146 jobs found

Job Description Job Description Job Description We are seeking an Information Systems Security Manager to join our high-performance team supporting a Navy project with the Naval Information Warfare Center Atlantic (NIWC Atlantic). This individual will be responsible for coordinating cybersecurity activities, managing security documentation, and working with Government stakeholders and technical teams to identify and address system risks. The ideal candidate combines management and compliance experience with a practical understanding of system vulnerabilities, penetration testing tools, and adversary behavior. Key Responsibilities • Manage and coordinate cybersecurity activities supporting Navy information systems throughout their lifecycle. • Support Risk Management Framework (RMF) activities, security control implementation, assessment preparation, and authorization package maintenance. • Develop and maintain cybersecurity policies, procedures, system security plans, and supporting documentation. • Coordinate with Government cybersecurity leadership, system owners, Information Systems Security Officers (ISSOs), engineers, and assessment teams to address security requirements and risks. • Track vulnerabilities, assessment findings, and Plans of Action and Milestones (POAMs), and coordinate remediation with responsible technical teams. • Review vulnerability and penetration testing results, evaluate potential mission impacts, and support mitigation recommendations. • Apply knowledge of penetration testing tools and threat behavior to help evaluate security controls and identify weaknesses. • Support continuous monitoring, configuration management, incident response coordination, and cybersecurity reporting. • Communicate system security posture, outstanding risks, and remediation status to Government stakeholders. , Required Skills • High school diploma or GED • TS/SCI DoD Security Clearance • At least three years of computerized system experience, including: o Test and evaluation. o Network protocols. o Local area network (LAN) administration fundamentals. o UNIX- and Windows-based operating systems. • Demonstrated experience using penetration testing tools and mimicking threat behavior. • Must be working toward at least one of the certifications listed below within one year after assuming duties: o Offensive Security Certified Professional (OSCP). o Offensive Security Certified Expert (OSCE). o Offensive Security Exploitation Expert (OSEE). o Offensive Security Exploit Developer (OSED). o Offensive Security Experienced Pentester (OSEP). o Offensive Security Wireless Professional (OSWP). o Offensive Security Web Expert (OSWE). o Hack The Box Certified Penetration Testing Specialist (HTB CPTS). o Hack The Box Certified Bug Bounty Hunter (HTB CBBH). o Certified Red Team Operator (CRTO) from Zero Point Security. o Certified Red Team Lead (CRTL) from Zero Point Security. o Practical Network Penetration Tester (PNPT). o GIAC Red Team Professional (GRTP). o GIAC Experienced Penetration Tester (GX-PT). o GIAC Exploit Researcher and Advanced Penetration Tester (GXPN). , Desired Skills • Experience serving as an ISSM, ISSO, or cybersecurity lead supporting Navy or other Department of Defense systems. • Experience with RMF, authorization to operate (ATO) packages, and the Enterprise Mission Assurance Support Service (eMASS). • Experience with the Assured Compliance Assessment Solution (ACAS), Security Technical Implementation Guides (STIGs), vulnerability analysis, and remediation tracking. • Experience translating penetration testing findings into corrective actions and risk recommendations. • Strong technical writing, coordination, and communication skills. , Additional Details acuCyber is an Equal Opportunity Employer. We do not discriminate based on race, color, religion, sex, national origin, age, disability, veteran status, or any other protected status. , About acuCyber At acuCyber, cleared tech talent fuels the future of national defense. As a respected and fast-growing player in the DoD and federal contracting space, we deliver advanced cybersecurity and digital solutions that protect vital systems and drive mission success. Our team of cleared engineers, developers, and cyber experts work hands-on with secure environments, and zero-trust architecture. In return, you'll join a mission-first culture with real growth opportunities and solid benefits: competitive health coverage, 401(k), PTO, short-term disability, and more. If you're ready to level up your skills and contribute to projects with purpose, acuCyber is where your clearance counts.

At Credit Acceptance, we are building on the foundation of a successful business while investing in the future through technology, data, AI, and continuous improvement. As we continue to evolve, our Team Members play an active role in improving experiences, driving meaningful change, and shaping the future of our business. We foster an environment where people are empowered to contribute ideas, develop their careers, make an impact, and help lead our continued transformation. Our Engineering teams are helping shape the future of Credit Acceptance through innovation. Team Members collaborate across the organization to solve complex challenges, build impactful solutions, challenge the status quo, and support informed business decisions. We value curiosity, continuous learning, and new ideas from people who are passionate about driving modernization and meaningful business impact. Dealers and customers trust Credit Acceptance with their financial data. Regulators expect us to prove that trust is earned. As the Vice President, Engineering - Security, Compliance and Trust (CISO), you will own how Credit Acceptance stays secure and compliant as we move to the cloud and put AI agents to work across the business. You will set the security strategy, lead the team that delivers it, and report on it to executive leadership and the Board. You are the company's designated CISO for regulatory purposes. You report to the CTO and have direct access to the Audit Committee, including a private session at least once a year. You will lead a team across security operations, security engineering (application, cloud, identity and AI security) and governance, risk and compliance. You will work closely with Engineering, Legal, Risk and Fraud so the secure path is also the fast path. Agents are a new kind of actor in our environment. They have their own identities and make their own decisions. You will own the controls and evidence that let us adopt them quickly and keep the trust of our customers and regulators. Hybrid from Southfield, MI; Bellevue, WA; or the San Francisco Bay Area. Outcomes and Activities Own the enterprise information security strategy, tied to business goals, regulatory requirements and Engineering's AI and modernization plans. Own security for the move from on-premises data centers to AWS. Every workload lands in a secure, standard landing zone, and we modernize or retire legacy technology. Lead vulnerability and exposure operations. Critical findings are fixed in hours, with AI-assisted prioritization and a person accountable for every decision. Own identity and privileged access for people, services and agents. Own data protection and privacy: classification, handling standards and controls on where sensitive data can go. Review privacy engineering with product and engineering teams so privacy-by-design holds across the product lifecycle, including how AI systems use and keep data. Manage third-party and vendor cyber risk, from due diligence through ongoing monitoring, including security service providers, auditors and penetration testers. Any partner that builds or runs AI for us meets the same controls as our own teams. Lead threat detection and incident response, including playbooks for compromised or misbehaving agents and executive tabletop exercises. Defend against AI-enabled attacks such as deepfake impersonation and synthetic identity fraud, with our fraud and operations teams. Define how AI agents are secured, with Engineering's architecture and platform leaders. Each agent is a first-class identity with least-privilege access. Govern how agents call tools and data, including Model Context Protocol servers, and set policy for what an agent may decide and what stays with a person. Test AI systems and agents before release and continuously in production for prompt injection, tool misuse and data exfiltration. Every agent has an audit trail and can be suspended. Keep a living inventory of AI systems, agents and the AI features inside the tools we buy, including unsanctioned use. Set acceptable-use, data-handling and third-party AI standards aligned to NIST AI RMF and ISO/IEC 42001. Build security into how software is specified, generated, tested and deployed, including AI-assisted development. Automated gates replace manual reviews. Lead compliance with the obligations of a public consumer lender: GLBA, NYDFS Part 500, SOX IT general controls, PCI DSS, state privacy laws and SEC cybersecurity disclosure. That includes audit and examiner response, and systems that produce evidence automatically, down to a record an examiner can follow of what an agent saw and what it changed. Report to the Board: regular updates, the annual NYDFS Part 500 CISO report to the Board and the annual NYDFS certification, using a small set of metrics that drive decisions. Lead the Company's Information Security Compliance Committee, which meets at least quarterly with the Company's Executive Leadership Team. Build and develop the security team: hiring, developing people, building the skills to secure and use AI, and a security-aware culture across Engineering and the business. Competencies Customer Empathy: Customer Empathy is the ability to understand the perspectives, pain points, and experiences of customers. It involves actively putting oneself in the customer's shoes, comprehending their needs and challenges, and using that understanding to provide a better, more customer-centric experience. Engineering Excellence: Engineering Excellence is about bringing great craftsmanship and thought leadership to deliver an outstanding product that delights customers and solves for the business. This involves the pursuit and achievement of high standards, best practices, innovation, and superior solutions. One Team: A One Team mindset refers to a collaborative approach across the organization, where individuals work together seamlessly, without boundaries, as a single, cohesive team. Shared goals, open communication and mutual support create a sense of collective purpose. This enables teams to navigate challenges and pursue shared objectives more effectively. Owner's Mindset: Owner's Mindset involves adopting a set of behaviors that reflect a sense of responsibility, accountability, strategic thinking, and a proactive approach to managing your domain. As an owner, you understand the business and your domain(s) deeply and solve for the right outcome for the domain(s) and the business. Requirements Bachelor's degree (computer science or a related field preferred). 10+ years in information security, compliance or a related field. 10+ years leading an information security, compliance or risk team. Regulatory compliance experience in financial services, such as GLBA, NYDFS Part 500, SOX and PCI DSS. Experience leading business continuity and cyber incident response, including executive tabletop exercises and response to a significant incident. Strong familiarity with NIST CSF, ISO 27001/27002 and SOC 2. Strong knowledge of security architecture for cloud-native environments: identity and access management, encryption, network and endpoint controls and vulnerability management. Experience building security into CI/CD and software delivery. Practical experience securing AI-enabled systems or AI-assisted development in production, including identity and access, data protection and testing. Experience reporting security and risk to executive leadership and a Board. Preferred Master's degree. Financial services, fintech or consumer lending experience. AWS and Databricks security at production scale, including securing a migration from on-premises infrastructure. Agentic AI in production: agent identity, governed tool access such as Model Context Protocol, runtime controls and agent-specific incident response. AI-assisted detection, triage and response in a security operations center, with human oversight. SEC cybersecurity disclosure experience as the security leader of a public company. Risk assessment for AI systems and third-party AI vendors. CISSP, CISM or an equivalent security certification. Knowledge and Skills Architecture: Ability to design security architecture that is built in by default and enforced through automation, not manual review. AI and Agent Security: Working knowledge of how agents are attacked and how they fail (prompt injection, tool misuse, identity and privilege abuse, memory poisoning) and the controls that contain them, drawing on the OWASP Top 10 for Agentic Applications, NIST AI RMF and ISO/IEC 42001. Risk Judgment: Ability to weigh security risk against business value, decide what an agent or a team may do on its own, and explain the tradeoff and the evidence plainly. Holds the higher bar and says so. Executive Communication: Ability to turn technical and AI risk into clear decisions for executives and the Board. Leadership and Influence: Ability to build a strong team, challenge the status quo, and earn trust across Engineering, Legal, Compliance, Risk and the business without relying on authority. Target Compensation: This position offers a competitive base salary, with a range of $300,000 - $400,000. This position is eligible for equity and annual cash bonuses. Final compensation within the range is influenced by many factors including assigned hub location, role-specific skills, depth and experience level, industry background, relevant education and certifications. This position follows a hybrid work model, offering two work-from-home days and three standard in-office days each week with the team and key stakeholders at a local office. INDENGLP Benefits Excellent benefits package that includes 401(K) match, adoption assistance, parental leave, tuition reimbursement, comprehensive medical/ dental/vision and many nonstandard benefits that make us a Great Place to Work Our Company Values: To be successful in this role . click apply for full job details

Description: Larson Financial Holdings LLC is seeking a proven Senior Cybersecurity Engineer to build and drive cybersecurity initiatives with an ownership mindset. The Senior Cybersecurity Engineer plays a critical role in protecting the organization's information systems, data and infrastructure. The role builds and improves security tools, automation and policies, including using AI tools to connect security platforms and produce monitoring dashboards. It also supports the day-to-day administration of cybersecurity operations: threat monitoring, incident response, compliance initiatives and security awareness. The role researches security improvements and implements them. As a member of the Larson Technology Services team, the Senior Cybersecurity Engineer also contributes to broader technology operations as needed, in a collaborative environment where team members support one another across technology functions to keep our services reliable and effective. Key responsibilities: Security engineering and tool development Design and build security controls across endpoint, identity, network and cloud environments, including Microsoft Azure and Entra ID. Research and evaluate new security tools; develop recommendations, business cases, proofs of concept and vendor assessments; and deploy and configure the tools selected. Build detection logic, automation and response playbooks. Perform threat modeling and security reviews for new systems, changes and projects, and recommend mitigations. Develop and improve security baselines and hardening standards. Integrate security tooling to reduce manual work, such as automating phishing triage, phishing campaign reporting and vulnerability ticketing. Use AI tools, APIs and low-code automation to connect security and SaaS platforms (for example EDR, vulnerability management, phishing simulation, Microsoft 365, Entra ID and ticketing) and consolidate their data. Build and maintain dashboards and reports for security monitoring, including vulnerability, phishing, incident and compliance metrics, using AI-assisted development and visualization tools. Use AI tools in line with organizational policy and data-handling requirements and recommend safeguards for AI use within the security environment. Cybersecurity operations Monitor, investigate and respond to security alerts and incidents, including phishing emails, malware alerts and unauthorized access attempts. Administer and maintain security tools, including endpoint detection and response (EDR) and vulnerability scanners. Remediate security incidents, conduct follow-up analysis, document findings and actions taken, and recommend process improvements based on lessons learned. Manage and respond to phishing reports submitted by staff; coordinate containment and communication; and tune detections and build automation to reduce false positives and manual triage. Perform regular vulnerability assessments, and work with system owners and end users to prioritize and remediate identified risks. Contribute to the planning and rollout of new cybersecurity objectives, tools and initiatives as the security program evolves. Security awareness and phishing simulations Plan and run recurring phishing simulation campaigns, including setup, scheduling and distribution. Analyze campaign results and identify departments or individuals who need additional training or follow-up. Develop and deliver security awareness communications, training materials and coaching based on simulation outcomes and leadership direction. Maintain records of simulation results and awareness training completion to support reporting and continuous improvement. Recommend improvements to the security awareness program, including training content, success metrics and risk-based targeting. Compliance and risk management Support day-to-day efforts to achieve and maintain compliance with applicable security controls. Conduct periodic control assessments, gather evidence and work with stakeholders to close compliance gaps. Draft and maintain security policies, standards, procedures, risk assessments and control inventories. Map security controls to applicable frameworks and recommend control improvements. Conduct risk assessments and recommend remediation priorities. Support internal and external audits and regulatory examinations by preparing evidence packages and responding to inquiries. Identify emerging risks and recommend policy or control improvements. Technology operations and service support Provide systems administration support as assigned, including user account management, access provisioning, Conditional Access policies and endpoint configuration. Assist with service desk escalations that require elevated access or advanced troubleshooting. Collaborate with Larson Technology Services colleagues on infrastructure projects, applying a security-first perspective to system design and change management. Requirements: Bachelor's degree in Cybersecurity, Computer Science, Information Systems or a related field, or equivalent professional experience. 8+ years of hands-on cybersecurity engineering experience, including at least 3 years at a senior or specialist level. Proven experience owning security compliance work aligned to frameworks such as NIST CSF, NIST SP 800-53, ISO 27001, SOC 2 or CIS Controls, including audit preparation and evidence management. Deep experience architecting, deploying and optimizing security tools such as EDR/XDR and vulnerability management platforms, including tuning, policy design and integration across the environment. Advanced proficiency building automation and tooling with scripting languages such as PowerShell and Python to reduce manual effort and improve security operations. Strong experience with SIEM and detection engineering, including developing and tuning detection rules, correlating data sources and mapping detections to frameworks such as MITRE ATT&CK. Experience applying AI tools and APIs to connect systems, automate workflows and build dashboards or reports, with sound judgment about data handling and risk. Extensive hands-on experience designing and securing Microsoft Azure and Entra ID environments, including Conditional Access, identity governance, privileged access management and cloud security posture. Experience authoring and maintaining security policies, standards and procedures, and driving their adoption across business and technical teams. Experience running phishing simulation platforms and security awareness programs, including measuring effectiveness and reporting on outcomes. Demonstrated ability to lead incident investigations and response, and to communicate findings and risk clearly to technical teams, executives and non-technical audiences. Ability to evaluate security solutions, build business cases and present well-supported recommendations to management and leadership. Ability to manage multiple competing priorities independently, balancing strategic projects with operational responsibilities in a fast-paced environment. Experience mentoring and providing technical guidance to technology staff. Preferred qualifications: Relevant certifications, such as CISSP, CISM, CISA, GCIH, CompTIA Security+, CEH, or Microsoft SC-200 or AZ-500. Experience with security architecture reviews, risk assessments, or third-party and vendor risk management. Experience with infrastructure as code or DevSecOps practices. Familiarity with financial services regulatory requirements, such as SEC and FINRA cybersecurity expectations, Regulation S-P and GLBA. Larson is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other character protected by law. PI961c8e15715a-5088

Description: You're already the person your team turns to when the toughest issues land. Now it's time to lead the desk, develop the team, and help fix what keeps breaking. Weidenhammer is looking for an IT Operations Technical Lead to lead our Cloud & Infrastructure Service Desk while staying hands-on as the senior escalation point across Microsoft 365, Azure, Entra ID, Windows Server, virtualization, networking, backup and disaster recovery, and security. You'll coach and develop service desk analysts and engineers, lead the response when major incidents occur, and drive problem management to eliminate recurring issues at the root. Just as importantly, you'll help shape how we use smarter monitoring, automation, and AI-assisted tools to continually improve the way we deliver managed services to our clients. Have ideas for making operations better? Good. We want them. This is an opportunity to do more than resolve the next ticket. You'll have the ability to improve processes, strengthen the team, and help build a more proactive and efficient service environment. Why Weidenhammer? For nearly 50 years, Weidenhammer has helped middle-market organizations modernize technology, strengthen cybersecurity, and put data and AI to work. We're a senior-led, outcome-driven Microsoft partner with 100+ professionals delivering managed services, cloud, and hosting solutions from our data center footprint in Collegeville, PA, backed by a disaster recovery site in Chandler, AZ. Our technical leads get real responsibility, broad technology exposure, and the opportunity to make an impact. We believe in solving problems the right way, investing in better tools and automation, and creating an environment where people learn from one another and grow. Some of our best professionals started on the service desk and continued building their careers from there. We also offer a competitive benefits package that includes medical, dental, and vision insurance, a 401(k), paid time off, paid parental leave, training and development opportunities, paid volunteer time, wellness programs, and hybrid flexibility. Ready to stop just solving the toughest problems and start leading the way forward? Requirements: The IT Operations Technical Manager leads the Cloud and Infrastructure Service Desk and serves as the senior hands-on technical escalation point for the operations team supporting Weidenhammer clients. The role combines advanced troubleshooting, technical mentoring, platform administration, documentation, and service improvement across client infrastructure, cloud, identity, endpoint, network, backup, monitoring, and security technologies. Working closely with the Cloud and Infrastructure team, the Manager may be assigned to do complete any of the following: support, mentor, and manage service desk team members, diagnose complex problems, coordinate technical responses during high-impact incidents, validate changes, strengthen monitoring and automation, and ensure new solutions are secure, supportable, and well documented before they enter ongoing support. Essential Functions Manage the Cloud and Infrastructure Service Desk and serve as the senior technical escalation resource for complex incidents and service requests across Microsoft 365, Azure, Windows Server, virtualization, networking, identity, endpoint management, backup, recovery, monitoring, and security operations. Lead structured troubleshooting and root-cause analysis, using logs, telemetry, configuration data, monitoring platforms, and vendor resources to isolate issues and restore service. Provide hands-on technical guidance and coaching to Service Desk Analysts, System Administrators, and Engineers; review troubleshooting approaches, recommend next steps, and strengthen team capability. Coordinate the technical response during major incidents, including triage, workstream assignment, vendor escalation, recovery validation, technical updates, and post-incident corrective actions. Administer, configure, and improve the platforms used to monitor, manage, secure, document, and support client environments within approved access and change-control practices. Develop and maintain technical standards, configuration baselines, build documentation, runbooks, knowledge articles, diagrams, and escalation procedures, along with accurate configuration, asset, licensing, and subscription records in approved service-management and documentation platforms. Review monitoring coverage, alert quality, thresholds, and response procedures to reduce noise and improve early detection of client-impacting conditions. Lead problem management for recurring or high-impact issues, analyzing incident trends, alert patterns, capacity concerns, and platform health data, and implement durable corrective actions (standardized configurations, automation, tool consolidation, documentation, or architectural recommendations) prioritized by risk and client impact. Perform and validate complex changes, maintenance activities, upgrades, migrations, and remediation work, including risk assessment, testing, communication, and rollback planning. Partner with security teams to operationalize identity protection, endpoint security, patching, vulnerability remediation, privileged-access controls, backup and recovery, certificate and lifecycle management, logging, incident response, and evidence requirements across managed environments. Use scripting, workflow automation, APIs, and AI-assisted tools to improve troubleshooting, reporting, configuration consistency, documentation, and repetitive operational work, with appropriate review and governance. Participate in solution reviews and project handoffs and provide technical oversight for transitioning new and changed services into support, identifying supportability concerns, technical debt, and security risks, and validating documentation, monitoring, access, security controls, backup, support ownership, and operational readiness before acceptance. Explain technical conditions, business impact, risks, and recommend next steps in clear language to clients and internal stakeholders, and coordinate with technology vendors and partners, carriers, and third-party support organizations to resolve product defects, service issues, licensing concerns, and complex escalations. Maintain deep working knowledge of the managed-services technology portfolio and pursue role-aligned learning and certifications that support client and service needs. Contribute technical input to client onboarding, assessments, service reviews, proposals, and scope validation when operational expertise is required. Assist with after-hours maintenance and participate in the technical escalation rotation for critical client issues as required. Promote disciplined use of incident, request, problem, change, configuration, knowledge, and continual-improvement practices across the team. Competencies Practical knowledge of IT service management, including incident, major incident, problem, change, request, configuration, knowledge, and continual-improvement practices and the technical evidence required to support them. Advanced hands-on troubleshooting experience across Microsoft 365, Azure, Windows Server, Active Directory and Entra ID, virtualization, networking, endpoint management, backup and recovery, monitoring, and security technologies, including diagnosing complex, multi-layer issues using logs, packet and performance data, telemetry, and configuration analysis. Experience administering remote monitoring and management, IT service-management, documentation, endpoint, identity, backup, security, and observability platforms in an MSP or multi-client environment. Working knowledge of PowerShell or comparable scripting, workflow automation, APIs, and AI-assisted technical tools, with appropriate testing, security, and human review. Strong understanding of identity, least privilege, endpoint protection, vulnerability remediation, logging, backup, recovery, network security, and secure configuration principles. Ability to translate technical findings into clear business impact, risk, recovery options, and recommendations for clients and leadership. Demonstrated judgment during major incidents, production changes, competing priorities, and high-pressure client escalations. Strong technical writing skills, including runbooks, diagrams, build standards, knowledge articles, and post-incident documentation. Ability to lead, mentor, and develop technical professionals, coordinate work across teams, and raise technical quality. Highly organized, self-directed, and accountable, with disciplined change control, validation, and follow-through. Project awareness sufficient to manage technical dependencies, risks, testing, cutover activities, operational acceptance, and stakeholder communication. What Success Looks Like Team members have clear expectations, regular coaching, development plans, and appropriate coverage, and receive practical technical guidance that improves first-contact resolution, escalation quality, and confidence handling increasingly complex work. Recurring issues, manual effort, and avoidable client disruption are measurably reduced through problem management, root-cause analysis, permanent corrective actions, technical standards, automation, and knowledge reuse. Client environments have current monitoring, meaningful alerts, accurate documentation and runbooks, supportable configurations . click apply for full job details

AI Engineer 4 (AI Safety and Multimodal) At Capital One, we are creating responsible and reliable AI systems, changing banking for good. For years, Capital One has been an industry leader in using machine learning to create real-time, personalized customer experiences. Our investments in technology infrastructure and world-class talent - along with our deep experience in machine learning - position us to be at the forefront of enterprises leveraging AI. From informing customers about unusual charges to answering their questions in real time, our applications of AI & ML are bringing humanity and simplicity to banking. We are committed to continuing to build world-class applied science and engineering teams to deliver our industry leading capabilities with breakthrough product experiences and scalable, high-performance AI infrastructure. At Capital One, you will help bring the transformative power of emerging AI capabilities to reimagine how we serve our customers and businesses who have come to love the products and services we build. Team Description: The Intelligent Foundations and Experiences (IFX) team is at the center of bringing our vision for AI at Capital One to life. We work hand-in-hand with our partners across the company to advance the state of the art in science and AI engineering, and we build and deploy proprietary solutions that are central to our business and deliver value to millions of customers. Our AI models and platforms empower teams across Capital One to enhance their products with the transformative power of AI, in responsible and scalable ways for the highest leverage impact. What You'll Do: Partner with a cross-functional team of engineers, research scientists, technical program managers, and product managers to deliver AI-powered products that change how our associates work and how our customers interact with Capital One. Design, develop, test, deploy, and support AI software components including foundation model training, large language model inference, agents and multi-agent workflows, similarity search, guardrails, model evaluation, experimentation, governance, and observability, etc. Leverage a broad stack of Open Source and SaaS AI technologies such as AWS Ultraclusters, Huggingface, VectorDBs, PyTorch, and more. Invent and introduce state-of-the-art foundation model optimization techniques to improve the performance - scalability, cost, latency, throughput - of large scale production AI systems. Contribute to the technical vision and the long term roadmap of foundational AI systems at Capital One. Own the end-to-end architecture for complex AI systems - ensuring maintainability, observability, and ethical alignment Define and maintain service-level objectives (SLOs) for AI reliability, including latency, uptime, and model performance drift Collaborate with infrastructure engineering to optimize GPU/TPU utilization and accelerate model inference pipelines Lead cross-functional technical reviews for new AI system deployments, ensuring security, data governance, and compliance standards are met Mentor Principal and Senior Associates on scalable design, performance tuning and research-to-production translation The Ideal Candidate: Y ou love to build systems, take pride in the quality of your work, and also share our passion to do the right thing. You want to work on problems that will help change banking for good Passion for staying abreast of the latest research, and an ability to intuitively understand scientific publications and judiciously apply novel techniques in production You adapt quickly and thrive on bringing clarity to big, undefined problems. You love asking questions and digging deep to uncover the root of problems and can articulate your findings concisely with clarity. You have the courage to share new ideas even when they are unproven You are deeply Technical. You possess a strong foundation in engineering and mathematics, and your expertise in hardware, software, and AI enables you to see and exploit optimization opportunities that others miss You are experienced in AI red teaming and in deploying safety guardrails for multimodal systems, including VLMs, MLLMs, and MM-RAG architectures You are a resilient trailblazer who can forge new paths to achieve business goals when the route is unknown Basic Qualifications: Bachelor's Degree in Computer Science, AI, Electrical Engineering, Computer Engineering, or related fields plus at least 4 years of experience developing AI and ML algorithms or technologies, or a Master's degree in Computer Science, AI, Electrical Engineering, Computer Engineering, or related fields plus at least 2 years of experience developing AI and ML algorithms or technologies At least 4 years of experience programming with Python, Go, Scala, CUDA, or Java Preferred Qualifications: Experience leading development AI systems with tradeoff decisions around cost, latency, throughput and accuracy 6+ years of experience deploying scalable and responsible AI solutions on cloud platforms (e.g. AWS, Google Cloud, Azure, or equivalent private cloud) Experience designing, developing, delivering, and supporting AI services Experience developing AI and ML algorithms or technologies (e.g. LLM Inference, Similarity Search and VectorDBs, Guardrails, Memory) using Python, C++, C#, Java, CUDA, or Golang Experience developing and applying state-of-the-art techniques for optimizing training and inference software to improve hardware utilization, latency, throughput, and cost Experience in AI Safety and LLM safety alignment Experience with Safety and vulnerability assessment of Multi-modal application using image/video plus text modality Experience in building agentic AI systems and agentic workflows Passion for staying abreast of the latest AI research and AI systems, and judiciously apply novel techniques in production Proficiency in designing distributed systems for model training, evaluation, and online inference at petabyte scale Experience defining AI model governance processes, including producibility, lineage tracking, and automated retaining schedules Demonstrated ability to influence architectural decisions across multiple AI product lines or platforms Capital One will consider sponsoring a new qualified applicant for employment authorization for this position. The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked. Cambridge, MA: $197,300 - $225,100 for AI Engineer 4 McLean, VA: $197,300 - $225,100 for AI Engineer 4 New York, NY: $215,200 - $245,600 for AI Engineer 4 San Jose, CA: $215,200 - $245,600 for AI Engineer 4 Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate's offer letter. This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan. Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website . Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level. This role is expected to accept applications for a minimum of 5 business days.No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections ; New York City's Fair Chance Act; Philadelphia's Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1- or via email at . All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations. For technical support or questions about Capital One's recruiting process, please send an email to Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site. Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada . click apply for full job details

AI Engineer 4 (AI Safety and Multimodal) At Capital One, we are creating responsible and reliable AI systems, changing banking for good. For years, Capital One has been an industry leader in using machine learning to create real-time, personalized customer experiences. Our investments in technology infrastructure and world-class talent - along with our deep experience in machine learning - position us to be at the forefront of enterprises leveraging AI. From informing customers about unusual charges to answering their questions in real time, our applications of AI & ML are bringing humanity and simplicity to banking. We are committed to continuing to build world-class applied science and engineering teams to deliver our industry leading capabilities with breakthrough product experiences and scalable, high-performance AI infrastructure. At Capital One, you will help bring the transformative power of emerging AI capabilities to reimagine how we serve our customers and businesses who have come to love the products and services we build. Team Description: The Intelligent Foundations and Experiences (IFX) team is at the center of bringing our vision for AI at Capital One to life. We work hand-in-hand with our partners across the company to advance the state of the art in science and AI engineering, and we build and deploy proprietary solutions that are central to our business and deliver value to millions of customers. Our AI models and platforms empower teams across Capital One to enhance their products with the transformative power of AI, in responsible and scalable ways for the highest leverage impact. What You'll Do: Partner with a cross-functional team of engineers, research scientists, technical program managers, and product managers to deliver AI-powered products that change how our associates work and how our customers interact with Capital One. Design, develop, test, deploy, and support AI software components including foundation model training, large language model inference, agents and multi-agent workflows, similarity search, guardrails, model evaluation, experimentation, governance, and observability, etc. Leverage a broad stack of Open Source and SaaS AI technologies such as AWS Ultraclusters, Huggingface, VectorDBs, PyTorch, and more. Invent and introduce state-of-the-art foundation model optimization techniques to improve the performance - scalability, cost, latency, throughput - of large scale production AI systems. Contribute to the technical vision and the long term roadmap of foundational AI systems at Capital One. Own the end-to-end architecture for complex AI systems - ensuring maintainability, observability, and ethical alignment Define and maintain service-level objectives (SLOs) for AI reliability, including latency, uptime, and model performance drift Collaborate with infrastructure engineering to optimize GPU/TPU utilization and accelerate model inference pipelines Lead cross-functional technical reviews for new AI system deployments, ensuring security, data governance, and compliance standards are met Mentor Principal and Senior Associates on scalable design, performance tuning and research-to-production translation The Ideal Candidate: Y ou love to build systems, take pride in the quality of your work, and also share our passion to do the right thing. You want to work on problems that will help change banking for good Passion for staying abreast of the latest research, and an ability to intuitively understand scientific publications and judiciously apply novel techniques in production You adapt quickly and thrive on bringing clarity to big, undefined problems. You love asking questions and digging deep to uncover the root of problems and can articulate your findings concisely with clarity. You have the courage to share new ideas even when they are unproven You are deeply Technical. You possess a strong foundation in engineering and mathematics, and your expertise in hardware, software, and AI enables you to see and exploit optimization opportunities that others miss You are experienced in AI red teaming and in deploying safety guardrails for multimodal systems, including VLMs, MLLMs, and MM-RAG architectures You are a resilient trailblazer who can forge new paths to achieve business goals when the route is unknown Basic Qualifications: Bachelor's Degree in Computer Science, AI, Electrical Engineering, Computer Engineering, or related fields plus at least 4 years of experience developing AI and ML algorithms or technologies, or a Master's degree in Computer Science, AI, Electrical Engineering, Computer Engineering, or related fields plus at least 2 years of experience developing AI and ML algorithms or technologies At least 4 years of experience programming with Python, Go, Scala, CUDA, or Java Preferred Qualifications: Experience leading development AI systems with tradeoff decisions around cost, latency, throughput and accuracy 6+ years of experience deploying scalable and responsible AI solutions on cloud platforms (e.g. AWS, Google Cloud, Azure, or equivalent private cloud) Experience designing, developing, delivering, and supporting AI services Experience developing AI and ML algorithms or technologies (e.g. LLM Inference, Similarity Search and VectorDBs, Guardrails, Memory) using Python, C++, C#, Java, CUDA, or Golang Experience developing and applying state-of-the-art techniques for optimizing training and inference software to improve hardware utilization, latency, throughput, and cost Experience in AI Safety and LLM safety alignment Experience with Safety and vulnerability assessment of Multi-modal application using image/video plus text modality Experience in building agentic AI systems and agentic workflows Passion for staying abreast of the latest AI research and AI systems, and judiciously apply novel techniques in production Proficiency in designing distributed systems for model training, evaluation, and online inference at petabyte scale Experience defining AI model governance processes, including producibility, lineage tracking, and automated retaining schedules Demonstrated ability to influence architectural decisions across multiple AI product lines or platforms Capital One will consider sponsoring a new qualified applicant for employment authorization for this position. The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked. Cambridge, MA: $197,300 - $225,100 for AI Engineer 4 McLean, VA: $197,300 - $225,100 for AI Engineer 4 New York, NY: $215,200 - $245,600 for AI Engineer 4 San Jose, CA: $215,200 - $245,600 for AI Engineer 4 Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate's offer letter. This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan. Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website . Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level. This role is expected to accept applications for a minimum of 5 business days.No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections ; New York City's Fair Chance Act; Philadelphia's Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1- or via email at . All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations. For technical support or questions about Capital One's recruiting process, please send an email to Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site. Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada . click apply for full job details

Job Description Job Description Security Solution Architect Location: Columbus, OH Work Model: Hybrid - Tuesday through Thursday onsite, Monday and Friday remote Rate: $77-$88/hour Contract Term: August 17, 2026 - August 13, 2027 Contract-to-Hire: Yes Employment Type: W-2 Only Work Authorization: U.S. Citizens Only Green Card holders also eligible; no visa sponsorship available Travel: Must be open to extensive travel on short notice as needed Position Overview We are seeking an experienced Security Solution Architect to provide enterprise architecture leadership across cybersecurity, infrastructure, applications, data, and compliance capabilities within a large utility environment. This role will be responsible for defining and advancing the organization's security architecture vision, strategy, standards, governance structure, and capability roadmap. The Security Solution Architect will work closely with Enterprise Architecture, Security, Infrastructure, Application Development, Operations, OT/control systems teams, corporate security, service providers, and business stakeholders to ensure security solutions are aligned with business needs, regulatory expectations, technology strategy, and enterprise architecture standards. The ideal candidate brings deep experience across security architecture, identity and access management, threat and vulnerability management, governance/risk/compliance, application security, infrastructure security, data protection, incident response, and utility-related security standards such as NIST, NERC CIP, FERC, and other energy industry frameworks. Key ResponsibilitiesSecurity Architecture Strategy & Roadmap Define and execute the security architecture vision, strategy, standards, frameworks, and capability roadmaps. Develop future-state security architectures and practical roadmaps to achieve target-state capabilities. Evaluate current-state security capabilities and identify gaps, risks, and opportunities for improvement. Drive the future state of cybersecurity and compliance technologies across the enterprise. Ensure security architecture aligns with business strategy, IT strategy, enterprise architecture standards, and regulatory expectations. Security Capability Architecture Provide architectural leadership across key security domains, including: Identity management Authentication and authorization Directory services and single sign-on Threat and vulnerability management System audit Security architecture assurance Availability Information and asset protection Fraud prevention, detection, and response Integrated governance, risk, and compliance Develop reusable security architecture patterns, standards, procedures, and reference models. Ensure security best practices are incorporated into the software development lifecycle and enterprise delivery processes. Governance, Standards & Enterprise Alignment Create, mature, and refine the enterprise security architecture function and governance model. Identify and analyze business drivers to develop security architecture requirements. Publish and promote security architecture standards, frameworks, patterns, and procedures. Develop and execute communication and education plans related to security architecture standards. Support architecture review, security assurance, and governance processes for enterprise technology initiatives. Stakeholder Partnership & Advisory Support Serve as a trusted advisor and sounding board for IT and business leaders developing solutions for security needs. Build and manage relationships with internal and external stakeholders to socialize and advance enterprise security architecture. Partner with application, infrastructure, security, architecture, and operations teams to ensure secure solution design. Communicate security outcomes, standards, risks, and recommendations clearly to both technical and non-technical audiences. Influence and negotiate across teams to drive alignment on secure, practical, and cost-effective solutions. Operations, Incident Response & Resilience Partner with operations teams on long-term solutions related to incident management, problem management, availability, and performance. Provide technical architecture leadership during performance issues, operational challenges, and enterprise security events. Work collaboratively with IT operations, service providers, and local, state, and federal agencies during incident response activities. Support the development of effective security management processes and tools that protect the enterprise IT environment. Utility, OT & Control Systems Security Partner with operations technology teams on strategies for securing control systems, SCADA networks, and related operational environments. Support security architecture considerations for utility operations, critical infrastructure, and regulated technology environments. Collaborate with physical/corporate security teams and serve as a liaison between physical security, cybersecurity, IT, and operations groups. Ensure security architecture considers regulatory, operational, safety, and reliability requirements. Enterprise Assignments & Strategic Initiatives Lead or support special enterprise-wide assignments as needed. Provide architecture leadership for security-related transformation, modernization, compliance, and risk reduction initiatives. Help ensure the organization maintains a secure IT environment at an appropriate cost. Contribute to multi-year strategic IT planning, reuse programs, service provider management, and technology modernization efforts. Day-to-Day Responsibilities Review current and future-state security architecture needs across enterprise projects and platforms. Partner with architecture, security, infrastructure, application development, and operations teams on secure solution design. Develop security architecture roadmaps, standards, patterns, and governance materials. Evaluate security impacts of technology decisions, market trends, regulatory requirements, and business priorities. Support architecture reviews, risk discussions, incident response activities, and long-term remediation planning. Advise stakeholders on identity, access, data protection, vulnerability management, GRC, and security assurance needs. Collaborate with OT, SCADA, operations, and physical security teams where security solutions intersect with utility operations. Prepare executive-ready communications, recommendations, and architecture documentation. Required Qualifications Bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a related technical discipline, or equivalent combination of education and relevant work experience. Minimum 8 years of experience in Information Technology and/or security capabilities. Strong competency in security practices across business, application, information, and technical architecture. Experience developing future-state architectures and practical roadmaps to achieve target-state capabilities. Experience providing leadership across information/data management, master data management, data warehousing, and business intelligence environments. Working knowledge of NIST, NERC CIP, FERC, and other energy industry security standards and best practices. Experience creating or evolving security architecture standards, frameworks, governance structures, patterns, and procedures. Strong understanding of identity management, authentication, authorization, directory services, single sign-on, threat and vulnerability management, system audit, data protection, and GRC capabilities. Strong communication, influence, negotiation, and stakeholder management skills. Ability to self-prioritize work effectively and manage multiple enterprise priorities. Ability and willingness to travel extensively on short notice as needed. Preferred Qualifications Security certifications strongly preferred. Experience developing multi-year strategic IT plans. Working knowledge of business process re-engineering. Experience with legacy and modern computing architectures. Experience applying ITIL practices. Experience managing or supporting effective reuse programs across the enterprise. Experience managing or partnering with service providers. Experience in utility, energy, critical infrastructure, or highly regulated environments. Experience securing OT, control systems, SCADA networks, or operational technology environments. Experience working with local, state, or federal agencies during security, incident response, or compliance-related activities. Preferred Certifications CISSP CISM CISA CRISC GIAC security certifications Security+ Cloud security certifications Architecture certifications ITIL certification Core Competencies Security Architecture Enterprise Architecture Identity & Access Management Authentication & Authorization Directory Services / Single Sign-On Threat & Vulnerability Management Governance, Risk & Compliance . click apply for full job details

Description: Larson Financial Holdings LLC is seeking a proven Senior Cybersecurity Engineer to build and drive cybersecurity initiatives with an ownership mindset. The Senior Cybersecurity Engineer plays a critical role in protecting the organization's information systems, data and infrastructure. The role builds and improves security tools, automation and policies, including using AI tools to connect security platforms and produce monitoring dashboards. It also supports the day-to-day administration of cybersecurity operations: threat monitoring, incident response, compliance initiatives and security awareness. The role researches security improvements and implements them. As a member of the Larson Technology Services team, the Senior Cybersecurity Engineer also contributes to broader technology operations as needed, in a collaborative environment where team members support one another across technology functions to keep our services reliable and effective. Key responsibilities: Security engineering and tool development Design and build security controls across endpoint, identity, network and cloud environments, including Microsoft Azure and Entra ID. Research and evaluate new security tools; develop recommendations, business cases, proofs of concept and vendor assessments; and deploy and configure the tools selected. Build detection logic, automation and response playbooks. Perform threat modeling and security reviews for new systems, changes and projects, and recommend mitigations. Develop and improve security baselines and hardening standards. Integrate security tooling to reduce manual work, such as automating phishing triage, phishing campaign reporting and vulnerability ticketing. Use AI tools, APIs and low-code automation to connect security and SaaS platforms (for example EDR, vulnerability management, phishing simulation, Microsoft 365, Entra ID and ticketing) and consolidate their data. Build and maintain dashboards and reports for security monitoring, including vulnerability, phishing, incident and compliance metrics, using AI-assisted development and visualization tools. Use AI tools in line with organizational policy and data-handling requirements and recommend safeguards for AI use within the security environment. Cybersecurity operations Monitor, investigate and respond to security alerts and incidents, including phishing emails, malware alerts and unauthorized access attempts. Administer and maintain security tools, including endpoint detection and response (EDR) and vulnerability scanners. Remediate security incidents, conduct follow-up analysis, document findings and actions taken, and recommend process improvements based on lessons learned. Manage and respond to phishing reports submitted by staff; coordinate containment and communication; and tune detections and build automation to reduce false positives and manual triage. Perform regular vulnerability assessments, and work with system owners and end users to prioritize and remediate identified risks. Contribute to the planning and rollout of new cybersecurity objectives, tools and initiatives as the security program evolves. Security awareness and phishing simulations Plan and run recurring phishing simulation campaigns, including setup, scheduling and distribution. Analyze campaign results and identify departments or individuals who need additional training or follow-up. Develop and deliver security awareness communications, training materials and coaching based on simulation outcomes and leadership direction. Maintain records of simulation results and awareness training completion to support reporting and continuous improvement. Recommend improvements to the security awareness program, including training content, success metrics and risk-based targeting. Compliance and risk management Support day-to-day efforts to achieve and maintain compliance with applicable security controls. Conduct periodic control assessments, gather evidence and work with stakeholders to close compliance gaps. Draft and maintain security policies, standards, procedures, risk assessments and control inventories. Map security controls to applicable frameworks and recommend control improvements. Conduct risk assessments and recommend remediation priorities. Support internal and external audits and regulatory examinations by preparing evidence packages and responding to inquiries. Identify emerging risks and recommend policy or control improvements. Technology operations and service support Provide systems administration support as assigned, including user account management, access provisioning, Conditional Access policies and endpoint configuration. Assist with service desk escalations that require elevated access or advanced troubleshooting. Collaborate with Larson Technology Services colleagues on infrastructure projects, applying a security-first perspective to system design and change management. Requirements: Bachelor's degree in Cybersecurity, Computer Science, Information Systems or a related field, or equivalent professional experience. 8+ years of hands-on cybersecurity engineering experience, including at least 3 years at a senior or specialist level. Proven experience owning security compliance work aligned to frameworks such as NIST CSF, NIST SP 800-53, ISO 27001, SOC 2 or CIS Controls, including audit preparation and evidence management. Deep experience architecting, deploying and optimizing security tools such as EDR/XDR and vulnerability management platforms, including tuning, policy design and integration across the environment. Advanced proficiency building automation and tooling with scripting languages such as PowerShell and Python to reduce manual effort and improve security operations. Strong experience with SIEM and detection engineering, including developing and tuning detection rules, correlating data sources and mapping detections to frameworks such as MITRE ATT&CK. Experience applying AI tools and APIs to connect systems, automate workflows and build dashboards or reports, with sound judgment about data handling and risk. Extensive hands-on experience designing and securing Microsoft Azure and Entra ID environments, including Conditional Access, identity governance, privileged access management and cloud security posture. Experience authoring and maintaining security policies, standards and procedures, and driving their adoption across business and technical teams. Experience running phishing simulation platforms and security awareness programs, including measuring effectiveness and reporting on outcomes. Demonstrated ability to lead incident investigations and response, and to communicate findings and risk clearly to technical teams, executives and non-technical audiences. Ability to evaluate security solutions, build business cases and present well-supported recommendations to management and leadership. Ability to manage multiple competing priorities independently, balancing strategic projects with operational responsibilities in a fast-paced environment. Experience mentoring and providing technical guidance to technology staff. Preferred qualifications: Relevant certifications, such as CISSP, CISM, CISA, GCIH, CompTIA Security+, CEH, or Microsoft SC-200 or AZ-500. Experience with security architecture reviews, risk assessments, or third-party and vendor risk management. Experience with infrastructure as code or DevSecOps practices. Familiarity with financial services regulatory requirements, such as SEC and FINRA cybersecurity expectations, Regulation S-P and GLBA. Larson is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other character protected by law. PI11172d4500bc-5088

Job Description Job Description Job Title: Senior DevSecOps Engineer Locations: Lafayette, LA Knoxville, TN Birmingham, AL Columbia, SC Type: Direct Hire Work Model : Hybrid Hours: 40.0 Responsibilities Enhance artifact management, policy governance, and open source lifecycle processes using tools like Sonatype and Nexus Repository. Build and automate software approval workflows, quarantine/waiver processes, and repository proxy strategies across supported ecosystems. Drive dependency upgrades and vulnerability remediation efforts. Support onboarding of emerging ecosystems including AI/ML frameworks. Build reporting and metrics to track software supply chain health, policy compliance, and repository utilization. Enable CI/CD artifact signing and verification. Implement SLSA build provenance and attestations. Integrate SBOM generation into build and deployment pipelines. Work closely with security and development teams to improve software supply chain visibility and integrity. Requirements 5+ years in DevSecOps, Platform Engineering, or Software Supply Chain Engineering. Hands on experience with Sonatype Lifecycle (IQ Server) and Nexus Repository, or similar tools like jFrog. Experience building and maintaining automated Open Source Software evaluation policies and workflows. Familiarity with artifact signing technologies such as Sigstore/Cosign, GPG, or Notary. Experience with SLSA provenance, in toto attestations, or similar frameworks. Background generating SBOMs using CycloneDX, SPDX, or Syft. CI/CD experience, ideally with GitLab (GitHub Actions also welcome). Strong AWS skills across IAM, ECS/EKS, EC2, S3, Lambda, Step Functions, and CloudWatch. Experience integrating security tooling directly into CI/CD pipelines. Solid scripting ability in Python, Bash, or Go. Experience maintaining enterprise open source platforms. Familiarity with OCI registries and package ecosystems (Maven, npm, PyPI, NuGet). Knowledge of NIST SSDF, Executive Order 14028, and Secure by Design principles. Educational Requirement: Bachelor's degree in Computer Science, Information Systems, or a related field. System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. Ref: Pittsburgh

Job Description Job Description Description: About the Role We are seeking an experienced Senior DevSecOps Engineer with strong OpenShift expertise to join our high-impact team. In this role, you'll lead the design, implementation, and automation of secure, scalable, and resilient DevSecOps pipelines and containerized infrastructure using Red Hat OpenShift. You will collaborate with development, operations, and cybersecurity teams to ensure continuous delivery of secure software systems in support of mission-critical environments. This position requires eligibility to obtain and maintain a U.S. Government Secret or Top Secret clearance with SCI eligibility. What is DevSecOps? DevSecOps combines best practices for information security with the capacity to continually integrate and deploy software changes. The combination of DevOps and Sec can increase software stability, security, and quality. DevSecOps is a development approach that has evolved from DevOps. Instead of only thinking about security at the end of making things, DevSecOps makes security a part of the process from start to finish. A DevSecOps Engineer are responsible generally for configuring the infrastructure, deployment and testing of builds, anticipating security threats to the product and the platform where it runs, and the development chain, and securing the development environment. Key Responsibilities Design, implement, and maintain secure CI/CD pipelines and deployment automation within OpenShift. Manage and harden container orchestration platforms using OpenShift and Kubernetes, with a focus on security and compliance (e.g., STIGs, NIST 800-53). Integrate security tools and best practices into the software development lifecycle (e.g., static code analysis, vulnerability scanning, container image scanning). Automate infrastructure provisioning and configuration using tools such as Terraform, Ansible, or Helm. Work closely with development and security teams to enforce DevSecOps principles and respond to audit or compliance requirements. Monitor system performance, availability, and security, and implement proactive improvements. Troubleshoot production issues and lead incident response efforts. Mentor junior engineers and promote DevSecOps best practices across the organization. What We Offer Competitive salary and equity package Clearance sponsorship and processing support Remote and hybrid work options (subject to project and clearance requirements) Comprehensive health, dental, and vision insurance Generous PTO, holidays, and parental leave 401(k) with employer match A mission-driven, collaborative team committed to national security and innovation Work Environment Collaborative Agile development team supporting secure web application delivery. May involve testing in multiple environments (Dev, Test, Integration). Some testing may occur on classified or controlled networks. Operates in a professional office environment and uses standard office equipment such as computers and phones Physical Demands The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Ability to sit/ stand for up to 8 hours per day Ability to move freely for up to 8 hours per day DISCLAIMER: The information contained herein is not intended to be an all-inclusive list of the duties and responsibilities of the job, nor are they intended to be an all-inclusive list of the skills and abilities required to do the job. While this is intended to be an accurate reflection of the current job, management reserves the right to revise the job or to require that other or different tasks be performed as assigned. This job description doesn't constitute a contract of employment and the company may exercise its employment-at-will rights at any time Requirements: Required Qualifications U.S. citizenship and eligibility to obtain a Secret or Top Secret clearance with SCI access. B.S. degree or higher in Computer Science or related field such as E.E, Computer Information Technology, Math, Physics. Experience may substitute based on the requirements of the position. A minimum of 5 years of experience in DevOps or infrastructure automation roles. Extensive hands-on experience with Red Hat OpenShift in production environments. Deep knowledge of Kubernetes, containerization (Docker), and microservices architecture. Proficiency with CI/CD tools such as GitLab CI/CD, Jenkins, or Tekton. Experience implementing DevSecOps pipelines and integrating security tools (e.g., SonarQube, Aqua, Twistlock, Clair, Trivy). Strong scripting skills in Bash, Python, or Go. Experience with Infrastructure as Code (IaC) using Terraform, Ansible, or Helm. Familiarity with logging and monitoring tools (e.g., Prometheus, Grafana, ELK/EFK stack). Solid understanding of cloud environments (AWS, Azure, or GCP) and hybrid deployments. Preferred Qualifications Active Secret or Top Secret clearance with SCI eligibility. Experience working in classified environments or on federal government contracts. Familiarity with compliance frameworks such as RMF, FedRAMP, STIGs, or NIST 800-53. Experience with OpenShift GitOps and service mesh technologies (e.g., Istio). Certification in relevant technologies (e.g., Red Hat Certified Specialist in OpenShift Administration, Certified Kubernetes Administrator). Experience with secure cloud environments like AWS GovCloud or Azure Government.

Job Description Job Description AWS DevSecOps Engineer - Secret North Charleston, SC Cambridge International Systems, Inc. Join a dynamic global team united by shared values: commitment, integrity, and perseverance. At Cambridge, you'll work alongside top talent worldwide, tackling some of today's most complex and critical challenges in defense and security. We are currently seeking an AWS DevSecOps Engineer to support the Naval Information Warfare Center Atlantic (NIWC Atlantic) Expeditionary Enterprise Systems and Services (E2S2) Division in North Charleston, SC. This is a full-time, CONUS, on-site office position requiring attendance five days per week, with one optional telework day. An active DoD Secret security clearance is required. What You'll Do As an AWS DevSecOps Engineer, you will combine cloud security architecture, DevSecOps automation, and advanced firewall/network security engineering to design secure systems, automate operations, and ensure the reliability, scalability, and security of AWS cloud environments. An automation-first mindset is critical, with a focus on eliminating manual security tasks through self-healing and compliant infrastructure. You will: Design, implement, and maintain DevSecOps pipelines supporting CI/CD, continuous monitoring, and automated security testing. Embed SAST, DAST, SCA, and compliance checks directly into CI/CD tools such as Jenkins, GitLab CI, and AWS CodePipeline. Automate operational tasks and security workflows using Python, Bash, or Go. Create SOAR-style automated incident response playbooks and threat detection routines. Manage and enhance CI/CD tools including Jenkins, Git, Jira, Artifactory, and SonarQube. Design secure, scalable AWS architectures using best practices and Infrastructure as Code (Terraform, CloudFormation). Implement policy-as-code to detect and prevent cloud resource misconfigurations before deployment. Build and maintain containerized workloads on ECS and EKS, including automated container vulnerability management. Deploy, configure, and manage AWS-native network security tools including AWS WAF, AWS Network Firewall, Security Groups, and NACLs. Maintain and operate virtualized NGFWs such as Palo Alto, Fortinet, and Check Point running in AWS. Monitor and analyze firewall logs, IDS/IPS alerts, and VPC flow logs to identify and mitigate threats. Manage firewalls, F5 BigIP, VPN, DNS, SFTP, and other TCP/IP-based services. Manage AWS services including EC2, VPC, Lambda, S3, EFS, ECR/ECS, EKS, Route53, IAM, RDS, CloudTrail, and CloudWatch. Develop and maintain infrastructure-as-code for provisioning, configuration, patching, and lifecycle management. Conduct performance, availability, and security assessments across cloud and container environments. Troubleshoot incidents, perform root cause analysis, and implement durable remediation. Maintain system documentation, architecture diagrams, and security procedures. Implement and enforce least privilege principles using AWS IAM, SSO, and identity integrations. Automate permission audits and cloud security posture monitoring. Support compliance with frameworks such as SOC 2, HIPAA, PCI-DSS, and ISO 27001. What You'll Bring Required Qualifications: Must be proficient in using different technologies such as computers and other tools and systems pertinent to the position. Education & Experience: Bachelor's degree in Computer Science or related Engineering field from an Accreditation Board for Engineering and Technology (ABET) accredited program. Seven (7) plus years of IT professional experience, with at least three (3) years specifically in AWS Cloud Security, DevOps, or DevSecOps. Current Security+ certification required. Experience overseeing the creation of hybrid software, web, and hardware products from initial specifications through final rollout and maintenance. Technical Expertise: Hands-on experience with AWS firewalls, NGFWs, IDS/IPS, and advanced network security. Strong automation mindset with a history of developing guardrails, auto-remediation, or security tooling. Proficiency in Python, Bash, or Go. Strong knowledge of AWS core services including EC2, VPC, RDS, Lambda, S3, CloudTrail, GuardDuty, and Security Hub. Proficiency with Terraform or CloudFormation. Experience integrating various network operating systems, application programs, and hardware devices through system specification, design, coding, testing, and maintenance support. Clearance: Must have a current and active DoD Secret security clearance. Preferred (Nice to Have): Experience implementing SOAR platforms or building serverless auto-remediation using Lambda/Step Functions. AWS Security Specialty or AWS DevOps Professional certification. Experience securing Kubernetes/EKS workloads and container registries. Experience automating compliance for SOC 2, HIPAA, PCI-DSS, or ISO 27001. Travel Requirements Physical & Work Environment Requirements On-site office environment in North Charleston, SC, requiring attendance five days per week, with one optional telework day. Periods of prolonged sitting and/or standing, including desk-based computer work. Regular use of computers, monitors, networking equipment, and other job-related technology. Work is performed in a secure facility where personal electronic devices (including Bluetooth- or Wi-Fi-enabled devices) may be restricted. Occasional extended work hours, including evenings or weekends, as needed. Communication with team members, customers, and stakeholders through verbal and written methods. Ability to manage competing priorities, work under deadlines, and maintain attention to detail. Vaccine Recommendations by AOR Health.mil Background & Security Employment is contingent upon successful background investigation Alcohol and Drug screening may be required for federal contract compliance Benefits & Perks We believe in investing in our team-both professionally and personally: Medical, dental, vision, life, accident, and critical illness insurance 401(k) immediate vesting and match Paid time off and company holidays Generous tuition & training support Relocation assistance Sign-on and performance-based bonuses Employee referral program Access to Tickets at Work, EAP, wellness initiatives, and more Cambridge International Systems is committed to investing in our employees and their future by providing them with competitive compensation, career development opportunities and comfortable working conditions. Available to part-time and temporary employees are the benefits below: Referral bonuses Performance-based bonuses Community involvement & outreach Wellness program Employee referral program Access to Tickets at Work, EAP, wellness initiatives, and more Join Us If you're driven by mission, technology, and teamwork-we want to hear from you. Cambridge is growing, and this position is just one of many opportunities on our global team. Know someone perfect for the role? Referrals are welcome-both employees and non-employees may qualify for a bonus. Apply today and help shape the future of secure cloud computing for national security. About Cambridge International Systems At Cambridge, we believe innovation and agility thrive when people work together. Our culture is built on teamwork, collaboration, and a commitment to listening, learning, and bringing out the best ideas in every employee. We empower our people to take on challenges, persevere to get the job done, and lead with integrity in everything we do. Our commitment to our employees and workplace culture has been recognized through the DAV Patriot Small Employer of the Year Award in 2026 and the Cigna Healthy Workforce Gold Designation in 2025. These recognitions reflect our ongoing commitment to creating a workplace where employees are valued, supported, and empowered to do their best work. At Cambridge, we are proud to foster an environment where people can grow, contribute, and make a meaningful impact. Learn more at . We are an equal opportunity employer. Applicants and employees are considered for positions and are evaluated without regard to any protected status under applicable law or other similar factors that are not job-related. We encourage all qualified individuals to apply for employment. Selected applicants may be subject to a background investigation and/or education verification. We provide reasonable accommodation for qualified individuals with disabilities in accordance with federal, state, and local law. If you require a reasonable accommodation to participate in the application process or to perform the essential functions of the position, please contact our Recruiting Team at . Powered by JazzHR 5zpssyT3Zw

This job posting is anticipated to remain open for 30 days, from 30-Oct-2026. The posting may close early due to the volume of applicants. Join a financial services firm where your contributions are valued. Edward Jones is a Fortune 500 company where people come first. With over 9 million clients and 20,000 financial advisors across the U.S. and Canada, we're proud to be privately-owned, placing the focus on our clients rather than shareholder returns. Behind everything we do is our purpose: We partner for positive impact to improve the lives of our clients and colleagues, and together, better our communities and society. We are an innovative, flexible, and inclusive organization that attracts, develops, and inspires performance excellence and a sense of belonging. People are at the center of our partnership. Edward Jones associates are seen, heard, respected, and supported. This is what we believe makes us the best place to start or build your career. View our Purpose, Inclusion and Citizenship Report . Fortune 500, published June 2024, data as of December 2023. Compensation provided for using, not obtaining, the rating. Team Overview: The Technical Architect will be responsible for working across all areas of Information Systems (IS), providing leadership on technology selection and operational processes for running Threat and Vulnerability Management services and solutions in a mixed on-prem and cloud environment. What You'll Do: Development of Information Security solutions in cloud to meet the needs of the firm. Lead the adoption of cloud infrastructure platforms and the integration of a hybrid architecture Creating and managing relationships with teams across the department Work with distributed teams to ensure that application services are properly instrumented to be reliably monitored and debugged Automate manual, repeatable system processes to reduce Tier 1 efforts Collaborate with project teams to deploy new solutions for proof-of-concept efforts What Experience You'll Need: Minimum 8 years' experience in cybersecurity as a practitioner Experience architecting secure solutions, including network, compute, storage, and security services within a cloud provider Must be experienced in creating a strategic cyber security technology direction, aligning it with tactical activities, and communicating plans broadly across the organization Experience working across multiple large scale cloud providers, such as deployment of compute/storage/network resources Experience with SIEM data ingestion, SOAR and SOC response Must be able to communicate effectively across multiple audiences, including firm-wide business units, senior leaders, associates, external vendors Working knowledge in network, network storage, application development, Operating Systems, IAM (Authentication/authorization), PAM, SSO, and encryption standards Proficiency with Infrastructure as Code (Iac) with Ansible or Terraform Experience coding with Python Familiarity with tools such as Git, Jenkins, Chef, and CI/CD pipelines Knowledge and use of security architecture frameworks such as SABSA or NIST Experience and understanding of various regulatory requirements and laws, including but not limited to: Payment Card Industry (PCI), Sarbanes-Oxley Act (SOX), Health Insurance Portability and Accountability Act (HIPAA), General Data Protection Regulation (GDPR) and Gramm-Leach-Bliley Act (GLBA). Additionally, experience in one or more of the following: ISO 27001/2, ITIL or NIST is preferred Candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office four days per week effective June 1, 2026. Before June 1, 2026, candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office three days per week, with preference for Tuesday through Thursday. At Edward Jones, we are building a place where everyone feels like they belong. We're proud of our associates' contributions to the firm and the recognitions we have received. Check out our U.S. awards and accolades: Insights & Information Blog Postings about Edward Jones Check out our Canadian awards and accolades: Insights & Information Blog Postings about Edward Jones Edward Jones does not discriminate on the basis of race, color, gender, religion, national origin, age, disability, sexual orientation, pregnancy, veteran status, genetic information or any other basis prohibited by applicable law. Edward Jones' compensation and benefits package includes medical and prescription drug, dental, vision, voluntary benefits (such as accident, hospital indemnity, and critical illness), short- and long-term disability, basic life, and basic AD&D coverage. Short- and long-term disability, basic life, and basic AD&D coverage are provided at no cost to associates. Edward Jones offers a 401k retirement plan, and tax-advantaged accounts: health savings account, and flexible spending account. Edward Jones observes ten paid holidays and provides 15 days of vacation for new associates beginning on January 1 of each year, as well as sick time, personal days, and a paid day for volunteerism. Associates may be eligible for bonuses and profit sharing. All associates are eligible for the firm's Employee Assistance Program. For more information on the Benefits available to Edward Jones associates, please visit our benefits page .

This job posting is anticipated to remain open for 30 days, from 30-Oct-2026. The posting may close early due to the volume of applicants. Join a financial services firm where your contributions are valued. Edward Jones is a Fortune 500 company where people come first. With over 9 million clients and 20,000 financial advisors across the U.S. and Canada, we're proud to be privately-owned, placing the focus on our clients rather than shareholder returns. Behind everything we do is our purpose: We partner for positive impact to improve the lives of our clients and colleagues, and together, better our communities and society. We are an innovative, flexible, and inclusive organization that attracts, develops, and inspires performance excellence and a sense of belonging. People are at the center of our partnership. Edward Jones associates are seen, heard, respected, and supported. This is what we believe makes us the best place to start or build your career. View our Purpose, Inclusion and Citizenship Report . Fortune 500, published June 2024, data as of December 2023. Compensation provided for using, not obtaining, the rating. Team Overview: The Technical Architect will be responsible for working across all areas of Information Systems (IS), providing leadership on technology selection and operational processes for running Threat and Vulnerability Management services and solutions in a mixed on-prem and cloud environment. What You'll Do: Development of Information Security solutions in cloud to meet the needs of the firm. Lead the adoption of cloud infrastructure platforms and the integration of a hybrid architecture Creating and managing relationships with teams across the department Work with distributed teams to ensure that application services are properly instrumented to be reliably monitored and debugged Automate manual, repeatable system processes to reduce Tier 1 efforts Collaborate with project teams to deploy new solutions for proof-of-concept efforts What Experience You'll Need: Minimum 8 years' experience in cybersecurity as a practitioner Experience architecting secure solutions, including network, compute, storage, and security services within a cloud provider Must be experienced in creating a strategic cyber security technology direction, aligning it with tactical activities, and communicating plans broadly across the organization Experience working across multiple large scale cloud providers, such as deployment of compute/storage/network resources Experience with SIEM data ingestion, SOAR and SOC response Must be able to communicate effectively across multiple audiences, including firm-wide business units, senior leaders, associates, external vendors Working knowledge in network, network storage, application development, Operating Systems, IAM (Authentication/authorization), PAM, SSO, and encryption standards Proficiency with Infrastructure as Code (Iac) with Ansible or Terraform Experience coding with Python Familiarity with tools such as Git, Jenkins, Chef, and CI/CD pipelines Knowledge and use of security architecture frameworks such as SABSA or NIST Experience and understanding of various regulatory requirements and laws, including but not limited to: Payment Card Industry (PCI), Sarbanes-Oxley Act (SOX), Health Insurance Portability and Accountability Act (HIPAA), General Data Protection Regulation (GDPR) and Gramm-Leach-Bliley Act (GLBA). Additionally, experience in one or more of the following: ISO 27001/2, ITIL or NIST is preferred Candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office four days per week effective June 1, 2026. Before June 1, 2026, candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office three days per week, with preference for Tuesday through Thursday. At Edward Jones, we are building a place where everyone feels like they belong. We're proud of our associates' contributions to the firm and the recognitions we have received. Check out our U.S. awards and accolades: Insights & Information Blog Postings about Edward Jones Check out our Canadian awards and accolades: Insights & Information Blog Postings about Edward Jones Edward Jones does not discriminate on the basis of race, color, gender, religion, national origin, age, disability, sexual orientation, pregnancy, veteran status, genetic information or any other basis prohibited by applicable law. Edward Jones' compensation and benefits package includes medical and prescription drug, dental, vision, voluntary benefits (such as accident, hospital indemnity, and critical illness), short- and long-term disability, basic life, and basic AD&D coverage. Short- and long-term disability, basic life, and basic AD&D coverage are provided at no cost to associates. Edward Jones offers a 401k retirement plan, and tax-advantaged accounts: health savings account, and flexible spending account. Edward Jones observes ten paid holidays and provides 15 days of vacation for new associates beginning on January 1 of each year, as well as sick time, personal days, and a paid day for volunteerism. Associates may be eligible for bonuses and profit sharing. All associates are eligible for the firm's Employee Assistance Program. For more information on the Benefits available to Edward Jones associates, please visit our benefits page .

Job Description Job Description Job Title: Senior Vulnerability Management Analyst Location: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL Type: Permanent Fulltime Overview Seeking a Senior Vulnerability Management Analyst to support vulnerability governance, risk management, compliance, and remediation oversight within a large-scale financial services technology environment. This role focuses on ensuring vulnerabilities are appropriately tracked, prioritized, escalated, and remediated in accordance with established security standards, risk frameworks, and service level requirements. The analyst will work across cybersecurity, infrastructure, cloud, application, and risk teams to analyze vulnerability data, monitor remediation progress, support risk exceptions, and provide clear reporting to technology leadership. This position is required in one of the following locations: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL Responsibilities Manage vulnerability governance activities and support compliance with security policies, standards, controls, and risk frameworks. Analyze vulnerability data and remediation metrics across technology domains, including cloud and AWS based environments. Track remediation progress, aging, and SLA adherence and identify issues requiring escalation. Support vulnerability risk assessments, exception reviews, and risk acceptance processes. Monitor control effectiveness and identify recurring vulnerabilities, systemic risks, and remediation gaps. Prepare vulnerability metrics, trends, dashboards, and governance reporting for leadership and other stakeholders. Maintain vulnerability management standards, procedures, guidelines, and supporting documentation. Document process flows, remediation workflows, escalation paths, and governance processes. Maintain evidence and documentation supporting control validation, audits, regulatory reviews, and risk acceptance. Partner with technology and security teams to improve vulnerability management processes and data quality. Requirements 8+ years of experience in cybersecurity, technology risk, vulnerability management, or a closely related field. Strong experience with vulnerability management and vulnerability remediation governance in a large enterprise environment. Working knowledge of vulnerability management across AWS/cloud environments, infrastructure, applications, and related technology platforms. Experience tracking vulnerability remediation, aging, SLA compliance, risk exceptions, and escalations. Strong understanding of cybersecurity risk management, security controls, governance, and compliance requirements. Ability to analyze large vulnerability datasets and turn findings into actionable risk and remediation reporting. Advanced Microsoft Excel skills, including pivot tables, VLOOKUP/XLOOKUP, data cleansing, reconciliation, and trend analysis. Experience developing executive or leadership level reporting and presentations using PowerPoint. Strong technical writing skills with experience maintaining security standards, procedures, guidelines, and governance documentation. Experience documenting process flows and vulnerability remediation/governance workflows. Strong attention to data accuracy and the ability to identify trends, systemic risks, and control gaps. Ability to work effectively across cybersecurity, cloud, infrastructure, application, risk, and compliance teams. Sound judgment regarding risk escalation, remediation exceptions, and issues requiring leadership attention. Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Information Technology, or a related technical field required. Ref: Pittsburgh