Security Program

Security Program Cybersecurity Jobs

4 jobs found

4d ago

Application Security Program Manager

Knowledge Services United States 🇺🇸 Remote

United States

4d ago

Contract Manager Application Security Application Security Program

Apply Now

Job Description

Knowledge Services is hiring a remote Application Security Program Manager (contract) to help the State of Maine transition and sustain application security practices within the SSDLC.

Responsibilities

Support the Information Security Office in transitioning the State’s secure software development lifecycle (SSDLC) from near-complete modernization to a sustained operating program.
Coordinate the people, decisions, workflows, and measures needed to make application security practices workable across State technology teams.
Shift from transition activities to adoption, performance, risk reduction, and continuous improvement across the application security portfolio.
Lead a cross-functional program management effort across application security stakeholders.
Partner with Vulnerability Management, Security Architecture, Governance Risk and Compliance (GRC), Application Development, GitHub Governance, infrastructure and platform teams, agency product owners, and vendors.
Drive follow-through, adoption, and accountability across stakeholders, escalating decisions to the appropriate owner while specialist teams retain authority for technical, product, and risk approvals.
Oversee application security efforts across multiple teams to improve the State of Maine’s security posture.
Coordinate handoff from project deliverables to owned processes, including named owners, documented handoffs, decision paths, service expectations, and an operating cadence.
Maintain a program roadmap covering priorities, dependencies, risks, and an improvement backlog.
Validate and improve the application risk profile and security workflows, including design review, scanning, finding triage, remediation, exceptions, and release workflows.
Ensure guidance aligns with real tools, different applications, and vendor models.
Plan rollout waves with development and platform partners; support security champions, training, office hours, and developer-facing guidance.
Collect feedback and remove barriers that prevent teams from consistently applying the workflow.
Help product and development teams convert findings into risk-ranked plans with owners, target dates, and closure evidence.
Track coverage gaps, aging findings, blockers, and escalations while responsible teams remediate and verify results.
Facilitate working groups and leadership reviews; maintain a responsibility model; route design questions through Security Architecture and policy, exception, and risk decisions through GRC and authorized Information Security Office leadership.
Define measures with data owners and coordinate trustworthy reporting on application coverage, adoption, remediation, exceptions, and control performance; use trends and stakeholder feedback to propose changes and adjust priorities.
Coordinate related initiatives across repository governance, security tooling, platform integration, third-party application security, and developer enablement.
Surface capacity, funding, and service dependencies; prepare concise options and recommendations for leadership.

Requirements

8 to 10 years of experience in leadership roles and cybersecurity program management, including change agent work improving application security program maturity.
Experience improving application security program maturity.
Stakeholder Management and Organizational Change Management leadership.
Working knowledge of Secure Software Development Lifecycle (SSDLC).
Certification in code and dependency scanning.
Strong facilitation, writing, and stakeholder communication skills.
Substantial experience managing complex technology, cybersecurity, or application security programs across multiple teams, delivering through influence and shared accountability.
Knowledge of software delivery and application security concepts, including security requirements, code and dependency scanning, vulnerability management, remediation, and risk treatment.
Ability to translate technical and policy issues into clear actions, owners, decisions, and management reporting.
Experience establishing repeatable processes, coordinating organizational change, using measures to improve performance, and managing competing priorities in an evolving program.
Experience implementing, operationalizing, or governing SSDLC practices across multiple development teams.

Tech Stack

Secure software development lifecycle (SSDLC)
GitHub
Governance Risk and Compliance (GRC)

Additional Details

Location: United States (remote)
Contract: through end of June 2027 (likely extension)
Time zone: remote work acceptable for candidates residing in EST or CST time zones
Work eligibility: cannot accept candidates requiring C2C or requiring sponsorship for a work visa

Why This Role

Impact the trajectory of application security in the State of Maine by supporting integrity and confidentiality of critical systems.
Work within a large IT enterprise supporting critical State applications.
Contribute to protecting citizens’ data and enabling secure operation of essential government services.

Why Candidates May Like It

Immersion in rapidly evolving state government issues with a fast-moving organization.
Collaboration with peers and exposure to creative problem-solving approaches.
Opportunities to tackle unique and complex projects in application security.

View full job page →

30d ago

Application Security Program Manager I-II

Central Pacific Bank Honolulu, HI

Honolulu, HI

30d ago Closed

$87k - $138k/yr Full time Manager Application Security Data Security

This position is no longer accepting applications (closed Nov 1, 2026).

Job Description

The Application Security Program Manager provides leadership and governance for the bank’s application security, identity management, fraud-related technology risk, and emerging technology risk programs within the Information Security Program. This role establishes standards, risk assessment methodology, reporting, and a multi-year roadmap, coordinating with Technology and business leaders to align security expectations with regulatory requirements and business objectives.

Location & Employment Details

Location: Honolulu, HI (onsite)
Compensation: USD 86,503 - 138,365 per year

Core Responsibilities

Develop and maintain information security risk management processes that are clear, workable, up to date, and reflect regulatory and bank-specific requirements and issues.
Assist with communicating risk management processes across the business, including training sessions where appropriate.
Plan, coordinate, implement, and manage security measures that address risks to systems and data, including preventing unauthorized modification, destruction, or disclosure of information, including by outsider service providers.
Analyze and evaluate new products and systems for security weaknesses, and provide measures to prevent exposure and loss.
Train staff on policies and standards related to application security and identity management best practices, including methodologies for conducting related risk assessments.
Review and delegate work tied to governance and oversight of controls for application security and identity management.
Lead and motivate a team to support engagement, performance, and productivity, including setting goals and providing guidance.
Conduct regular performance reviews, provide constructive feedback, identify skills gaps, and support professional growth through training, mentorship, or cross-functional collaboration.
Lead a risk-based application security review program to ensure appropriate security controls are designed, implemented, and operating effectively.
Validate application and related reference architectures for security best practices and recommend changes to enhance security and reduce risk where applicable.
Oversee application risk assessments and control reviews, identify weaknesses, and drive remediation plans with accountable stakeholders.
Lead security risk evaluations for emerging technologies, new business initiatives, and material changes to the application and identity ecosystem.
Conduct or facilitate threat modeling for services and applications, linked to associated risk and data.
Provide strategic oversight for application security tooling, processes, and service models to support scalable coverage and risk visibility.
Conduct incident response exercises and incorporate lessons learned into existing security architectures and practices.
Conduct forensic analysis of security-related incidents in a manner consistent with best practices and counsel.
Perform risk analyses for the bank’s security needs and prepare recommendations based on risk and exposure versus cost.
Prepare and deliver research findings in written and/or oral form, including presenting objectives, alternatives, risk analyses, and cost/benefit analyses.
Assist with planning and directing information security activities to support compliance with internal and external audits and federal and State regulations, including FDIC, relevant sections of the Gramm-Leach-Bliley Act (GLBA), Sarbanes-Oxley Act Section 404 provisions, and other duties as assigned.
Maintain an outward-facing, forward-looking view to ensure the Information Security Program remains current and relevant.
Design, implement, and manage Information Security data identification, aggregation, analytics, and validation to meet department goals.
Collaborate on application security documentation (policies, standards, procedures, templates, and related materials) used for security governance in projects and operations.
Initiate and execute process improvements and policy/procedure updates.
Track developments and changes in digital banking and threat environments to ensure they are addressed in security strategy plans.
Document data flows of sensitive information within the organization (for example, PII or ePHI) and recommend controls to secure this data (such as encryption and tokenization).
Serve as Subject Matter Expert for application security, identity management, and API security, including security planning consulting in application and related infrastructure projects.
Partner with cross-functional teams to ensure security requirements are incorporated into processes and operations.
Liaison with vendor management to conduct security assessments of existing and prospective vendors, particularly those involving intellectual property and regulated or protected data (including SaaS, cloud/IaaS, managed service providers, and other relevant categories).
Own the bank’s application security, identity governance, and fraud-related technology risk programs, accountable for strategy, governance, maturity, and measurable risk outcomes.
Establish program objectives, control standards, operating procedures, risk tolerances, and performance metrics aligned to regulatory expectations.
Develop and maintain a multi-year roadmap for people, process, and technology capabilities, including investment priorities, control enhancements, and maturity targets.
Provide leadership reporting and risk insights to Information Security leadership, executive stakeholders, governance committees, auditors, regulators, and other appropriate parties.

Required Qualifications

Education: Bachelor’s Degree from a 4-year university required, preferably in Information Security, MIS, Computer Science
Experience (Program Manager I): 7+ years of experience with information security, application security, and regulations and privacy laws related to release of information, plus security and access control technologies (or equivalent experience)
Program Manager I Management Experience: 3+ years managing or serving as a team lead with enterprise-wide cross-functional leadership responsibilities
Experience (Program Manager II): 10+ years of experience with information security, application security, and regulations and privacy laws related to release of information, plus security and access control technologies (or equivalent experience)
Program Manager II Management Experience: 5+ years managing or serving as a team lead with enterprise-wide cross-functional leadership responsibilities

Preferred Certifications

CISSP, CISA, TOGAF, SANS GCSA, or equivalent certification (indicate upon hire)

Physical Requirements & Working Conditions

Ability to perform light physical work and to move or lift items, including boxes, files, and papers, up to 20 pounds unless otherwise indicated.
Ability to operate and use standard office equipment, including phone, copier, personal computer, and other work-related mechanical or electronic devices and applications.
Ability to clearly communicate verbally and in writing with internal and external customers; able to hear sufficiently for daily discussions and interactions.
Ability to read and understand bank-related documents.
Ability to work in a conventional office setting, involving sitting at a desk or workstation for extended periods, and adapt to different work environments as needed.

View full job page →

1mo ago

Program Security Analyst Mid-Level

Zel Technologies Rome, NY

Rome, NY

1mo ago Closed

$90k - $150k/yr Full time Data Security Information Security Opsec

This position is no longer accepting applications (closed Oct 24, 2026).

Job Description

Zel Technologies supports the AFRL/RF Rome Research Site with mission-focused security operations, helping protect and safeguard SAP and SCI activities. This onsite role partners directly with the Government Special Access Program Security Officer (GSSO) to strengthen security posture, compliance, and administrative security functions across the program.

Responsibilities

Support the GSSO in protecting and safeguarding SAP and SCI activities, including customer compliance requirements.
Provide day-to-day multi-disciplined security support and technical expertise across program management, Personnel Security, Information Security, Physical/Industrial Security, and Operations Security (OPSEC).
Assist with developing, executing, and updating approved policies, security processes, Standard Operating Procedures (SOPs), Emergency Action Plans (EAPs), and Operating Instructions (OIs).
Prepare, disseminate, and interpret security policy and guidance for processing, dissemination, and controlling classified materials.
Coordinate with internal and external managers and officials from the Department of War (DoW), the Intelligence Community (IC), and others to stay aligned on security regulations and program operations.
Identify vulnerabilities, threats, and risks to testing, training, and operational activities.
Conduct continuous assessments of security procedures, report shortfalls, monitor operations, and provide status updates and recommendations to the program manager team and government customer.
Perform annual security self-inspections to document and review the security program, correcting deficiencies as identified.
Initiate and oversee security inquiries.
Perform Defense Information System for Security (DISS) and Special Access Program Nomination Process (SAPNP) reviews for candidates seeking SAP access, including preparing, processing, and reviewing Program Access Requests (PARs) for accuracy and access eligibility.
Support security clearance processing by reviewing, tracking, and monitoring activities with appropriate government personnel.
Complete administrative records work, including data entry and record checks, continuously updating and maintaining records (database and hardcopy) of security actions in JADE and other systems.
Assist with security indoctrinations, briefings, and debriefings for personnel, including ensuring awareness of reporting responsibilities for Foreign Contact, Foreign Travel, and Outside Activities.
Support physical security operations, including entry control, access control for badges, visitor control, meeting rosters, and visitor badges.
Conduct alarm checks, coordinate guard force response, and perform alarm tests.
Perform entry/exit checks IAW policy and regulation to prevent prohibited device introduction and improper removal of classified materials.
Identify and report infrastructure deficiencies to help ensure facilities meet DoD and Air Force requirements.
Maintain daily administrative security logs and security records.
Assist with Special Access and Top-Secret Control for accountable material, magnetic media, and associated correspondence.
Receive and dispatch mail and packages, including receipt of classified materials.
Create, manage, execute, and update a comprehensive Security Education Awareness Training (SEAT) program.
Open/close the facility and perform destruction duties as assigned.

Requirements

US citizenship required.
Active Top Secret clearance with SCI and SAP eligibility.
Minimum 5 years of experience supporting federal agencies or military operations in a classified environment.
Proficiency in Microsoft Office Suite; familiarity with DoD networks and systems.
Successful background and drug screening check.

Technologies

Microsoft Office Suite
Defense Information System for Security (DISS)
Special Access Program Nomination Process (SAPNP)
JADE

Benefits

Medical, Dental and Vision Insurance
401k immediate vesting with company match
Flexible Spending Accounts
Health Savings Account with company contributions
Employee Assistance Program (EAP)
Bonuses for performance
Voluntary life/accidental death & dismemberment
Educational assistance and special training programs
Voluntary benefits (accidental, critical illness, whole life)
Group life insurance (Company paid)
Short-term and Long-term Disability Insurance (Company paid)
Paid Time Off (PTO), Holiday Leave, Jury Duty, and Military Leave
Health and fitness reimbursement
Referral bonuses
Employee discounts on various services and products

Preferred Requirements

Knowledge of US government security policies, procedures, and regulations.
Experience as Activity/Program Security Representative.

Work Environment

Majority of time spent in an office setting.
Occasionally lift and/or move up to 25 pounds.
Specific vision abilities required include close vision, distance vision, color vision, and ability to adjust focus.

Location: Rome, NY (onsite) | Salary: USD 90,000 - 150,000 per yearly

View full job page →

1mo ago

Principal Cybersecurity Analyst

Northrop Grumman Roy, UT

Roy, UT

1mo ago Closed

$98k - $148k/yr Full time Continuous Monitoring Cybersecurity Tools Data Security

This position is no longer accepting applications (closed Oct 17, 2026).

Job Description

Principal Classified Cybersecurity Analyst role focused on lifecycle support and secure, policy-compliant data transfer between classified and unclassified networks.

Responsibilities

Manage the cybersecurity program for all assigned information systems and complete all cybersecurity-related tasks.
Lead regular reviews of system audits and continuous monitoring activities across security controls and configurations to improve the information system security posture.
Assess systems and networks within the networking environment or enclave and identify deviations from acceptable configurations, enclave policy, or local policy.
Analyze and validate security requirements and recommend additional requirements and safeguards.
Implement government policy requirements, including recommendations on process tailoring, and participate in and document process activities.
Establish and oversee program control processes to mitigate risk and support Assessment and Authorization (A&A), including: process support, analysis, coordination, security certification testing, security documentation, investigations, software research, hardware introduction and release, emerging technology research, inspections, and periodic audits.
Lead required Security Test and Evaluation (ST&E) efforts through pre-test preparations, test participation, results analysis, and report preparation for each government accrediting authority.
Document A&A results and inspection outcomes, including technical or corrective actions, and collaborate with the security team to submit responses to the appropriate cognizant authority.
Prepare, review, and submit A&A documentation for review and approval, including System Security Plan, Risk Acceptance Report, Security Controls Traceability Matrix, Plan of Action and Milestones (POA&Ms), and related materials.

Requirements

Education and experience (required): Master’s Degree with 3 years of experience; or Bachelor’s Degree with 5 years of experience; or Associate’s Degree with 7 years of experience; or High School Diploma (or equivalent) with 9 years of experience.
Meet U.S. Government 8140 requirements for a Cybersecurity (722) (examples include Security+ CE, CySA+, GICSP, GSEC, CND, SSCP).
Have a current U.S. Government Top Secret security clearance (at a minimum), including a closed investigation date completed within the last 6 years, or be enrolled in the U.S. Government Continuous Evaluation (CE) Program.
Ability to obtain and maintain access to Special Access Programs as a condition of continued employment.

Preferred Qualifications

Bachelor’s degree in Cybersecurity or a related field.
Experience in cybersecurity compliance (example: Assessment & Authorization under RMF).
Knowledge of security tools including ACAS, Nessus, Splunk, Trellix, and SCAP.
Knowledge of security frameworks and documentation including NIST, JSIG, DAAG, SSPs, POA&Ms, and SCTMs.
Proven experience designing, implementing, and supporting Cross Domain Solutions (CDS) for secure data transfer across classified networks.

Technologies

Cross-Domain Solutions (CDS)
ACAS
Nessus
Splunk
Trellix
SCAP
RMF
NIST
JSIG
DAAG
SSPs
POA&Ms
SCTMs
Security+ CE
CySA+
GICSP
GSEC
CND
SSCP

Benefits

Exceptional benefits/healthcare
9/80 work schedule
401k matching program
Flexible work arrangements
Health insurance coverage
Life and disability insurance
Savings plan
Company paid holidays
Paid time off (PTO) for vacation and/or personal business
Depending on the position, eligibility for overtime, shift differential, and a discretionary bonus in addition to base pay
Annual bonuses designed to reward individual contributions and share in company results
Employees in Vice President or Director positions may be eligible for Long Term Incentives

Job Details

Location: Roy, UT (onsite)
Salary: USD 98,400 - 147,600 per yearly
Clearance required for start: Yes
Clearance type: Secret
Travel: Yes, 10% of the Time
Relocation assistance: No relocation assistance available
On-site/telecommute: Due to the classified nature of the work, no virtual or telecommute options; applicants should be willing to work on-site.
U.S. citizenship required: U.S. Citizenship is required for positions with a government clearance and certain other restricted positions.
Application period: Estimated to be 20 days from the job posting date.

View full job page →

Security Program Cybersecurity Jobs

Application Security Program Manager

Application Security Program Manager I-II

Program Security Analyst Mid-Level

Principal Cybersecurity Analyst

Get Security Program Cybersecurity Jobs alerts