27 jobs found

Job Description Job Description Job Description We are seeking an Information Systems Security Manager to join our high-performance team supporting a Navy project with the Naval Information Warfare Center Atlantic (NIWC Atlantic). This individual will be responsible for coordinating cybersecurity activities, managing security documentation, and working with Government stakeholders and technical teams to identify and address system risks. The ideal candidate combines management and compliance experience with a practical understanding of system vulnerabilities, penetration testing tools, and adversary behavior. Key Responsibilities • Manage and coordinate cybersecurity activities supporting Navy information systems throughout their lifecycle. • Support Risk Management Framework (RMF) activities, security control implementation, assessment preparation, and authorization package maintenance. • Develop and maintain cybersecurity policies, procedures, system security plans, and supporting documentation. • Coordinate with Government cybersecurity leadership, system owners, Information Systems Security Officers (ISSOs), engineers, and assessment teams to address security requirements and risks. • Track vulnerabilities, assessment findings, and Plans of Action and Milestones (POAMs), and coordinate remediation with responsible technical teams. • Review vulnerability and penetration testing results, evaluate potential mission impacts, and support mitigation recommendations. • Apply knowledge of penetration testing tools and threat behavior to help evaluate security controls and identify weaknesses. • Support continuous monitoring, configuration management, incident response coordination, and cybersecurity reporting. • Communicate system security posture, outstanding risks, and remediation status to Government stakeholders. , Required Skills • High school diploma or GED • TS/SCI DoD Security Clearance • At least three years of computerized system experience, including: o Test and evaluation. o Network protocols. o Local area network (LAN) administration fundamentals. o UNIX- and Windows-based operating systems. • Demonstrated experience using penetration testing tools and mimicking threat behavior. • Must be working toward at least one of the certifications listed below within one year after assuming duties: o Offensive Security Certified Professional (OSCP). o Offensive Security Certified Expert (OSCE). o Offensive Security Exploitation Expert (OSEE). o Offensive Security Exploit Developer (OSED). o Offensive Security Experienced Pentester (OSEP). o Offensive Security Wireless Professional (OSWP). o Offensive Security Web Expert (OSWE). o Hack The Box Certified Penetration Testing Specialist (HTB CPTS). o Hack The Box Certified Bug Bounty Hunter (HTB CBBH). o Certified Red Team Operator (CRTO) from Zero Point Security. o Certified Red Team Lead (CRTL) from Zero Point Security. o Practical Network Penetration Tester (PNPT). o GIAC Red Team Professional (GRTP). o GIAC Experienced Penetration Tester (GX-PT). o GIAC Exploit Researcher and Advanced Penetration Tester (GXPN). , Desired Skills • Experience serving as an ISSM, ISSO, or cybersecurity lead supporting Navy or other Department of Defense systems. • Experience with RMF, authorization to operate (ATO) packages, and the Enterprise Mission Assurance Support Service (eMASS). • Experience with the Assured Compliance Assessment Solution (ACAS), Security Technical Implementation Guides (STIGs), vulnerability analysis, and remediation tracking. • Experience translating penetration testing findings into corrective actions and risk recommendations. • Strong technical writing, coordination, and communication skills. , Additional Details acuCyber is an Equal Opportunity Employer. We do not discriminate based on race, color, religion, sex, national origin, age, disability, veteran status, or any other protected status. , About acuCyber At acuCyber, cleared tech talent fuels the future of national defense. As a respected and fast-growing player in the DoD and federal contracting space, we deliver advanced cybersecurity and digital solutions that protect vital systems and drive mission success. Our team of cleared engineers, developers, and cyber experts work hands-on with secure environments, and zero-trust architecture. In return, you'll join a mission-first culture with real growth opportunities and solid benefits: competitive health coverage, 401(k), PTO, short-term disability, and more. If you're ready to level up your skills and contribute to projects with purpose, acuCyber is where your clearance counts.

Job Description Job Description Job Description acuCyber is hiring a TS SCI cleared Red Team operator to support a broad range of efforts. , Required Skills Be certified as an Offensive Security Certified Professional (OSCP) or Offensive Security Certified Expert (OSCE) or Offensive Security Exploitation Expert (OSEE) or Offensive Security Exploit Developer (OSED) or Offensive Security Experienced Pentester (OSEP) or Offensive Security Wireless Professional (OSWP) or Offensive Security Web Expert (OSWE) or Hack The Box Certified Penetration Testing Specialist (HTB CPTS) or Hack The Box Certified Bug Bounty Hunter (HTB CBBH) or Certified Red Team Operator (CRTO) from Zero Point Security or Certified Red Team Lead (CRTL) from Zero Point Security or Practical Network Penetration Tester (PNPT) or GIAC Red Team Professional (GRTP) or GIAC Experienced Penetration Tester (GX-PT) or GIAC Exploit Researcher and Advanced Penetration Tester (GXPN) Ten (10) years with Masters or 14 years with Bachelor's degree of experience in computer design, software development or computer networks. Five (5) years of technical experience in support of Penetration Testing or certified Red Team. TS/SCI Clearance , Desired Skills Master's or Bachelor's degree in Computer, Electrical or Electronics Engineering or Mathematics with field of concentration in computer science from Accreditation Board for Engineering and Technology (ABET) accredited program Demonstrated experience working in a demanding environment as a collaborative team member Excellent oral and written communication skills Demonstrated team leadership in a similar past role , About acuCyber At acuCyber, cleared tech talent fuels the future of national defense. As a respected and fast-growing player in the DoD and federal contracting space, we deliver advanced cybersecurity and digital solutions that protect vital systems and drive mission success. Our team of cleared engineers, developers, and cyber experts work hands-on with secure environments, and zero-trust architecture. In return, you'll join a mission-first culture with real growth opportunities and solid benefits: competitive health coverage, 401(k), PTO, short-term disability, and more. If you're ready to level up your skills and contribute to projects with purpose, acuCyber is where your clearance counts.

At Credit Acceptance, we are building on the foundation of a successful business while investing in the future through technology, data, AI, and continuous improvement. As we continue to evolve, our Team Members play an active role in improving experiences, driving meaningful change, and shaping the future of our business. We foster an environment where people are empowered to contribute ideas, develop their careers, make an impact, and help lead our continued transformation. Our Engineering teams are helping shape the future of Credit Acceptance through innovation. Team Members collaborate across the organization to solve complex challenges, build impactful solutions, challenge the status quo, and support informed business decisions. We value curiosity, continuous learning, and new ideas from people who are passionate about driving modernization and meaningful business impact. Dealers and customers trust Credit Acceptance with their financial data. Regulators expect us to prove that trust is earned. As the Vice President, Engineering - Security, Compliance and Trust (CISO), you will own how Credit Acceptance stays secure and compliant as we move to the cloud and put AI agents to work across the business. You will set the security strategy, lead the team that delivers it, and report on it to executive leadership and the Board. You are the company's designated CISO for regulatory purposes. You report to the CTO and have direct access to the Audit Committee, including a private session at least once a year. You will lead a team across security operations, security engineering (application, cloud, identity and AI security) and governance, risk and compliance. You will work closely with Engineering, Legal, Risk and Fraud so the secure path is also the fast path. Agents are a new kind of actor in our environment. They have their own identities and make their own decisions. You will own the controls and evidence that let us adopt them quickly and keep the trust of our customers and regulators. Hybrid from Southfield, MI; Bellevue, WA; or the San Francisco Bay Area. Outcomes and Activities Own the enterprise information security strategy, tied to business goals, regulatory requirements and Engineering's AI and modernization plans. Own security for the move from on-premises data centers to AWS. Every workload lands in a secure, standard landing zone, and we modernize or retire legacy technology. Lead vulnerability and exposure operations. Critical findings are fixed in hours, with AI-assisted prioritization and a person accountable for every decision. Own identity and privileged access for people, services and agents. Own data protection and privacy: classification, handling standards and controls on where sensitive data can go. Review privacy engineering with product and engineering teams so privacy-by-design holds across the product lifecycle, including how AI systems use and keep data. Manage third-party and vendor cyber risk, from due diligence through ongoing monitoring, including security service providers, auditors and penetration testers. Any partner that builds or runs AI for us meets the same controls as our own teams. Lead threat detection and incident response, including playbooks for compromised or misbehaving agents and executive tabletop exercises. Defend against AI-enabled attacks such as deepfake impersonation and synthetic identity fraud, with our fraud and operations teams. Define how AI agents are secured, with Engineering's architecture and platform leaders. Each agent is a first-class identity with least-privilege access. Govern how agents call tools and data, including Model Context Protocol servers, and set policy for what an agent may decide and what stays with a person. Test AI systems and agents before release and continuously in production for prompt injection, tool misuse and data exfiltration. Every agent has an audit trail and can be suspended. Keep a living inventory of AI systems, agents and the AI features inside the tools we buy, including unsanctioned use. Set acceptable-use, data-handling and third-party AI standards aligned to NIST AI RMF and ISO/IEC 42001. Build security into how software is specified, generated, tested and deployed, including AI-assisted development. Automated gates replace manual reviews. Lead compliance with the obligations of a public consumer lender: GLBA, NYDFS Part 500, SOX IT general controls, PCI DSS, state privacy laws and SEC cybersecurity disclosure. That includes audit and examiner response, and systems that produce evidence automatically, down to a record an examiner can follow of what an agent saw and what it changed. Report to the Board: regular updates, the annual NYDFS Part 500 CISO report to the Board and the annual NYDFS certification, using a small set of metrics that drive decisions. Lead the Company's Information Security Compliance Committee, which meets at least quarterly with the Company's Executive Leadership Team. Build and develop the security team: hiring, developing people, building the skills to secure and use AI, and a security-aware culture across Engineering and the business. Competencies Customer Empathy: Customer Empathy is the ability to understand the perspectives, pain points, and experiences of customers. It involves actively putting oneself in the customer's shoes, comprehending their needs and challenges, and using that understanding to provide a better, more customer-centric experience. Engineering Excellence: Engineering Excellence is about bringing great craftsmanship and thought leadership to deliver an outstanding product that delights customers and solves for the business. This involves the pursuit and achievement of high standards, best practices, innovation, and superior solutions. One Team: A One Team mindset refers to a collaborative approach across the organization, where individuals work together seamlessly, without boundaries, as a single, cohesive team. Shared goals, open communication and mutual support create a sense of collective purpose. This enables teams to navigate challenges and pursue shared objectives more effectively. Owner's Mindset: Owner's Mindset involves adopting a set of behaviors that reflect a sense of responsibility, accountability, strategic thinking, and a proactive approach to managing your domain. As an owner, you understand the business and your domain(s) deeply and solve for the right outcome for the domain(s) and the business. Requirements Bachelor's degree (computer science or a related field preferred). 10+ years in information security, compliance or a related field. 10+ years leading an information security, compliance or risk team. Regulatory compliance experience in financial services, such as GLBA, NYDFS Part 500, SOX and PCI DSS. Experience leading business continuity and cyber incident response, including executive tabletop exercises and response to a significant incident. Strong familiarity with NIST CSF, ISO 27001/27002 and SOC 2. Strong knowledge of security architecture for cloud-native environments: identity and access management, encryption, network and endpoint controls and vulnerability management. Experience building security into CI/CD and software delivery. Practical experience securing AI-enabled systems or AI-assisted development in production, including identity and access, data protection and testing. Experience reporting security and risk to executive leadership and a Board. Preferred Master's degree. Financial services, fintech or consumer lending experience. AWS and Databricks security at production scale, including securing a migration from on-premises infrastructure. Agentic AI in production: agent identity, governed tool access such as Model Context Protocol, runtime controls and agent-specific incident response. AI-assisted detection, triage and response in a security operations center, with human oversight. SEC cybersecurity disclosure experience as the security leader of a public company. Risk assessment for AI systems and third-party AI vendors. CISSP, CISM or an equivalent security certification. Knowledge and Skills Architecture: Ability to design security architecture that is built in by default and enforced through automation, not manual review. AI and Agent Security: Working knowledge of how agents are attacked and how they fail (prompt injection, tool misuse, identity and privilege abuse, memory poisoning) and the controls that contain them, drawing on the OWASP Top 10 for Agentic Applications, NIST AI RMF and ISO/IEC 42001. Risk Judgment: Ability to weigh security risk against business value, decide what an agent or a team may do on its own, and explain the tradeoff and the evidence plainly. Holds the higher bar and says so. Executive Communication: Ability to turn technical and AI risk into clear decisions for executives and the Board. Leadership and Influence: Ability to build a strong team, challenge the status quo, and earn trust across Engineering, Legal, Compliance, Risk and the business without relying on authority. Target Compensation: This position offers a competitive base salary, with a range of $300,000 - $400,000. This position is eligible for equity and annual cash bonuses. Final compensation within the range is influenced by many factors including assigned hub location, role-specific skills, depth and experience level, industry background, relevant education and certifications. This position follows a hybrid work model, offering two work-from-home days and three standard in-office days each week with the team and key stakeholders at a local office. INDENGLP Benefits Excellent benefits package that includes 401(K) match, adoption assistance, parental leave, tuition reimbursement, comprehensive medical/ dental/vision and many nonstandard benefits that make us a Great Place to Work Our Company Values: To be successful in this role . click apply for full job details

This job posting is anticipated to remain open for 30 days, from 03-Nov-2026. The posting may close early due to the volume of applicants. Join a financial services firm where your contributions are valued. Edward Jones is a Fortune 500 company where people come first. With over 9 million clients and 20,000 financial advisors across the U.S. and Canada, we're proud to be privately-owned, placing the focus on our clients rather than shareholder returns. Behind everything we do is our purpose: We partner for positive impact to improve the lives of our clients and colleagues, and together, better our communities and society. We are an innovative, flexible, and inclusive organization that attracts, develops, and inspires performance excellence and a sense of belonging. People are at the center of our partnership. Edward Jones associates are seen, heard, respected, and supported. This is what we believe makes us the best place to start or build your career. View our Purpose, Inclusion and Citizenship Report . Fortune 500, published June 2024, data as of December 2023. Compensation provided for using, not obtaining, the rating. Team Overview: The Application Security Architect, Agentic Secure Code Architect is a hands-on architecture-focused IC responsible for designing, integrating, maintaining, and improving a CI/CD-integrated AI evaluation harness used to assess application and infrastructure source code for security vulnerabilities and insecure-design practices. This role combines AppSec, DevSecOps, AI engineering, secure SDLC governance, and financial-services compliance, with strong emphasis on source-code protection, enterprise controls governance, repeatability, auditability, measurable risk reduction, and developer trust. What You'll Do: Architect the CI/CD-integrated AI secure-code evaluation harness as a hands-on IC for source code repositories and Secure SDLC lifecycles. Integrate evaluation workflows with pipeline tooling and AppSec reporting platforms. Design AI-assisted secure code review methods that complement SAST, SCA, DAST, secrets scanning, IaC scanning, threat modeling, security testing, and manual assessments. Maintain benchmarks, golden test cases, prompt/model versions, retrieval configurations, scoring criteria, and regression tests for AI-generated findings. Govern approved vendor and frontier AI models, including selection, routing, fallback patterns, accuracy, explainability, cost, and data-protection trade-offs. Define safeguards for proprietary production code, including access controls, approved model endpoints, minimization, retention limits, secure logging, and evidence handling. Route validated findings into developer workflows with actionable remediation guidance and feedback loops to reduce false positives and improve adoption. Define metrics and control evidence aligned to internal governance processes, financial services industries authorities, and cyber security frameworks (NIST SSDF, NIST CSF 2.0, NYDFS, FINRA, SOX ITGC, FFIEC, GLBA). What Experience You'll Need: Bachelor's degree in Computer Science, Cybersecurity, Software Engineering, Information Technology, Engineering, or related field. 10+ years of experience in application security, secure software engineering, DevSecOps, security architecture, or related cybersecurity roles. Deep expertise in secure code review, vulnerability detection, threat modeling, exploitability analysis, and secure SDLC practices. Experience with performing vulnerability and penetration test readouts/walkthroughs with stakeholders. Hands-on experience with SAST, SCA, DAST, secrets scanning, API security testing, container security, infrastructure-as-code scanning, and developer workflow integrations. Experience integrating security capabilities into SDLC pipeline tooling: Jenkins, GitHub Actions, GitHub Enterprise, Atlassian, developer portals, source-control workflows, and DevSecOps toolchains. Practical experience using LLMs or AI models for code review, software engineering, vulnerability research, security analysis, or developer productivity use cases. Understanding of prompt engineering and optimization, RAG, model evaluation, AI guardrails, human-in-the-loop review, prompt/model versioning, and vendor/open-source model trade-offs. Experience designing or maintaining evaluation harnesses, benchmark suites, regression tests, validation pipelines, and test orchestration workflows. Strong understanding of concepts: OWASP, CWE, CVSS, NIST SSDF, AI security risks, regulated source-code handling, auditability, and vendor/model governance. What Could Set You Apart: Master's degree or relevant certifications such as CISSP, CSSLP, OSWE, GWAPT, CCSP, cloud security, Kubernetes security, or AI governance certifications. Experience delivering AI-assisted AppSec capabilities in a Fortune 500 or highly regulated financial services environment. Hands-on experience with enterprise AI platforms, approved vendor models, open-source models, secure hosting, RAG, and AI governance controls. Experience building secure code review automation, custom static analysis rules, vulnerability detection pipelines, benchmark datasets, or AI-based developer tooling. Demonstrated success reducing AppSec risk through improved detection accuracy, lower false positives, faster remediation, and stronger developer enablement. Candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office four days per week effective June 1, 2026. Before June 1, 2026, candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office three days per week, with preference for Tuesday through Thursday. At Edward Jones, we are building a place where everyone feels like they belong. We're proud of our associates' contributions to the firm and the recognitions we have received. Check out our U.S. awards and accolades: Insights & Information Blog Postings about Edward Jones Check out our Canadian awards and accolades: Insights & Information Blog Postings about Edward Jones Edward Jones does not discriminate on the basis of race, color, gender, religion, national origin, age, disability, sexual orientation, pregnancy, veteran status, genetic information or any other basis prohibited by applicable law. Edward Jones' compensation and benefits package includes medical and prescription drug, dental, vision, voluntary benefits (such as accident, hospital indemnity, and critical illness), short- and long-term disability, basic life, and basic AD&D coverage. Short- and long-term disability, basic life, and basic AD&D coverage are provided at no cost to associates. Edward Jones offers a 401k retirement plan, and tax-advantaged accounts: health savings account, and flexible spending account. Edward Jones observes ten paid holidays and provides 15 days of vacation for new associates beginning on January 1 of each year, as well as sick time, personal days, and a paid day for volunteerism. Associates may be eligible for bonuses and profit sharing. All associates are eligible for the firm's Employee Assistance Program. For more information on the Benefits available to Edward Jones associates, please visit our benefits page .

This job posting is anticipated to remain open for 30 days, from 03-Nov-2026. The posting may close early due to the volume of applicants. Join a financial services firm where your contributions are valued. Edward Jones is a Fortune 500 company where people come first. With over 9 million clients and 20,000 financial advisors across the U.S. and Canada, we're proud to be privately-owned, placing the focus on our clients rather than shareholder returns. Behind everything we do is our purpose: We partner for positive impact to improve the lives of our clients and colleagues, and together, better our communities and society. We are an innovative, flexible, and inclusive organization that attracts, develops, and inspires performance excellence and a sense of belonging. People are at the center of our partnership. Edward Jones associates are seen, heard, respected, and supported. This is what we believe makes us the best place to start or build your career. View our Purpose, Inclusion and Citizenship Report . Fortune 500, published June 2024, data as of December 2023. Compensation provided for using, not obtaining, the rating. Team Overview: The Application Security Architect, Agentic Secure Code Architect is a hands-on architecture-focused IC responsible for designing, integrating, maintaining, and improving a CI/CD-integrated AI evaluation harness used to assess application and infrastructure source code for security vulnerabilities and insecure-design practices. This role combines AppSec, DevSecOps, AI engineering, secure SDLC governance, and financial-services compliance, with strong emphasis on source-code protection, enterprise controls governance, repeatability, auditability, measurable risk reduction, and developer trust. What You'll Do: Architect the CI/CD-integrated AI secure-code evaluation harness as a hands-on IC for source code repositories and Secure SDLC lifecycles. Integrate evaluation workflows with pipeline tooling and AppSec reporting platforms. Design AI-assisted secure code review methods that complement SAST, SCA, DAST, secrets scanning, IaC scanning, threat modeling, security testing, and manual assessments. Maintain benchmarks, golden test cases, prompt/model versions, retrieval configurations, scoring criteria, and regression tests for AI-generated findings. Govern approved vendor and frontier AI models, including selection, routing, fallback patterns, accuracy, explainability, cost, and data-protection trade-offs. Define safeguards for proprietary production code, including access controls, approved model endpoints, minimization, retention limits, secure logging, and evidence handling. Route validated findings into developer workflows with actionable remediation guidance and feedback loops to reduce false positives and improve adoption. Define metrics and control evidence aligned to internal governance processes, financial services industries authorities, and cyber security frameworks (NIST SSDF, NIST CSF 2.0, NYDFS, FINRA, SOX ITGC, FFIEC, GLBA). What Experience You'll Need: Bachelor's degree in Computer Science, Cybersecurity, Software Engineering, Information Technology, Engineering, or related field. 10+ years of experience in application security, secure software engineering, DevSecOps, security architecture, or related cybersecurity roles. Deep expertise in secure code review, vulnerability detection, threat modeling, exploitability analysis, and secure SDLC practices. Experience with performing vulnerability and penetration test readouts/walkthroughs with stakeholders. Hands-on experience with SAST, SCA, DAST, secrets scanning, API security testing, container security, infrastructure-as-code scanning, and developer workflow integrations. Experience integrating security capabilities into SDLC pipeline tooling: Jenkins, GitHub Actions, GitHub Enterprise, Atlassian, developer portals, source-control workflows, and DevSecOps toolchains. Practical experience using LLMs or AI models for code review, software engineering, vulnerability research, security analysis, or developer productivity use cases. Understanding of prompt engineering and optimization, RAG, model evaluation, AI guardrails, human-in-the-loop review, prompt/model versioning, and vendor/open-source model trade-offs. Experience designing or maintaining evaluation harnesses, benchmark suites, regression tests, validation pipelines, and test orchestration workflows. Strong understanding of concepts: OWASP, CWE, CVSS, NIST SSDF, AI security risks, regulated source-code handling, auditability, and vendor/model governance. What Could Set You Apart: Master's degree or relevant certifications such as CISSP, CSSLP, OSWE, GWAPT, CCSP, cloud security, Kubernetes security, or AI governance certifications. Experience delivering AI-assisted AppSec capabilities in a Fortune 500 or highly regulated financial services environment. Hands-on experience with enterprise AI platforms, approved vendor models, open-source models, secure hosting, RAG, and AI governance controls. Experience building secure code review automation, custom static analysis rules, vulnerability detection pipelines, benchmark datasets, or AI-based developer tooling. Demonstrated success reducing AppSec risk through improved detection accuracy, lower false positives, faster remediation, and stronger developer enablement. Candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office four days per week effective June 1, 2026. Before June 1, 2026, candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office three days per week, with preference for Tuesday through Thursday. At Edward Jones, we are building a place where everyone feels like they belong. We're proud of our associates' contributions to the firm and the recognitions we have received. Check out our U.S. awards and accolades: Insights & Information Blog Postings about Edward Jones Check out our Canadian awards and accolades: Insights & Information Blog Postings about Edward Jones Edward Jones does not discriminate on the basis of race, color, gender, religion, national origin, age, disability, sexual orientation, pregnancy, veteran status, genetic information or any other basis prohibited by applicable law. Edward Jones' compensation and benefits package includes medical and prescription drug, dental, vision, voluntary benefits (such as accident, hospital indemnity, and critical illness), short- and long-term disability, basic life, and basic AD&D coverage. Short- and long-term disability, basic life, and basic AD&D coverage are provided at no cost to associates. Edward Jones offers a 401k retirement plan, and tax-advantaged accounts: health savings account, and flexible spending account. Edward Jones observes ten paid holidays and provides 15 days of vacation for new associates beginning on January 1 of each year, as well as sick time, personal days, and a paid day for volunteerism. Associates may be eligible for bonuses and profit sharing. All associates are eligible for the firm's Employee Assistance Program. For more information on the Benefits available to Edward Jones associates, please visit our benefits page .

Job Description Job Description Dark Wolf Solutions is seeking Security Control Assessor/Representatives (SCA/Rs) to lead security control assessments across high-priority projects. Working at the intersection of cybersecurity engineering, cloud architecture, and DevSecOps prototyping, you will evaluate security controls for cutting-edge AI/LLM technologies across multiple classification levels. This position is ideal for a pragmatic cloud assessor or SCAR who excels in fast-paced DevSecOps environments, understands AWS cloud security, and is eager to shape the cybersecurity posture of next-generation DoD AI capabilities.This position will be based out of Arlington, VA. Additional responsibilities include: Key Responsibilities Execute formal SCA/R duties. Lead security assessment efforts, establishing reusable security playbooks and assessment frameworks for rapid AI deployment into enterprise workflows. Evaluate technical control effectiveness across AWS cloud infrastructure, DevSecOps pipelines, microservices, containerized workloads, and GenAI/LLM application stacks. Partner directly with cybersecurity engineering and DevSecOps prototyping teams to integrate security controls early in the development lifecycle. Review, author, and maintain assessment packages-including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and POA&Ms-tailored to rapid prototyping and AI systems. Assess technical security risks specific to AI/LLM implementations, such as API exposure, vector database access controls, model integration surface area, and software supply chain dependencies. Support continuous monitoring (ConMon), technical risk evaluations, and cloud architecture reviews across multi-tenant, multi-classification environments. Coordinate with Authorizing Officials (AOs), program managers, and engineering leads to deliver decision-ready risk briefings and ATO recommendations. Provide technical input and oversight for cybersecurity engineering and penetration testing activities across prototype projects. Required Qualifications Active Top Secret security clearance Current DoD 8570/8140 IAM Level II or Level III certification (e.g., Security+, CySA+, CISM, CISSP, CCISO, CAP/CISC) 3-5+ years of experience conducting security control assessments, compliance testing, or A&A/RMF activities for DoD or federal information systems Solid operational understanding of core AWS cloud services (EC2, S3, IAM, VPCs, Security Groups, Security Hub) and how security controls function within cloud-native and CI/CD pipeline environments. Strong working knowledge of NIST SP 800-53 (Rev. 4/5), NIST SP 800-37 (RMF), DoD Cloud Computing SRG, and FedRAMP baselines. Demonstrated experience writing and evaluating core RMF artifacts (SSPs, SAPs, SARs, POA&Ms) Exceptional written and verbal communication skills, with the ability to articulate technical risk clearly to executive stakeholders, Authorizing Officials, and engineering teams. Hands-on experience navigating government GRC repositories, such as eMASS or XACTA. Desired Qualifications Hands-on experience mapping security controls to the NIST AI Risk Management Framework (AI RMF), the OWASP Top 10 for LLM Applications, or the DoD Responsible AI (RAI) Guidelines. Familiarity evaluating secure design patterns for autonomous AI Agents (e.g., tool-calling permissions, sandboxing agent execution environments, prompt boundaries, and ReAct/LangGraph architectures). Experience assessing cloud-managed AI ecosystems and foundation model platforms (e.g., AWS Bedrock, AWS SageMaker, Hugging Face Enterprise, or self-hosted open-source models). Understanding of data protection, access controls, and boundary security for RAG pipelines and vector databases (e.g., OpenSearch Vector Engine, Pinecone, Milvus, or PostgreSQL pgvector). Familiarity evaluating risks unique to LLMs-including prompt injection, data poisoning, model inversion, insecure output handling, and open-source supply chain vulnerabilities in AI libraries (PyTorch, LangChain, LlamaIndex). Exposure to LLM guardrail platforms, evaluation frameworks, or AI security tools (e.g., Promptfoo, Garak, Giskard, NeMo Guardrails) used to test model robustness and output safety. Experience with cATO methodologies, Infrastructure as Code (IaC) templates (Terraform, CloudFormation), and container security (AWS EKS/ECS, Docker). Active AWS Certifications (e.g., AWS Certified Security - Specialty or AWS Certified Solutions Architect). Background or familiarity with offensive security, penetration testing The salary range for this position is estimated to be between $135,000.00 - $150,000.00, commensurate on experience and technical skillset. We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire. We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.

Delta Defense seeks a Cybersecurity Engineer to safeguard critical systems, data, and customer information supporting USCCA's nationwide membership platform. In this role, you will design and maintain secure network and cloud architectures, administer security tools, and lead monitoring, incident response, and vulnerability management efforts. You'll collaborate closely with IT, software, and business teams to embed security by design, refine policies, and support audits. Join a fast-growing, mission-driven organization where your expertise directly protects responsible gun owners and advances a values-driven, high-performance culture. Responsibilities Design, implement, and maintain secure network and cloud architectures to protect USCCA systems and data Monitor security events, investigate alerts, and respond to incidents to minimize risk and downtime Conduct vulnerability assessments, penetration testing, and remediation planning across applications and infrastructure Develop and maintain security policies, standards, and procedures aligned with regulatory and industry best practices Collaborate with engineering and IT teams to embed security into software development and deployment processes Manage security tools including SIEM, EDR, firewalls, IDS/IPS, and identity and access management platforms Perform security risk assessments on new technologies, vendors, and business initiatives Lead security awareness efforts, coaching teams on secure behavior and incident reporting Support audit, compliance, and documentation requirements for internal and external stakeholders Continuously evaluate emerging threats and technologies to strengthen Delta Defense's security posture Required Skills Network security engineering Cloud security (AWS, Azure, or similar) Security incident detection and response Vulnerability assessment and remediation Penetration testing basics SIEM administration and log analysis Endpoint detection and response (EDR) tools Identity and access management (IAM) Firewall, IDS/IPS configuration Security policy and documentation development

Job Description Job Description Overview Senior Cybersecurity Engineer (SCAR) Location : El Segundo, CA Job Status: Full time SALARY RANGE: Estimated $160,000 + annually depending on experience, certifications, and qualifications Clearance Required: Active DoD TS/SCI Astrion is seeking a Senior Cybersecurity Engineer SME to join our prime contract supporting STS-3 in El Segundo, CA. This role will provide direct Assessment & Authorization (A&A) support to the Space Systems Command Authorizing Officia and Security Conrol Assessor (SCA), ensuring the secure operations of enterprise networks, mission-critical systems, and sensitive data across Space Systems Command (RDT&E) Authorizing Official (AO) subordinate enclave. You will play a hands-on role in Cybersecurity Analysis, Engineering, and Risk Management Framework (RMF) compliance, and Enterprise policy driving mission assurance for some of the nation's most important space systems. REQUIRED QUALIFICATIONS / SKILLS 15+ years of cybersecurity experience supporting USSF, DoD, or related federal organizations. Familiarity with Risk Management Framework (RMF) protocols. Knowledge of USSF A&A procedures with hands-on experience with eMASS Active DoD TS/SCI clearance (with current investigation). CompTIA Security+ or equivalent DoD 8570/8140 IAT/IAM certification. PREFERRED QUALIFICATIONS / SKILLS Prior SCA / SCAR / ASCA experience within DoW and USSF. CISSP, GIAC, or equivalent advanced cybersecurity certification. Strong organizational, interpersonal, and communication skills with attention to detail. Technical MA or MS degree Advanced skills in Microsoft Word, Excel, PowerPoint, and Outlook. RESPONSIBILITIES Support the Authorizing Official and Security Control Assessor by ensuring adherence to the DoD RMF process, driving cyber hardening efforts, and tracking progress along the Road to ATO. Support A&A activities and provide cybersecurity engineering expertise for enterprise mission systems. Develop, update, and manage Enterprise Mission Assurance Support Service (eMASS) entries and coordinate A&A packages in accordance with DoDI 8510.01 (RMF). Maintain and report on C&A schedules, package status, and system registrations in ITIPS (formerly EITDR) in compliance with FISMA. Review and refine certification policies, procedures, and reports for new and evolving cyber system requirements. Conduct research and analysis to assess the impact of new DoD, USSF, DIA, and DISA cybersecurity directives. Support Vulnerability Management System (VMS) processes by documenting, tracking, and closing compliance findings. Contribute to Security Test & Evaluation (ST&E) efforts, penetration testing, and validation of cybersecurity controls. Revalidate cyber and IA controls for accredited systems and recommend improvements to strengthen mission assurance. Assess policy changes from higher headquarters and determine impact on current mission system security posture. Travel is required during onsite assessments.

Job Description Job Description About the job Mercor connects elite creative and technical talent with leading AI research labs. Headquartered in San Francisco, our investors include Benchmark , General Catalyst , Peter Thiel , Adam D'Angelo , Larry Summers , and Jack Dorsey . Position: CVE Vulnerability Expert Type: Contract Compensation: $70-$90/hour Location: Remote Role Responsibilities Evaluate the quality, fidelity, and completeness of vulnerability-reproduction and remediation tasks for AI model training. Assess CVE reproductions for faithfulness and ensure fixes are sound. Verify rigorous logic and ensure Docker-based lab environments accurately recreate exploitable conditions. Provide clear, rubric-based written feedback to improve model outputs. Collaborate with AI research teams to enhance training data quality and downstream performance. Work independently and asynchronously to meet deadlines while improving AI model performance. Qualifications Must-Have 3+ years of hands-on experience in application security, penetration testing, or vulnerability research. Strong understanding of CVE vulnerability taxonomy and severity frameworks ( CVSS , CWE , CAPEC ). Demonstrated expertise in secure coding and remediation across common vulnerability classes ( SQL injection , command injection , buffer overflow , deserialization , SSRF , misconfigurations , privilege escalation ). Experience designing or evaluating two-part verification logic (functionality tests + vulnerability tests). Proficiency with Docker and Docker Compose for multi-container vulnerability reproduction environments. Preferred OSCP , GPEN , GWAPT , or equivalent offensive-security certification. Experience with CVE disclosure, responsible vulnerability reporting, or maintaining exploit proof-of-concept code. Background in DevSecOps , CI/CD security gating, or SAST/DAST tooling. Prior technical content review, assessment design, or QA for security-focused engineering tasks. Application Process (Takes 20-30 mins to complete) Upload resume AI interview based on your resume Submit form Resources & Support For details about the interview process and platform information, please check: For any help or support, reach out to: PS: Our team reviews applications daily. Please complete your AI interview and application steps to be considered for this opportunity.

Job Description Job Description CoreWeave is The Essential Cloud for AI . Built for pioneers by pioneers, CoreWeave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence. Trusted by leading AI labs, startups, and global enterprises, CoreWeave combines superior infrastructure performance with deep technical expertise to accelerate breakthroughs and turn compute into capability. Founded in 2017, CoreWeave became a publicly traded company (Nasdaq: CRWV) in March 2025. Learn more at . What You'll Do: CoreWeave's Network Security team ensures network infrastructure is secure, resilient and compliant. Our team partners with engineering, product teams, and partners to build secure network solutions that protect critical infrastructure and continuously improve the security posture to meet the needs of our customers. With our growing reliance on connected technology, the need to keep critical systems secure, reliable, and resilient has never been more important. We are seeking an OT Security Engineer to join our team and play a pivotal role in safeguarding the operational technologies that support our datacenter networks. About the role: This position offers a unique opportunity to work at the crossroads of cyber security, operational technology (OT), engineering, and datacenter operations. As the network security engineer responsible for our operational technology networks, your responsibilities will include identifying and evaluating cybersecurity risks, designing and launching pragmatic security solutions, and embedding security controls directly into the operational systems and technologies supporting our infrastructure. You will work with suppliers and third parties in benchmarking their capabilities against expectations and industry standards. You will also lead efforts in partnering with peer security teams and partners in production engineering as you lead continuous improvement of security posture for operational technology network environments and the devices connected. This role requires both depth in understanding network security, and breadth of knowledge of the unique challenges that face the industry in securing the infrastructure that is the foundation of modern datacenters. You will act as a trusted partner who goes beyond advisory work to roll up your sleeves and deliver. Some things you will work on: Establishing standards for security expectations covering all operational technology networks and devices connected to them. This will include network segmentation, host isolation, network traversal controls, and remote connectivity. Providing solutions to complex security issues, manage multiple tasks, and prioritize effectively in a fast-paced environment. Creating an inventory and risk register that can be used as a baseline in understanding near term and long term objectives. Partnering with production engineering and business development teams evaluating priorities for risk reduction in current deployments, and risk avoidance by evolving standards for future growth. Executing and partnering with other parties in using penetration testing to evaluate effectiveness of existing controls. Coordinating with third parties and internal teams in addressing vulnerabilities via mitigation, isolation or other strategies to protect critical infrastructure in these environments. Researching industry risks and drive change in operational networks to continuously reduce risk Developing and test recovery models and response playbooks to handle compromise scenarios. Presenting technical security information to both technical and non-technical audiences, including external partners. Maintain technical documentation, reports, and security tooling with attention to detail. Who You Are: 5+ Years of experience in network infrastructure security (firewalls, ACLs, architecture, risk management) in a global network environment. Proficiency in at least one programming or scripting language (e.g., Go, Python, C/C++) for automation, code reviews, and tooling. Bachelor's degree in Computer Science or related field. Relevant certifications such as CISSP, CCNP, PCNSE are advantageous. Experience with operational technology networks (factory or industrial systems, building management systems, power, physical security systems, remote access, HVAC, etc.), factory networks or other similar environments. Strong technical knowledge of network firewalls, virtual private networks, network segmentation, and defense in depth. Able to navigate ambiguity, identify root causes, and solve complex security problems. Excellent written and verbal communication skills with strong technical documentation abilities. Capable of working independently while managing multiple priorities in a fast-paced environment. Strong desire to continuously learn and adopt new technologies and security techniques. Preferred: Prior experience with operational technology networks that span global locations Experience with the range of obscure solutions that are often deployed on operational technology networks. Deep understanding of business-wide security best practices and implementation strategies. Experience with network automation, agentic network tooling, and incident response automation. Wondering if you're a good fit? We believe in investing in our people, and value candidates who can bring their own diversified experiences to our teams - even if you aren't a 100% skill or experience match. Here are a few qualities we've found compatible with our team. If some of this describes you, we'd love to talk. You love to solve problems that few others would tackle. You're curious about critical network infrastructure that is the foundation of modern data centers. You're an expert in network security with a passion to explore the more exotic nature of operational technology. Why CoreWeave? At CoreWeave, we work hard, have fun, and move fast! We're in an exciting stage of hyper-growth that you will not want to miss out on. We're not afraid of a little chaos, and we're constantly learning. Our team cares deeply about how we build our product and how we work together, which is represented through our core values: Be Curious at Your Core Act Like an Owner Empower Employees Deliver Best-in-Class Client Experiences Achieve More Together We support and encourage an entrepreneurial outlook and independent thinking. We foster an environment that encourages collaboration and enables the development of innovative solutions to complex problems. As we get set for takeoff, the organization's growth opportunities are constantly expanding. You will be surrounded by some of the best talent in the industry, who will want to learn from you, too. Come join us! The base salary range for this role is $164,000 to $242,000. The starting salary will be determined based on job-related knowledge, skills, experience, and market location. We strive for both market alignment and internal equity when determining compensation. In addition to base salary, our total rewards package includes a discretionary bonus, equity awards, and a comprehensive benefits program (all based on eligibility). What We Offer The range we've posted represents the typical compensation range for this role. To determine actual compensation, we review the market rate for each candidate which can include a variety of factors. These include qualifications, experience, interview performance, and location. In addition to a competitive salary, we offer a variety of benefits to support your needs. The benefits below reflect our US-based offerings for full-time employees; for roles in other locations, benefits vary and are shared during the hiring process. These include: Medical, dental, and vision insurance - 100% paid for by CoreWeave Company-paid Life Insurance Voluntary supplemental life insurance Short and long-term disability insurance Flexible Spending Account Health Savings Account Tuition Reimbursement Ability to Participate in Employee Stock Purchase Program (ESPP) Mental Wellness Benefits through Spring Health Family-Forming support provided by Carrot Paid Parental Leave Flexible, full-service childcare support with Kinside 401(k) with a generous employer match Flexible PTO Catered lunch each day in our office and data center locations A casual work environment A work culture focused on innovative disruption California Applicants California Consumer Privacy Act Equal Opportunity & Accommodations CoreWeave is an equal opportunity employer, committed to fostering an inclusive and supportive workplace. All qualified applicants and candidates will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. As part of this commitment and consistent with the Americans with Disabilities Act (ADA) , CoreWeave will ensure that qualified applicants and candidates with disabilities are provided reasonable accommodations for the hiring process, unless such accommodation would cause an undue hardship. If reasonable accommodation is needed, please contact: . . click apply for full job details

Job Description Job Description Job Description ACTIVE SECURITY CLEARANCE AT THE TS/SCI POLYGRAPH LEVEL IS REQUIRED We are seeking an aggressive, hands-on Red Team / Cyber Assessment Engineer to join our technical assessment team in Annapolis Junction, MD, with periodic OCONUS travel requirements. In this role, you will execute adversarial assessments, emulate real-world threat actors, and evaluate complex network architectures to identify vulnerabilities before adversaries can exploit them. You won't just run automated scanners-you will conduct full-scope Red Team engagements, perform deep network anomaly analysis, leverage the MITRE ATTCK framework, and author comprehensive mitigation reports to harden critical infrastructure. If you thrive on offensive cyber operations, analyzing raw telemetry for Indicators of Compromise (IOCs), and delivering high-impact security assessments, you'll fit right in with Team Nyla. The annual base salary range for this role is $176,000-$208,000 (USD) , which does not include discretionary bonus compensation or our comprehensive benefits package. Actual compensation offered to the successful candidate may vary from posted hiring range based upon geographic location, work experience, education, and/or skill level, among other things. , Required Skills Red Team Assessment Experience: Proven track record conducting offensive security assessments, adversarial emulations, and technical vulnerability evaluations. Assessment Mitigation Reporting: Demonstrated capability to author detailed assessment findings, technical threat reports, and actionable remediation plans. Network Threat Analysis: Strong expertise in network traffic analysis, anomaly detection, IOC identification, and multi-source telemetry evaluation. Security Frameworks: Deep working knowledge of the MITRE ATTCK framework, NIST cybersecurity controls, and ISO 27001 standards. Operational Mobility: Willingness and ability to undertake periodic OCONUS travel for on-site assessment operations. Education: Bachelor's Degree in Cybersecurity, Computer Science, Computer Engineering, or a related technical discipline, PLUS 7+ years of professional cybersecurity and Red Team assessment experience OR Master's Degree in a related technical field, PLUS 5+ years of specialized offensive security and threat assessment experience OR High School Diploma / GED, PLUS 11+ years of hands-on technical experience in cybersecurity operations, network assessment, and Red Teaming in lieu of a degree. , Desired Skills Offensive Certifications: Industry certifications such as OSCP, CRTP, CRTE, CRTO, or equivalent penetration testing credentials. Penetration Testing Exploitation: Practical experience with ethical hacking, exploit development, post-exploitation techniques, and manual penetration testing. Zero Trust Concepts: Understanding of Zero Trust architecture and modern network infrastructure hardening. Blue/Purple Team Collaboration: Experience supporting defensive monitoring, detection engineering, or joint Purple Team exercises. Python Scripting: Basic proficiency in Python for automated parsing, custom payload delivery, or quick assessment scripting. , About Nyla Technology Solutions Nyla Technology Solutions delivers exceptional Artificial Intelligence (AI), Data Science, and Software Engineering services for the U.S. Government. Nyla embraces a forward-thinking and bold approach at every turn, earning us a solid reputation of technical trendsetters within the industry. We have a passion for developing solutions that have a quick and immediate impact on mission. Headquartered in Columbia, Maryland, our customers love how we tackle their most challenging problems and get things done. If you have the unique experience and expertise we are seeking, along with the desire and determination to invest your time and energy as a part of Nyla's team, Taking Care of All of You Nyla provides a top-of-market compensation and benefits package. And through our unique Nyla FLEX program, we custom tailor these benefits to best fit your lifestyle. The Nyla FLEX benefit program is designed to offer you flexibility in the 3 biggest areas of your life: your pay, your leave, and your schedule. PAY - Nyla starts with 4 weeks of Annual Leave plus 11 holidays and an additional day of Annual Leave for each year you're at the company. You have the flexibility to cash out your annual leave hours, opt out of other Nyla benefits, and/or arrange for additional hours on contract (over 40 hrs/week). There's even an option to earn 1.3 times your hourly rate once you work over 1880 hours on contract! LEAVE - Want to spend more time with the family? Want more time to travel the world? You can BUY additional annual leave for a total of 6 weeks of annual leave. That's up to 240 hours of leave plus 11 holidays! That's not even including paid anniversary leave! SCHEDULE - Does the traditional 40-hour workweek no longer fit your lifestyle? With Nyla FLEX, you have the freedom to scale down to 30-32 hours while still enjoying the top-notch Nyla benefits you know and love. It's flexibility that works for you without compromising the perks! WHAT ABOUT OTHER BENEFITS? Nyla's health care (medical, dental, and vision) is 100% covered by the company. We provide 10% 401k matching - with full vesting day 1! Our Professional Development offers $5,000 per year to be used towards fees, tuition, or time off for your continued growth. We even have a student loan repayment program and we provide 8 hours of volunteering annually so you can support your community, making your world a better place. To learn more about Nyla's culture and our exceptional benefit packages click here. Nyla is an equal opportunity employer.

Job Description Job Description Job Title: Network Security Engineer Department: Information Technology Location: Rochester, NY Classification: Exempt Reports To: Director of Information Technology Please note: Candidates must be authorized to work in the United States and able to work onsite in the Rochester, NY office. Sponsorship is not available for this position. Company Overview: Woods Oviatt Gilman, LLP is a leading and reputable full-service law firm dedicated to providing exceptional legal services to our clients. With a team of highly skilled and experienced attorneys, we strive to deliver comprehensive and effective solutions to meet the diverse needs of our clients. Our headquarters is in Rochester, NY with additional offices in Albany and Buffalo, NY. We foster a collaborative and inclusive work environment where every team member is valued and respected. We encourage open communication, teamwork, and professional growth. Our firm promotes a healthy work-life balance and supports the well-being of our employees. Position Summary: The Network Security Engineer is a hands-on technical role responsible for implementing, configuring, and maintaining the firm's security controls across a hybrid environment, including FortiGate firewalls, endpoint protection, cloud email and Microsoft 365, Intune-managed devices, and a co-managed monitoring and detection service. The Engineer works under the direction of the Director of Information Technology, who sets security policy and priorities for the department, and provides the technical assessment, recommendations, and documentation that support those decisions. Because the firm safeguards confidential and privileged client information, this position calls for strong technical skill, sound judgment, discretion, and clear communication with both the IT team and firm personnel. Duties and Responsibilities: Network and Perimeter Security Administer, tune, and monitor FortiGate firewalls, including security policies, VPN configuration, intrusion prevention, web and content filtering, and logging Implement and maintain network segmentation, secure remote access, and wireless security across firm locations, in line with the department's standards Maintain secure connectivity for remote and hybrid users, including VPN and conditional access Conduct scheduled reviews of firewall rules and network configurations, recommend changes to the Director of Information Technology, and maintain accurate network security documentation Endpoint, Identity, and Email Security Administer the firm's endpoint protection platforms, including CrowdStrike and Microsoft endpoint protection, covering policy configuration, detection review, containment actions, and agent coverage Configure and maintain device compliance, configuration, and application deployment through Microsoft Intune in a hybrid environment, including full-disk encryption and recovery key handling Configure and maintain identity and access controls across Microsoft Entra ID and on-premises Active Directory, including multifactor authentication, conditional access, and privileged account settings, and perform periodic access reviews Configure and maintain security settings for cloud email and collaboration, including mail flow and filtering rules, phishing and malware defenses, email authentication records, and Microsoft 365 security configuration Perform vulnerability and patch management across servers, endpoints, and network devices, including scanning, prioritizing findings, tracking remediation, and reporting status to the Director of Information Technology Monitoring, Detection, and Incident Response Serve as the day-to-day technical contact for the firm's managed monitoring service, triaging alerts, validating findings, and carrying issues through to resolution Investigate security events and perform containment, eradication, and recovery steps in accordance with the firm's incident response procedures, escalating promptly to the Director of Information Technology Contribute to the development, maintenance, and testing of the firm's incident response plan, including participation in tabletop exercises Verify that backup, recovery, and business continuity controls are functioning and tested, and support the department's disaster recovery planning Security Program Support, Privacy, and Compliance Provide technical evaluation and recommendations to support the department's selection and adoption of a recognized security framework such as the NIST Cybersecurity Framework, CIS Controls, or ISO 27001 Implement and maintain the technical controls that support the framework, and assist in assessing and reporting the firm's posture against it Assist the Director of Information Technology in drafting and maintaining information security policies, standards, and procedures, and implement the technical measures that carry them out Maintain security documentation, control evidence, and a working risk log, and recommend remediation priorities to the Director of Information Technology Support compliance with applicable privacy and data protection obligations, including the New York SHIELD Act and other state privacy requirements, and requirements applicable to regulated client data such as protected health information Prepare technical responses and supporting documentation for client security requirements, including outside counsel guidelines, security questionnaires, and client and third-party audits, and complete remediation items assigned by the Director of Information Technology Support obligations arising from clients in regulated industries, including financial services requirements such as NYDFS Part 500 as applied to the firm through client agreements Perform technical security reviews of vendors, applications, and services under consideration, and provide findings and recommendations to the Director of Information Technology Assist with independent assessments, including penetration testing and external audits, and complete assigned remediation work Awareness and Collaboration Administer the firm's security awareness program, including training delivery, phishing simulations, and user communication developed with the Director of Information Technology Partner with the IT team on secure configuration, change management, and project work, and provide technical guidance to service desk staff on security escalations Report on control status, vulnerabilities, incidents, and open remediation items to the Director of Information Technology Maintain current knowledge of emerging threats, vulnerabilities, and security technologies relevant to the legal industry, and share findings with the department Technical Skills: Required Hands-on administration of FortiGate firewalls, including policy management, VPN, intrusion prevention, and content filtering Endpoint detection and response administration, ideally CrowdStrike Falcon, and familiarity with Microsoft endpoint protection Microsoft 365 security administration, including cloud email protection, mail flow and filtering, phishing defense, and email authentication using SPF, DKIM, and DMARC Identity and access administration across Microsoft Entra ID and on-premises Active Directory in a hybrid configuration, including multifactor authentication and conditional access Microsoft Intune administration, including device compliance and configuration, application deployment, and device encryption in a hybrid environment Solid networking fundamentals, including TCP/IP, routing and switching, VLANs, DNS, DHCP, segmentation, and wireless security Vulnerability management and patch management practice, including scanning, prioritization, and remediation tracking Security monitoring and log analysis, and experience working with a managed detection and response or co-managed SOC provider Working familiarity with a recognized security framework such as the NIST Cybersecurity Framework, CIS Controls, or ISO 27001, and experience implementing controls in support of one Familiarity with privacy and data protection requirements, including state breach notification obligations and handling of regulated data Ability to produce clear technical documentation, control evidence, risk write-ups, and status reporting for both technical and non-technical readers Preferred Prior experience in a law firm or other professional services environment, including familiarity with outside counsel guidelines and client security audits Experience preparing responses to client security questionnaires and third-party risk assessments Azure or other cloud security administration PowerShell or comparable scripting for automation and reporting Experience with data loss prevention, email encryption, or information rights management Experience with security awareness platforms and phishing simulation tools Familiarity with SD-WAN, zero trust, or secure access service edge architectures Relevant certifications such as Fortinet NSE, CompTIA Security+, GIAC credentials, Microsoft SC-200 or SC-300, CISSP, or CISM Qualifications and Competencies: Strong analytical and problem-solving skills, with sound technical judgment in assessing and prioritizing risk . click apply for full job details

Job Description Job Description Are you a Principal Reverse Engineer who is ready for a new challenge that will launch your career to the next level? Tired of being treated like a company drone? Tired of promised adventures during the hiring phase, then being dropped on a remote contract and never seen or heard from the mothership again? Our engineers were certainly tired of the same. At GliaCell our slogan is "We make It happen". We will immerse you in the latest technologies. We will develop and support your own personalized training program to continue your individual growth. We will provide you with work that matters with our mission-focused customers, and surround you with a family of brilliant engineers. Culture isn't something you need to talk about if it just exists. If this sounds interesting to you, then we'd like to have a discussion regarding your next adventure! If you want to be a drone, this isn't the place for you. We Make It Happen! GliaCell Technologies focuses on Software & System Engineering in Enterprise and Cyber Security solution spaces. We excel at delivering stable and reliable software solutions using Agile Software Development principles. These provide us the capability to deliver a quick turn-around using interactive applications and the integration of industry standard software stacks. GliaCell's Enterprise capabilities include Full-Stack Application Development, Big Data, Cloud Technologies, Analytics, Machine Learning, AI, and DevOps Containerization. We also provide customer solutions in the areas of CND, CNE, and CNO by providing our customers with assessments and solutions in Threat Mitigation, Vulnerability Exposure, Penetration Testing, Threat Hunting, and Preventing Advanced Persistent Threat. We Offer: Long-term job security Competitive salaries & bonus opportunities Challenging work you are passionate about Ability to work with some amazingly talented people Job Description: GliaCell is seeking a Principal Reverse Engineer on one of our subcontracts. This is a full-time position offering the opportunity to support a U.S. Government customer. The mission is to provide technical expertise that assists in sustaining critical mission-related software and systems to a large government contract. Key Requirements: To be considered for this position you must have the following: Possess an active or rein-statable TS/SCI with Polygraph security clearance. U.S. Citizenship. 11+ years experience and a Bachelor's Degree in Computer Science (or related). CISSP, GIAC, GREM, or CREA Certification is required. Works well independently as well as on a team. Strong communication skills. Required Skills: Perform technical analysis of malicious binaries through controlled execution and/or static analysis of assembly code, overcoming techniques designed to defeat analysis, in order to ascertain functionality, capability, call-backs, assist with attribution to adversary infrastructure, and identification of indications or compromise. Provide information and documentation that enables malware detection, signature creation, and mitigation. Location: Maryland Salary Range: The salary range for this full-time position is $115,000 to $190,000. Our salary ranges are determined by position, level, skills, professional experience, relevant education and certifications. The range displayed on each job posting reflects the minimum and maximum target salaries for this position across our projects. Within the range, your salary is determined by your individual benefits package selection. Your recruiter can share more about the specific salary range for your preferred position during the hiring process. Benefits: Medical, Dental, and Vision Coverage for Employee and Dependents Up to 25 Days of Paid Time Off Up to 40 hours of PTO Carryover 11 Federal Government Holidays Work From Home Opportunities 401K Company Contribution, Fully Vested Day 1 Discretionary, Certification, and Sign-On Bonus Potential Employee Referral Bonus Program Annual Professional Development 100% Premium Covered for Life & Disability Insurances Additional Voluntary Life Insurance Coverage Available Employee Assistance Program Travel Protection Program Financial Planning Assistance Bereavement and Jury Duty Leave Monthly Team and Family Events Technology Budget Global Entry Annual Swag Budget Learn more about GliaCell Technologies: To apply for this position, respond to this job posting and attach an updated resume for us to review. GliaCell Technologies, LLC is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status. Powered by JazzHR CbEmOaKH9c

Job Description Job Description We're looking for a Network Security Engineer to help strengthen and modernize the network and security infrastructure behind Cinch Home Services. You'll work hands-on across Zero Trust, SD-WAN, cloud networking, wireless, VPNs, and secure remote access, while troubleshooting complex issues and helping shape secure, reliable solutions. It's a great opportunity to work across a broad technology environment and play a meaningful role in how our infrastructure continues to evolve. Essential Responsibilities Contribute to the design of secure network architectures (zero trust, micro-segmentation, DMZ, WAN security, secure remote access) Implement and maintain security measures across IT infrastructure, support automation of security testing, and monitor systems for threats. Support cloud network security architecture (Azure, AWS) configuring security groups, firewalls, and private endpoints. Participate in reviews of application/network designs to help identify security gaps. Assist in evaluating security technologies and provide recommendations to senior staff. Support the development and enforcement of security policies and procedures. Maintain solid knowledge of security principles, practices, and technologies, including encryption, authentication, authorization, and network security. Perform regular security assessments, vulnerability scanning, and penetration testing to identify and help mitigate risks. Troubleshoot network and communication problems related to local wired, wireless, and wide-area networks. Work with project teams to understand requirements, help formulate networking solutions, and support implementation. Assist in analyzing, designing, and documenting wired/wireless network architectures to support new technology, business solutions, and new locations. Provide support for network users, partners, and third-party vendors. Respond to network outages. Perform other duties as assigned. Experience and Qualifications 2-4 years of progressive experience supporting network routing, switching, and wireless in an enterprise environment. Solid understanding of network design, topology, and integrated security. Cato/Cisco/Ruckus platform experience a plus (Wi-Fi, security, routers, switches). Experience with installation and configuration of network devices. Ability to troubleshoot network communications to the transport layer. Familiarity with SD-WAN and cloud networking technologies. Experience with Cato Networks a plus. Understanding of IPsec and SSL VPN. Exposure to business continuity and disaster recovery best practices. Familiarity with virtualization technology. Working knowledge of networking diagnostic, monitoring, and analysis tools. Exposure to datacenter technologies, including servers, storage, and data center facilities (power, cooling, cabling). Education Bachelor's degree preferred. CCNA or equivalent certification preferred.