393 jobs found

Job Description Job Description Job Title: Palo Alto Firewall Engineer Location: Springfield, VA Type: Contract To Hire Compensation: $80/hr. W2 Benefits available Conversion Salary: $150,000 annually plus benefits Work Model: Onsite Security Clearance: Active TS/SCI clearance and the ability to successfully pass and maintain a U.S. Government polygraph Responsibilities Lead the design, requirements analysis, testing, integration, and implementation of secure network architectures centered on the Palo Alto Networks ecosystem. Serve as the lead technical authority for administering, configuring, and troubleshooting Palo Alto Networks Next-Generation Firewalls (NGFWs) across a hybrid enterprise environment. Engineer and implement solutions for customer Change Requests (CRQs); assess impacts on enterprise transport and security activities and provide technically sound recommendations. Serve as the technical representative for assigned projects and coordinate issues with the appropriate owners, organizations, contract leadership, and customer leadership. Manage the full lifecycle of Palo Alto hardware and software, including complex hardware refreshes, PAN-OS upgrades, legacy-platform sustainment, physical troubleshooting, and line-card replacements. Develop, oversee, and maintain configuration-management processes, network architecture diagrams, technical documentation, integration and test plans, and Standard Operating Procedures (SOPs) for Palo Alto security platforms. Use Panorama for centralized policy management, including templates, device groups, inheritance, and consistent configuration across a diverse fleet of physical and virtual firewalls. Configure and maintain advanced security capabilities and profiles, including App-ID, User-ID, Content-ID, SSL Decryption, WildFire, NAT, IPSec VPNs, and threat prevention. Oversee security-incident reporting, documentation, investigation, and corrective-action development. Act as a liaison to contract/customer management and the government Designated Approving Authority (DAA) regarding network-security status, policies, procedures, and risks. Evaluate and report on new and emerging network-security and communications technologies to improve network capacity, performance, reliability, standardization, and security. Provide mentorship and technical oversight to junior engineers and serve as an escalation point for complex troubleshooting. Follow all customer network-security processes and procedures, maintain compliance with Government and QA standards, and ensure service-performance indicators are met or exceeded. Requirements Security Clearance: Active TS/SCI clearance and the ability to successfully pass and maintain a U.S. Government polygraph. A minimum of 7+ years of hands-on experience administering, configuring, and troubleshooting Palo Alto Networks NGFWs in large-scale enterprise/global environments. Active Palo Alto Networks Certified Network Security Engineer (PCNSE) certification. DoD 8140.01 and DoD 8570.01-M IAT Level II compliance (for example, Security+ CE). Ability to obtain and maintain a CSSP Infrastructure Support certification within 120 days of the start date. Deep practical knowledge of legacy Gen 2/Gen 3 Palo Alto hardware, including PA-3000 and PA-5000 series platforms, legacy CLI, hardware troubleshooting, and line-card replacements. Experience deploying and managing modern PAN-OS architectures, including Prisma Access (SASE), Prisma SD-WAN, and VM-Series virtual firewalls in cloud environments such as AWS, Azure, GCP, or private-cloud. Proven expertise with Panorama for centralized policy management, template/device-group inheritance, and configuration deployment across a hybrid firewall fleet. Advanced understanding of BGP, OSPF, IPSec VPNs, NAT, TLS/SSL, mutual TLS (mTLS), HTTP, SAML, OAuth, OCSP revocation, DoD PKI, Kerberos, LDAP, and Active Directory. Experience with F5 technologies, including APM, AFM, and SSL Orchestrator (SSLO), and troubleshooting TLS/SSL handshake/connection issues. Strong network design, engineering, implementation, and troubleshooting skills, including ROM equipment lists and cost estimates. Knowledge of DISA and Intelligence Community security standards and requirements. Excellent interpersonal skills and technical judgment with the ability to work independently and support weekend/evening work if needed. Bachelor's degree in IT, Cybersecurity, Computer Science, or a related field, with additional relevant experience considered in lieu of a degree. Desired Qualifications Active Palo Alto Networks Certified Network Security Consultant (PCNSC) or Prisma Certified SASE Professional (PCSAE). F5 Networks Certified Technology Specialist (CTS). Cisco CCNP, CCVP, CCNA, CCDP, or equivalent. ITIL v3 Foundations and/or ISC2 CISSP Certification. Proficiency in Python and automation tools such as Ansible, Terraform, or Palo Alto XML/REST APIs. Hands-on experience with Cortex XDR or Cortex XSOAR. Experience with Palo Alto Networks Expedition for migration and rule consolidation. Knowledge of Zero Trust Network Access (ZTNA) architectures and additional security platforms (e.g., Juniper SRX, Cisco FTD/ASA). Master's degree in related fields is a plus. System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. Ref: Baltimore

Job Description Job Description Job Title: AWS Cloud Security Architect Location: Plano, TX/Reston, VA/Columbia, SC/Knoxville, TN/Lafayette, LA/Birmingham, AL Work Model: Onsite - onsite Responsibilities Provide security architecture guidance for enterprise applications, AWS cloud environments, hybrid infrastructure, cybersecurity platforms, APIs, containers, data solutions, and AI enabled applications. Partner with application and engineering teams to securely migrate workloads from on premises environments to AWS and other approved cloud platforms. Define and maintain cloud security patterns, standards, guardrails, security requirements, reference architectures, and implementation guidance. Conduct security architecture reviews, threat modeling, and risk assessments for cloud native, hybrid, API, container, third-party, and AI/GenAI solutions. Define appropriate security controls and recommend remediation or compensating controls when security gaps are identified. Support secure AI/GenAI adoption, including LLM integrations, RAG implementations, prompt security, data protection, access controls, monitoring, logging, and human in the loop safeguards. Support AI governance and risk management processes, including security reviews, monitoring requirements, incident escalation, and lifecycle controls. Assess solutions against applicable security frameworks and standards, including NIST, FedRAMP, and FIPS. Provide security guidance during technology evaluations, architecture reviews, security exceptions, and path to production activities. Work with cybersecurity engineering and operations teams on security capabilities involving SIEM, network security, endpoint security, data protection, and security configuration. Communicate security risks, requirements, and recommendations clearly to both technical teams and business stakeholders. Requirements 8+ years of overall IT experience, including significant cybersecurity and cloud security experience. 5+ years of cybersecurity architecture experience in roles such as Information Security Architect, Cloud Security Architect, or Infrastructure Security Architect. 5+ years of hands-on AWS cloud security experience, including securing enterprise workloads and cloud migrations. Strong knowledge of AWS security services, controls, IAM, networking, logging, monitoring, data protection, and cloud security best practices. Experience securing enterprise cloud and hybrid environments and performing security architecture reviews. Experience with threat modeling, security risk assessments, control gap analysis, and remediation planning. Knowledge of cybersecurity and compliance frameworks such as NIST, FedRAMP, and FIPS. Experience defining and applying security standards, patterns, guardrails, and technical security controls. Working knowledge of AI/GenAI security, including prompt injection, data leakage, model access controls, AI guardrails, observability, approved model usage, and human oversight. Understanding of security considerations for LLMs, RAG solutions, APIs, containers, and enterprise data integrations. Ability to work effectively with application developers, cloud and infrastructure engineers, cybersecurity teams, enterprise architecture, compliance, risk, and business stakeholders. Strong written and verbal communication skills with the ability to explain technical security risks and requirements clearly. Strong organizational, coordination, and stakeholder management skills. CISSP, CCSP, CISA, CISM, GIAC, or similar cybersecurity certification is preferred. AWS Certified Security - Specialty, Azure AZ 500, or another relevant cloud security certification is preferred. Desired Skillset: Security experience across Azure and/or GCP in addition to AWS. AI/GenAI security, AI governance, or AI risk management experience. Container and workload security experience covering build time and runtime controls. API security experience, including enterprise API gateways. Security engineering experience with SIEM, firewalls, endpoint/host security, or security configuration management. Experience with AI-enabled cybersecurity capabilities such as security analysis, vulnerability prioritization, detection support, secure code review, or workflow automation. CISSP, CCSP, CISA, CISM, GIAC, or similar cybersecurity certification. AWS Certified Security - Specialty, Azure Security Engineer Associate (AZ 500), or comparable cloud security certification. Education: Bachelor's degree in Computer Science, Information Systems, or a related field. System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. Ref: Pittsburgh

Job Description Job Description Contingent Worker Information Position Title IBM Maximo Developer NYPA Business Unit Information Technology & Cyber Security Experience Level 2 (5-10 years) Work Location White Plains Office Anticipated Start Date Immediate Duration of Assignment 12 month(s) Project/Assignment MAS Upgrade and Software Optimization CWP Manager Date of Posting 08/04/2026 Due Date 08/19/2026 Work Schedule Monday through Friday. 7.5-hour workday with .5-hour unpaid lunch. Paid for actual time worked; there are no paid vacation or sick days. During NYPA and Canals holidays, the business is closed, and no work is permitted. NYPA requires a hybrid schedule of a minimum of 3 days on-site, up to including fully on-site depending on department requirements. CWPO Engagement Requirements Candidates are REQUIRED to be local to Tri-State area and in W2 tax status as employee of Service Provider. Fully remote positions are prohibited. Hybrid schedules are permissible with a minimum of 3 days on-site depending on assignment and can be fully on-site depending on business needs. Remote work privileges can be revoked at any time. NYPA does not provide laptops. Instead, NYPA provides desktops and dedicated workstations which candidates will remote into from their personal equipment on virtual days. If candidate does not have proper equipment, internet connection, or he/she is deemed to not work effectively from home, the hybrid privilege will be revoked. Vendors must disclose foreign national status and all Visas at the time of candidate submission. Additionally, a Benefits Waiver and Ethics Disclosure will be required by all candidates during onboarding. Submission Instructions Your email submissions must contain: The LEGAL name of candidate (no aliases, monikers, or nicknames) Job Broadcast number in your email subject header Visa work authorization, if applicable For job broadcasts outside your contractual compensation schedules, use competitive rates based on local and state compensation. NYPA CWP staff will contact you if your candidate is selected to be interviewed, which is usually via MS Teams. Please inform your candidates that an interview does not indicate acceptance of the proposed labor rates. NYPA prohibits the use of any AI tool during interviews. For all questions or concerns, please contact Christine Prendergast at . Project Overview This role will support MAS migration and software optimization project. The role works closely with subject matter experts within IT and key stakeholders from multiple business areas providing expert Maximo functional and technical guidance. The reource will also work closely with the implementation partner for this project and IBM support team. They will also be responsible for providing ongoing support and maintenance for IBM's Maximo, ensuring a stable platform for daily operations. Job Functions & Responsibilities Design, develop, and support application solutions using the Maximo 7.6.x / MAS. Experience with MAS 8/9 migration especially from on prem to cloud (SaaS). Knowledge of Manage, Spatial and Mobile. Collaborate with stakeholders to translate business requirements into functional specifications. Provide production support and resolve user issues with system performance, availability, and functionality. Work directly with client team members and colleagues to achieve project goals. Develop and share functional and business expertise with the team. Expertise in Maximo configurations such as Database Configuration, Escalations, Cron Tasks, Domains, Conditional Expression Manager etc. Expertise in Java Customizations and Automation Scripts. Expertise in integrating Maximo with external applications such as SAP and Ariba. Collaborate with middleware teams and provide solutions. Work with Infrastructure team in fixing infrastructure issues. Good technical knowledge in Web Sphere. Knowledge on Design and Develop BIRT reports. Write SQL scripts to provide data extracts to business on demand. Skills Knowledge of systems and software debugging. Experience using standard application development design, report, and project management tools. Proven ability to install and configure systems specific to their software infrastructure. Demonstrated ability troubleshooting software and system problems that involve software infrastructure modules and appropriately refers hardware issues. Ability to monitor and maintain performance metrics for system features recommend and take corrective/preventative actions. Demonstrated ability to direct and/or conduct implementation of enhancements or changes that may involve custom design, optional software, and third-party products to improve the efficiency and effectiveness of the systems. Experience with configuration, change management, and testing activities. Experience as an active team member in system-wide/cross-functional teams on successful technology projects. Technical knowledge of all phases of software implementation and support. Ability to deploy solutions to the operational production environment. Bachelor of Science Degree in Engineering Technology, Computer Science, or equivalent from an accredited college or university. Six years of experience supporting applications like Maximo, Datasplice. Proficient with Windows Server and strong technical (hands on) understanding of operating systems. Demonstrated understanding of Active directory / DNS; User and User Rights management / File System Rights (NTFS Permissions); security configuration and implementation; group policy management; and backup systems/ data backup management. Experience with relational databases and experience in Microsoft SQL Server and SQL scripting. Education & Certifications Bachelor's degree in computer science, engineering, or related technical/business discipline/equivalent work experience. Minimum of 6 to 8 years of experience with Maximo Application suite.

Job Description Job Description Job Title: AWS Cloud Security Architect Location: Plano, TX/Reston, VA/Columbia, SC/Knoxville, TN/Lafayette, LA/Birmingham, AL Work Model: Onsite - onsite Responsibilities Provide security architecture guidance for enterprise applications, AWS cloud environments, hybrid infrastructure, cybersecurity platforms, APIs, containers, data solutions, and AI enabled applications. Partner with application and engineering teams to securely migrate workloads from on premises environments to AWS and other approved cloud platforms. Define and maintain cloud security patterns, standards, guardrails, security requirements, reference architectures, and implementation guidance. Conduct security architecture reviews, threat modeling, and risk assessments for cloud native, hybrid, API, container, third-party, and AI/GenAI solutions. Define appropriate security controls and recommend remediation or compensating controls when security gaps are identified. Support secure AI/GenAI adoption, including LLM integrations, RAG implementations, prompt security, data protection, access controls, monitoring, logging, and human in the loop safeguards. Support AI governance and risk management processes, including security reviews, monitoring requirements, incident escalation, and lifecycle controls. Assess solutions against applicable security frameworks and standards, including NIST, FedRAMP, and FIPS. Provide security guidance during technology evaluations, architecture reviews, security exceptions, and path to production activities. Work with cybersecurity engineering and operations teams on security capabilities involving SIEM, network security, endpoint security, data protection, and security configuration. Communicate security risks, requirements, and recommendations clearly to both technical teams and business stakeholders. Requirements 8+ years of overall IT experience, including significant cybersecurity and cloud security experience. 5+ years of cybersecurity architecture experience in roles such as Information Security Architect, Cloud Security Architect, or Infrastructure Security Architect. 5+ years of hands-on AWS cloud security experience, including securing enterprise workloads and cloud migrations. Strong knowledge of AWS security services, controls, IAM, networking, logging, monitoring, data protection, and cloud security best practices. Experience securing enterprise cloud and hybrid environments and performing security architecture reviews. Experience with threat modeling, security risk assessments, control gap analysis, and remediation planning. Knowledge of cybersecurity and compliance frameworks such as NIST, FedRAMP, and FIPS. Experience defining and applying security standards, patterns, guardrails, and technical security controls. Working knowledge of AI/GenAI security, including prompt injection, data leakage, model access controls, AI guardrails, observability, approved model usage, and human oversight. Understanding of security considerations for LLMs, RAG solutions, APIs, containers, and enterprise data integrations. Ability to work effectively with application developers, cloud and infrastructure engineers, cybersecurity teams, enterprise architecture, compliance, risk, and business stakeholders. Strong written and verbal communication skills with the ability to explain technical security risks and requirements clearly. Strong organizational, coordination, and stakeholder management skills. CISSP, CCSP, CISA, CISM, GIAC, or similar cybersecurity certification is preferred. AWS Certified Security - Specialty, Azure AZ 500, or another relevant cloud security certification is preferred. Desired Skillset: Security experience across Azure and/or GCP in addition to AWS. AI/GenAI security, AI governance, or AI risk management experience. Container and workload security experience covering build time and runtime controls. API security experience, including enterprise API gateways. Security engineering experience with SIEM, firewalls, endpoint/host security, or security configuration management. Experience with AI-enabled cybersecurity capabilities such as security analysis, vulnerability prioritization, detection support, secure code review, or workflow automation. CISSP, CCSP, CISA, CISM, GIAC, or similar cybersecurity certification. AWS Certified Security - Specialty, Azure Security Engineer Associate (AZ 500), or comparable cloud security certification. Education: Bachelor's degree in Computer Science, Information Systems, or a related field. System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. Ref: Pittsburgh

Job Description Job Description Job Description ACTIVE SECURITY CLEARANCE AT THE TS/SCI POLYGRAPH LEVEL IS REQUIRED We have an immediate need for a Software Engineer specializing in privileged access and security infrastructure to serve as the Subject Matter Expert (SME) for the Delinea Tools Suite in a Linux environment. In this mission-critical role, you will be responsible for the engineering, implementation, integration, and sustainment of Delinea technologies (such as Secret Server, Privilege Manager, and DevOps Secrets Vault). Working in close collaboration with security, infrastructure, and DevOps teams, you will ensure robust credential management, privileged access controls, and secrets automation that meet strict mission compliance standards. The annual base salary range for this role is $199,000-$235,000 (USD) , which does not include discretionary bonus compensation or our comprehensive benefits package. Actual compensation offered to the successful candidate may vary from posted hiring range based upon geographic location, work experience, education, and/or skill level, among other things. , Required Skills Delinea Expertise: Hands-on experience implementing, configuring, or supporting at least one Delinea/Thycotic product (e.g., Secret Server, Privilege Manager, DevOps Secrets Vault). Linux Systems Administration: Strong background in Linux administration across enterprise distributions (e.g., RHEL, CentOS, Rocky Linux, Ubuntu) and sustaining large Linux clusters. Software Development Scripting: Recent software development experience in both Python and Java, alongside advanced proficiency writing Bash and Python scripts. Identity Directory Services: Hands-on experience integrating PAM/IAM solutions with directory services (LDAP, Active Directory, FreeIPA). IAM / PAM Concepts: Deep understanding of Identity and Access Management (IAM), Privileged Access Management (PAM), certificate-based authentication, and enterprise security best practices. Infrastructure as Code (IaC): Experience with IaC principles and automation tools such as Ansible or SaltStack. API Integration CI/CD Secrets: Familiarity with RESTful API-based integrations and secrets automation within CI/CD build environments. Container Security: Experience with container technologies (Docker, Podman) and associated container secret-handling patterns. System Troubleshooting: Proven ability to troubleshoot system-level issues in distributed environments, including service logs, networking, and authentication workflows. Education: Bachelor's Degree in Data Analytics, Intelligence Studies, Computer Science, Finance/Economics, or a related discipline, PLUS 7 + years of specialized data analytics or financial intelligence experience OR Master's Degree in a related field, PLUS 5 + years of specialized analytical experience OR High School Diploma / GED, PLUS 9 + years of hands-on intelligence analysis, financial tracking, and data discovery experience in lieu of a degree. , Desired Skills Cybersecurity Operations: Prior experience supporting enterprise security tools or working in a cybersecurity-focused operational environment. Agile Tooling: Practical experience using the Atlassian Suite of Tools (Jira, Confluence) for task tracking and documentation. , About Nyla Technology Solutions Nyla Technology Solutions delivers exceptional Artificial Intelligence (AI), Data Science, and Software Engineering services for the U.S. Government. Nyla embraces a forward-thinking and bold approach at every turn, earning us a solid reputation of technical trendsetters within the industry. We have a passion for developing solutions that have a quick and immediate impact on mission. Headquartered in Columbia, Maryland, our customers love how we tackle their most challenging problems and get things done. If you have the unique experience and expertise we are seeking, along with the desire and determination to invest your time and energy as a part of Nyla's team, Taking Care of All of You Nyla provides a top-of-market compensation and benefits package. And through our unique Nyla FLEX program, we custom tailor these benefits to best fit your lifestyle. The Nyla FLEX benefit program is designed to offer you flexibility in the 3 biggest areas of your life: your pay, your leave, and your schedule. PAY - Nyla starts with 4 weeks of Annual Leave plus 11 holidays and an additional day of Annual Leave for each year you're at the company. You have the flexibility to cash out your annual leave hours, opt out of other Nyla benefits, and/or arrange for additional hours on contract (over 40 hrs/week). There's even an option to earn 1.3 times your hourly rate once you work over 1880 hours on contract! LEAVE - Want to spend more time with the family? Want more time to travel the world? You can BUY additional annual leave for a total of 6 weeks of annual leave. That's up to 240 hours of leave plus 11 holidays! That's not even including paid anniversary leave! SCHEDULE - Does the traditional 40-hour workweek no longer fit your lifestyle? With Nyla FLEX, you have the freedom to scale down to 30-32 hours while still enjoying the top-notch Nyla benefits you know and love. It's flexibility that works for you without compromising the perks! WHAT ABOUT OTHER BENEFITS? Nyla's health care (medical, dental, and vision) is 100% covered by the company. We provide 10% 401k matching - with full vesting day 1! Our Professional Development offers $5,000 per year to be used towards fees, tuition, or time off for your continued growth. We even have a student loan repayment program and we provide 8 hours of volunteering annually so you can support your community, making your world a better place. To learn more about Nyla's culture and our exceptional benefit packages click here. Nyla is an equal opportunity employer.

Job Description Job Description Job Title: AWS Cloud Security Architect Location: Plano, TX/Reston, VA/Columbia, SC/Knoxville, TN/Lafayette, LA/Birmingham, AL Work Model: Onsite - onsite Responsibilities Provide security architecture guidance for enterprise applications, AWS cloud environments, hybrid infrastructure, cybersecurity platforms, APIs, containers, data solutions, and AI enabled applications. Partner with application and engineering teams to securely migrate workloads from on premises environments to AWS and other approved cloud platforms. Define and maintain cloud security patterns, standards, guardrails, security requirements, reference architectures, and implementation guidance. Conduct security architecture reviews, threat modeling, and risk assessments for cloud native, hybrid, API, container, third-party, and AI/GenAI solutions. Define appropriate security controls and recommend remediation or compensating controls when security gaps are identified. Support secure AI/GenAI adoption, including LLM integrations, RAG implementations, prompt security, data protection, access controls, monitoring, logging, and human in the loop safeguards. Support AI governance and risk management processes, including security reviews, monitoring requirements, incident escalation, and lifecycle controls. Assess solutions against applicable security frameworks and standards, including NIST, FedRAMP, and FIPS. Provide security guidance during technology evaluations, architecture reviews, security exceptions, and path to production activities. Work with cybersecurity engineering and operations teams on security capabilities involving SIEM, network security, endpoint security, data protection, and security configuration. Communicate security risks, requirements, and recommendations clearly to both technical teams and business stakeholders. Requirements 8+ years of overall IT experience, including significant cybersecurity and cloud security experience. 5+ years of cybersecurity architecture experience in roles such as Information Security Architect, Cloud Security Architect, or Infrastructure Security Architect. 5+ years of hands-on AWS cloud security experience, including securing enterprise workloads and cloud migrations. Strong knowledge of AWS security services, controls, IAM, networking, logging, monitoring, data protection, and cloud security best practices. Experience securing enterprise cloud and hybrid environments and performing security architecture reviews. Experience with threat modeling, security risk assessments, control gap analysis, and remediation planning. Knowledge of cybersecurity and compliance frameworks such as NIST, FedRAMP, and FIPS. Experience defining and applying security standards, patterns, guardrails, and technical security controls. Working knowledge of AI/GenAI security, including prompt injection, data leakage, model access controls, AI guardrails, observability, approved model usage, and human oversight. Understanding of security considerations for LLMs, RAG solutions, APIs, containers, and enterprise data integrations. Ability to work effectively with application developers, cloud and infrastructure engineers, cybersecurity teams, enterprise architecture, compliance, risk, and business stakeholders. Strong written and verbal communication skills with the ability to explain technical security risks and requirements clearly. Strong organizational, coordination, and stakeholder management skills. CISSP, CCSP, CISA, CISM, GIAC, or similar cybersecurity certification is preferred. AWS Certified Security - Specialty, Azure AZ 500, or another relevant cloud security certification is preferred. Desired Skillset: Security experience across Azure and/or GCP in addition to AWS. AI/GenAI security, AI governance, or AI risk management experience. Container and workload security experience covering build time and runtime controls. API security experience, including enterprise API gateways. Security engineering experience with SIEM, firewalls, endpoint/host security, or security configuration management. Experience with AI-enabled cybersecurity capabilities such as security analysis, vulnerability prioritization, detection support, secure code review, or workflow automation. CISSP, CCSP, CISA, CISM, GIAC, or similar cybersecurity certification. AWS Certified Security - Specialty, Azure Security Engineer Associate (AZ 500), or comparable cloud security certification. Education: Bachelor's degree in Computer Science, Information Systems, or a related field. System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. Ref: Pittsburgh

As a global marketing experience company, Quad's goal is to help our clients win every day. We use our data-driven integrated marketing and manufacturing platform to streamline solutions for our clients, reduce friction and enhance their marketing spend effectiveness. We've built a rich legacy by believing in our people, allowing them to act like owners and to take charge of their own success. Whether an operator, sales rep, a graphic artist or a clinician, we're all driven to perform at our best- for ourselves and our clients. At our core, we're a company that believes we can always create a better way. The Global Infrastructure Services teams are responsible for the full life-cycle of our infrastructure systems, core software platforms and systems automation. The Intern will be a part of technical teams which include Network/Telecom, Security, and Compute platforms as they plan, install, support, and optimize our environments and technologies. These environments and technologies include, but are not limited to, Windows and Linux server platforms, virtual compute, network infrastructure, unified communication systems, firewalls, proxies, VPN platforms, and SIEM products. Interns will rotate through several teams to get exposure on multiple technologies. Interns apply knowledge gained in the classroom to develop relevant professional experience while developing meaningful relationships. We look for highly motivated individuals who are proactive, eager to learn and ready to contribute. IT has a track record of success with interns working across various teams, ensuring they can directly contribute to the success of the department. Responsibilities: Responsible for assisting with day to day operations and support of IT infrastructure and operations teams. Work under the direction of an experienced team members, gaining increasing responsibilities as you demonstrate your abilities. Receive mentorship from an experienced team member and partner with a manager on professional development. Qualifications: Pursuing a degree in MIS, Computer Science, Computer Engineering, Cybersecurity or related degree. General knowledge and/or interest in the following infrastructure systems: Microsoft Windows OS and Server, Linux Systems, OS deployment, Virtualization, Active Directory/Group Policy, IT Security, LAN/WAN. Experience troubleshooting PC hardware and software problems. Familiarity with scripting or programming languages (Powershell, VB script, Python). Possesses a natural curiosity in understanding the application of technology to solve business problems. We offer comprehensive benefits for eligible employees including medical, prescription, dental and vision insurance, 401(k) retirement savings, paid time off, holidays and additional benefits. Quad is proud to be an equal opportunity employer. We are committed to creating a place of belonging - a space where employees do not need to sacrifice who they are to exist and grow in our workplace. Quad does not discriminate on any unlawful basis including race, religion, color, national origin, disability, gender, gender identity, sexual orientation, age, marital status, veteran status, genetic information, or any other basis prohibited by applicable federal, state, or local laws. Quad also prohibits harassment of applicants and employees based on any of these protected categories. Drug-Free Workplace

Job Description Job Description Job Title: AWS Cloud Security Architect Location: Plano, TX/Reston, VA/Columbia, SC/Knoxville, TN/Lafayette, LA/Birmingham, AL Work Model: Onsite - onsite Responsibilities Provide security architecture guidance for enterprise applications, AWS cloud environments, hybrid infrastructure, cybersecurity platforms, APIs, containers, data solutions, and AI enabled applications. Partner with application and engineering teams to securely migrate workloads from on premises environments to AWS and other approved cloud platforms. Define and maintain cloud security patterns, standards, guardrails, security requirements, reference architectures, and implementation guidance. Conduct security architecture reviews, threat modeling, and risk assessments for cloud native, hybrid, API, container, third-party, and AI/GenAI solutions. Define appropriate security controls and recommend remediation or compensating controls when security gaps are identified. Support secure AI/GenAI adoption, including LLM integrations, RAG implementations, prompt security, data protection, access controls, monitoring, logging, and human in the loop safeguards. Support AI governance and risk management processes, including security reviews, monitoring requirements, incident escalation, and lifecycle controls. Assess solutions against applicable security frameworks and standards, including NIST, FedRAMP, and FIPS. Provide security guidance during technology evaluations, architecture reviews, security exceptions, and path to production activities. Work with cybersecurity engineering and operations teams on security capabilities involving SIEM, network security, endpoint security, data protection, and security configuration. Communicate security risks, requirements, and recommendations clearly to both technical teams and business stakeholders. Requirements 8+ years of overall IT experience, including significant cybersecurity and cloud security experience. 5+ years of cybersecurity architecture experience in roles such as Information Security Architect, Cloud Security Architect, or Infrastructure Security Architect. 5+ years of hands-on AWS cloud security experience, including securing enterprise workloads and cloud migrations. Strong knowledge of AWS security services, controls, IAM, networking, logging, monitoring, data protection, and cloud security best practices. Experience securing enterprise cloud and hybrid environments and performing security architecture reviews. Experience with threat modeling, security risk assessments, control gap analysis, and remediation planning. Knowledge of cybersecurity and compliance frameworks such as NIST, FedRAMP, and FIPS. Experience defining and applying security standards, patterns, guardrails, and technical security controls. Working knowledge of AI/GenAI security, including prompt injection, data leakage, model access controls, AI guardrails, observability, approved model usage, and human oversight. Understanding of security considerations for LLMs, RAG solutions, APIs, containers, and enterprise data integrations. Ability to work effectively with application developers, cloud and infrastructure engineers, cybersecurity teams, enterprise architecture, compliance, risk, and business stakeholders. Strong written and verbal communication skills with the ability to explain technical security risks and requirements clearly. Strong organizational, coordination, and stakeholder management skills. CISSP, CCSP, CISA, CISM, GIAC, or similar cybersecurity certification is preferred. AWS Certified Security - Specialty, Azure AZ 500, or another relevant cloud security certification is preferred. Desired Skillset: Security experience across Azure and/or GCP in addition to AWS. AI/GenAI security, AI governance, or AI risk management experience. Container and workload security experience covering build time and runtime controls. API security experience, including enterprise API gateways. Security engineering experience with SIEM, firewalls, endpoint/host security, or security configuration management. Experience with AI-enabled cybersecurity capabilities such as security analysis, vulnerability prioritization, detection support, secure code review, or workflow automation. CISSP, CCSP, CISA, CISM, GIAC, or similar cybersecurity certification. AWS Certified Security - Specialty, Azure Security Engineer Associate (AZ 500), or comparable cloud security certification. Education: Bachelor's degree in Computer Science, Information Systems, or a related field. System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. Ref: Pittsburgh

Job Description Job Description Job Title: AWS Cloud Security Architect Location: Plano, TX/Reston, VA/Columbia, SC/Knoxville, TN/Lafayette, LA/Birmingham, AL Work Model: Onsite - onsite Responsibilities Provide security architecture guidance for enterprise applications, AWS cloud environments, hybrid infrastructure, cybersecurity platforms, APIs, containers, data solutions, and AI enabled applications. Partner with application and engineering teams to securely migrate workloads from on premises environments to AWS and other approved cloud platforms. Define and maintain cloud security patterns, standards, guardrails, security requirements, reference architectures, and implementation guidance. Conduct security architecture reviews, threat modeling, and risk assessments for cloud native, hybrid, API, container, third-party, and AI/GenAI solutions. Define appropriate security controls and recommend remediation or compensating controls when security gaps are identified. Support secure AI/GenAI adoption, including LLM integrations, RAG implementations, prompt security, data protection, access controls, monitoring, logging, and human in the loop safeguards. Support AI governance and risk management processes, including security reviews, monitoring requirements, incident escalation, and lifecycle controls. Assess solutions against applicable security frameworks and standards, including NIST, FedRAMP, and FIPS. Provide security guidance during technology evaluations, architecture reviews, security exceptions, and path to production activities. Work with cybersecurity engineering and operations teams on security capabilities involving SIEM, network security, endpoint security, data protection, and security configuration. Communicate security risks, requirements, and recommendations clearly to both technical teams and business stakeholders. Requirements 8+ years of overall IT experience, including significant cybersecurity and cloud security experience. 5+ years of cybersecurity architecture experience in roles such as Information Security Architect, Cloud Security Architect, or Infrastructure Security Architect. 5+ years of hands-on AWS cloud security experience, including securing enterprise workloads and cloud migrations. Strong knowledge of AWS security services, controls, IAM, networking, logging, monitoring, data protection, and cloud security best practices. Experience securing enterprise cloud and hybrid environments and performing security architecture reviews. Experience with threat modeling, security risk assessments, control gap analysis, and remediation planning. Knowledge of cybersecurity and compliance frameworks such as NIST, FedRAMP, and FIPS. Experience defining and applying security standards, patterns, guardrails, and technical security controls. Working knowledge of AI/GenAI security, including prompt injection, data leakage, model access controls, AI guardrails, observability, approved model usage, and human oversight. Understanding of security considerations for LLMs, RAG solutions, APIs, containers, and enterprise data integrations. Ability to work effectively with application developers, cloud and infrastructure engineers, cybersecurity teams, enterprise architecture, compliance, risk, and business stakeholders. Strong written and verbal communication skills with the ability to explain technical security risks and requirements clearly. Strong organizational, coordination, and stakeholder management skills. CISSP, CCSP, CISA, CISM, GIAC, or similar cybersecurity certification is preferred. AWS Certified Security - Specialty, Azure AZ 500, or another relevant cloud security certification is preferred. Desired Skillset: Security experience across Azure and/or GCP in addition to AWS. AI/GenAI security, AI governance, or AI risk management experience. Container and workload security experience covering build time and runtime controls. API security experience, including enterprise API gateways. Security engineering experience with SIEM, firewalls, endpoint/host security, or security configuration management. Experience with AI-enabled cybersecurity capabilities such as security analysis, vulnerability prioritization, detection support, secure code review, or workflow automation. CISSP, CCSP, CISA, CISM, GIAC, or similar cybersecurity certification. AWS Certified Security - Specialty, Azure Security Engineer Associate (AZ 500), or comparable cloud security certification. Education: Bachelor's degree in Computer Science, Information Systems, or a related field. System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. Ref: Pittsburgh

Job Description Job Description We are seeking a highly skilled and experienced Application Security Engineer to join our Application Security team to take charge and advance our application security initiatives, while ensuring the security and integrity of our applications. You will drive security best practices, identify vulnerabilities, and implement solutions to protect our systems and data from evolving threats. This role will require collaboration with development teams, security architects, leadership, and other stakeholders to integrate security best practices into all stages of the software development lifecycle. The Opportunity Your key responsibilities will consist of the following to ensure applications are resilient against emerging threats, reducing potential financial and reputational damage from security incidents. Embed security best practices into the software development lifecycle (SDLC). Conduct in-depth security assessments, including vulnerability scanning, and code reviews. Leverage automated tools and manual testing techniques to identify, risk assess and prioritize and propose mitigation strategies for identified threats and application-level vulnerabilities (e.g., OWASP Top 10, etc.) ensuring our applications meet security standards and reducing exposure to data breaches. Collaborate with security architects to design secure application architectures that align with industry best practices. Ensure secure coding practices are followed, and security controls are incorporated into software designs. Conduct detailed threat modeling to identify attack vectors and potential weaknesses. Collaborate with our SDLC Council to develop and maintain secure coding standards, empowering developers to integrate security into the development process. Partner with DevOps teams to implement security within CI/CD (continuous integration & delivery) pipelines for automated and seamless deployment of secure code. Develop, configure, and maintain tools for static and dynamic application security testing (SAST/DAST). Evaluate third-party software and APIs for security compliance Assist in incident response activities related to application security breaches, providing rapid identification and mitigation guidance. Ensure compliance with security regulations, frameworks, and industry standards such as OWASP. Leverage reporting tools to demonstrate the overall risk through metrics (KPIs, KRIs, OKRs) of vulnerabilities and code defects of cyber assets for various team leaders and executive leadership for risk prioritization and enablement of risk-based decision-making. Stay up to date with the latest security threats, vulnerabilities, and industry trends to inform and improve security strategies. Strong problem-solving abilities and analytical thinking. Educate developers and stakeholders on secure coding practices. Excellent communication skills to explain security issues to both technical and non-technical stakeholders. A team player with the ability to work in a collaborative, fast-paced environment. The Minimum Qualifications : Bachelor's or master's degree in computer science, Information Security, or a related field. 8+ years of experience in application security, penetration testing, or secure software development. The Ideal Qualifications: Relevant security certifications such as CEH, OSCP, CISSP, or GWAPT from an industry recognized certifier (e.g., SANS/GIAC, CompTIA, ISACA, ISC2, etc.) Strong knowledge of secure software development methodologies, including threat modeling, code reviews, and static/dynamic analysis. Strong knowledge of application security vulnerabilities and best practices (e.g., OWASP Top 10, etc.) Experience in integrating security into DevOps (DevSecOps) and CI/CD environments. Strong technical knowledge of web application security, cloud security (AWS, Azure, GCP), mobile security, infrastructure as code (IaC), containerized environments (Docker, Kubernetes), and API security. Hands-on experience with security tools such as SAST, DAST, SCA, IAST, and fuzzing tools. Deep understanding of common vulnerabilities (e.g., OWASP Top 10) and their mitigations. Advance understanding and experience with writing source code in at least one programming language (e.g., JavaScript, Java, C/C++/C#, Python, etc.) and familiarity with software security frameworks (e.g., Maven, Node, Gradle, etc.). Experience with identifying security vulnerabilities/defects in dockers, containers, and Kubernetes. Experience with cloud deployment and automation tools (Terraform, GitHub Actions, Jenkins, AWS Cloud Formation Templates, Secrets Managers). Knowledge of encryption, authentication, and access control. Knowledge of compliance and regulatory frameworks (SOC 2, etc.). Education: Bachelor's or master's degree in computer science

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you. About the Role McKesson is seeking a Senior Information Security Analyst to strengthen our cloud security posture and reduce enterprise cyber risk. You will lead the triage, prioritization, remediation, and validation of cloud security findings identified through Wiz. In this role, you will partner with application, cloud platform, engineering, and infrastructure teams to resolve Critical and High-risk vulnerabilities, establish ownership for unknown cloud assets, and manage security exceptions. You will translate technical findings into clear remediation plans, operational metrics, and leadership reporting. This position is ideal for a cybersecurity professional experienced in cloud vulnerability management, exposure management, risk-based prioritization, and cross-functional remediation. The underlying P4 career-model description calls for advanced cybersecurity expertise, cross-functional collaboration, remediation leadership, technical documentation, and influence across enterprise security activities. What You'll Do Monitor and manage vulnerabilities, misconfigurations, attack paths, and other cloud security findings identified through Wiz. Triage and prioritize findings using severity, exploitability, exposure, business impact, asset criticality, and enterprise remediation standards. Drive remediation of Critical, High-risk, and overdue findings by establishing action plans with application, platform, engineering, and infrastructure owners. Investigate cloud assets without identified ownership, including virtual machines, containers, workloads, and serverless resources, and coordinate handoff to accountable teams. Review suppression, exemption, dismissal, and risk-acceptance requests; validate supporting evidence and maintain audit-ready disposition records. Validate vulnerability closure, facilitate root-cause investigations, identify recurring issues, and recommend strategic risk-reduction initiatives. Improve remediation workflows, ownership assignment, governance, reporting, and automation, including integrations involving Wiz, ServiceNow, Rapid7, and Panorama. Report on Mean Time to Remediate, Critical and High findings, overdue vulnerabilities, exception volumes, unknown assets, remediation trends, and risk-reduction outcomes. Basic Requirements 7+ years of progressive experience in cybersecurity engineering, cloud security, vulnerability management, exposure management, infrastructure security, or a closely related field. Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related discipline, or an equivalent combination of education and relevant experience. Demonstrated experience triaging, prioritizing, and driving remediation of cloud vulnerabilities or security findings. Hands-on experience using Wiz or a comparable cloud security, CNAPP, CSPM, or vulnerability-management platform. Experience applying risk-based prioritization using technical severity, exploitability, exposure, asset context, and business risk. Experience partnering with cloud, application, engineering, or infrastructure teams to coordinate security remediation within GCP, AWS, or Azure cloud architectures. Experience evaluating security findings in the context of cloud architecture, including vulnerability exceptions, risk acceptances, suppressions, and other dispositions, within GCP, AWS, or Azure. Experience developing security metrics, remediation reporting, and written documentation for technical and leadership audiences. Preferred Skills/Experience Experience with Wiz Vulnerability Management, Wiz Security Graph, cloud exposure analysis, or attack-path investigation. Familiarity with ServiceNow, Rapid7, or integrations supporting vulnerability tracking and remediation workflows. Knowledge of cloud workloads, virtual machines, containers, serverless technologies, and cloud asset inventories. Experience automating reporting, remediation tracking, asset ownership assignment, or security workflow processes. Understanding of vulnerability-management governance, remediation service-level expectations, exception management, and audit documentation. Experience facilitating remediation reviews, resolving ownership gaps, and escalating overdue security findings. Ability to translate technical risk into concise, actionable communication for engineering teams and leadership. Relevant certifications such as CISSP, CCSP, Security+, AWS Certified Security, Azure Security Engineer, or comparable credentials. Travel, Work Environment and Physical Requirements Work arrangement and in-office expectations will be based on the position's approved location and team requirements. Travel requirements, if any, will be specified in the final posting. Work primarily involves using standard computer and collaboration technology. We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please click here. Our Base Pay Range for this position $122,300 - $203,900 McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson's (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind: McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application. McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates. McKesson job postings are posted on our career site: . McKesson is an Equal Opportunity Employer McKesson provides equal employment opportunities to applicants and employees, without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, genetic information, or any other legally protected category. For additional information on McKesson's full Equal Employment Opportunity policies, visit our Equal Employment Opportunity page. McKesson is committed to being an Equal Employment Opportunity Employer and offers opportunities to all job seekers including job seekers with disabilities. If you need a reasonable accommodation to assist with your job search or application for employment, please contact us by sending an email to (United States) or (Canada) . Resumes or CVs submitted to this email box will not be accepted. Join us at McKesson!

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you. The McKesson Pentest Team is seeking a Penetration Testing Engineer to help support and scale McKesson's Continuous Adversarial Testing (CART) program and strengthen the security posture of our enterprise application ecosystem. This role provides technical support for offensive security programs, focusing on AI-enabled security testing, web application penetration testing, cloud security assessments, vulnerability validation, and adversarial testing across large-scale application portfolios. The individual in this role will partner with a pentest lead, engineering, product, cloud, and security teams to identify complex attack paths, validate threats, and drive remediation efforts that reduce business risk. The position will play a key role in executing autonomous security testing capabilities, integrating CART outputs into security operations, and advancing McKesson's offensive security assessments. This role will also help shape the future direction of AI-assisted security testing, automation, and modern offensive security methodologies across the enterprise. This is a hands-on technical role for someone who can support the development of a new security program while also performing advanced technical testing, validating AI-generated findings, solving operational challenges, and supporting the long-term direction of McKesson's offensive security capabilities. What You'll Do Work closely with a Lead Pentest Engineer to Implement McKesson's Continuous Adversarial Testing program across large application portfolios. Support and help shape the first iteration of the CART operating model. Execute and refine repeatable onboarding processes covering application context, test accounts, authentication, authorization roles, test data, rate limits, WAF coordination, exclusions, maintenance windows, and emergency stop procedures. Perform human-in-the-loop reviewing, reproducing, validating, prioritizing, and communicating findings generated by autonomous testing platforms. Support the execution of continuous AI assisted penetration tests across high-priority enterprise web applications, including application onboarding, test orchestration, execution oversight, findings validation, and remediation coordination. Implement integrations between CART platforms and vulnerability management, engineering, reporting, and remediation workflows. Conduct AI-enabled web application, API, and cloud security assessments across enterprise environments. Perform penetration testing, adversarial assessments, and vulnerability validation activities against internally developed and third-party applications. Evaluate emerging autonomous security testing capabilities and recommend changes to CART strategy, tooling, and service delivery. Contribute to program documentation including; playbooks, runbooks, technical standards, training materials. Leverage automation and AI-assisted security tooling to scale testing coverage and improve assessment efficiency. Identify and validate complex attack paths involving authentication weaknesses, authorization flaws, business logic vulnerabilities, and multi-stage exploitation scenarios. Evaluate REST APIs, GraphQL APIs, cloud-native architectures, and modern authentication technologies. Partner with engineering teams to explain findings, prioritize remediation efforts, and validate fixes through retesting. Develop and maintain testing methodologies, automation workflows, and security assessment procedures. Contribute to incident investigations, threat modeling activities, and continuous security improvement initiatives. Basic Requirements 4+ years of cybersecurity, application security, penetration testing, offensive security, or related experience. Bachelor's degree or equivalent combination of education and experience. Experience performing web application and API penetration testing. Experience validating security vulnerabilities, assessing exploitability, and distinguishing actionable findings from false positives. Experience assessing enterprise applications utilizing REST APIs, GraphQL APIs, authentication systems, and cloud-native technologies. Working knowledge of AWS, Azure, or Google Cloud Platform (GCP) security concepts. Experience documenting technical findings and communicating remediation guidance to engineering teams. Hands-on experience with Burp Suite Professional, Nuclei, Nmap, Metasploit, Postman, and Kali Linux tools. Preferred Skills/Experience Experience leveraging AI-assisted security tools and security automation platforms. Experience implementing, operating, or scaling continuous security testing, attack simulation, breach and attack simulation, or automated offensive security capabilities. Experience evaluating, validating, and triaging findings from automated or AI-assisted security testing platforms. Experience assessing AI-enabled applications, agent-based systems, LLM integrations, or AI security risks. Familiarity with DevSecOps, CI/CD security controls, and secure software development practices. Knowledge of OWASP Top 10, API Security Top 10, threat modeling, and secure design principles. Experience conducting red team, adversarial simulation, or attack path validation exercises. Knowledge of cloud security architecture and containerized environments. Experience performing cloud security assessments in AWS, Azure, and GCP environments. Experience creating custom security testing scripts and automation workflows. Experience developing proof-of-concept exploits and adversary emulation scenarios. Familiarity with security control validation and compliance frameworks. Experience mentoring engineers and contributing to security program maturity. Experience supporting regulated industries such as healthcare, finance, or other highly regulated environments. Relevant certifications such as OSCP, OSWE, OSWA, OSAI, HTB CWES, HTB CWEE, OSEP, GPEN, GWAPT or equivalent. Travel / Work Environment / Physical Requirements Limited travel may be required based on business needs. Hyrbid, two days a week in the office. We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please click here. Our Base Pay Range for this position $103,900 - $173,100 McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson's (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind: McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application. McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates. McKesson job postings are posted on our career site: . McKesson is an Equal Opportunity Employer McKesson provides equal employment opportunities to applicants and employees, without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, genetic information, or any other legally protected category. For additional information on McKesson's full Equal Employment Opportunity policies, visit our Equal Employment Opportunity page. McKesson is committed to being an Equal Employment Opportunity Employer and offers opportunities to all job seekers including job seekers with disabilities. If you need a reasonable accommodation to assist with your job search or application for employment, please contact us by sending an email to (United States) or (Canada) . Resumes or CVs submitted to this email box will not be accepted. Join us at McKesson!

Job Description Job Description Job Title: AWS Cloud Security Architect Location: Plano, TX/Reston, VA/Columbia, SC/Knoxville, TN/Lafayette, LA/Birmingham, AL Work Model: Onsite - onsite Responsibilities Provide security architecture guidance for enterprise applications, AWS cloud environments, hybrid infrastructure, cybersecurity platforms, APIs, containers, data solutions, and AI enabled applications. Partner with application and engineering teams to securely migrate workloads from on premises environments to AWS and other approved cloud platforms. Define and maintain cloud security patterns, standards, guardrails, security requirements, reference architectures, and implementation guidance. Conduct security architecture reviews, threat modeling, and risk assessments for cloud native, hybrid, API, container, third-party, and AI/GenAI solutions. Define appropriate security controls and recommend remediation or compensating controls when security gaps are identified. Support secure AI/GenAI adoption, including LLM integrations, RAG implementations, prompt security, data protection, access controls, monitoring, logging, and human in the loop safeguards. Support AI governance and risk management processes, including security reviews, monitoring requirements, incident escalation, and lifecycle controls. Assess solutions against applicable security frameworks and standards, including NIST, FedRAMP, and FIPS. Provide security guidance during technology evaluations, architecture reviews, security exceptions, and path to production activities. Work with cybersecurity engineering and operations teams on security capabilities involving SIEM, network security, endpoint security, data protection, and security configuration. Communicate security risks, requirements, and recommendations clearly to both technical teams and business stakeholders. Requirements 8+ years of overall IT experience, including significant cybersecurity and cloud security experience. 5+ years of cybersecurity architecture experience in roles such as Information Security Architect, Cloud Security Architect, or Infrastructure Security Architect. 5+ years of hands-on AWS cloud security experience, including securing enterprise workloads and cloud migrations. Strong knowledge of AWS security services, controls, IAM, networking, logging, monitoring, data protection, and cloud security best practices. Experience securing enterprise cloud and hybrid environments and performing security architecture reviews. Experience with threat modeling, security risk assessments, control gap analysis, and remediation planning. Knowledge of cybersecurity and compliance frameworks such as NIST, FedRAMP, and FIPS. Experience defining and applying security standards, patterns, guardrails, and technical security controls. Working knowledge of AI/GenAI security, including prompt injection, data leakage, model access controls, AI guardrails, observability, approved model usage, and human oversight. Understanding of security considerations for LLMs, RAG solutions, APIs, containers, and enterprise data integrations. Ability to work effectively with application developers, cloud and infrastructure engineers, cybersecurity teams, enterprise architecture, compliance, risk, and business stakeholders. Strong written and verbal communication skills with the ability to explain technical security risks and requirements clearly. Strong organizational, coordination, and stakeholder management skills. CISSP, CCSP, CISA, CISM, GIAC, or similar cybersecurity certification is preferred. AWS Certified Security - Specialty, Azure AZ 500, or another relevant cloud security certification is preferred. Desired Skillset: Security experience across Azure and/or GCP in addition to AWS. AI/GenAI security, AI governance, or AI risk management experience. Container and workload security experience covering build time and runtime controls. API security experience, including enterprise API gateways. Security engineering experience with SIEM, firewalls, endpoint/host security, or security configuration management. Experience with AI-enabled cybersecurity capabilities such as security analysis, vulnerability prioritization, detection support, secure code review, or workflow automation. CISSP, CCSP, CISA, CISM, GIAC, or similar cybersecurity certification. AWS Certified Security - Specialty, Azure Security Engineer Associate (AZ 500), or comparable cloud security certification. Education: Bachelor's degree in Computer Science, Information Systems, or a related field. System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. Ref: Pittsburgh

Job Description Job Description Duties: We are seeking an experienced Application Security Engineer to join our Software Security team and take charge of ensuring the security and integrity of our software applications. The ideal candidate will have advanced knowledge of secure software development, extensive experience with identifying vulnerabilities, and the ability to implement robust security solutions. This role will require collaboration with development teams, security architects, and other stakeholders to integrate security best practices into all stages of the software development lifecycle. The Impact Your key responsibilities will consist of the following to ensure applications are resilient against emerging threats, reducing potential financial and reputational damage from security incidents. Conduct in-depth security assessments, including vulnerability scanning, and code reviews. Leverage automated tools and manual testing techniques to identify, risk assess and prioritize and propose mitigation strategies for identified threats and application-level vulnerabilities (e.g., OWASP Top 10, etc.) ensuring our applications meet security standards and reducing exposure to data breaches. Collaborate with security architects to design secure application architectures that align with industry best practices. Ensure secure coding practices are followed, and security controls are incorporated into software designs. Conduct detailed threat modeling to identify attack vectors and potential weaknesses. Collaborate with our SDLC Council to develop and maintain secure coding standards, empowering developers to integrate security into the development process. Partner with DevOps teams to implement security within CI/CD (continuous integration & delivery) pipelines for automated and seamless deployment of secure code. Assist in incident response activities related to application security breaches, providing rapid identification and mitigation guidance. Ensure compliance with security regulations, frameworks, and industry standards such as OWASP. Leverage reporting tools to demonstrate the overall risk through metrics (KPIs, KRIs, OKRs) of vulnerabilities and code defects to cyber assets for various team leaders and executive leadership for risk prioritization and enablement of risk-based decision-making. Stay up to date with the latest security threats, vulnerabilities, and industry trends to inform and improve security strategies. Strong problem-solving abilities and analytical thinking. Excellent communication skills to explain security issues to both technical and non-technical stakeholders. A team player with the ability to work in a collaborative, fast-paced environment. The Minimum Qualifications Bachelor's or master's degree in computer science, Information Security, or a related field. Minimum of 5+ years of experience in application security, penetration testing, or secure software development. The Ideal Qualifications Relevant security certifications such as CEH, OSCP, or GWAPT) from an industry recognized certifier (e.g., SANS/GIAC, CompTIA, ISACA, ISC2, etc.) Strong knowledge of secure software development methodologies, including threat modeling, code reviews, and static/dynamic analysis. Experience in integrating security into DevOps (DevSecOps) and CI/CD environments. Strong technical knowledge of web application security, cloud security (AWS, Azure, GCP), mobile security, infrastructure as code (IaC), container security, and API security. Familiarity with SAST, DAST, and IAST tools. Deep understanding of common vulnerabilities (e.g., OWASP Top 10) and their mitigations. Advanced understanding and experience with writing source code (e.g., JavaScript, Java, C/C++/C#, Python, etc.) and familiarity with software security frameworks (e.g., Maven, Node, Gradle, etc.). Experience with identifying security vulnerabilities/defects in dockers, containers, and Kubernetes. Experience with cloud deployment and automation tools (Terraform, GitHub Actions, Jenkins, AWS Cloud Formation Templates, Secrets Managers). Knowledge of compliance and regulatory frameworks (SOC 2, etc.). Education: Bachelor's or master's degree in computer science. Skills and Experience: Required Skills: MITIGATION CLOUD SECURITY METRICS SCANNING GCP Additional Skills: SOC INFORMATION SECURITY API DYNAMIC ANALYSIS C JAVA MAVEN AMAZON WEB SERVICES PROBLEM-SOLVING GITHUB DEPLOYMENT REPORTING TOOLS INCIDENT RESPONSE C/C++ CONTINUOUS INTEGRATION/DELIVERY TERRAFORM CODING DEV OPS EXCELLENT COMMUNICATION SKILLS JAVASCRIPT SOFTWARE SECURITY COMPTIA PYTHON STRUCTURED SOFTWARE GIAC SDLC JENKINS CODING STANDARDS TEAM PLAYER GRADLE KUBERNETES