Software Engineering

Software Engineering Cybersecurity Jobs

27 jobs found

Today

Cybersecurity Engineer, Senior Manager

Two Six Technologies Arlington, VA

Arlington, VA

Today

$175k - $200k/yr Full time Manager Senior Cyber Security

Apply Now

Job Description

Arlington, VA onsite senior cybersecurity engineering role focused on hands-on evaluation and technical leadership for defensive cyber operations.

Responsibilities

Manage and mentor one direct report, including setting priorities, providing feedback, and supporting career development
Participate in performance management and hiring as needed
Plan and conduct research, evaluation, and validation of cybersecurity hardware and software solutions for assigned work
Use defensive cyber operations experience to assess mission needs, operational constraints, and candidate solutions
Plan and conduct testing of engineering prototypes, including test procedures, measures of effectiveness, and result analysis
Perform hands-on technical analysis and testing and assist with technical problem resolution
Communicate technical findings, risks, and recommendations to customers, leadership, and engineering teams
Coordinate with customers and internal stakeholders to clarify requirements and align assigned work to mission needs
Support vulnerability research when customer requirements call for it
Document evaluation and test activities and contribute to repeatable technical processes

Requirements

7+ years of relevant professional experience in one or more related areas (incident response, vulnerability research, network engineering, or software development) OR comparable experience and education
Experience supervising or leading technical staff, including setting priorities and mentoring personnel
Experience supporting military or government defensive cyber missions
Experience researching, evaluating, or validating cybersecurity hardware or software solutions
Experience planning and conducting technical testing of systems, devices, or engineering prototypes
Strong written and verbal communication skills, including presenting findings and recommendations to technical and non-technical stakeholders
Active Top Secret clearance with SCI eligibility or access (TS/SCI)

Technologies

Rust
Python
Zeek
Snort/Suricata
Splunk

Preferred Skills

Experience with cyber operations platforms, defensive tools, network technologies, or security monitoring systems (Zeek, Snort/Suricata, Splunk, etc.)
Experience evaluating specialized network sensors, hardware networking devices (including FPGA-based firewalls), or software written in Rust or Python
Experience supporting engineering R&D or prototype transition into operational use
Familiarity with vulnerability assessment or research methods
Experience supporting the delivery of successful contracts to military or government customers

Location and Travel

Onsite role based in the Arlington, VA office
Approximately 20% travel, including customer meetings in Herndon, VA and Laurel, MD as-needed

Salary: USD 175,000 - 200,000 per year

View full job page →

3d ago

Security Analyst-Project Lead

CAI Columbia, SC

Columbia, SC

3d ago

$64 - $68/hr Full time Analytics Cyber Security Cybersecurity Operations

Apply Now

Job Description

The Security Analyst-Project Lead role supports security incident response operations for a client in a newly created, full-time contract position. This hybrid role is based in Columbia, SC 29228.

Role Overview

In this position, you will monitor and analyze security events, validate and investigate incidents, and lead improvements to SOC workflows. You will also work as a customer-facing subject matter expert, coordinating with SOC and engineering teams to meet operational goals.

Location and Employment Type

Location: Columbia, SC 29228 (hybrid)
Employment: Full-time contract

Compensation

Rate: USD 64 - 68 per hour

Responsibilities

Continuously review and correlate security event data across SIEM, EDR, IDS/IPS, and threat intelligence to identify complex attack patterns, emerging threats, and security incidents
Conduct deep-dive analysis of suspicious activity, validate incidents, determine root cause and impact, and escalate critical incidents with detailed context to Tier 3 as required
Produce detailed incident reports, timelines, and post-incident summaries; contribute to lessons-learned documentation and recommendations for remediation and prevention
Investigate user-reported phishing, malware infections, and potential policy violations; advise users and internal and external teams on containment and recovery actions
Recommend updates to SOC playbooks and workflows, including fine-tuning detection rules, alert thresholds, and correlation logic to reduce false positives and improve threat coverage
Collaborate with engineering teams to ensure monitoring tools are properly configured and tuned; integrate new threat intelligence feeds into workflows; proactively hunt for threats using up-to-date TTPs
Act as a customer-facing SME by demonstrating capabilities, resolving issues, and communicating the value of services provided
Document SOC processes, runbooks, and troubleshooting steps
Coordinate with engineering, SOC, and agency staff as needed to meet goals
Perform other duties as needed

Required Qualifications

2+ years of experience with security monitoring and incident response
2+ years of experience with the MITRE ATT&CK framework
2+ years of experience with dashboard creation and reporting
Education: Associate’s degree in an information technology or information security related field
Substitution: 4 years of relevant work experience may be substituted in lieu of education
2 years of experience supporting large SOC operations
Candidate is local to Columbia, SC or a surrounding city in South Carolina
Only work authorizations not requiring sponsorship now or in the future will be considered. Local candidates only, please.

Technologies and Tools

SIEM, EDR, IDS/IPS
Threat intelligence
MITRE ATT&CK framework
Palo Alto Cortex XSIAM/XDR
Linux
Active Directory
Firewalls, VPN technology
Intrusion detection and prevention systems

Preferred Qualifications

Experience with the Palo Alto Cortex XSIAM/XDR platform
Knowledge of Linux, network administration, and network design
Experience in administration of firewalls, VPN technology, Active Directory, and intrusion detection and prevention systems

Benefits

Medical, dental, and vision insurance
401k retirement account access
Paid sick leave and/or other paid time off as provided by applicable law

Physical Demands

Ability to safely and successfully perform essential job functions consistent with the ADA and other federal, state and local standards
Sedentary work involving sitting or remaining stationary most of the time, with occasional need to move around the office to attend meetings
Ability to conduct repetitive tasks on a computer using a mouse, keyboard, and monitor

Reasonable Accommodation

If you require a reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employment selection process, direct your inquiries to application.accommodations@cai.io or (888) 824-8111.

View full job page →

5d ago

Software Security Engineer

Raytheon El Segundo, CA

El Segundo, CA

5d ago

$76k - $144k/yr Full time Embedded Systems Embedded Systems Security Information Security

Apply Now

Job Description

The Software Security Engineer role supports the delivery of security software used in the development and sustainment of deployed sensor systems. The position focuses on applying software security principles across embedded real-time software, while aligning with SW Product Assurance processes and TDMC-based execution environments.

Responsibilities

Support the mission of providing security software for deployed sensor system development and support across multiple platforms.
Implement software security principles for embedded software design, development, integration, and testing of real-time sensor software.
Develop software applications using multiple programming languages across a range of computing platforms.
Ensure SW Product Assurance processes are followed on assigned programs.
Apply understanding of real-time software design and performance implications tied to specific System Security implementations.
Partner with cross-functional engineering teams to define and implement Test Driven Multidisciplinary Capability (TDMC) based execution development and deployment requirements.
Work within a common development environment to enable programs to leverage specific capabilities.

Qualifications

Typically requires a Bachelor’s in Science, Technology, Engineering, or Mathematics (STEM) and minimum 2 years of relevant software experience.
Experience with C / C++ and experience with scripting languages such as Python, Perl, or similar.
Experience working in Agile/Scrum/Kanban or similar software development environments.
Ability to obtain and maintain a U.S. government issued security clearance is required. U.S. citizenship is required for eligibility.

Technology Focus

Programming and methodologies: C / C++, Python, Perl, Agile, Scrum, Kanban, DevSecOps, Model-based Engineering, Test Driven Development, Test Driven Multidisciplinary Capability (TDMC)
Platforms and operating environments: Linux/Unix, Embedded Linux, VxWorks, containerization
Hardware and architectures: FPGAs, ASICs, PCIe, GPIO, I2C, SATA, ARM Architecture, Xilinx UltaScale+ MPSoC, Versal
Security and embedded safeguards: secure boot, cryptographic algorithms, software hardening techniques

Location and Work Setting

Location: El Segundo, CA, United States
Work model: Onsite

Salary

USD 75,800 - 144,200 per year.

Security Clearance Requirements

Security clearance type: DoD Clearance: Secret
Security clearance status: Active and existing security clearance required after day 1

Benefits

Medical, dental, vision
Life insurance
Short-term disability, long-term disability
401(k) match
Flexible spending accounts
Flexible work schedules
Employee assistance program
Employee Scholar Program
Parental leave
Paid time off
Holidays

View full job page →

8d ago

Global Infrastructure & Cybersecurity Manager

Rand Technology LLC Irvine, CA

Irvine, CA

8d ago

Full time Manager Azure Cloud

Apply Now

Job Description

Rand Technology LLC is seeking a hands-on Global Infrastructure & Cybersecurity Manager to lead the company’s global technology operations, combining infrastructure leadership with daily security ownership. The role is responsible for operational health and security across Rand’s environment, including Microsoft Azure and enterprise identity, while executing the infrastructure and cybersecurity roadmap in partnership with the CIO. Based onsite in Irvine, CA, this position blends strategy, governance, and technical troubleshooting to keep systems secure, resilient, and standardized as the organization grows.

What you will own

Availability, performance, security, and operational health of Rand’s global IT infrastructure and Azure production environment.
Global infrastructure standards across all offices, covering network architecture, firewalls, switching, Wi-Fi, Internet connectivity, segmentation, redundancy, monitoring, and secure remote access.
Azure infrastructure operations and MSP relationships, including availability, backup, recovery, monitoring, capacity, security, and cost optimization.
Architecture documentation and operational readiness, including diagrams, configurations, inventories, operating procedures, and disaster recovery documentation.
Monitoring, alerting, escalation, and change-management practices for production infrastructure.
Infrastructure modernization initiatives such as cloud advancement, SD-WAN/SASE, Zero Trust, automation, and other applicable technologies.
Ongoing improvement of cybersecurity operations and security posture.
Security platform and partner management, including CrowdStrike MDR/EDR, Abnormal Security, Microsoft security capabilities, vulnerability management, and security monitoring and SOC services.
Endpoint security standards and ensuring corporate endpoints meet requirements for security, patching, encryption, configuration, and compliance.
Vulnerability identification, prioritization, remediation, and reporting processes with defined remediation targets.
Security incident response leadership, serving as the primary IT escalation point for cybersecurity incidents.
Coordination of penetration testing, vulnerability assessments, security audits, and remediation activities.
Maintenance and periodic testing of incident response, disaster recovery, backup, and business continuity capabilities.
Security controls for privileged accounts, MFA, identity and access management, conditional access, administrative access, service accounts, and access reviews.
Third-party technology and security risk management in partnership with appropriate business functions.
Security awareness program ownership using KnowBe4 or an equivalent tool, including employee training, phishing simulations, reporting, and follow-up.
Onboarding delivery of required cybersecurity awareness training for new employees.
Measurable security-awareness KPIs to identify where additional training or controls are needed, partnering with People & Culture and business leaders to reinforce accountability.
Leadership of the global IT infrastructure/helpdesk team and management of outsourced technology partners.
Operational SLAs, escalation procedures, standards, and accountability across internal and external resources.
A regular infrastructure and cybersecurity dashboard for the CIO covering availability, security incidents, vulnerabilities, patch compliance, endpoint compliance, phishing/security awareness, backup/DR health, and major risks.
Management of infrastructure and cybersecurity budgets, contracts, licensing, renewals, and vendor performance.
Participation in technology planning for acquisitions, new offices, expansions, and other growth initiatives.
Hands-on technical leadership, including direct participation in troubleshooting and incident resolution when appropriate.

Core qualifications

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity or a related discipline, or equivalent professional experience.
8+ years of progressive infrastructure/network/security experience with 3+ years in leadership or management capacity.
Demonstrated experience managing multi-site or global infrastructure and cybersecurity environments.
Hands-on experience managing or governing Microsoft Azure production environments.
Strong experience with Microsoft 365 and Entra ID, networking, endpoint security, vulnerability management, identity security, and incident response.
Experience managing MDR/SOC, MSP, cloud, and other outsourced technology providers.
Experience implementing security policies, standards, risk management, and audit controls.
Experience with security awareness and phishing simulation programs such as KnowBe4.
Experience with disaster recovery, backup/recovery testing, and business continuity (strongly preferred: experience supporting rapidly growing organizations and integrating new locations).
Certifications such as CISSP, CISM, CCNP, AZ-500, SC-100, or equivalent are beneficial but not required.

Tools and platforms

Microsoft Azure, Microsoft 365, Entra ID
CrowdStrike MDR/EDR, Abnormal Security, KnowBe4
SD-WAN/SASE, Zero Trust, MFA
SIEM/SOC, SOC services

Location and work eligibility

Onsite in Irvine, CA (headquarters).
Not eligible for visa sponsorship.

View full job page →

11d ago

Security Engineer (Infrastructure)

SpaceX Bastrop, TX

Bastrop, TX

11d ago

Full time Backend Developer Application Security Cloud

Apply Now

Job Description

SpaceX is seeking a Security Engineer (Infrastructure) to strengthen and improve internal information security through hardened, on-premises Kubernetes infrastructure. In this onsite role in Bastrop, Texas, you will design, build, and operate secure cluster environments, automate operational workflows, and help reduce risk through platform changes that address real threats and gaps.

What you’ll do

Design, build, and operate on-premises Kubernetes clusters that security services run on.
Automate cluster build-out, configuration, upgrades, and day-to-day operations.
Operate the compute, storage, and networking that the Kubernetes platform depends on.
Maintain reliability of key platform services, including scheduling, ingress, load balancing, and storage.
Harden clusters and workloads using controls such as RBAC, policy, secrets, and secure configuration.
Respond to production incidents and drive fixes to completion.
Instrument clusters and workloads so failures are detected before they become outages.
Document what you run, keep systems operational, and advise other teams on cluster and security practices.
Work with security and IT to identify threats and gaps, then deliver platform and deployment changes that reduce risk.
Deliver solutions that are scalable, repeatable, maintainable, and secure.
Coordinate with information security, IT, software, and other partners.

Required qualifications

Bachelor’s degree in computer science or another STEM discipline, or 2+ years of professional experience operating production infrastructure plus a high school diploma or equivalency certificate in lieu of a degree.
Experience operating on-premises Kubernetes in a production environment.
Experience with Linux system administration and at least one automation-friendly language such as Python, Go, or another language used to automate infrastructure.

Preferred experience

Production Kubernetes operations across control plane, workloads, networking, storage, RBAC, and upgrades.
Experience with on-premises compute, storage, and networking for container platforms.
Cluster and node hardening, admission control, and secure workload configuration.
Infrastructure as code and configuration management.
Linux troubleshooting and root-cause debugging under time pressure.
Observability using metrics, logs, and alerting.
CI/CD or GitOps-style delivery onto Kubernetes.
Backup, restore, and recovery for on-premises platforms.
TCP/IP knowledge at a level needed to build and debug cluster networking.

Technologies

Kubernetes
Linux
Python
Go
RBAC
TCP/IP

Role requirements

Willingness to work extended hours and/or weekends as needed.
Onsite work only. Hybrid or remote work will not be considered.

ITAR

To conform to U.S. Government export regulations, applicants must be a U.S. citizen or national, a U.S. lawful permanent resident (green card holder), a Refugee under 8 U.S.C. § 1157, or an Asylee under 8 U.S.C. § 1158, or be eligible to obtain required authorizations from the U.S. Department of State.

Location: Bastrop, TX (onsite)

Minimum experience: 2 years

View full job page →

15d ago

Systems Administrator, Mid Level

Tulzi Technologies, LLC Columbia, MD

Columbia, MD

15d ago

$0k - $0k/yr Full time Desktop Support DevOps Embedded System

Apply Now

Job Description

Tulzi Technologies, LLC is seeking a mid-level Systems Administrator to support the design, implementation, operation, maintenance, and troubleshooting of IT infrastructure across its lifecycle. This onsite role in Columbia, MD focuses on end-to-end systems management, with responsibilities spanning server and storage administration, virtualization, performance tuning, and backup and restore.

Core Responsibilities

Design, develop, evaluate, and modify end-to-end systems and systems-oriented products throughout their full life cycle.
Own effective design, implementation, operation, maintenance, and troubleshooting of the IT infrastructure.
Perform server and storage administration, virtualization activities, performance tuning, and backup and restore operations.
Lead technical research and development to support ongoing infrastructure innovation, and ensure system hardware, operating systems, software systems, and related procedures align with organizational values.
Analyze and diagnose issues to determine root cause; test, communicate status, and resolve problems or escalate them for appropriate resolution.
Evaluate and/or recommend purchases of servers, peripheral equipment, and software.
Conduct business needs assessments, analyze costs, develop project plans for application projects, order required equipment, coordinate installation and reconfiguration, and configure and test procedures and applications.
Participate in system conceptual design and the documentation of design concepts.
Create test plans and test procedures that align with contractual requirements and participate in testing to validate requirements.

Required Qualifications

Clearance Required: TS/SCI
IAT Certification Level: IAT3 - CASP or CISSP
Vendor Certification Required: Microsoft, VMWare, Cisco, Netapp, Pure Storage, HP, Dell, Linux+, RedHat, or similar
Experience: 4+ years operating in an engineering and operations environment with hands-on experience in designing and implementing IT solutions

Technologies

Microsoft
VMWare
Cisco
Netapp
Pure Storage
HP
Dell
Linux+
RedHat
CASP
CISSP

Location and Compensation

Location: Columbia, MD (onsite)

Compensation: USD 145,000 - 155,000 per year

Benefits

Health and Wellness Benefits
Medical Insurance (three CareFirst healthcare plans to choose from, Dental and Vision Insurance)
Medical coverage: 75% covered for employee and 50% per dependent
Health Savings Account (HSA) contributions: $1500 individual / $3000 family
Company-paid Life Insurance and AD&D coverage
Company-paid Short-term and Long-term Disability Insurance
20 days of vacation and 10 holidays built into hourly rate, plus 5 days of Administrative time (currently used for snow, jury, bereavement)
Pre-tax 401k program including 6% company match
100% fully vested from eligibility date
Eligible after 90 days of employment

View full job page →

23d ago

Embedded Cybersecurity Engineer II

AeroVironment Moorpark, CA

Moorpark, CA

23d ago

$82k - $125k/yr Full time Cybersecurity Tools Embedded Systems Embedded Systems Security

Apply Now

Job Description

The Embedded Cybersecurity Engineer II will help strengthen the security of embedded systems used in AeroVironment products. This onsite role works with R&D and Operations to apply security controls, support activities across the development lifecycle, and help meet relevant contract and regulatory requirements.

Location

Moorpark, CA (onsite)

Compensation

USD 82,000 - 125,000 per year

Role Overview

The Embedded Cybersecurity Engineer II addresses embedded system security within AeroVironment products. The position coordinates with engineering teams to implement security controls, identify security needs across embedded hardware and software components, support incident response and vulnerability assessments, and provide security-related deliverables for regulatory bodies and contracts.

Responsibilities

Collaborate with product R&D teams to support a security mindset and guide implementation of security controls aligned to product and system needs.
Coordinate with Electrical and Hardware engineering to ensure security requirements are incorporated into hardware selection and design.
Support embedded system architects and developers to ensure implemented security controls align with intended design.
Help ensure consistent embedded system security practices are applied across projects.
Coordinate with SW developers and manufacturing engineering to ensure security needs are met through implementation.
Identify embedded security needs spanning hardware, firmware, software, and microprocessors.
Support selection of hardware components, third-party software, security tools, and vendors; identify security vulnerabilities and weaknesses in system design and architecture.
Contribute to tools, processes, and policies intended to prevent, detect, and resolve recurring issues across the development lifecycle, including supply chain and manufacturing.
Conduct embedded product and device cybersecurity activities, including incident response, vulnerability assessments, and mitigation implementation.
Continuously evaluate the effectiveness of cybersecurity controls once implemented.
Implement new approaches and countermeasures for emerging embedded threats.
Provide security-related deliverables for regulatory bodies and contracts.
Assess software applications and control procedures.
Other duties as assigned.

Required Qualifications

Bachelor’s degree required in Cybersecurity, Electrical or Computer Engineering, Computer Science, or a similar or related field, or equivalent combination of education, training, and experience.
Two years of experience in cybersecurity and embedded hardware.
CompTIA Security+, GIAC Security Essentials (GSEC), or equivalent verifiable credentialed certification.
Strong written and verbal communication skills.
Strong analytical, time management, and organizational skills.
Strong computer skills and proficiency with office software and productivity tools.
Ability to work with little or no supervision and exercise independent judgment on a regular basis.
Ability to gain cooperation from others and conduct presentations of technical information concerning specific projects or schedules.
Computer Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), CompTIA Advanced Security Practitioner (CASP), or equivalent verifiable credentialed certification.
Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OCSP), or equivalent verifiable credentialed certification.
Experience achieving ISO 27001 certification.
Experience complying with NIST Cybersecurity standards and guidance.
Experience complying with the National Industrial Security Program Operating Manual (NISPOM).
Experience in one or more technical areas, including:
- Wireless and/or network communications
- Basic knowledge of common hardware components, packaging, and PCBA-level integration
- Basic knowledge of common cryptographic algorithms and protocols, including implementation attacks (side-channel and fault injection)
- Hardware security implementation analysis and exploitation (cryptography, side-channel analysis, and/or fault injection)
- Testing and validation of cybersecurity control implementation using manual methods and automated tools (e.g., ACAS, Tenable.sc, Nessus, Nexpose)

Cybersecurity and Security Tools

CompTIA Security+, GIAC Security Essentials (GSEC)
CISSP, CISM, CompTIA Advanced Security Practitioner (CASP)
Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OCSP)
ISO 27001
NIST Cybersecurity standards and guidance
NISPOM
ACAS, Tenable.sc, Nessus, Nexpose

Benefits

Medical, dental, and vision
401K with company matching
9/80 work schedule
Paid holiday shutdown

Physical Demands

Ability to sit, stand, stoop, reach, lift (up to 25 lbs.), bend, etc.
Hand and wrist dexterity to utilize a computer.
May require travel to sites/program and special functions.

Environmental Conditions

Office environment with climate control via central air conditioning/heating.
Occasional work on the production floor may be required.
May have some exposure to outside environment while traveling.

Clearance and Special Requirements

U.S. Citizen
Must be able to travel within the Continental U.S. and internationally when required.
Must have a DoD Secret security clearance or be eligible to obtain one.

Clearance Level

Secret

ITAR / EAR Compliance

This position requires access to information subject to compliance with the International Traffic Arms Regulations (ITAR) and/or the Export Administration Regulations (EAR).
Applicants must qualify as a U.S. person under ITAR and EAR, or be approved for an export license by the governing agency.
A “U.S. person” under ITAR includes U.S. citizens, U.S. lawful permanent residents (green card holders), or protected individuals such as refugees or asylees (see 22 CFR § 120.15).
Some positions will require current U.S. citizenship due to contract requirements.
ITAR: U.S. Citizenship required; must be willing to work on government contracts and have the ability to obtain a security clearance.