Security Certifications

Security Certifications Cybersecurity Jobs

10 jobs found

Today

IT Vulnerability Management Lead / Senior Security Analyst

August Schell Bethesda, MD

Bethesda, MD

Today

Full time Manager Senior CISSP

Apply Now

Job Description

August Schell is seeking an IT Vulnerability Management Lead / Senior Security Analyst to drive the vulnerability management lifecycle for NLM IT programs and help ensure ongoing compliance with federal security requirements. This onsite role in Bethesda, MD coordinates closely with the NLM ISSO and NIH teams in a hybrid operating environment.

What you’ll do

Lead the agency’s vulnerability management lifecycle using Tenable.sc, Tenable.io, Nessus Manager, and Nessus scanners across on-prem and cloud environments.
Analyze, prioritize, and track vulnerability remediation efforts in coordination with IT operations and system owners.
Maintain scan schedules and asset groups, manage scan policies, dashboards, repositories, and reporting tailored to agency infrastructure.
Communicate risk posture and remediation progress to relevant infrastructure and application teams to support timely fixes.
Define scanner and security center architecture, refine data flows, and tune scanning configurations to minimize false positives while maximizing coverage.
Develop and maintain documentation covering system setup, operational procedures, vulnerability management processes, exceptions, and remediation tracking.
Support security projects that require alignment with applicable government policies or standards.
Serve as the SME for vulnerability management tools and processes, including updating and monitoring workflows to meet NIH mandates.
Ensure NLM IT systems and practices comply with FISMA and FedRAMP related Security Assessment and Authorization (SA&A) requirements.
Assist NLM with coordination, implementation, communication, and enforcement of NIH IT security policies.
Support NLM’s incident response workflow and coordinate with NIH teams.

Qualifications

5+ years of IT security experience, including at least 3 years focused on vulnerability management and related platforms.
Expert knowledge of IT security vulnerabilities and risk assessments, with the ability to translate complex technical risk into actionable impacts for executive and technical audiences.
Strong knowledge of the vulnerability management lifecycle, patch management processes, and risk scoring models such as CVSS2 in a federal environment.
Familiarity with securing AWS and GCP cloud platforms and hybrid environments.
Understanding of hardening for Windows, Linux/Unix, and network devices.
Ability to work across program staff, executives, security application vendors, and technology teams to meet IT security goals.
Demonstrated experience administering enterprise-class vulnerability management platforms (for example, Tenable/Nessus) to support accurate discovery, repository management, scanning, and reporting.
Excellent experience applying FISMA and FedRAMP processes and policies, including maintaining Assessment and Authorization documentation for large federal systems.
Skilled at bridging technical, security, and business stakeholders, including aligning program staff, executives, technology teams, and external security vendors.
Bachelor’s degree in computer science, cybersecurity, information technology, or a related technical field (or equivalent practical experience).
CISSP certification (or ability to obtain within 6 months).

Technologies you’ll work with

Tenable.sc, Tenable.io, Nessus Manager, Nessus
AWS, GCP
Windows, Linux/Unix
Python, PowerShell
CVSS2, CISSP
FISMA, FedRAMP, Security Assessment and Authorization (SA&A)
NIH

Additional desired qualifications

Experience with scripting and automation (for example, Python and PowerShell) to automate scanning tasks, reporting, and API integrations; administration and operation of Nessus-based vulnerability management platforms.
Deep expertise integrating vulnerability data into enterprise monitoring and working with SIEM platforms.
Understanding of the Secure Software Development Life Cycle.
Master’s degree or additional security or cloud certifications (for example, CISM).

Role details

Location: Bethesda, MD (Onsite, 3–5 days per week)
Employment type: Full-time

View full job page →

Today

Cybersecurity Engineer

General Dynamics Information Technology New Orleans, LA

New Orleans, LA

Today

$102k - $138k/yr Full time Cybersecurity Tools Data Security Engineer

Apply Now

Job Description

General Dynamics Information Technology (GDIT) is hiring a Cybersecurity Engineer in New Orleans, LA to support the mission of accrediting DoN Enterprise systems. This role focuses on designing, implementing, operating, and continuously improving security controls that protect information systems, networks, applications, and data.

Working within the organization’s technology environment, the Cybersecurity Engineer helps drive ongoing risk management, incident response support, vulnerability reduction, compliance activities, and continuous monitoring. The position is aligned to common security frameworks and includes documenting results from assessments and testing.

What you’ll do

Design, implement, operate, and improve security controls to protect information systems, networks, applications, and data.
Support risk management, incident response, vulnerability reduction, compliance, and continuous monitoring across the organization’s technology environment.

What you’ll need

Education: Bachelor’s degree in cybersecurity, computer science, information technology, engineering, or a related field (equivalent relevant experience may be considered).
Experience: 5+ years of related experience.
Certifications: Relevant DoW certifications such as Security+, CISSP, CISM, CEH, GCIH, CySA+, CCSP, or vendor-specific security certifications.
Clearance: Secret (includes Interim Secret).
Citizenship: US Citizenship required.
Ability to work onsite in New Orleans, LA.
Experience with network, endpoint, cloud, application, or infrastructure security.
Knowledge of common security frameworks and practices, including NIST Cybersecurity Framework, security control assessments, and vulnerability management.
Familiarity with operating systems, networking protocols, authentication systems, encryption, and secure configuration baselines.
Ability to analyze scan test results and document findings clearly.
Strong written communication, analytical thinking, and problem-solving skills.
Ability to collaborate with both technical and nontechnical stakeholders.

Relevant technologies

CompTIA Security+ CE
Security+
CISSP
CISM
CEH
GCIH
CySA+
CCSP
NIST Cybersecurity Framework

Compensation and benefits

Salary: USD 102,000 - 138,000 per year.
Comprehensive benefits and wellness packages.
401K with company match.
Competitive pay and paid time off.

Requisition: RQ228669
Category: Cyber and IT Risk Management
Requisition type: Regular
Travel required: Less than 10%
Public trust: None

View full job page →

2d ago

IT Application Security Manager

Terumo Lakewood, CO

Lakewood, CO

2d ago

$121k - $152k/yr Full time Manager Application Security CISSP

Apply Now

Job Description

Terumo is seeking an IT Application Security Manager to help build a secure software delivery program across the enterprise. This hybrid role in Lakewood, CO sits within Global Cybersecurity and partners with software, cloud, architecture, and infrastructure teams to reduce application security risk while enabling application teams to deliver with confidence.

In this position, you will lead Application Security Analysts, strengthen secure development standards across the SDLC, and oversee testing programs including SAST, DAST, and SCA. Success is measured through security outcomes such as remediation SLA compliance, threat model coverage, and improvements in high-risk application vulnerability reduction.

Responsibilities

Collaborate with global and regional leaders to develop and evolve the enterprise Application Security strategy.
Lead, mentor, and develop Application Security Analysts.
Define AppSec metrics, KPIs, and maturity goals with regional and global security stakeholders.
Integrate security throughout the enterprise application portfolio and ensure requirements are included during design and architecture reviews.
Promote security-by-design principles across application teams.
Manage and oversee security testing and analysis activities, including SAST, DAST, SCA, IAST, API Security Testing, Container Security, Infrastructure as Code (IaC) Security, Mobile Application Security Testing, and Secrets Detection.
Review findings, prioritize remediation, and validate fixes; use risk-based methodologies to guide remediation decisions.
Track remediation SLAs, coordinate penetration testing remediation activities, and report vulnerability metrics to executive leadership.
Assist with Supply Chain Security and facilitate threat modeling sessions with development teams.
Identify abuse cases and attack paths, recommend architectural improvements, and ensure high-risk applications receive formal security architecture reviews.
Establish and run application vulnerability management processes, including processes for monitoring, coaching, and secure standards.
Support secure development in cloud platforms including AWS, Microsoft Azure, and Google Cloud Platform.
Conduct manual secure code reviews and provide secure coding guidance; coach teams on remediation and establish secure rules.
Find weak spots through testing and monitor logs to spot shadow APIs and strange traffic patterns.
Support training collaboration for OWASP Top 10, Secure Coding, API Security, Cloud Security, common software vulnerabilities, and secure design principles.
Perform application security risk assessments and support enterprise application risk management initiatives.
Investigate application security incidents, support forensic analysis, identify root causes, lead post-incident reviews, and develop preventive controls to reduce recurrence.
Support compliance initiatives aligned to NIST CSF 2.0, NIST SP 800-218 (SSDF), NIST SP 800-53, OWASP ASVS, PCI DSS, HIPAA, SOX, ISO/IEC 27001, and SOC 2.

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field.
Master’s degree preferred.
8–10+ years of cybersecurity experience.
5+ years in Application Security.
3+ years leading security teams.
Experience implementing enterprise DevSecOps programs.
Experience working with Agile and CI/CD environments.
Experience with cloud-native application security.

Tech & Tools

Key frameworks and standards include NIST SP 800-218 (Secure Software Development Framework), NIST Cybersecurity Framework (CSF) 2.0, OWASP, CIS Controls, NIST SP 800-53, OWASP ASVS, OWASP Top 10, as well as compliance considerations such as PCI DSS, HIPAA, SOX, ISO/IEC 27001, and SOC 2. Testing and security disciplines include SAST, DAST, SCA, IAST, IaC, and DevSecOps, with cloud environments across AWS, Microsoft Azure, and Google Cloud Platform.

Benefits

401(k) plan with matching contribution
Multiple group medical, dental, and vision plans
Robust wellness program
Life insurance and disability coverages
Vacation and sick time programs
Voluntary programs such as group accident, hospital indemnity, critical illness, and pet insurance

Additional Information

Employment type: Full-time
Department: Global Cybersecurity
Role reports to: Security Operations Leader
Work arrangement: Hybrid
Location: Lakewood, CO (Americas scope, regional)
Target pay range: USD 121,400 - 151,800 per year (salary determined based on education, experience, knowledge, skills, abilities, internal equity, and alignment with market data)
Target bonus on base: 15.0

Certificates, licenses, registrations: CISSP, CSSLP, GIAC Web Application Penetration Tester (GWAPT), GIAC Secure Software Programmer (GSSP), CCSP, CISM, Microsoft Certified: Cybersecurity Architect Expert, Microsoft Certified: Azure Security Engineer Associate.

Job segments: Testing, Cloud, Developer, Military Intelligence, Computer Science, Technology, Government.

View full job page →

21d ago

Cybersecurity Consultant

Marathon TS Washington, DC

Washington, DC

21d ago

$120k - $135k/yr Full time Senior CISSP Information Security

Apply Now

Job Description

Lead senior cybersecurity work supporting an Air Force CISO support mission at the Pentagon.

Responsibilities

Deliver senior guidance and technical leadership for enterprise cybersecurity initiatives using the Cybersecurity Framework and Risk Management Framework.
Provide leadership in creating, updating, and maintaining policies, procedures, and guidance that strengthen and sustain cybersecurity posture.
Apply expert knowledge of Federal, OMB, and DoD cybersecurity requirements, including statutory and regulatory obligations.
Support DoD cybersecurity programs, with Air Force experience preferred.
Lead the development and implementation of enterprise-level cybersecurity programs, including the production of guidance documents and implementation artifacts.
Use expert understanding of DoD and Federal cybersecurity guidelines, mandates, and requirements.
Demonstrate familiarity with Air Force cyberspace hierarchical organizations.
Provide briefings to DoD/Military stakeholders and answer fielding questions from senior leaders.
Coordinate and collaborate with external peer and subordinate organizations.
Support customer/client relationship management.
Analyze policy and doctrine and translate findings into actionable needs statements, requirements, and courses of action.
Maintain excellent communication and presentation skills, including a professional demeanor when briefing senior military and Government civilian leadership.

Requirements

BA/BS; Masters degree preferred
6+ years of experience in DoD and/or Federal cybersecurity
Active Top Secret clearance, SCI eligible (mandatory)
IAM Level 3 DoD 8570 / Industry certification required (current GLSC, CISM, or CISSP)
Strong working knowledge of NIST 800 series standards and guidelines
Knowledge of related Federal laws, policies, memoranda, and current best practices for Information Assurance and System Security

Work Location

On-site at the Pentagon in Washington, DC, with hybrid/telework eligibility
Hybrid remote in Washington, DC 20301

Pay

$120,000.00 - $135,000.00 per year

Technologies

Cybersecurity Framework
Risk Management Framework
NIST 800 series standards
DoD 8570
GLSC, CISM, CISSP

View full job page →

30d ago

Associate, Compliance Security Penetration Tester

Coalfire Remote 🌍 Remote

Remote

30d ago Closed

$64k - $117k/yr Full time Cybersecurity Tools Data Security Facilities Management

This position is no longer accepting applications (closed Sep 20, 2026).

Job Description

Join Coalfire and work with a team that supports client outcomes through rigorous security testing and practical compliance guidance. This remote role offers a flexible work model, comprehensive insurance options, flexible time off, paid parental leave, and certification and training reimbursement. You will also have access to digital mental health and wellbeing support while building your penetration testing craft alongside experienced colleagues.

What you’ll do

In this Associate Compliance Security Penetration Tester position, you will advise clients on technical security or compliance activities and conduct penetration testing across multiple technology types and environments. You will help ensure engagements run smoothly by managing engagement scope through remediation and supporting report quality via quality assurance processes. The work includes partnering with internal teams such as project managers, quality management, sales, and delivery members to drive customer satisfaction and meet project deliverables.

Advise clients on technical security and/or compliance activities
Manage priorities and tasks to achieve delivery utilization targets
Ensure quality products and services are delivered on time
Develop and improve testing processes, procedures, and methodologies
Assist with report generation and quality assurance
Support engagement scoping and help lead engagements from initial stages through implementation and remediation
Manage project escalations related to current testing
Collaborate with a team and independently support work across areas where skills apply, including:

Internal and external network penetration testing
Application penetration testing (browser-based, API, mobile)
Cloud solution penetration testing
Social engineering
Wireless assessments

Conduct security assessments across a wide variety of technologies and implementations
Simulate sophisticated cyberattacks for clients worldwide
Mentor and develop less experienced staff

What you bring

Bachelor’s degree (four-year college or university) or equivalent combination of education and work experience
3+ years’ experience in information security, including web application and network penetration testing experience
Experience working with enterprise environments
Hands-on scripting experience with Python, PowerShell, Shell, or Ruby
Experience with one or more IT security compliance frameworks: PCI, FISMA, HIPAA, FEDRAMP, or HITRUST
1 to 3 years of experience in an IT Security Audit and/or Compliance role
Ability to interact with management in a consultative manner
Strong understanding of networks, servers, workstations, and applications
Excellent communication and presentation skills
Ability to travel up to 20%

Tools and compliance frameworks

Python, PowerShell, Shell, Ruby
PCI, FISMA, HIPAA, FEDRAMP, HITRUST

Benefits

Flexible work model (choose when and where you work most effectively, including home or office)
Paid parental leave
Flexible time off
Certification and training reimbursement
Digital mental health and wellbeing support membership
Comprehensive insurance options

Additional details

Location: Remote (remote)
Salary range: USD 64,000 - 117,000 per year (estimate based on national salary averages)
May be eligible for annual incentive, commission, and/or recognition programs
Equal opportunity and pay equity are integral to Coalfire’s business
Coalfire is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities
To request reasonable accommodation for the application or interview process, contact: HumanResourcesMB@coalfire.com
Tags: #LI-TF1, #LI-Remote
Coalfire may use AI tools in parts of the hiring process, supporting recruitment teams without replacing human judgment

View full job page →

1mo ago

GRC Senior Security Analyst

Kura Sushi Corporate Support Center Irvine, CA

Irvine, CA

1mo ago Closed

$90k - $100k/yr Full time Senior Ai Security Cloud Platforms

This position is no longer accepting applications (closed Sep 20, 2026).

Job Description

Hybrid role in Irvine, CA with a compensation range of USD 90,000 - 100,000 per year. Kura Sushi Corporate Support Center offers a benefits package built for stability and long-term growth, including 401(k), health and wellness benefits (medical, dental, and vision), paid time off (vacation accrual and sick time per eligibility and applicable requirements), and a performance bonus for eligible positions. Eligible team members may also have access to a long-term investment program.

In this GRC Senior Security Analyst position, you’ll help safeguard Kura’s IT infrastructure by combining real-time security monitoring with governance, risk, and compliance execution. The role supports a security-by-design approach under the direction of the Integrated GRC Senior Manager, including security awareness training, incident response participation, and ongoing reporting to senior leadership.

Responsibilities

Monitor activity across Kura Sushi USA environments and respond to security alerts in real time.
Analyze system logs, intrusion detection alerts, and suspicious activity; perform forensic analysis using SIEM and environment telemetry or log events.
Conduct vulnerability assessments and penetration testing, including periodic assessments and threat hunting to address potential security weaknesses.
Investigate and document security incidents, including root cause analysis, and support execution of assigned duties within the incident response plan.
Provide guidance on firewall security configurations, IPS/IDS, and endpoint protection systems; support secure system configurations aligned with security policies.
Develop and enforce security and data governance through policies, procedures, and compliance standards.
Collaborate with ACAS and IT teams to strengthen security controls, improve compliance outcomes, and reduce operational risk.
Evaluate, recommend, and implement security solutions to improve core security capabilities, including access management and network security.
Prepare regular security reports for management and provide regular reporting on security posture progress to the VP of ACAS and applicable senior management.
Conduct security awareness training and compliance education to build a culture of security.
Perform annual security risk assessments and investigate compliance breaches with root cause analysis and corrective actions to prevent recurrence.
Act as a point of contact between the organization and regulatory agencies, including handling inspections and assessments.
Review contracts involving PII and system components to ensure Data Processing Agreements (DPAs) are issued to third-party vendors.
Support remediation by evaluating IT control/process deficiencies issued by Internal Audit and providing remediation plans for recommended design improvements.
Develop reporting metrics and dashboards, obtain and retain evidence, and provide it to the Integrated GRC Senior Manager, VP of ACAS, or leadership as needed.
Contribute to the Data Governance program and help align security strategies and initiatives with business objectives.
Provide guidance to ACAS and IT management to build a strong IT/security compliant environment and mentor team members involved in compliance, security, and change management processes.
Attend continuing professional education to keep abreast of security and technology regulations, emerging risks, and strategies.
Support monthly progress updates based on the annual plan and complete other assigned projects from the Integrated GRC Senior Manager or VP of ACAS.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field.
Relevant certifications such as CISSP or CISM, and GIAC or CEH.
At least 5 years of experience in cybersecurity or IT security roles with strong understanding of security frameworks and standards such as NIST, ISO 27001, and CIS.
Governance, risk, and compliance experience from a Big 4 consulting firm or a fortune 500 company.
Hands-on experience in incident response and forensic analysis.
Knowledge of cloud security in AWS, Azure, or GCP environments.
Familiarity with threat intelligence platforms and malware analysis.
Regulatory compliance knowledge including CCPA, PCI DSS, SOX, and GDPR.
Proficiency with Optro (formerly AuditBoard)-Cross Comply and various security tools.
SIEM proficiency with tools such as Splunk, Google Security Operations, QRadar, or ArcSight.
Knowledge of firewalls, intrusion detection/prevention systems (IPS/IDS), and endpoint security.
Knowledge of security and data platforms including Netskope, CheckPoint, Zscaler, BigID, and MS Purview.
Ability to conduct vulnerability assessments and penetration testing.
Basic scripting skills in Python, PowerShell, or Bash.
Strong leadership and people management skills, with experience documenting security, risk, and regulatory compliance activities.
Experience with security/technology auditing processes, dashboard creation, and building solutions/options for stakeholders.
Confident communication with executive management and cross-functional peers; ability to liaise with Internal Audit to support appropriate IT General Controls (ITGCs).
Excellent analytical and troubleshooting skills; ability to work under pressure.

Indicated office requirement: This is a hybrid position. The selected candidate must be able to come to the office in Irvine, CA on in-office days and as needed to carry out necessary functions of the role.

View full job page →

1mo ago

Senior Cloud Information System Security Engineer

MANTECH Huntsville, AL

Huntsville, AL

1mo ago Closed

Full time Senior Cloud Platforms Cloud Risk Management

This position is no longer accepting applications (closed Sep 12, 2026).

Job Description

MANTECH is seeking a Senior Cloud Information System Security Engineer (ISSE) to support security architecture and network protection efforts across missions in Washington, D.C., Chantilly, VA, Quantico, VA, or Huntsville, AL (onsite). In this role, you will help translate cybersecurity and protection needs into designs and implemented controls while supporting ATO and RMF processes.

Responsibilities

Identify information protection needs for an Information System (IS) and Network Environment, and define IS and network security requirements aligned to applicable cybersecurity requirements.
Design security architectures for the IS and Network Environment, including cybersecurity-enabled products used within those environments.
Integrate and/or implement security with Cross Domain Solutions (CDS) for use within the IS and Network Environment.
Develop and implement security designs for new or existing network systems, ensuring hardware, operating systems, and software applications address cybersecurity requirements.
Design, develop, and implement network security measures supporting confidentiality, integrity, availability, authentication, and non-repudiation, including cybersecurity countermeasures for the IS and Network Environment.
Create interface specifications for the IS and Network Environment, and develop approaches to mitigate vulnerabilities, recommending changes to network or network system components when needed.
Ensure network system designs support the incorporation of FBI directed cybersecurity vulnerability solutions.

Requirements

Experience level must meet one of the following:
- High school diploma/GED and 14 years’ experience
- Associate’s degree and 10 years’ experience
- Bachelors degree and 8 years’ experience
- Master’s degree and 6 years’ experience
Must hold at least one of the following certifications: CISSP (or Associate), CompTIA CASP CE, CSSLP, CISSP-ISSEP, CISM, or CISSP-ISSAP.
Must hold at least one of the following cloud certifications: AWS Certified Cloud Practitioner, AWS Certified Security – Specialty, (ISC)2 CCSP, AWS Certified Solutions Architect – Associate, AZ-500 (Azure Security Engineer Associate), or Google Professional Cloud Security Engineer.
Familiarity with security tools, including Tenable Nessus and/or Security Center, IBM Guardium, HP WeblInspect, Network Mapper (NMAP), and/or similar applications.
Working knowledge of the NIST Risk Management Framework (RMF) and ATO processes.

Preferred Qualifications

Degree in Computer Science, Cybersecurity, or another cyber discipline.

Clearance Requirements

Must have a current/active Top Secret security clearance and be willing and able to obtain SCI eligibility prior to start.
Selected candidate must be willing to undergo a Polygraph.

Physical Requirements

Must be able to remain in a stationary position 50%.
Needs to occasionally move about inside the office to access file cabinets and office machinery.
Constantly operates a computer and other office productivity machinery (for example, calculator, copy machine, and computer printer).
Often positions self to maintain computers in the lab, including under desks and in the server closet.
Frequently communicates with coworkers, management, and customers, which may include delivering presentations; must be able to exchange accurate information.

Technologies

Cross Domain Solutions (CDS)
Tenable Nessus, Security Center
IBM Guardium, HP WeblInspect, Network Mapper (NMAP)
NIST Risk Management Framework (RMF), ATO processes
AWS Certified Cloud Practitioner, AWS Certified Security – Specialty, (ISC)2 CCSP, AWS Certified Solutions Architect – Associate
AZ-500 (Azure Security Engineer Associate)
Google Professional Cloud Security Engineer