prescription, Vision, and Dental insurance for employees and dependents (Wolfe pays 80% of premium)
Short-Term Disability Insurance (Wolfe pays 100% of premium)
Voluntary Long-Term Disability Insurance, Life Insurance, Critical Illness Insurance, Accident Insurance, and Hospital Indemnity coverage
PTO (vacation and sick time)
Corporate Holidays and Floating Holidays
401(k)
Employee recognition program
Charitable Donation to a charity of your choice yearly
Employee Referral Bonus
Tuition Reimbursement
Internal Training and Information sessions
Family Picnic, Holiday Party, and other outings
Internal Culture Club

Impact Statement

Update existing Application Security Strategy and improve monitoring and reporting on KPIs.
Make a significant improvement to at least one automated security tool (DAST, SAST, SCA, or container scanning) in the production CI/CD pipeline, with results feeding a documented triage workflow.
Drive additional Bug Bounty submissions and improve bot management protections prior to end of Q3.
Provide product and technology advisement and testing for new application and AI functionality.
Develop and plan a purposeful Application and AI development training program.

View full job page →

Secret Management Cybersecurity Jobs

Cybersecurity Engineer

Application Security Engineer

Get Secret Management Cybersecurity Jobs alerts