cyber security engineer

Paksa IT soloutions (Pvt.) Limited

<p><b>Role Purpose</b></p><p>The Senior Cyber Security Engineer is responsible for protecting the organization's information systems, networks, applications, and digital assets from cyber threats. The role involves designing and implementing security controls, monitoring security events, conducting risk assessments, responding to incidents, and ensuring compliance with cybersecurity standards and best practices.</p><p>The ideal candidate will possess strong technical expertise in information security, threat management, security operations, and risk mitigation while contributing to the organization's overall security strategy.</p><p><b>Key Responsibilities</b></p><p><b>Security Operations &amp; Monitoring</b></p><ul><li>Monitor and analyze security events, alerts, and incidents across the organization.</li><li>Manage and optimize security tools such as SIEM, EDR, IDS/IPS, firewalls, and antivirus solutions.</li><li>Conduct threat hunting and proactive security monitoring activities.</li><li>Investigate suspicious activities and coordinate incident response efforts.</li></ul><p><b>Security Architecture &amp; Implementation</b></p><ul><li>Design, implement, and maintain enterprise security solutions and controls.</li><li>Ensure secure configuration of networks, servers, endpoints, and cloud environments.</li><li>Evaluate and recommend security technologies and improvements.</li><li>Support secure software development and application security initiatives.</li></ul><p><b>Risk Management &amp; Compliance</b></p><ul><li>Conduct vulnerability assessments and security audits.</li><li>Perform risk assessments and recommend mitigation measures.</li><li>Ensure compliance with ISO 27001, NIST, PCI-DSS, and other applicable standards.</li><li>Develop and maintain security policies, procedures, and documentation.</li></ul><p><b>Incident Response &amp; Business Continuity</b></p><ul><li>Lead security incident investigations and remediation activities.</li><li>Coordinate digital forensic analysis when required.</li><li>Develop and test incident response and disaster recovery plans.</li><li>Prepare post-incident reports and improvement recommendations.</li></ul><p><b>Training &amp; Stakeholder Engagement</b></p><ul><li>Conduct cybersecurity awareness and training sessions for employees.</li><li>Collaborate with internal teams and external vendors on security initiatives.</li><li>Provide regular security reports and updates to management.</li><li>Mentor junior security team members and promote security best practices.</li></ul><p><b>Job Specification</b></p><p><b>Education</b></p><ul><li>Bachelor's degree in Computer Science, Cyber Security, Information Security, Information Technology, or a related field.</li></ul><p><b>Experience</b></p><ul><li>3&ndash;5 years of experience in Cyber Security, Information Security, or Network Security.</li><li>Experience in Security Operations, Incident Response, Risk Management, and Security Compliance.</li></ul><p><b>Skills Required</b></p><ul><li>Strong knowledge of network security, cloud security, and endpoint protection.</li><li>Hands-on experience with SIEM platforms (Splunk, QRadar, Microsoft Sentinel, etc.).</li><li>Experience with vulnerability management tools (Nessus, Qualys, OpenVAS).</li><li>Knowledge of firewalls, IDS/IPS, VPNs, IAM, and security protocols.</li><li>Understanding of Windows, Linux, and cloud platforms (AWS, Azure, GCP).</li><li>Strong analytical, problem-solving, and incident investigation skills.</li><li>Excellent communication and reporting abilities.</li></ul><p><b>Certifications (Preferred)</b></p><ul><li>CEH (Certified Ethical Hacker).</li><li><b>Comp TIA Security+.</b></li><li>ISO 27001 Lead Implementer / Lead Auditor.</li><li>CCSP (Certified Cloud Security Professional).</li></ul><p><b>Other Requirements</b></p><ul><li>Ability to work under pressure and manage critical security incidents.</li><li>Strong attention to detail and commitment to security best practices.</li><li>Willingness to stay updated with evolving cybersecurity threats and technologies.</li><li>Ability to work collaboratively with cross-functional teams.</li></ul><p><b>Preference</b></p><p>Candidates with proven experience in Security Operations Centers (SOC), threat hunting, incident response, cloud security, and cybersecurity compliance frameworks will be given priority.</p><p><b>Location:</b><br/>Karachi,Pakistan</p><p><b>Note: </b>This is a strictly onsite role. Remote and hybrid work arrangements are not available for this position.</p><p>Job Type: Full-time</p><p>Application Question(s):</p><ul><li>Current Salary </li><li>Expected Salary</li><li>Which vulnerability management tools have you used?</li></ul><p>□ Nessus<br/>□ Qualys<br/>□ OpenVAS<br/>□ Rapid7<br/>□ Other: <i>__</i><i>__</i>__</p><ul><li>Which cybersecurity compliance frameworks have you worked with?</li></ul><p>□ ISO 27001<br/>□ NIST<br/>□ PCI-DSS<br/>□ CIS Controls<br/>□ Other: <i>__</i><i>__</i>__</p><ul><li>Do you have experience managing or configuring the following?</li></ul><p>□ Firewalls<br/>□ IDS/IPS<br/>□ VPNs<br/>□ IAM Solutions<br/>□ EDR/XDR Tools</p><ul><li>Which cybersecurity certifications do you currently hold?</li></ul><p>□ CEH<br/>□ CompTIA Security+<br/>□ ISO 27001 Lead Auditor<br/>□ ISO 27001 Lead Implementer<br/>□ CCSP<br/>□ CISSP<br/>□ Other: <i>__</i><i>__</i>__</p><ul><li>Yes</li></ul><p>No</p><ul><li>How many years of professional experience do you have in Cyber Security, Information Security, or Network Security?</li><li>Which SIEM platforms have you used?</li></ul><p>□ Splunk<br/>□ QRadar<br/>□ Microsoft Sentinel<br/>□ ArcSight<br/>□ Other: <i>__</i><i>__</i>__</p><p>Work Location: In person</p>

Cyber Security Engineer

FinWise Bank

<div><p><b><i>Purpose:</i></b></p><ul><li>
The Cyber Security Engineer &ndash; Team Lead, is a first line operational role primarily responsible for monitoring, administering, and implementing cybersecurity tools. This role will investigate and respond to potential threats, working with Information Security and Information Technology Teams. This role will be involved with evaluating and recommending security tools and controls for FinWise Bank systems and software.</li></ul><p><b><i>
Tasks:</i></b></p><ul><li>
Lead, mentor, and develop a team of 2&ndash;4 security engineers and analysts, conduct performance reviews and career development planning.</li><li>
Manage firewall rule sets, IDS/IPS configurations, SIEM tuning, and cloud-native security tooling (e.g., Defender for Cloud, AWS Security Hub).</li><li>
Identify and remediate security vulnerabilities across infrastructure, applications, and internal systems.</li><li>
Monitor security tooling (SIEM, EDR, cloud-native alerts) and investigate potential threats and incidents.</li><li>
Conduct security reviews for new systems and features before they ship.</li><li>
Evaluate and improve security controls for cloud environments (AWS, Azure, or GCP).</li><li>
Support compliance efforts through documentation and control testing.</li><li>
Contribute to security policies, runbooks, and awareness training.</li><li>
Collaborate with engineering teams to integrate security into the development lifecycle.</li><li>
Design, implement, and maintain security controls across cloud (Azure/AWS) and on-premises infrastructure, including network segmentation, IAM, and endpoint protection.</li><li>
Oversee vulnerability management lifecycle: scanning, prioritization, remediation tracking, and reporting to senior leadership.</li></ul><p>
</p><p><b><i>Knowledge, Skills, and Abilities:</i></b></p><ul><li>
5 years of experience in security engineering, security operations, or a closely related role.</li><li>
Solid understanding of networking fundamentals, authentication protocols, and common attack patterns.</li><li>
Hands-on experience with at least one major cloud platform (AWS, Azure, or GCP).</li><li>
Familiarity with SIEM platforms and log analysis.</li><li>
Experience with vulnerability scanning tools and remediation workflows.</li><li>
Proficiency in scripting/automation (PowerShell, Python, or Bash) for security operations and tooling.</li><li>
Solid understanding of network security architecture: firewalls, VPNs, DNS/DHCP, zero-trust principles, and micro-segmentation.</li><li>
Experience with identity governance platforms (Active Directory, Entra ID / Azure AD, Okta).</li><li>
Strong written and verbal communication &mdash; you can explain risk clearly to both technical and non-technical audiences.</li></ul><p><b><i>
Required Education / Experience / License</i></b><i>:</i></p><ul><li>
High School Diploma, GED, or equivalent.</li></ul><p><b><i>
Preferred Education /Experience / License:</i></b>
</p><ul><li>BA/BS or equivalent professional experience.</li><li>
3+ years&rsquo; experience within the banking or financial services industry.</li><li>
CISSP &ndash; Certified Information Systems Security Professional.</li><li>
CCSP &ndash; Certified Cloud Security Professional.</li><li>
AWS Certified Security &ndash; Specialty or Microsoft SC-200/AZ-500.</li><li>
GIAC GCIH, GCIA, or GPEN (Security Operations / Penetration Testing.</li></ul><p><b><i>
Minimum Essential Requirements:
</i></b></p><ul><li>Sit or stand at a computer for long periods of time and look at a computer screen for several hours a day.</li><li>
Work at an assigned FinWise office location.</li><li>
Communicate with others in person, on the phone, virtual meeting, and email.</li><li>
Maintain confidentiality.</li><li>
Lift 20 lbs.</li><li>
Maintain regular and punctual attendance.</li><li>
Work overtime as assigned.</li><li>
Travel overnight as required.</li><li>
Work cooperatively with others.</li><li>
Driving during workday.</li><li>
Comply with all company policies and procedures.</li></ul><p><b><i>
Background checks are required on all bank employees due to the accessibility of Personally Identifiable Private Information.</i></b></p><p><b><i>
AAP/EEO Statement
</i></b></p><p><i>FinWise is an equal opportunity employer and dedicated to diversity and inclusion in the workplace. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender identity, sexual orientation, age, marital status, pregnancy status, veteran status, or disability status.</i></p><p><i>
FinWise provides reasonable accommodations to the known disabilities of individuals in compliance with the Americans with Disabilities Act. For accommodation information or if you need special accommodations to complete the application process, please contact the Human Resources Department at (801) 545 - 6041.</i></p><p><i>
Qualified applicants with criminal history and conviction records will be considered in accordance with legal requirements.</i></p></div><p></p>

Cyber Security Engineer - Team Lead

Viasat

<div><b>About us</b><br>
<br>
<br>
<div>One team. Global challenges. Infinite opportunities. At Viasat, we&rsquo;re on a mission to deliver connections with the capacity to change the world. For more than 35 years, Viasat has helped shape how consumers, businesses, governments and militaries around the globe communicate. We&rsquo;re looking for people who think big, act fearlessly, and create an inclusive environment that drives positive impact to join our team.</div><br>
<br>
<b>What you'll do</b><br>
<br>
<br>
<p>The Lead Cyber Security Engineer is a senior-level leader who supports the Security Engineering and Operations organization. They work closely with the Deputy CISO to implement security strategies and guide the security organization's overall direction to meet those strategies. This position will assist in leading the organization roadmap. It will also involve working with engineering authorities to resolve blockers. The role focuses on delivering technical solutions that advance strategic objectives.<br>
</p><br>
<b>The day-to-day</b><br>
<br>
<br>
<p>As our Principal Security Systems Engineer, you must be technically strong and comfortable working across socio-technical boundaries. You should be highly collaborative and hands-on when crafting and delivering improvements to Viasat&rsquo;s security posture. This role will operate across multiple cybersecurity technical and functional groups to assist with translating the strategic vision into practical work. Will also assist the deputy chief information security officer by working closely with the engineering and operational security team. The ideal candidate is capable as a hands-on engineer, mentor, and multi-functional facilitator and can jump in on a program as a performer.</p><p><br>
</p><p>Strategic &amp; Multi-Functional Leadership
</p><ul><li>Serve as a technical liaison between the CISO organization and other senior leadership domains to better &lsquo;see ahead&rsquo; to where security needs to be.</li>
<li>Collaborate across security functions which exist in other parts of the company to ensure alignment, scalability, and efficiency.</li>
<li>Participate in enterprise security architecture discussions and translate outcomes into domain and project-specific engineering requirements and repeatable patterns.</li></ul><div><br>
</div><div></div><p>Technical Leadership &amp; Execution</p>
<ul><li>Provide hands-on technical leadership in designing, developing, and validating secure system architectures, communications networks, and security controls.</li>
<li>Guide the implementation of secure network design, segmentation strategies, encryption mechanisms, identity and access controls, and monitoring systems.</li>
<li>Establish a robust methodology for documenting and describing technical decisions to ensure efficient maturation of security-impacting services.</li>
<li>Develop an understanding of the operational processes followed by Security to be able to identify difficulties and opportunities for improvement.
</li><li>Maintain a degree of technical proficiency with the various tools used by the Security organization. This helps identify gaps in tooling coverage.
</li><li>Help bridge the gap between security operations and security engineering by ensuring that operational realities inform engineering decisions, and that engineered solutions work under operational pressure.</li>
<li>Participate in encouraging the responsible adoption of AI capabilities across the wider Security organization.</li>
<li>Collaboratively develop mechanisms to enable the security department to enforce security policies, procedures, and ensure compliance with frameworks like NIST, ISO 27001, GDPR, and CCPA.</li><br>
</ul><div></div><p>Team Development &amp; Enablement</p>
<ul><li>Mentor and develop security engineers across multiple teams, providing mentorship, training, and technical support.
</li><li>Build productive, trust-based relationships with engineering teams, product owners, executives, and external partners.</li>
<li>Mentor junior and mid-level security staff not just on technical skills, but on judgment, communication, and professional growth.</li>
<li>Use critical thinking to navigate complex problem-sets (technical and non-technical) with real-world impacts to business and collaborators when prioritising system &amp; network events.
</li></ul><br>
<b>What you'll need</b><br>
<br>
<br>
<ul><li>Bachelor&rsquo;s or Master&rsquo;s degree in Electrical Engineering, Computer Engineering, Computer Science, Cybersecurity, or a related technical field.</li>
<li>10+ years of experience in security engineering, systems engineering, network engineering, or similar roles.</li>
<li>Exercises impeccable judgment and ability to analyze risk in the application of security controls for the purpose of achieving real-world risk reduction.</li>
<li>Experienced in navigating trade-offs between security, performance, and reliability.</li>
<li>Knowledgeable in secure system design, communications networks, cybersecurity controls, and threat modeling.</li>
<li>Familiar with working across organizational boundaries including security, infrastructure, networking, and product engineering.</li>
<li>Familiarity with modern network protocols, routing, wireless communications, encryption, and network security architecture.</li>
<li>Experienced in the hands-on management and operation of enterprise security tools and technologies (e.g. firewalls, IDS/IPS, PKI, SIEM/SOAR, EDR/NDR, CSPM/CNAPP, zero-trust).</li>
<li>Excellent communication skills with the ability to influence collaborators at multiple levels.
</li><li>US Citizenship required.</li>
<li>Ability to travel up to 20%.
<br>
<br>
This will be a hybrid role based out of Carlsbad, CA, Tempe, AZ, Reston, VA or Marlborough, MA.
<br>
<br>
#LI-BBS</li>
</ul><br>
<b>What will help you on the job</b><br>
<br>
<br>
<ul><li>A growth-mindset; willingness to learn new skills and new tools.</li>
<li>Capable of influencing without direct authority.</li>
<li>Systems-level thinking and architectural insight.</li>
<li>Strong problem-solving, analytical reasoning, and risk-based judgement.</li>
<li>Capable of establishing structure and consistency across decentralized teams.</li>
<li>Has a strong understanding of satellite (or similar) communications networks.</li>
<li>Experienced in environments which are subject to regulatory frameworks such as FedRAMP, CMMC, HIPAA, PCI-DSS, or SOC 2.
</li><li>Familiar with zero-trust architecture principles and practical implementation challenges.
</li><li>Relevant certifications such as CISSP, CISM, GIAC (GSLC, GCSA, GSOM), or SABSA are valued but not required. We care more about what you can do than what is on your wall.</li>
</ul><br>
<b>Salary range</b>
<br>
<br>
$230,000.00 - $363,000.00 / annually. For specific work locations within San Jose, the San Francisco Bay area and New York City metropolitan area, the base pay range for this role is $285,500.00- $428,500.00/ annually<br>
<br>
<br>
<br>
<br>
At Viasat, we consider many factors when it comes to compensation, including the scope of the position as well as your background and experience. Base pay may vary depending on job-related knowledge, skills, and experience. Additional cash or stock incentives may be provided as part of the compensation package, in addition to a range of medical, financial, and/or other benefits, dependent on the position offered. Learn more about Viasat&rsquo;s comprehensive benefit offerings that are focused on your holistic health and wellness at https://careers.viasat.com/benefits.
<br>
<b>EEO Statement</b><br>
<br>
<br>
<div>Viasat is proud to be an equal opportunity employer, seeking to create a welcoming and diverse environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, ancestry, physical or mental disability, medical condition, marital status, genetics, age, or veteran status or any other applicable legally protected status or characteristic. If you would like to request an accommodation on the basis of disability for completing this on-line application, please click here.</div></div><div></div>

Principal Cyber Security Engineer, Strategy and Architecture

Air Products

<div><p>At Air Products, we reimagine what&rsquo;s possible. By tapping into the motivation of our people and our collective experience, we create the ideas and innovations that drive us forward. When we come together &ndash; where every voice is heard and everyone knows they belong and matter &ndash; we create solutions that launch people into space, support lifesaving care in hospitals, and enable the construction of groundbreaking, world scale production facilities.</p><p><b><br>
Reimagine What&rsquo;s Possible</b></p><p><br>
NEOM Green Hydrogen Project is part of the most complex capital project and a flagship project at scale for Air Products. Air Products is executing a EPC Contract with the customer &ndash; NEOM Green Hydrogen Company (NGHC). Air Products have the responsibility to design, build and delivery Process Controls / Process Automation System and IT/Digital Technology infrastructure scope. This scope shall comply with the local laws and regulations on cybersecurity, which is a crucial part in the project&rsquo;s safety, security and overall compliance.</p><p></p><p>
The incumbent in this position based at project site, as ICS Cyber Security Engineer, plays a key member of a Cybersecurity task force team to undertake the field verification of the cyber assets to comply with the project specifications and the site acceptance criteria.</p><p></p><p>
The Engineer is also responsible for coordinating with Engineering, Pre-Commissioning, Commissioning and Client operations team related to Cyber Security field verifications.</p><p></p><p>
The Cyber Security engineer acts as the technical interface between Air Products project execution, commissioning teams and the vendors, during the field verification of cyber assets.</p><p></p><p>
Experience in supporting large scale construction, pre commissioning, commissioning, startup and handover phases, ensuring cybersecurity controls are implemented without impacting schedule critical activities</p><p></p><p>
The position is based out of Duba, Tabuk Region, Saudi Arabia working on rotation of 8 Weeks ON / 2 Weeks OFF.</p><p></p><p><b>
The position will be a site-based role with the below duties:</b></p><ul><li><p>
Perform the field verification of the design, implementation and testing of the cyber assets to meet the cybersecurity standards, regulatory requirements and technologies, processes/procedures and specifications to transition the project assets to commissioning, start-up and final handover to the client.</p></li><li><p>
Develop, document, and maintain cybersecurity asset register and other key deliverables as guided by the Site Cybersecurity Lead or Cybersecurity Manager.</p></li><li><p>
Organize and lead/facilitate the resolution and implementation of the cybersecurity risk assessment exercises and implement risk assessment recommendations for Air Products design and also for vendor/ skid package control system</p></li><li><p>
Support pre‑commissioning and commissioning teams by validating firewall rules, secure remote access, endpoint hardening, Asset inventory validation, Access control execution, and logging before system energization.</p></li><li><p>
Lead and oversee architecture, standards and FAT/SAT/CSAT procedures development, execution and performance testing.</p></li><li><p>
Ensure the verification and approval of the 3rd party device access needs as requested by the subcontractor and vendors as part of the commissioning and start-up requirements on the vendor packages.</p></li><li><p>
Participate in technical coordination meetings with cross-functional teams as guided by the Site Cybersecurity lead.</p></li><li><p>
Coordinate with vendors and Air Products engineering team to resolve and liquidate the punch points identified during the field verification of the cyber assets.</p></li><li><p>
Coordinate and assist the Site Cybersecurity Lead with the change management activities to ensure design, procurement, installation, commissioning, and startup of cybersecurity scope are reviewed for schedule, and budget compliance.</p></li><li><p>
Prepare weekly updates and dashboard to the Site cybersecurity lead and the Project Cybersecurity Collaboration Lead.</p></li><li><p>
Identify and escalate risks and opportunities, Collect and report lessons learned during vendor site visits and project execution.</p></li><li><p>
Support OT cybersecurity handovers to operations, including procedures, asset inventories, access management, and incident response alignment.</p></li><li><p>
Contribute to OT Cybersecurity Operations Model, including monitoring, patching, backup, disaster recovery, and secure remote support.</p></li></ul><p></p><p><b>
Minimum Requirements:</b></p><ul><li><p>
Bachelor&rsquo;s degree in engineering (electronics &amp; communication, (or) instrumentation / process automation background is preferred) or equivalent.</p></li><li><p>
Minimum 10 to 15 years&rsquo; experience in Operational Technology (OT), or related field with at least 3 years focused on designing (or) building (or) validating the design/implementation of the cybersecurity for industrial control systems and networks.</p></li><li><p>
Project implementation experience of Saudi cyber standards HCIS, NCA, CRA compliance, ISA 62443 Industry standards, specifications, regulations, best practices.</p></li><li><p>
Strong knowledge and understanding of controls systems (SCADA/DCS/PLCs, etc.,), relevant protocols (Modbus, PROFINET, DNP3, IEC61850, etc.), key technologies including Firewalls, IDS, Anti-Virus, Vulnerabilities assessments, etc. in the ICS/OT networks</p></li><li><p>
OT/ICS cybersecurity relevant accreditations such as ISA/IEC62443, SANS or other internationally recognized certifications are preferred.</p></li><li><p>
Additional cybersecurity certifications such as CISSP, CISM, ISO 27001, etc., will be an added advantage</p></li><li><p>
Advanced skills in Microsoft Office tools such as Teams, SharePoint, Word, Excel, Power point and Visio etc.,</p></li><li><p>
Excellent communication skills and the ability to communicate appropriately at all levels of the organization; this includes written and verbal communications</p></li></ul><p></p><p>
#LI-LG1</p><p><br>
Founded in 1940, Air Products is a world-leading industrial gases company and has a proud history of innovation, operational excellence, with an unwavering commitment to safety and environmental stewardship. Working together, we are taking our passion and diverse backgrounds forward to reimagine what&rsquo;s possible and generate a cleaner future for our customers, our communities, and the world.</p></div>

ICS Cybersecurity Engineer

Leidos

<div><p><b>Description</b>
</p><p>Leidos is seeking an Information Assurance Engineer to support an IC customer Program focused on the Integration, Operations, and Sustainment of various systems both legacy and in development. The Cyber Security Engineer will need to be a self-starter with excellent analytical and problem-solving skills, flexibility, good judgment and the ability to coordinate multiple, concurrent tasks in an effective manner. The Cyber Security Engineer works with internal team members to ensure the systems are functional, secure, and scalable. The Engineer will collaborate with internal leadership, customers, and counterparts as the single POC for all items related to security. The systems and networks documentation and services developed will be used to collect and process data and improve the programs security infrastructure. The Cyber Security Engineer will design and develop cyber security technology along with integration of new architectural features into existing infrastructures while maintaining the integrity and security of enterprise-wide cyber systems and networks. The Cyber Security Engineer shall have security Assessment and Authorization (A&amp;A) expertise, to include but not limited to: ICD 503, Federal Information Security Management Act (FISMA), XACTA, and National Institute of Standards and Technology (NIST).</p><p></p><p><b>
Primary Responsibilities</b></p><ul><li>
Lead multi-disciplined teams in the design and implementation of the cyber security system architecture.</li><li>
Produce cyber security architectural artifacts. Provide architectural analysis of cyber security<br>
features and existing system related to future needs and trends.</li><li>
Reviews and provides input to system requirements based on cyber security posture.</li><li>
Applies industry best practices and lessons learned into future iterations and new designs.</li><li>
Supports the Engineering Review Board by evaluating artifacts for architectural compliance</li><li>
Provides broad based experience in the systems engineering lifecycle and apply the experience to<br>
specific cyber security initiatives relating to architectural design and development</li><li>
Resolves architecture implementation issues during integration and testing</li><li>
Advise and assist team members to deploy and configure collection services and tools</li><li>
Work with team members to move data to the appropriate data stores</li><li>
Meet hands-on RMF responsibilities</li><li>
Lead Vulnerability Management and ConMon tasks for multi-disciplined teams</li><li>
Other tasks as assigned</li></ul><p></p><p><b>
Basic Qualifications</b></p><ul><li>
Requires BS degree and 8-12 years of prior relevant experience OR, Masters with 6-10 years of prior relevant experience; OR 4 years of additional experience in lieu of degree</li><li>
Must possess and maintain a TS/SCI Security with Poly Clearance</li><li>
DoD.8570/8140 IAM III Certification (CISSP, CISM, CISA, etc.)</li><li>
Minimum Required - COMPTIA Security+ or comparable IAT/IAM II/III certification</li><li>
Proactive self-starter demonstrating a positive, willing attitude and excellent oral and written communication skills.</li><li>
Demonstrated ability to adapt to new technologies and learn quickly</li><li>
Organizational Skills: Can plan and prioritize work. Follows tasks to their logical conclusion and makes sure that everything has been done to the right standard. Good attention to detail.</li><li>
Communications: Ability to communicate clearly and efficiently to team members and clients, verbally and in writing. Able to present ideas in a variety of ways depending upon audience and context.</li><li>
Security Assessment and Authorization (A&amp;A) expertise</li><li>
Familiar with Amazon Web Services (S3 Buckets, EC2, Reserved Instances, etc.)</li><li>
Familiar with System Engineering documentation creation (VDDs, diagrams, etc.)</li><li>
Familiar with team collaboration tools (Jira, Confluence)</li><li>
Working knowledge with XACTA 360, Tenable Security Center, Nessus, Trellix ePO, ACAS, HBSS and Audit enterprise security services</li><li>
Proficient in ACAS Vulnerability and STIG scanning, reporting, management and remediation</li><li>
Viewed as an industry expert in the Risk Management Framework (RMF) steps one thru six with the ability to lead Assessment and Authorization (A&amp;A) tasks to successfully achieve Authority to Operate (ATO)</li></ul><p></p><p><b>
Preferred Qualifications</b></p><ul><li>
Familiar with CI/CD Pipeline Management</li><li>
Experience with DevOps tools (GitLab, Fortify, EKS, Kubernetes, Docker, OpenShift)</li><li>
Experience with cloud-based architectures</li><li>
Experience with Engineering Review Boards and Change Management</li><li>
Prior experience with ICD 503</li><li>
Federal Information Security Management Act (FISMA)</li><li>
XACTA</li><li>
National Institute of Standards and Technology (NIST)</li></ul><p>
If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo &mdash; because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 &mdash; and moving faster than anyone else dares.</p><h2 class="jobSectionHeader"><b>
Original Posting:</b></h2>
June 12, 2026<p></p><p><br>
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.</p><p></p><h2 class="jobSectionHeader"><b><br>
Pay Range:</b></h2>
Pay Range $107,900.00 - $195,050.00<p></p><p>
The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.</p><p></p><p><b>
About Leidos</b></p><p></p><p>
Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.</p><p></p><p><b>
Pay and Benefits</b></p><p></p><p>
Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.</p><p></p><p><b>
Securing Your Data</b></p><p></p><p>
Beware of fake employment opportunities using Leidos&rsquo; name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system &ndash; never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com.</p><p>
If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.</p><p></p><p><b>
Commitment to Non-Discrimination</b></p><p></p><p>
All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.</p></div>

Information Assurance Engineer

UltraViolet Cyber

<div><div><b>Make a difference here.</b></div><div></div><div><br>
UltraViolet Cyber is a leading platform-enabled unified security operations company providing a comprehensive suite of security operations solutions. Founded and operated by security practitioners with decades of experience, the UltraViolet Cyber security-as-code platform combines technology innovation and human expertise to make advanced real-time cybersecurity accessible for all organizations by eliminating risks of separate red and blue teams.<br>
</div><div></div><br>
<div>By creating continuously optimized identification, detection, and resilience from today&rsquo;s dynamic threat landscape, UltraViolet Cyber provides both managed and custom-tailored unified security operations solutions to the Fortune 500, Federal Government, and Commercial clients. UltraViolet Cyber is headquartered in McLean, Virginia, with global offices across the U.S. and in India.</div><div></div><p><br>
The Senior Security Tooling Engineer will join a team supporting one of UltraViolet's Federal Customers. The focus of the role will be to evaluate the effectiveness, configuration, and integration of enterprise and AWS-native security tools.</p>
<h3 class="jobSectionHeader"><b>
What You'll Do:</b></h3><div>
<div>
<div><ul><li><p>Assess enterprise security tools such as:</p>
</li>
</ul></div><div><ul><li><p>SIEM platforms</p>
</li>
</ul></div><div><ul><li><p>IDS/IPS solutions</p>
</li>
</ul></div><div><ul><li><p>Vulnerability management systems</p>
</li>
</ul></div><div><ul><li><p>Evaluate AWS-native security services including:</p>
</li>
</ul></div><div><ul><li><p>AWS GuardDuty</p>
</li>
</ul></div><div><ul><li><p>AWS Macie</p>
</li>
</ul></div><div><ul><li><p>AWS Inspector</p>
</li>
</ul></div><div><ul><li><p>Conduct configuration reviews against:</p>
</li>
</ul></div><div><ul><li><p>CIS Benchmarks</p>
</li>
</ul></div><div><ul><li><p>AWS Well-Architected Framework</p>
</li>
</ul></div><div><ul><li><p>Review logging and monitoring configurations to ensure adequate coverage and visibility</p>
</li>
</ul></div><div><ul><li><p>Support or perform vulnerability assessments and penetration testing to validate tool effectiveness</p>
</li>
</ul></div><div><ul><li><p>Analyze tool integration and data flow between systems</p>
</li>
</ul></div><div><ul><li><p>Identify gaps, redundancies, and opportunities for optimization</p>
</li>
</ul></div></div><div><div><ul><li><p>Provide recommendations to improve tooling effectiveness and coverage</p>
</li>
</ul></div></div></div><h3 class="jobSectionHeader"><b>What You've Done:</b></h3><div>
<div> <div><ul><li>7+ years hands-on experience with security tools and AWS security services</li>
</ul>
<div><ul><li><p>Experience with AWS security services and cloud security tooling</p>
</li>
</ul></div><div><ul><li><p>Experience performing tool assessments, audits, or implementations</p>
</li>
</ul></div><div><p>Core Certifications:</p>
</div>
<div><ul><li><p>AWS Certified Cloud Practitioner</p>
</li>
</ul></div><div><ul><li><p>CompTIA Security+ (baseline, if needed)</p>
</li>
</ul></div><div><p>Tool/Platform &amp; Cloud:</p>
</div>
<div><ul><li><p>AWS Certified Security &ndash; Specialty</p>
</li>
</ul></div><div><ul><li><p>Splunk Certified Architect / Power User</p>
</li>
</ul></div><div><ul><li><p>Microsoft SC-200 or equivalent</p>
</li>
</ul></div><div><p>Pen Testing / Validation (Preferred):</p>
</div>
<div><ul><li><p>OSCP (Offensive Security Certified Professional)</p>
</li>
</ul></div><div><ul><li><p>CEH (Certified Ethical Hacker)</p>
</li>
</ul></div><div><p>Clearance Requirement: Active TS/SCI with SCI Polygraph (or eligible)</p></div><br>
</div>
</div></div><div></div><h3 class="jobSectionHeader"><b>What We Offer:</b></h3><div>
<ul><li>401(k), including an employer match of 100% of the first 3% contributed and 50% of the next 2% contributed
</li><li>Medical, Dental, and Vision Insurance (available on the 1st day of the month following your first day of employment)
</li><li>Group Term Life, Short-Term Disability, Long-Term Disability
</li><li>Voluntary Life, Hospital Indemnity, Accident, and/or Critical Illness
</li><li>Participation in the Discretionary Time Off (DTO) Program
</li><li>11 Paid Holidays Annually</li>
</ul></div><div>UltraViolet Cyber maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect our company's differing products, services, industries and lines of business. Candidates are typically placed into the range based on the preceding factors.</div><div></div><div><br>
We sincerely thank all applicants in advance for submitting their interest in this position. We know your time is valuable.<br>
</div><div></div><br>
<div><b>UltraViolet Cyber welcomes and encourages diversity in the workplace regardless of race, gender, religion, age, sexual orientation, gender identity, disability, or veteran status.</b></div><div></div><div><br>
If you want to make an impact, UltraViolet Cyber is the place for you!</div>
<p>
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</p></div>

AWS Cloud Security Engineer (Top Secret)

Northrop Grumman

<div>RELOCATION ASSISTANCE: Relocation assistance may be available<p></p>
CLEARANCE REQUIRED FOR START: Yes<p></p>
CLEARANCE TYPE: Secret<p></p>
TRAVEL: Yes, 10% of the Time<h2 class="jobSectionHeader"><b>
Description</b></h2><p></p>
At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work &mdash; and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history.<p></p><p>
Northrop Grumman Space Systems &ndash; Launch and Missile Defense Systems has an exciting career opportunity for a Principal Cyber Systems Engineer to join our team of qualified, diverse individuals. This position is located in Huntsville, AL.</p><p></p><p><b>
Position Overview:
</b></p><p></p><p>The Principal Cyber Systems Engineer will provide support for the Ground-Based Midcourse Defense (GMD) Ground Weapon System (GWS) program. The selected candidate will work with the GWS Network and Infrastructure Team (GNI) to design and develop classified networks for the government customer.</p><p></p><p>
The selected candidate will concentrate on cybersecurity best practices within different layers of the OSI model including physical, data link, network, transport, and application. They will also support the delivery of products and services to the government customer through secure and encrypted channels.</p><p></p><p><b>
Essential Functions:</b></p><ul><li><p>
Installation and configuration of networking equipment, troubleshooting, networking design, and implementing security measures for the networking infrastructure</p></li><li><p>
Documentation and verification of all installation and configuration steps</p></li><li><p>
Working with software developers and/or vendors as needed to help diagnose and identify the root cause of problems found during system integration</p></li><li><p>
Submit problem reports for errors found per Agile processes and coordinate daily integration activities with other Cross Functional Product Teams (CFPTs)</p></li><li><p>
Providing redlines to engineers and feedback to Leadership will be required as part of this position&rsquo;s responsibilities.</p></li><li><p>
Documenting lessons learned, best security engineering practices, and industry standards will be required in daily tasks as well.</p></li></ul><p></p><p><b>
Basic Qualifications:</b></p><ul><li><p>
Bachelor&rsquo;s degree in STEM field with 5 years of cyber systems experience &ndash; OR &ndash; Master&rsquo;s degree in a STEM field with 3 years of cyber systems experience</p></li></ul><ul><li><p><b>
DoD Active Secret security clearance required.</b></p></li><li><p>
Must currently possess DoD 8140/8570 certification (e.g. Security+ CE).</p></li><li><p>
Experience on a large-scale missile defense system programs.</p></li><li><p>
Applicants must possess excellent written and communication skills.</p></li><li><p>
Applicants must demonstrate ability to think critically and capture concepts in work products, presentations, and discussions.</p></li><li><p>
Capable of working both independently and within a team environment.</p></li><li><p>
Ability and willingness to travel up to 10% of the time to support business needs.</p></li></ul><p>
Experience with Agile software development methodologies, object-oriented architecture, software integration and testing.</p><p></p><p><b>
Preferred Qualifications:</b></p><ul><li><p>
Perform development and installation of OS/automation for GWS Product Teams (GFC/GSS/IDT)</p></li><li><p>
Support planning and integration of HCIL and other RGW Lab connectivity and testing to support program PBMs</p></li><li><p>
Support GFC/IDT fielded systems, frequently contacted for issues seen during operations and testing</p></li></ul><p></p>
Primary Level Salary Range: $119,600.00 - $179,400.00<p></p>
The above salary range represents a general guideline; however, Northrop Grumman considers a number of factors when determining base salary offers such as the scope and responsibilities of the position and the candidate's experience, education, skills and current market conditions.<p></p>
Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results. Employees in Vice President or Director positions may be eligible for Long Term Incentives. In addition, Northrop Grumman provides a variety of benefits including health insurance coverage, life and disability insurance, savings plan, Company paid holidays and paid time off (PTO) for vacation and/or personal business.<p></p>
The application period for the job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.<p></p>
Northrop Grumman is an Equal Opportunity Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. For our complete EEO and pay transparency statement, please visit http://www.northropgrumman.com/EEO. U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.</div>

Cyber Systems Engineer - Level 3

Search 4250+ Cyber security engineer jobs near you this June. New roles added regularly across leading industries. Apply today.