Security Standards And Frameworks

Security Standards And Frameworks Cybersecurity Jobs

4 jobs found

Today

Senior Security Engineer

AgreeYa Solutions Los Angeles, CA

Los Angeles, CA

Today

Up to $60/hr Full time Senior Application Security Azure

Apply Now

Job Description

The Senior Security Engineer role is focused on evaluating security architecture and delivering hands-on security assessments and penetration testing across on-premises networks and Azure cloud environments. The position emphasizes network and Azure security reviews, integration of controls into CI/CD, security reporting, and participation in incident response.

Location

Los Angeles, CA (Onsite)

In person
Job Location: Los Angeles, CA | Onsite

Salary

USD 60 per hour

Summary

This role assesses security architecture and performs manual and automated security testing. Responsibilities include reviewing network and Azure architecture, integrating security controls into CI/CD pipelines, producing assessment reports, and supporting incident response for network or application security events.

Responsibilities

Conduct comprehensive security assessments and penetration tests for on-premises networks and Azure cloud environments, including manual and automated testing of network controls, firewalls, and cloud-native security features.
Assess network security posture across design, implementation, and deployment phases to ensure alignment with enterprise security standards.
Collaborate with application security architects to incorporate secure design principles into network infrastructure.
Work with cross-functional teams including IT, DevOps, Application Development, and Enterprise Architecture to identify vulnerabilities and drive remediation.
Integrate security controls and automated testing into CI/CD pipelines supporting network and cloud deployments.
Review and improve network architecture by identifying Azure-specific threats, risks, and compliance gaps across services such as Azure Firewall, Network Security Groups, and Azure Gateway.
Provide guidance on IAM, data protection, and secure connectivity between on-premises systems and cloud resources.
Develop and apply network security policies, standards, and best practices aligned with frameworks such as NIST, CIS Benchmarks, and OWASP.
Monitor emerging network security trends, Azure security enhancements, and changes in threat landscapes.
Prepare security assessment reports and communicate findings to both technical and non-technical stakeholders.
Participate in incident response activities related to network or application security events.

Requirements

5+ years of professional experience in network security with hands-on exposure to on-premises and Azure cloud environments.
Strong understanding of application security architecture and how it integrates with network security.
Experience performing manual and automated network security assessments, including scanning and penetration testing.
Knowledge of SSDLC and DevSecOps practices.
Familiarity with Azure security tools and services including Azure Firewall, Network Security Groups, Security Center/Defender, and Key Vault.
Strong communication skills for advising and collaborating across the enterprise.
Relevant certifications are a plus, such as Azure Security Engineer Associate, CISSP, CEH, or CCSP.
Bachelor’s degree in Computer Science, Information Security, or a related field (preferred).

Technologies

Azure
Azure Firewall
Network Security Groups
Azure Gateway
Security Center/Defender
Key Vault
CI/CD
NIST
CIS Benchmarks
OWASP
SSDLC
DevSecOps

Benefits

Dental insurance
Health insurance
Vision insurance

Application Questions

How much hands-on experience do you have with Microsoft Azure security? Which Azure security services have you personally configured or managed?
Have you personally performed security assessments, vulnerability assessments, or penetration testing? Please describe one recent example and the tools you used.
What experience do you have with network security technologies such as firewalls, NSGs, VPNs, IDS/IPS, WAF, or network segmentation?
Located in the West Los Angeles, CA area

View full job page →

3d ago

Principal Product Security Engineer

Navy Federal Credit Union Winchester, VA

Winchester, VA

3d ago

Full time Senior Application Security Application Security Engineering

Apply Now

Job Description

Navy Federal Credit Union is seeking a senior individual contributor to define and integrate Secure Software Development Lifecycle (Secure SDLC) practices into software delivery workflows. This onsite role in Winchester, VA focuses on improving risk-informed release decisions, reducing security friction for engineering teams, and strengthening product integrity across the full lifecycle.

What you’ll do

Define and mature Secure SDLC practices aligned to Navy Federal software delivery processes, operating models, and secure development practices.
Own and support a pre-production product security scorecard to enable risk-informed release decisions, communicating product security posture, open risks, exceptions, and required remediation actions to business and technology stakeholders.
Act as the integration lead for embedding Secure Development Practice capabilities into engineering workflows, governance forums, and lifecycle activities.
Map product security activities across software delivery, including intake, planning, architecture review, design, development, testing, release, exception management, and operational handoff.
Create repeatable process patterns for integrating threat modeling, secure coding, application security testing, software composition analysis, API security, software supply chain security, product integrity testing, and risk-based exception handling into day-to-day engineering work.
Reduce redundant reviews, unclear handoffs, late-stage security friction, and legacy process steps that do not align with Navy Federal delivery practices.
Develop Secure SDLC operating models, workflow diagrams, playbooks, process documentation, RACI models, control integration points, and implementation guidance.
Translate security standards, objectives, and risk expectations into practical engineering requirements and developer-consumable guidance.
Partner with software engineering, architecture, DevSecOps, Information Security, governance, and risk stakeholders to align secure development practices with enterprise delivery processes.
Support integration of secure development expectations into architecture governance, delivery boards, exception processes, and lifecycle risk decision points.
Recommend process improvements that strengthen security outcomes, improve developer experience, increase risk visibility, and enable secure delivery at scale.
Establish adoption and effectiveness measures to demonstrate Secure SDLC maturity, control integration, developer enablement, reduced friction, and improved product security outcomes.
Lead cross-functional working sessions and develop executive-ready recommendations, influencing process decisions across security and engineering stakeholders without direct authority.

What you bring

Bachelor’s degree in information technology, Cybersecurity, Computer Science, Software Engineering, Information Systems, Engineering, or related field, or the equivalent combination of education, training, and experience.
Experience defining, improving, or integrating secure development lifecycle practices into enterprise software delivery processes.
Strong understanding of secure development practices including threat modeling, secure coding, application security testing, software composition analysis, API security, software supply chain security, vulnerability management, and risk-based exception handling.
Extensive hands-on experience translating security requirements, control objectives, or risk expectations into practical engineering processes, workflow guidance, and delivery requirements.
Demonstrated experience developing process documentation, operating models, workflow diagrams, playbooks, standards, RACI models, implementation guidance, or executive-level recommendations.
Strong facilitation, analytical thinking, systems thinking, problem-solving, communication, and stakeholder influence skills.
Ability to operate independently as a senior individual contributor and lead complex cross-functional initiatives without direct reporting authority.

Frameworks and tools you’ll work with

Secure Software Development Lifecycle
Threat modeling, secure coding, application security testing
Software composition analysis, API security, software supply chain security
Vulnerability management, DevSecOps
NIST Secure Software Development Framework, OWASP SAMM, OWASP ASVS, OWASP Top 10, BSIMM, ISO 27001, NIST Cybersecurity Framework
Agile, SAFe, DevOps, CI/CD, product-oriented delivery
Architecture governance, release management
CISSP, CISM, CSSLP, CCSP, GIAC

Desired qualifications

Extensive hands-on experience in application security, secure SDLC, software engineering, DevSecOps, enterprise architecture, technology risk, or software delivery governance.
Strong understanding of software delivery practices including Agile, SAFe, DevOps, DevSecOps, CI/CD, product-oriented delivery, architecture governance, and release management.
Advanced degree in Information Technology, Cybersecurity, Computer Science, Software Engineering, Information Systems, Engineering, Business Administration, or related field.
Experience with industry frameworks or models such as NIST Secure Software Development Framework, OWASP SAMM, OWASP ASVS, OWASP Top 10, BSIMM, ISO 27001, NIST Cybersecurity Framework, or similar security and software assurance practices.
CISSP, CISM, CSSLP, CCSP, GIAC, cloud security, architecture, Agile, SAFe, or related professional certifications.

Schedule and location

Hours: Monday - Friday, 8:00AM - 4:30PM

Onsite locations: 820 Follin Lane, Vienna, VA 22180; 5510 Heritage Oaks Drive, Pensacola, FL 32526; 141 Security Drive, Winchester, VA 22602

Compliance

Remains cognizant of and adheres to Navy Federal policies and procedures, and regulations pertaining to the Bank Secrecy Act.

View full job page →

3d ago

Information Systems Security Engineer

Amyx, Inc. O'Fallon, IL

O'Fallon, IL

3d ago

Full time Cybersecurity Tools Engineer Information Security

Apply Now

Job Description

Amyx, Inc. is seeking multiple Information Systems Security Engineers to support the US Transportation Command (TRANSCOM) Senior Information Security Officer (SISO) contract from Scott Air Force Base, IL. This onsite role centers on executing risk management activities, advising on countermeasures, and helping implement security program guidance, cyber alerts, and best practices within the USTRANSCOM environment.

In this position, you will support the Government’s security risk management processes by assessing potential risks, mitigation measures, and residual risk, and by delivering Security Risk Assessment recommendations to the Government as required. You will also research newly developed protections for command systems and assist in developing and administering effective security programs for Government approval.

Responsibilities

Conduct risk assessments to determine the risk associated with integrating new systems or capabilities into the USTRANSCOM environment.
Obtain supporting data from other DoD/Federal organizations, vendors, or Internet research as needed to support RMF requirements.
Perform risk assessments using the principles of NIST SP 800-30 (Guide for Conducting Risk Assessments) and NIST SP 800-160 Vol I and Vol II, along with security best practices.
Maintain current documentation on ISSE processes and procedures, and support the generation and delivery of all required contract deliverables.
Implement security measures in accordance with applicable ICDs, NISP, NIST, and guiding Government regulations and local facility procedures.
Conduct ongoing vulnerability testing to verify security features and operating controls are functional, effective, and aligned with Government standards.
Coordinate with internal and external customers and Government security officials to handle routine information security matters with employees regarding identified issues.
Communicate accurate information to support security duties and stakeholder needs.

Requirements

Minimum 5 years of related experience.
Secret security clearance.
DoD 8570 IAT-II Certification.
Proficiency with computer applications and testing tools, including Word, Excel, PowerPoint, DISA STIG Viewer, and Nessus (and others).
Experience with the certification and accreditation process for information systems, including the ability to write, review, and coordinate system security plans.
Excellent written and verbal communication skills, including the ability to present material to senior DoD and non-DoD officials.
Ability to communicate effectively with senior leaders and customers to clearly present technical approaches and findings.

Technologies

RMF
NIST
DevSecOps
SSH
HBSS
NIST SP 800-30
NIST SP 800-160 Vol I
NIST SP 800-160 Vol II
Word, Excel, PowerPoint
DISA STIG Viewer
Nessus

Benefits

Medical, Dental, and Vision Plans (PPO & HSA options available)
Flexible Spending Accounts (Health Care & Dependent Care FSA)
Health Savings Account (HSA)
401(k) with matching contributions
Roth
Qualified Transportation Expense with matching contributions
Short Term Disability
Long Term Disability
Life and Accidental Death & Dismemberment
Basic & Voluntary Life Insurance
Wellness Program
PTO
11 Holidays
Professional Development Reimbursement

Desired Skills

BA/BS degree from an accredited university.
Demonstrated knowledge and understanding of the USTRANSCOM mission.
IAM-II or greater certification.

Physical Demands

Sit at a workstation for extended periods; use hands to handle or feel objects, tools, or controls; reach with hands and arms; talk and hear.
Work on a desktop or laptop computer for extended periods, including reading, reviewing/analyzing information, and providing recommendations, summaries, and/or reports in written format.
Effectively communicate verbally and in writing.
Occasionally lift and/or move moderate amounts of weight, typically less than 20 pounds.
Regular and predictable attendance is essential.

View full job page →

4d ago

Associate Cybersecurity Analyst

UnitedHealth Group Eden Prairie, MN 🇺🇸 Remote

Eden Prairie, MN

4d ago

$29 - $52/hr Full time Azure Cloud Cloud Platform

Apply Now

Job Description

UnitedHealth Group is hiring an Associate Cybersecurity Analyst to support its Cybersecurity Incident Response Team (CIRT) within a 24/7/365 Tier 1 environment. In this remote role based in Eden Prairie, MN, you will monitor and triage security alerts to help protect enterprise networks, systems, and data while using modern, enterprise-approved tooling to streamline incident workflows.

What you’ll do

Monitor work queues for alerts indicating potential network threats, intrusions, and/or compromises
Review and assess alerts for validity and scope to determine whether they are actionable
Verify alert information accuracy and identify malicious behavior
Use enterprise-approved AI tools to streamline workflows and automate repetitive tasks to improve productivity
Escalate verified security incidents to the appropriate response and remediation teams in a timely manner
Document triage details, sources of information, and technical findings for incident response
Evaluate emerging security trends to inform solution design and strategic defense innovations
Collaborate with a 24/7/365 Tier 1 incident response team to support continuous threat monitoring, detection, and response operations

Required qualifications

Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, Digital Forensics, or a related technical field
Any one active cybersecurity industry certification, such as CompTIA Security+, CySA+, SecurityX, GIAC Certified Incident Handler (GCIH), Certified SOC Analyst (CSA), GSEC, CEH, CCNA Cyber Ops, or similar
6+ months of experience in a Dedicated Security Operations Center (SOC) or a security incident response team
6+ months of experience using SIEM systems or SOAR platforms (security orchestration, automation, and response)
6+ months of experience with security principles related to major cloud platforms: AWS, Azure, or GCP

Technologies you may work with

AI tools
SIEM (Security Information and Event Management), SOAR (security orchestration, automation, and response)
AWS, Azure, GCP
CompTIA Security+, CompTIA CySA+, CompTIA SecurityX
GIAC Certified Incident Handler (GCIH), Certified SOC Analyst (CSA), GSEC, CEH, CCNA Cyber Ops
MITRE ATT&CK, Cyber Kill Chain, NIST, Diamond Model
TCP/IP, Windows, Linux

Benefits

Comprehensive benefits package
Incentive and recognition programs
Equity stock purchase
401k contribution

Additional details

Location: Eden Prairie, MN (remote)
Pay: USD 29 - 52 per hour; hourly pay range is based on full-time employment and factors including local labor markets, education, work experience, certifications, and other factors
Telecommute: Flexibility to telecommute from anywhere within the U.S. (Telecommuters must adhere to UnitedHealth Group’s Telecommuter Policy.)
Application deadline: Posted for a minimum of 2 business days or until a sufficient candidate pool has been collected; the posting may close early due to volume
Workplace requirement: UnitedHealth Group is a drug-free workplace; candidates must pass a drug test before beginning employment
San Francisco Fair Chance Ordinance: Qualified applicants with arrest and conviction records will be considered

View full job page →

Security Standards And Frameworks Cybersecurity Jobs

Senior Security Engineer

Principal Product Security Engineer

Information Systems Security Engineer

Associate Cybersecurity Analyst

Get Security Standards And Frameworks Cybersecurity Jobs alerts