Team Lead

Team Lead Cybersecurity Jobs

9 jobs found

3d ago

Lead Application Security Engineer

GTN Solutions LLC Scottsdale, AZ

Scottsdale, AZ

3d ago

$180k - $200k/yr Full time Application Security DevSecOps Engineering

Apply Now

Job Description

The Lead Application Security Engineer drives secure software development practices and provides hands-on technical leadership across the application portfolio, embedding security throughout the SDLC. This hybrid role is based in Scottsdale, AZ.

Position Overview

In this role, you will guide secure software development practices, provide technical leadership across the application landscape, and ensure security is integrated from design through delivery. Located in Scottsdale, AZ, the position follows a hybrid schedule with four days onsite and one day remote.

Responsibilities

Lead application security assessments, vulnerability management, and remediation efforts across enterprise applications.
Perform and interpret SAST, DAST, and SCA scans using tools such as Veracode, Checkmarx, Fortify, or equivalent platforms.
Identify, prioritize, and drive remediation of security vulnerabilities, providing guidance on secure coding practices.
Design and implement security controls for REST APIs, including authentication, authorization, input validation, and data protection.
Develop security standards, policies, and best practices aligned with OWASP and industry frameworks.
Produce risk assessments, vulnerability reports, and executive-level security metrics.
Participate in architecture and design reviews to proactively identify and mitigate security risks.
Evaluate AI-generated code and leverage AI-assisted security tools to improve security operations and developer productivity.
Support compliance, audit, and regulatory security requirements.
Provide technical leadership for application design, development, and delivery.
Serve as a hands-on contributor, developing and reviewing code across Java, Spring Boot, Angular, and Microservices architectures.
Establish engineering standards that promote high-quality, secure, and maintainable software.
Guide architecture decisions, system integrations, and application modernization initiatives.
Collaborate with stakeholders to translate business requirements into scalable technical solutions.
Mentor and coach development teams on secure coding, software design, and engineering best practices.
Drive continuous improvement in application quality, performance, reliability, and security.

Requirements

Bachelor’s degree in Computer Science, Information Technology, or related field (or equivalent experience).
5+ years of Application Security experience, including vulnerability assessment and remediation.
7+ years of Software Development experience with Java and Angular/AngularJS technologies.
3+ years of Technical Leadership or Lead Engineering experience.
Strong expertise in Java, Spring Boot, Spring Security, REST APIs, Microservices, JavaScript, TypeScript, Angular, HTML/CSS, SQL, Git, Maven, JUnit, and Mockito.
Hands-on experience with application security tools and methodologies, including SAST, DAST, and SCA.
Deep understanding of OWASP Top 10, secure SDLC practices, and API security.
Experience securing applications using OAuth2, JWT, and modern authentication frameworks.
Strong communication, problem-solving, and stakeholder management skills.

Preferred Qualifications

Experience with GitHub Copilot, AI-assisted security tools, AWS, GCP, Rancher, Jira, Drupal, Burp Suite, Checkmarx, or Fortify.
Security certifications such as CSSLP, GWAPT, CEH, or equivalent.
Experience in Agile development environments and enterprise-scale application delivery.

Technologies

Java
Spring Boot
Angular
Microservices
Veracode
Checkmarx
Fortify
OWASP
REST APIs
OAuth2
JWT
JavaScript
TypeScript
HTML/CSS
SQL
Git
Maven
JUnit
Mockito
Spring Security
AngularJS
SAST
DAST
SCA
GitHub Copilot
AI-assisted security tools
AWS
GCP
Rancher
Jira
Drupal
Burp Suite

Benefits

401(k)
401(k) matching
Dental insurance
Employee assistance program
Health insurance
Life insurance
Vision insurance

Location

Scottsdale, AZ (Hybrid – 4 days onsite, 1 day remote)

Employment Type

Direct Hire

Eligibility

U.S. Citizen or Green Card Holder Only

Compensation

USD 180,000 - 200,000 per year

View full job page →

6d ago

Lead Cybersecurity Architect

JPMorganChase Houston, TX

Houston, TX

6d ago

Full time Cloud Platforms Cybersecurity Tools Data Security

Apply Now

Job Description

The Lead Cybersecurity Architect role at JPMorgan Chase sits within the Cybersecurity Technology & Controls organization. This onsite position in Houston, TX focuses on delivering robust cybersecurity solutions for software applications using modern cloud-based technologies. The role serves as a senior technical contributor, identifying risk, communicating remediation options, and designing solutions across multiple technical areas to support project objectives.

Responsibilities

Collaborates with technical teams and business stakeholders to discuss and propose technical approaches that address current and future cybersecurity needs
Defines the technical target state for the cybersecurity product and steers the execution of the strategy to achieve it
Identifies opportunities to automate or streamline remediation of recurring issues to enhance the overall security of software applications and systems
Leads evaluation sessions with external vendors, startups, and internal teams to drive continuous improvement and assess cybersecurity design and technical credentials for integration
Utilizes enterprise-approved AI capabilities to accelerate architecture analysis and decision making, validating outputs and handling data in accordance with sensitivity and security requirements
Leads communities of practice to raise awareness and adoption of new and cutting-edge cybersecurity technologies
Promotes reuse-first adoption of AI-assisted security validation within SDLC and toolchains to improve control testing, remediation quality, and traceability
Contributes to a team culture that values diversity, opportunity, inclusion, and respect

Requirements

5+ years of applied experience with formal training or certification in cybersecurity architecture
Hands-on experience delivering enterprise-level cybersecurity solutions and controls, including threat modeling, threat assessments, and secure design reviews
Proficiency in automation and continuous delivery methods and in all phases of the Software Development Life Cycle
Advanced understanding of agile practices such as continuous integration and delivery, application resiliency, and security
Demonstrated experience using enterprise-authorized AI capabilities to support cybersecurity architecture workflows with solid validation and awareness of data sensitivity
Proven proficiency in software applications and technical processes within a technical discipline (e.g., public cloud, artificial intelligence, machine learning, mobile)
In-depth knowledge of the financial services industry or regulated sectors, with deep knowledge of one or more software and applications
Practical cloud-native experience (AWS preferred) and modern cloud architectures at scale
Ability to assess and validate AI-assisted security recommendations prior to adoption, escalating uncertainty and ensuring outcomes align with security, resiliency, and auditability expectations
Experience implementing and operating security controls aligned to a comprehensive control catalog (for example, NIST 800-53), including design, evidence, and ongoing compliance
Must be eligible to work on assignments subject to heightened security, identity, and/or additional background verification, with proven ability to communicate with senior business leaders

Technologies

AWS
Artificial intelligence
Machine learning
NIST 800-53

Benefits

Base salary
Commission-based pay
Discretionary incentive compensation
Cash and/or forfeitable equity
Comprehensive health care coverage
On-site health and wellness centers
Retirement savings plan
Backup childcare
Tuition reimbursement
Mental health support
Financial coaching

Preferred Qualifications, Capabilities, and Skills

CISSP, CCSP or AWS Security

View full job page →

20d ago

Industrial Cybersecurity Senior Consultant

Black & Veatch Family of Companies Ann Arbor, MI

Ann Arbor, MI

20d ago

Full time Manager Senior Consultant

Apply Now

Job Description

Black & Veatch Family of Companies seeks an Industrial Cybersecurity Senior Consultant to guide critical infrastructure clients through complex OT security programs. This hybrid role, based in Ann Arbor, MI, combines hands-on technical work with advisory support to strengthen industrial control system networks and overall cybersecurity posture.

Responsibilities

Evaluate the client’s posture across people, processes, and technology to identify gaps in cybersecurity readiness.
Develop master plans and programs of work that synthesize analyses, reviews, and recommendations for industrial cyber programs, technologies, and networks.
Lead workshops, data collection, tabletop exercises, and client interviews to inform project direction.
Perform asset and vulnerability scanning of customer networks and install scanning and monitoring technologies.
Conduct on site assessments of cyber and physical security postures through site walks.
Apply industrial cybersecurity standards and regulatory requirements including NERC CIP, NIST, and IEC 62443 to customer programs.
Implement master plans and recommendations with both technical controls (eg segmentation, hardening, technology integration) and programmatic elements (policies, response plans).
Contribute to quality reviews on engagements led by other delivery team members.
Develop knowledge bases by applying best practices to redefine tools and techniques and outline performance measures and goals to justify efficiencies or added value.
Present best practices to challenge current client strategies and articulate benefits of recommended approaches.
Define competitive advantage and achievable client value through strategic change components and metrics, formulate hypotheses, and develop analytical plans for testing.
Produce complex work products across all engagement phases using specialized knowledge.
Anticipate and resolve technical issues with minimal outside assistance.
Develop, present, and defend conclusions, recommendations, and implementation plans.
Identify technical issues impacting engagements and propose viable solutions.
Apply industry best practices to inform project outcomes.
Possibly contribute to the strategic direction and objectives of a service offering.
Manage moderate to highly complex engagements through all stages and phases.
Secure commitment and participation from the client’s senior management by leveraging relationships.
Recommend appropriate resources based on project phase and needs, delegate work to team members, and monitor progress.
Use defined processes to assess engagement risks and manage issues, escalating on more complex projects as needed.
Identify and develop new sales opportunities with existing or new clients.
Ensure receivables are secured during and after engagements.
Hire, train, and develop delivery teams; supervise day-to-day activities and transfer knowledge to raise team capabilities.
Provide ongoing feedback to project staff and contribute to the career development of colleagues through assignments and evaluations.
Delegate work according to development opportunities and needs of individuals.

Requirements

Bachelor's Degree or equivalent work experience
Minimum 7 years of experience in a business or consulting environment
Ability to complete pre-employment onboarding requirements, including criminal/civil background check, drug screen, and motor vehicle records search, as applicable by law

Technologies

Nozomi
Dragos
Tenable
Claroty

Benefits

Health care benefits (medical, dental and vision insurances)
Disability insurance
Wellness program
Flexible work schedules
Paid vacation and holiday time
Sick time
Dependent sick time
Company-matched 401k
Adoption reimbursement
Tuition reimbursement
Vendor discounts
Employment referral program
AD&D insurance
Pre-taxed accounts
Voluntary legal plan
B&V Credit Union
Performance-based bonus program
ESOP ownership (100 percent ESOP-owned company)

View full job page →

29d ago

Lead Cybersecurity Engineer

Seminole Tribe of Florida Hollywood, FL

Hollywood, FL

29d ago

$109k - $142k/yr Full time Manager Cloud Operations Cloud Platforms

Apply Now

Job Description

Responsibilities

Lead the assessment, integration, and rollout of new information and data security technologies and policies across all infrastructure and enterprise system components.
Provide guidance and mentorship to the tier-2 engineering team to build the skills needed for complex cybersecurity tasks.
Develop information security policies for diverse processes and ensure their successful implementation across the environment.
Coordinate internal and external audits to maintain ongoing compliance with applicable frameworks and regulations.
Create comprehensive plans and strategies for data security, vulnerability management, and log collection.
Administer access management, patch compliance, vulnerability assessments, malware protection, intrusion prevention, security monitoring, and external program compliance.
Provide leadership and oversight for the cybersecurity team, fostering a collaborative and proactive security operations culture.
Contribute to the organization’s cybersecurity posture by protecting sensitive information, mitigating risks, and maintaining regulatory compliance.

Requirements

Bachelor’s degree in information technology or a related field, or equivalent practical experience.
At least five years of experience in an enterprise support environment with information security responsibilities.
Completion of at least two certifications in recognized security certification paths (for example Microsoft, Cisco, or other industry-standard certifications).
Familiarity with regulatory compliance standards including CJIS, COPPA, FERPA, HIPAA, GDPR, and PCI-DSS.
Valid driver’s license.
Strong organizational and interpersonal skills with excellent written and verbal communication abilities.
Willingness to travel to STOF reservations, maintain communication with the Information Security Manager, and work a flexible schedule including evenings, weekends, and holidays.

Benefits

401(k) matching
Dental insurance
Health insurance
Health savings account
Paid time off
Vision insurance

Job Type

Full-time

Salary

Salary: USD 109,000 - 142,000 per year

Location & Onsite Requirement

Location: Hollywood, FL 33024 (onsite)

Work arrangement: In person

View full job page →

1mo ago

Manager Cybersecurity 2

Northrop Grumman Huntsville, AL

Huntsville, AL

1mo ago Closed

$140k - $210k/yr Full time Manager Data Security Enterprise Risk

This position is no longer accepting applications (closed Jul 14, 2026).

Job Description

The Manager Cybersecurity 2 role leads a team of Information System Security Professionals on classified systems in Huntsville, Alabama (onsite), overseeing assessment and authorization, policy implementation, and staff development.

Responsibilities

Lead a team of cybersecurity professionals responsible for assessing systems and networks within a secure enclave.
Provide mentorship, guidance, and professional development opportunities for managers and new leaders.
Identify skills needed and provide training to meet requirements.
Establish and oversee strict program control processes that mitigate risk and support system Assessment and Authorization (A&A). This includes process support, analysis, coordination, security certification testing, security documentation, investigations, software research, hardware introduction and release, emerging technology research, inspections, and periodic audits.
Lead the implementation of required government policy (i.e., DAAG, JSIG, ICDs) to ensure compliance. Develop process tailoring recommendations and manage the documentation and execution of process activities.
Foster an environment for individual development, teamwork, effective performance management, open communication, financial management, and utilization.
Ensure the team follows Northrop Grumman’s policies and procedures, ensuring all information is accurate and complete in support of those policies and procedures.
Interact with internal executives, the CIDO Program Management Office, and customers on significant technical matters requiring coordination across organizations.
Ensure all environments remain compliant while related systems and networks obtain and retain formal accreditation authorizations from the appropriate government agencies.

Requirements

Bachelor's degree with 7 years of experience; 5 years with a Master's; 2 years with a PhD. In lieu of a Bachelor's, an additional 11 years of relevant experience may be considered.
Current U.S. Government Secret security clearance at minimum, including a closed investigation date within the last 6 years or enrollment in the Continuous Evaluation (CE) Program.
Active Secret, Top Secret, SCI, SAP/SAR access, or Polygraph clearance.
ITIL, Agile, CISM, or CISSP certification.
Experience managing cybersecurity teams.
Experience implementing RMF or other cybersecurity related compliance frameworks.

Benefits

Health insurance coverage
Life and disability insurance
Savings plan
Company paid holidays
Paid time off (PTO) for vacation and/or personal business
Long Term Incentives
Annual bonuses

Relocation Assistance

No relocation assistance available

Clearance Required for Start

Yes

Clearance Type

Secret

Travel

Yes, 10% of the Time

Description

Northrop Grumman offers the opportunity to work on revolutionary systems that impact people worldwide, today and for the future. The company emphasizes a bold, pioneering spirit and seeks individuals with innovative ideas and the courage to pursue them in collaboration with cross‑disciplinary teams to advance technology and national security objectives.

Compensation Overview

Primary Level Salary Range: $139,800.00 - $209,800.00
The salary range serves as a general guideline; final offers depend on the scope of the role, responsibilities, and the candidate's experience, education, skills, and current market conditions.
Depending on the position, overtime, shift differential, and a discretionary bonus may be available in addition to base pay.
Annual bonuses are designed to reward individual contributions and allow employees to share in company results.
Employees in Vice President or Director positions may be eligible for Long Term Incentives.

View full job page →

1mo ago

Lead Cybersecurity WAF Engineer

Cox Automotive Atlanta, GA

Atlanta, GA

1mo ago Closed

$123k - $204k/yr Full time Cloud Platforms Cybersecurity Tools Information Security

This position is no longer accepting applications (closed Jul 8, 2026).

Job Description

Based onsite in Atlanta, Cox Automotive seeks a Lead Cybersecurity WAF Engineer to own the enterprise web application firewall program across public-facing sites and APIs. This leadership role centers on defining strategy, architecture, and incident response, collaborating with cross-functional teams to strengthen protections for Cox’s external-facing assets and help ensure secure-by-default practices across engineering teams.

Responsibilities

Lead the enterprise WAF program, shaping strategy, patterns, and standards in partnership with the architecture team to elevate protections for all public-facing sites and APIs.
Review WAF rules to identify improvements and present recommended changes to enhance the protections the WAF provides.
Collaborate with security architecture on long-term WAF strategy, including technology standards, architectural patterns, and security roadmaps.
Develop and maintain runbooks and playbooks, plus threat-specific WAF tuning strategies, and lead the creation and ongoing refinement of automated detection and response triggers.
Conduct cyber engineering trend analysis and reporting, defining and recommending tool, infrastructure, and related improvements.
Propose and review plans and policies to strengthen the overall security environment.
Participate in security events and incident response to identify gaps in design during incidents such as botnet spikes or Layer 7 attacks and propose preventive solutions.
Research and evaluate emerging security trends, threats, and technologies, recommending appropriate solutions and enhancements.
Partner closely with AppSec, Cyber Defense, and Engineering teams to drive secure-by-default adoption.

Requirements

Bachelor’s degree in a related discipline with 6 years of experience in a related field; alternative combinations include master’s degree with 4 years, PhD with 1 year, or 18 years of experience.
At least 4 years focused on cybersecurity with at least 2 years managing enterprise WAF.
Expert-level experience architecting, implementing, and operating enterprise WAF solutions across multiple environments.
Deep knowledge of how network traffic routes between clients and servers across the internet, including DNS, HTTP/S, and CDN/edge routing.
Ability to clearly articulate the objectives of cybersecurity policies and procedures to both technical and non-technical stakeholders.
Proven experience leading technical initiatives and mentoring engineering teams.
Excellent customer service, communication, writing, and presentation skills.
Ability to foster a productive working environment with stakeholders and collaborate with Cox cybersecurity teams to implement best practices.
Consultative approach to navigating controversial or complex topics with employees, leaders, and senior leadership.
Proficiency in Python and Terraform.
Creative problem solving of complex cybersecurity challenges with solid business acumen.
Experience with Agile methodologies and DevSecOps.
Track record of initiating change and deploying solutions in Fortune 1000 companies.
Knowledge of cybersecurity frameworks (ISO 27000, NIST, FFIEC) and regulations relevant to architectural requirements (GDPR, FFIEC, GLBA).

Technologies

Python
Terraform
Fortify
BurpSuite
Wiz
AWS, GCP, Azure
EKS, ECS, Lambda, Fargate
.NET framework, Mono, Spring frameworks
Oracle
SAML, OAuth, OIDC
IAM

Benefits

Flexible vacation with pay
Seven paid holidays throughout the calendar year
Up to 160 hours of paid wellness annually for personal or family wellness
Bereavement leave
Time off to vote
Jury duty leave
Volunteer time off
Military leave
Parental leave
EOE, including disability and veterans

Compensation

USD 122,600 - 204,400 per year. The base salary falls within this range and may vary depending on the location and the candidate’s knowledge, skills, and abilities. Additional compensation, such as an incentive program, may be available.

Minimum Qualifications

Bachelor’s degree in a related discipline with 6 years of experience, or alternative combinations as described under Requirements.
At least 4 years focused on cybersecurity with at least 2 years managing enterprise WAF.
Expertise in architecting, implementing, and operating enterprise WAF solutions across multiple environments.
Strong understanding of network traffic routing concepts (DNS, HTTP/S, CDN/edge routing).
Ability to articulate cybersecurity policy objectives to diverse audiences.
Proven leadership in technical initiatives and mentoring engineering teams.
Excellent customer service, writing, and presentation skills.
Collaborative approach with stakeholders and other Cox cybersecurity teams.
Consultative communication style for complex topics with various audiences.
Proficiency in Python and Terraform.
Strong problem-solving skills with business acumen.
Experience with Agile and DevSecOps practices.
Experience deploying solutions in Fortune 1000 environments.
Knowledge of cybersecurity frameworks (ISO 27000, NIST, FFIEC) and relevant regulations (GDPR, FFIEC, GLBA).

Preferred Qualifications

Knowledge of current cybersecurity and technology architectures such as zero trust, IaaS, PaaS, SaaS, virtualization, and containerization.
Strong familiarity with cloud containers and serverless platforms (EKS, ECS, Lambda, Fargate).
Experience with security testing tools like Fortify, BurpSuite, and Wiz.
Broad technology expertise across .NET, Mono, Spring, Oracle, serverless, cloud patterns, and authentication mechanisms.
Experience with cloud providers (AWS, GCP, Azure) and on-premises infrastructure.
Design and development of cybersecurity methodologies across cloud and on-prem hosting and application layers.
Knowledge of IAM, cryptography, secrets management, access controls, and security protocols (MFA, SAML, OAuth, OIDC).
Experience with firewall and web application firewall technologies and edge services, including DMZ architectures.
AWS Well-Architected Framework knowledge.
Experience in national critical infrastructure sectors or with Big Four/Fortune 500 firms.
Relevant certifications (e.g., CISSP, CEH, OSCP, Azure, AWS, CISM, CISA).

View full job page →

1mo ago

Cybersecurity Program Lead

Follett Content Solutions LLC McHenry, IL

McHenry, IL

1mo ago Closed

$120k - $130k/yr Full time Manager Cloud Platforms Cybersecurity Tools

This position is no longer accepting applications (closed Jul 7, 2026).

Job Description

This role is based in McHenry, IL (hybrid) with a salary range of USD 120,000 to 130,000 per year.

Responsibilities

Act as the primary incident responder for security events across cloud, endpoint, and network environments.
Partner with the Rapid7 SOC to validate alerts, tune detections, and streamline response workflows.
Perform threat hunting and telemetry analysis using SentinelOne and other security platforms.
Lead containment and remediation efforts in collaboration with Infrastructure, Networking, and Application teams.
Develop and refine detection logic, response playbooks, and escalation procedures.
Design and implement security controls for Azure workloads, identity, and cloud-native services.
Collaborate with Application Development to embed secure coding practices, API security, and threat modeling into the SDLC.
Set standards for secure use of AI tools, including logging, access controls, and data protection requirements.
Support security considerations for business application modernization initiatives.
Evaluate and recommend cloud and application security tools, patterns, and architectures.
Lead configuration, tuning, and continuous improvement of security technologies including SentinelOne, Microsoft Defender, Purview, Action1, and SIEM integrations.
Develop and maintain security baselines for servers, endpoints, and cloud resources.
Ensure endpoint coverage and agent health across the environment, coordinating with the Service Desk for deployment and remediation.
Implement automation and scripting to enhance security operations and reduce manual effort.
Own the vulnerability management lifecycle using Rapid7, including scan tuning, prioritization, and reporting.
Identify and escalate critical vulnerabilities requiring immediate remediation.
Coordinate with Infrastructure, Networking, and Development teams to track and validate remediation progress.
Provide actionable guidance to reduce risk across cloud, endpoint, and network environments.

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or a related discipline, or equivalent training/professional experience.
5+ years of hands-on experience in cybersecurity engineering, cloud security, application security, or related technical security roles preferred; exceptional candidates with fewer years but strong aptitude or development/security capability will be considered.
Strong written and verbal communication skills with the ability to collaborate across Infrastructure, Networking, Development, and Legal/Governance teams.
3+ years of experience securing cloud environments, preferably Microsoft Azure including Entra ID, Defender, Purview, workload protection, and identity governance.
Demonstrated experience with application security concepts, including secure coding practices, API security, threat modeling, and direct collaboration with development teams.
Familiarity with AI/ML security considerations, including data protection, access controls, logging, and responsible use of AI tools in enterprise environments.
Experience with vulnerability management platforms (Rapid7 preferred), including scan tuning, prioritization, and remediation workflows.
Strong understanding of identity and access management, authentication technologies, role-based authorization, and zero-trust principles.
Working knowledge of risk assessment methodologies, threat modeling, and security control frameworks (NIST CSF, CIS Controls, SOC 2).
Ability to translate business requirements and risks into secure technical solutions and actionable remediation guidance.
Technical proficiency with endpoint protection, cloud security tools, scripting/automation, and hybrid infrastructure environments.
Experience collaborating with third-party providers, SOC partners, auditors, or managed service providers.
Self-driven, highly motivated, and able to manage multiple priorities in a fast-moving environment.
Strong analytical, troubleshooting, and problem-solving skills with a team-oriented mindset.
Demonstrated ability to operate as a Lead/IC, owning security engineering, incident response, and cross-functional coordination in a lean IT environment.
Experience supporting security considerations during business application modernization initiatives.
On-call availability 24/7 is required.
AZ 500, AZ 104, CCSK/CCSP, Security+, CySA+, CISSP, or equivalent cloud/security credentials highly preferred.