cyber security specialist

Essmann

<p> </p><h3>Job Overview</h3><p>Essmann, a respected specialist in custom cabinetry and millwork, is seeking a diligent and proactive <strong>Cyber Security Specialist</strong> to join our team. For decades, we have been committed to quality craftsmanship, providing bespoke cabinetry, furniture, and wood mouldings for a diverse range of clients, including corporate and church environments. In this <strong>Full-Time</strong> role based in <strong>Columbus, Ohio, United States</strong>, you will be instrumental in protecting our digital assets, client data, and proprietary designs. The ideal candidate will be a hands-on professional responsible for developing, implementing, and maintaining a robust security framework to safeguard our information systems and support our continued success.<br /><br /><br /><br /> </p><h3>Responsibilities</h3><p><br />As our Cyber Security Specialist, you will be entrusted with safeguarding the company's digital infrastructure. Your key responsibilities will include:<br /> </p><ul><li>Developing and enforcing a comprehensive suite of information security policies, procedures, and best practices.</li><li>Actively monitoring company networks and systems to detect, identify, and respond to security threats and potential breaches.</li><li>Managing, configuring, and maintaining essential security tools, including firewalls, anti-virus software, and data encryption systems.</li><li>Conducting regular vulnerability assessments, risk analyses, and security audits to identify and mitigate potential weaknesses.</li><li>Leading incident response activities, providing thorough investigation, and producing post-incident analysis reports to prevent future occurrences.</li><li>Providing training and guidance to all staff members to promote a culture of security awareness across the organisation.</li><li>Ensuring the company remains compliant with all relevant data protection regulations and industry standards.</li><li>Collaborating with IT and operational teams to secure both corporate systems and manufacturing-related technology.</li></ul><p><br /><br /> </p><h3>Qualifications</h3><p><br />To be successful in this role, you will need a strong foundation in information security principles and a proactive approach to threat mitigation.<br /> </p><ul><li>Proven professional experience in a cyber security role, such as a Security Analyst or Specialist.</li><li>In-depth knowledge of security frameworks and risk management methodologies (e.g., NIST, ISO 27001).</li><li>Hands-on experience with security systems, including firewalls, intrusion detection/prevention systems (IDS/IPS), and vulnerability scanning tools.</li><li>A strong understanding of incident response procedures and digital forensics.</li><li>Excellent analytical and problem-solving skills, with a keen eye for detail.</li><li>Strong communication and interpersonal skills, with the ability to articulate complex security concepts to a non-technical audience.</li><li>A degree in Information Technology, Computer Science, or a related field is preferred, though equivalent professional experience will be strongly considered.</li><li>Professional certifications such as CISSP, CISM, or CompTIA Security+ would be a significant advantage.</li></ul><p><br /><br /> </p><h3>What We Offer</h3><p><br />This is a fantastic opportunity to make a significant impact within a stable and growing company that values quality and integrity.<br /> </p><ul><li>A competitive annual salary of <strong>$115,000 - $150,000 USD</strong>.</li><li>The autonomy to build and shape the company's cyber security strategy.</li><li>A key role within a collaborative and professional work environment.</li><li>The chance to protect a business that combines traditional craftsmanship with modern technology.</li></ul><p><br /> </p><p> </p>

Cyber Security Specialist

Peraton

<div><div><h5 class="jobSectionHeader"><b>About Peraton</b></h5>
<p>Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world&rsquo;s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we&rsquo;re keeping people around the world safe and secure.</p>
</div><div><h5 class="jobSectionHeader"><b>Program Overview</b></h5>
<div>Encompasses technical, engineering, data analytics, cyber security, management, operational, logistical, and administrative support for Bureau of Diplomatic Security, Cyber and Technology Security Directorate in three key offices/functional areas: Cyber Monitoring and Operations, Cyber Threat and Investigations, and Technology Innovation and Engineering State.</div>
</div><div><h5 class="jobSectionHeader"><b>About The Role</b></h5>
<div><p>Peraton is looking for a <b>Cyber IT Specialist, 2nd Shift</b><b> </b>to become part of our Federal Strategic Cyber Group.</p><br>
<p></p><p><b>Location: Beltsville, MD. Days: Tuesday - Saturday; Hours: 2:00 PM - 10:00 PM</b></p><br>
<p></p><p><b>Role &amp; Responsibilities:</b></p>
<ul><li>Ensure successful pass down of information to the oncoming shift to maintain seamless operations and continuity.</li>
<li>Complete Task List Reports, clearly documenting all shift activities, incidents, and operational events.</li>
<li>Monitor personnel activity, alerts, and DSCTS-Operations mailboxes to ensure timely communication and response to operational needs.</li>
<li>Monitor Splunk dashboards, SolarWinds, and other enterprise tools, and promptly notify the Shift Lead of identified issues.</li>
<li>Oversee the performance and security of monitoring tools to maintain system functionality and data integrity.</li>
<li>Create, update, and audit ServiceNow tickets (incidents, service tasks, and requests) to ensure accurate tracking, documentation, and resolution.</li>
<li>Perform initial triage, troubleshooting, and resolution of incidents and service requests to restore normal operations.</li>
<li>Document troubleshooting steps, actions taken, and service restoration details within ServiceNow for accurate record-keeping and knowledge sharing.</li>
<li>Verify incident resolution with end users and ensure proper ticket closure and documentation.</li>
<li>Escalate unresolved or complex incidents to appropriate teams (e.g., System Administration, NSS, or external vendors)</li>
<li>Initiate and coordinate Major Incident Response Plan (MIRP) activities, including bridge line setup, stakeholder notifications, and incident tracking.</li>
<li>Coordinate with cross-functional teams to troubleshoot and resolve outages, minimizing operational disruption.</li>
<li>Maintain and utilize escalation paths, call lists, and contact rosters to ensure rapid engagement of supporting teams.</li>
<li>Conduct investigations and diagnosis of outages, incidents, and service requests using enterprise tools, vendor resources, and open-source research.</li>
<li>Perform trend analysis to identify recurring issues and support proactive problem resolution.</li>
<li>Conduct root cause analysis in coordination with responsible teams and support updates to documentation and process improvements.</li>
<li>Create and submit knowledge articles to support continuous improvement and knowledge transfer.</li>
<li>Participate in disaster recovery processes to support business continuity during major system failures.</li>
<li>Perform quality checks on tickets, reports, and deliverables to ensure accuracy, completeness, and proper categorization prior to submission.</li>
<li>Support asset management activities, including receiving, inventorying, and tracking hardware shipments at BIMC (SA-26).</li>
<li>Coordinate and facilitate shipment of hardware components (e.g., RAM, PSUs, HDDs) to CONUS &amp; OCONUS sites, ensuring proper documentation and accountability.</li><br>
</ul></div></div><p></p><div><h5 class="jobSectionHeader"><b>Qualifications</b></h5>
<div><p><b>Minimum requirements are:</b></p>
<ul><li>A Bachelor&rsquo;s degree and 2 years of experience. An additional 4 years of experience may be substituted in lieu of the bachlor's degree requirement.</li>
<li><b>Demonstrated 1+ years in IT operations, network operations, or a cybersecurity support role experience.</b></li>
<li>Must either possess and maintain, or obtain prior to start date, one of the following professional certifications:
<ul><li>CASP+ CE, CCNA-Security, CISSP (or Associate), CND, CSSLP, CySA+, GICSP, GSEC, Security+ CE, SSCP</li>
</ul></li><li><b>Experience with ServiceNow or similar ITSM tools for incident and request management.</b></li>
<li><b>Familiarity with monitoring tools such as Splunk, SolarWinds, or similar platforms.</b></li>
<li><b>Understanding of incident response processes, including severity classification and escalation procedures.</b></li>
<li><b>Strong analytical and troubleshooting skills with the ability to operate in a fast-paced environment.</b></li>
<li>Demonstrated strong communication skills with the ability to provide clear and timely updates.</li>
<li>U.S. Citizenship required.</li>
<li>The ability to obtain an interim Secret security clearance before start date.
<ul><li>The ability to obtain a final Top Secret security clearance.</li>
</ul></li></ul></div></div><div><h5 class="jobSectionHeader"><b>Details</b></h5>
<div><p><b>Target Salary Range:</b> $66,000 - $106,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual&rsquo;s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.</p>
</div><div><p><b>Benefits Statement:</b> Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.</p>
</div><div><p><b>Application Statements:</b> The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. By applying to this job, you are expressing interest in the role and the Company. During the review of your application, you may be required to participate in an on-camera interview, as well as participate in a process to verify your identity.</p>
</div><p><b>EEO:</b> Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.</p></div></div><div></div>

Cyber IT Specialist, 2nd Shift

Sopra Steria

<div><div>Company Description</div><p><br>
CS GROUP, together with HE Space and Sopra Steria, has been successfully providing digital end-to-end systems and engineering services for more than 40 years. With over 2000 employees worldwide, we combine advanced and unique skills in both information technology and space data engineering. We combine entrepreneurial agility with cutting-edge technological expertise. CS GROUP is a leading provider of operational systems and an important and trusted long-term partner for space and defence organisations. At CS GROUP, we are driven by innovation and we value our most important asset: our people.</p><div><br>
Job Description</div><p><br>
The Security Engineering Team is responsible for the overall vulnerability management of critical systems across different segments (e.g., GCS, GMS) as well as remote sites. The team continuously monitors the threat landscape to identify vulnerabilities applicable to operational systems and ensures timely remediation through patching, mitigation measures, and risk management activities.</p><p>
This role requires a strong technical and engineering background combined with a deep understanding of modern cyber threats and attacker capabilities, including emerging risks driven by advancements in Artificial Intelligence.</p><p>
Key Responsibilities</p><ul><li>
Monitor, assess, and manage vulnerabilities affecting operational systems and remote sites.</li><li>
Perform vulnerability analysis and risk assessment using industry-standard methodologies, including CVSS.</li><li>
Review and analyze security procedures and applications used in daily operations, including access control, encryption mechanisms, configuration management, vulnerability assessment, malware detection, and database security activities.</li><li>
Ensure prompt remediation of identified vulnerabilities through patching, mitigation measures, or compensating controls.</li><li>
Identify, investigate, and classify system anomalies within the local security environment and develop corrective actions and solution concepts.</li><li>
Identify potential threats to information and communication systems, define response plans, review implementation of security measures, and develop operational solutions ready for approval and deployment.</li><li>
Escalate security incidents, policy violations, and critical vulnerabilities when required.</li><li>
Maintain and continuously update the Security Risk Register through the identification of new cyber security risks and threats.</li><li>
Conduct regular reviews of systems against customer-defined security requirements, document compliance status, and develop corrective action plans for identified deviations.</li><li>
Provide regular reporting to the Cyber Security Manager and System Evolution &amp; Security Manager, ensuring rapid escalation of critical security situations.</li><li>
Support the preparation of security training materials and conduct regular cyber security awareness sessions for project personnel.</li><li>
Define, implement, and support new cyber security projects and technical solutions.</li><li>
Contribute to the continuous improvement of security monitoring, analysis, and reporting tools.</li><li>
Support secure engineering practices throughout the system lifecycle and collaborate with multidisciplinary teams to enhance the overall security posture.</li></ul><div><br>
Qualifications</div><br>
<ul><li>
Minimum 2 years of professional experience in IT Systems Security, Cyber Security, or a related field.</li><li>
Strong experience working with Linux operating systems (Debian, Ubuntu) through the command line.</li><li>
Good programming skills in Python.</li><li>
Knowledge of virtualization technologies such as VMware, Hyper-V, and Proxmox.</li><li>
Experience with scripting languages such as Bash or PowerShell.</li><li>
Knowledge of the Common Vulnerability Scoring System (CVSS).</li><li>
Understanding of cryptographic principles and security technologies.</li><li>
Strong knowledge of systems engineering processes and methodologies.</li><li>
Experience in vulnerability management, security monitoring, and risk assessment activities.</li><li>
Strong analytical and problem-solving capabilities.</li><li>
Excellent communication and interpersonal skills.</li><li>
Ability to work independently and within multidisciplinary teams.</li><li>
Fluent English, both written and spoken.</li></ul><p>
Desirable Skills</p><ul><li>
Knowledge of containerization technologies such as Docker.</li><li>
Experience with Python web frameworks, particularly Django.</li><li>
Understanding of the Software Development Lifecycle (SDLC).</li><li>
Experience with software security testing techniques, including static analysis, dynamic analysis, and fuzz testing.</li><li>
Previous experience working in Agile/Scrum environments.</li><li>
Familiarity with space, critical infrastructure, or highly regulated environments.</li></ul><div><br>
Additional Information</div><p><br>
This position is based in We&szlig;ling-Oberpfaffenhofen<b>, Germany.</b></p><p>
Candidates must be eligible to obtain a German &Uuml;2 security clearance.</p><p><br>
If you believe you have what it takes for this position, please send your CV (in English and in Word or PDF format) to Andr&eacute;s Izquierdo by clicking on the &lsquo;Apply for this job&rsquo; button and quoting job reference.</p><p>
An exciting and dynamic international working environment awaits you!</p><p><b>
Last apply date: 30/06/2026!</b></p></div>

Cyber Security Engineer [26114] (M/W/D)

9th Way Insignia

<div><div><p>9th Way Insignia is a service-disabled, veteran-owned small business bringing transformative technology to our government customers so they can achieve their missions. Our specialties include cybersecurity, cloud modernization, software development, data analytics, enterprise architecture, enterprise IT, analytics, process automation, and artificial intelligence. Learn more about 9th Way Insignia at https://9thwayinsignia.com/.</p>
<p>
Application password: Niner</p></div><p><b>
Position Overview</b></p>
<p>
The Cyber Security Subject Matter Expert serves as a senior technical advisor responsible for guiding the design, implementation, modernization, and continuous improvement of enterprise cyber defense capabilities. This role provides expert-level support across cybersecurity strategy, architecture, operations, risk management, compliance, incident response, and emerging technology adoption. The Cyber Security SME will place strong emphasis on <b>innovative approaches to implementing cyber defenses</b>, ensuring the organization is not only compliant with security requirements but also forward-looking, adaptive, and resilient against evolving threats.</p>
<p><b>
Responsibilities</b></p>
<ul>
<li>Provide expert cybersecurity guidance across enterprise systems, cloud environments, applications, networks, and mission platforms.</li>
</ul><ul><li>Lead the development and implementation of innovative cyber defense strategies that improve detection, prevention, response, and recovery capabilities.</li>
</ul><ul><li>Assess current cyber defense posture and recommend practical, scalable improvements aligned with mission, business, and regulatory requirements.</li>
</ul><ul><li>Design and support implementation of layered defense models, including Zero Trust, endpoint protection, identity-based security, network segmentation, encryption, threat monitoring, and secure cloud controls.</li>
</ul><ul><li>Evaluate emerging cybersecurity technologies, tools, and methodologies to determine applicability, maturity, risk, and operational value.</li>
</ul><ul><li>Support development of cybersecurity roadmaps, implementation plans, maturity models, and modernization strategies.</li>
</ul><ul><li>Advise leadership on cyber risk, threat trends, security gaps, mitigation strategies, and investment priorities.</li>
</ul><ul><li>Collaborate with technical teams, program managers, architects, engineers, system owners, and business stakeholders to integrate security into planning, development, operations, and sustainment activities.</li>
</ul><ul><li>Support security assessments, risk assessments, authorization activities, audits, and compliance reviews.</li>
</ul><ul><li>Provide expertise in federal cybersecurity frameworks and standards, including NIST, RMF, FISMA, FedRAMP, CMMC, CIS Controls, and Zero Trust guidance.</li>
</ul><ul><li>Recommend automation, analytics, artificial intelligence, machine learning, and security orchestration approaches to improve cyber defense effectiveness.</li>
</ul><ul><li>Support incident response planning, tabletop exercises, root cause analysis, and lessons-learned activities.</li>
</ul><ul><li>Develop cybersecurity policies, procedures, playbooks, technical guidance, briefings, and executive-level decision materials.</li>
</ul><ul><li>Mentor junior and mid-level cybersecurity staff and promote knowledge sharing across technical teams.</li>
</ul><ul><li>Identify opportunities to reduce risk, improve efficiency, strengthen resilience, and advance the organization's cyber maturity.</li>
</ul><ul><li>This position may perform other duties as assigned. The responsibilities listed above are representative and not intended to be all-inclusive.</li>
</ul>
<p><b>Innovation-Focused Cyber Defense </b><b>Responsibilities</b></p>
<ul>
<li>Develop creative, mission-aligned approaches to implementing cybersecurity controls without unnecessarily slowing business operations.</li>
</ul><ul><li>Promote proactive defense concepts such as threat-informed defense, continuous monitoring, attack surface reduction, deception technology, behavioral analytics, and purple-team collaboration.</li>
</ul><ul><li>Recommend ways to use automation and orchestration to reduce manual cyber response actions and improve response time.</li>
</ul><ul><li>Integrate cyber threat intelligence into defensive planning, vulnerability prioritization, and operational decision-making.</li>
</ul><ul><li>Identify opportunities to improve security through secure-by-design, privacy-by-design, and resilience-by-design principles.</li>
</ul><ul><li>Support pilot programs, proofs of concept, and technology evaluations for new cyber defense capabilities.</li>
</ul><ul><li>Translate emerging cyber risks into actionable defense strategies that are understandable to both technical and non-technical stakeholders.</li></ul><br>
<p></p>
<p><b>
Requirements</b></p>
<ul>
<li>Master's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related field. Additional relevant experience may be considered in lieu of degree.</li>
</ul><ul><li>10+ years of cybersecurity experience, including experience supporting enterprise-level security programs.</li>
</ul><ul><li>Demonstrated experience advising senior leaders, program managers, and technical teams on cybersecurity risk and defense strategies.</li>
</ul><ul><li>Strong knowledge of cybersecurity architecture, security engineering, vulnerability management, incident response, identity and access management, cloud security, and continuous monitoring.</li>
</ul><ul><li>Experience implementing or advising on cybersecurity frameworks such as NIST 800-53, NIST 800-37, NIST 800-207, FISMA, FedRAMP, CMMC, CIS Controls, or ISO 27001.</li>
</ul><ul><li>Experience developing cybersecurity strategies, roadmaps, risk assessments, policies, procedures, and executive briefings.</li>
</ul><ul><li>Experience with tools such as Splunk, Microsoft Sentinel, Tenable, Qualys, CrowdStrike, Palo Alto, ServiceNow GRC/IRM, Security Hub, Azure Security Center/Microsoft Defender for Cloud, or similar platforms</li>
</ul><ul><li>Ability to evaluate technical risks and translate them into business or mission impacts.</li>
</ul><ul><li>Strong written and verbal communication skills.</li>
</ul><ul><li>Ability to work across multiple teams and influence decisions without direct authority.</li>
</ul><ul><li>Possess and maintain at least one of the below certifications&quot;</li>
</ul><ul><li>CISSP</li>
</ul><ul><li>GIAC Certified Detection Analyst</li>
</ul><ul><li>GIAC Certified Forensic Analyst</li>
</ul><ul><li>GIAC Certified Intrusion Analyst</li>
</ul><ul><li>GIAC Network Forensic Analyst</li>
</ul><ul><li>GIAC Penetration Tester (GPEN)</li>
</ul><ul><li>GIAC Reverse Engineering Malware (GREM)</li>
</ul><ul><li>GIAC Security Expert (GSE)</li>
</ul><ul><li>ISC2 Certified Information System Security</li>
</ul>
<p><b>Preferred / Desired</b></p>
<ul>
<li>Experience with Zero Trust architecture, cloud security, DevSecOps, security automation, cyber analytics, SIEM/SOAR, and threat-informed defense.</li>
</ul><ul><li>Experience supporting Authority to Operate, RMF packages, security control assessments, POA&amp;Ms, and continuous monitoring.</li>
</ul><ul><li>Experience leading cyber modernization initiatives or enterprise security transformation efforts.</li>
</ul><ul><li>Familiarity with AI-enabled cybersecurity, machine learning-based detection, automated response, and advanced threat analytics</li>
</ul>
<p><b>Location</b></p>
<p>
This position is remote with periodic travel based upon customer, business development, and operational requirements. Occasional travel to headquarters in Ashburn, Virginia and customer locations is expected.</p><div><p><i>
9th Way Insignia's range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.</i></p>
<p><b>
Clearance/Background Investigation</b><br>
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.</p>
<p><b>
Benefits</b><br>
Eligible employees will have access to our comprehensive benefits package which includes Medical, Dental, Vision, Voluntary Life Insurance, 401(k), Basic Life A&amp;D, STD, LTD, PTO, Telehealth, paid holidays, FSA, HSA. Additional resources include our Employee Assistance Program (EAP) and Traveling Assistance.</p>
<p><b>
Legal</b><br>
We're an equal employment opportunity employer that empowers our people to fearlessly drive change &ndash; no matter their race, color, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, age, marital status, sexual orientation, gender identity, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, or local law.</p></div></div>

Cyber Security SME

Speak Easy Marketing PVT LTD

<p><b>We're Hiring: Cyber Security Expert</b></p><p><b>Location:</b> Lahore<br/><b>Company:</b> Dunya TV (National Communication Services (SMC-Pvt.) Ltd.)<br/><b>Department:</b> Information Technology (IT)</p><p>Are you passionate about protecting enterprise systems from cyber threats? Dunya TV is looking for a highly skilled <b>Cyber Security Expert</b> to strengthen our security posture, safeguard critical infrastructure, and ensure the confidentiality, integrity, and availability of our digital assets.</p><p>Key Responsibilities</p><ul><li>Design, implement, and maintain enterprise cybersecurity policies and controls.</li><li>Monitor networks, servers, and endpoints for security incidents and vulnerabilities.</li><li>Conduct vulnerability assessments and penetration testing.</li><li>Investigate and respond to cybersecurity incidents, malware infections, and data breaches.</li><li>Configure and manage firewalls, IDS/IPS, VPNs, endpoint protection, and email security solutions.</li><li>Perform security audits, risk assessments, and compliance reviews.</li><li>Ensure timely installation of security patches and system updates.</li><li>Develop and maintain incident response and disaster recovery procedures.</li><li>Conduct cybersecurity awareness training for employees.</li><li>Maintain security documentation, reports, and compliance records.</li><li>Collaborate with IT infrastructure and application teams to implement secure solutions.</li></ul><p>Requirements</p><ul><li>Bachelor's degree in Computer Science, Information Security, Cyber Security, or a related field.</li><li><b>3&ndash;5 years</b> of hands-on experience in cybersecurity or information security.</li><li>Strong knowledge of network security, Windows/Linux administration, Active Directory, cloud security, and endpoint protection.</li><li>Experience with SIEM solutions, vulnerability scanners, EDR/XDR, and security monitoring tools.</li><li>Knowledge of ISO 27001, NIST Cybersecurity Framework, CIS Controls, or similar security standards.</li><li>Familiarity with ethical hacking methodologies and penetration testing tools is preferred.</li><li>Strong analytical, troubleshooting, and incident response skills.</li><li>Excellent communication and documentation skills.</li></ul><p>Preferred Certifications</p><ul><li>CEH (Certified Ethical Hacker)</li><li>CompTIA Security+</li><li>CISSP</li><li>CISM</li><li>ISO 27001 Lead Implementer/Lead Auditor</li><li>Microsoft Security Certifications</li><li>Cisco CyberOps or CCNP Security (preferred)</li></ul><p>Work Location: In person</p>

Cyber Security Expert

Chemify Ltd

<div><p><b>Cyber Security Engineer (DevSecOps)</b></p><p>
Glasgow, Scotland &bull; Hybrid &bull; Full-Time</p><p><b>
About Chemify</b></p><p>
Chemify is revolutionising chemistry. We are creating a future where the synthesis of previously unimaginable molecules, drugs, and materials is instantly accessible. By combining AI, robotics, and the worlds largest continually expanding database of chemical programs, we are accelerating chemical discovery to improve quality of life and extend the reach of humanity.</p><p></p><p><b><br>
Role Overview</b></p><p>
We are hiring an experienced and hands-on Security Engineer to join our Corporate IT &amp; Platform infrastructure team in a hybrid role based in Glasgow. The focus for this role is integrating security industry standards into Chemifys suite of applications and hardening the application &amp; infrastructure security across our growing office and manufacturing/laboratory footprint.</p><p></p><p><br>
This role will drive the business towards achieving and maintaining regulatory standards such as SOC 2 and ISO 27001. Reporting to the Head of IT, you will partner and consult with our teams, embedding security across all areas of IT, operations, and software development.</p><p></p><p><br>
This role would suit a candidate with hands on experience working with complex cloud software, on-premises hardware/networks. Someone who thrives in a small, dynamic team with a start-up mentality and the ability to drive real change across a business operating cutting-edge robotics, GPU infrastructure, and cloud technologies. You will be able apply the technical changes needed to improve security and enforce security via IaC code, GitOps and policy.</p><p></p><p><b><br>
Key Responsibilities</b></p><p><b>
Information Security &amp; Framework</b></p><ul><li>Build, configure, and support Chemifys security tools, policies and platform across all aspects of the estate</li><li>Define and implement DevSecOps requirements to address infrastructure, Data and application security needs</li><li>Lead threat modelling exercises and coordinate penetration testing activities</li><li>Own security incidents and vulnerability management processes, ensuring findings are triaged, tracked, and remediated</li><li>Implement automated identity, access and authorisations solutions</li></ul><p></p><p><b><br>
Infrastructure &amp; Network Hardening</b></p><ul><li>Harden network infrastructure including firewalls, segmentation,vpn, zero-trust access controls, and endpoint security</li><li>Define and improve Controls &amp; Change Management processes in partnership with IT and engineering teams</li><li>Participate in vendor and contractor discussions around secure service introduction and ongoing support</li></ul><p></p><p><b><br>
Software &amp; Vendor Assessments</b></p><ul><li>Lead all aspects of vendor compliance, vendor access controls, and software security reviews through our security compliance and automation platform</li><li>Assess third-party tools and integrations against Chemifys security standards prior to adoption</li></ul><p></p><p><b><br>
Observability, Compliance &amp; Governance</b></p><ul><li>Implement real-time compliance monitoring and security observability tooling across the business estate</li><li>Drive and maintain progress toward SOC 2 and ISO 27001 certification and ongoing compliance</li><li>Awareness of Endpoint/workstation security provisioning via Intune.</li></ul><p></p><p><b><br>
Business Continuity</b></p><ul><li>Identify and remediate Cyber risks &amp; vulnerabilities across our 24/7 manufacturing environment</li><li>Contribute to business continuity planning and disaster recovery processes</li></ul><p></p><p><b><br>
CI/CD Security &amp; Best Practice</b></p><ul><li>Embed automated scanning and security controls into CI/CD pipelines and define DevSecOps standards for development and data teams</li><li>Publish and disseminate CI/CD security best practices, and provide targeted security training where required</li></ul><p></p><p><b><br>
What Youll Bring</b></p><ul><li>Degree in Science, IT, Engineering, or a related field, or equivalent practical experience</li><li>Professional security certifications in one or more of: SSCP, AWS Security Specialty (SCS-C02), or CISSP</li><li>Strong technical proficiency in Python and Kubernetes</li><li>Solid Linux systems engineering skills (administration, hardening, scripting)</li><li>Experience with containerisation and the design and security of CI/CD pipelines</li><li>Experience with cloud infrastructure security</li><li>Experience operating secure distributed systems in production environments</li><li>Working knowledge of Cyber Essentials, GDPR, ISO 27001 and related Global regulatory frameworks</li><li>Clear communication skills and the ability to engage and support stakeholders at all levels of the business</li></ul><p></p><p><b><br>
Beneficial Skills</b></p><ul><li>ITSM experience and familiarity with the ITIL framework</li><li>Coaching and mentoring experience this role will mentor IT engineers and developers on security best practice</li><li>Hands-on experience with Vanta or a comparable security compliance and automation platform</li><li>Familiarity with SIEM/SOAR tooling and security incident response processes</li><li>Exposure to science/healthcare industry or regulated manufacturing environments</li></ul></div>

Cyber Security Engineer (DevSecOps)

General Dynamics Information Technology

<div></div><div><div><div>Clearance Level
<div>Top Secret/SCI</div>
</div><div></div><div>Category
<div>Cyber and IT Risk Management</div>
</div><div></div><div>Location
<div>Springfield, Virginia</div>
<i>(</i><i>Onsite Workplace</i><i>)</i>
</div><div>
</div></div><div><div>Key Skills For Success
</div><div><p>Analytics</p>
</div><div><p>ArcSight SIEM</p>
</div><div><p>ElasticSearch</p>
</div><div><p>Kibana</p>
</div></div><div></div><div><div><div><div><div><div>
</div></div></div><div><h5 class="jobSectionHeader"><b>REQ#:</b><b> </b><b>RQ223514</b></h5>
<h5 class="jobSectionHeader"><b>Public Trust:</b><b> </b><b>None</b></h5>
<h5 class="jobSectionHeader"><b>Requisition Type:</b><b> </b><b>Pipeline</b></h5>
<h5 class="jobSectionHeader"><b>Your Impact</b></h5>
<p>Own your opportunity to serve as a critical component of our nation&rsquo;s safety and security. Make an impact by using your expertise to protect our country from threats.</p>
<h2 class="jobSectionHeader"><b>Job Description</b></h2>
<div><p>GDIT is seeking a motivated, career and customer-oriented Cybersecurity Operations Specialist to perform on our Cybersecurity Data Analysis Services team in Springfield, VA.</p>
<p></p><p>The team member shall provide cybersecurity data analysis services, which designs, develops, builds, tests, configures, employs, operates, integrates, sustains, and refreshes the Security Information Events Management (SIEM) capability (i.e. Enterprise Audit), long-term analytics platform, log aggregation platform, and the cyber threat intelligence capability, signature development and deployment, and reputation management services. This includes the onboarding of all new and existing IT resources, and ensuring the correct routing of all audit events to mission partners in accordance with Intelligence Community Standards (ICS) 500-27.</p>
<p></p><p>Job Duties Include:</p>
<p></p><ul><li>Provide all preventative and corrective maintenance to ensure consistent, reliable, and secure service availability. This includes all actions required to return the service to full operational capability such as vendor RMA processes, removal and proper disposal of broken equipment/software, installation and testing of new equipment/software, and configuration of new equipment/software</li>
<li>Maintain system availability and reliability with a threshold of 99.99%</li>
<li>Detect and ticket degradations (volume/velocity) of all SIEM data flows within 60 minutes of the start of the degradation</li>
<li>Perform day-to-day maintenance, and specific scheduled maintenance activities that result from manufacturers recommended service intervals, alerts, bulletins, available patches, and updates according to agency approved change management processes. This includes maintaining updated documentation, change logs, and service bulletin libraries for all supported equipment and software in the CSOC knowledge management platform</li>
<li>Execute emergency maintenance actions with sufficient urgency to preclude unacceptable outage durations, approved by the Government prior to execution, and coordinated through and approved by CSOC and ESC government management</li>
<li>Perform all development, engineering, testing, integration, and implementation actions necessary for major vendor revisions</li>
<li>Perform continuous engineering assessments to improve the performance, effectiveness, coverage, and maturity of this service.</li>
<li>Retain documentation regarding loss of event logs (e.g. June 5-7th DNS logs were not ingested from SBU and are lost)</li>
<li>Configure all assets assigned to this service within the Government Furnished Information - Software Tools list in accordance with all Federal, DoD, IC, and NCE laws, directives, orders, polices, guidance, procedures etc.</li>
<li>Perform all development, design, engineering, testing, integration, and implementation actions needed for the total integration and interoperability between all applicable assets in the Government Furnished Information - Software Tools list. This includes ensuing all data flows are properly parsed for ingestion/transmission to internal and external automated reporting systems (e.g. JFHQ DoDIN &ndash; Joint Incident Management System, DoD CIO &ndash; DoD Scorecard/Get to Green reporting, IC CIO &ndash; Cybersecurity Performance Evaluation Model reporting, etc.)</li>
<li>Utilize agency approved ticketing systems to document, track, assign, update, and coordinate all engineering, integration, configuration, and maintenance actions</li>
<li>Use various monitoring, analysis, and visualization tools to track effectiveness, status, performance metrics, and other information as needed or required by Government staff and contractors assigned Cybersecurity Operations Services and Cybersecurity Readiness Services</li>
</ul><p></p><p>Required Skills:</p>
<ul><li>SIEM experience with one of the following ArcSight, ElasticSearch, Splunk, Event Broker, User Behavioral Analysis (UBA)</li>
<li>Experience providing support to Cybersecurity Operations Cell (CSOC) in creating alerting rules</li>
<li>Create SIEM playbooks</li>
<li>Linux (RHEL) Expert (administration and engineering)</li>
<li>Proficient in manipulating SIEM filters to better find and analyze potential malicious/atypical activity and reduce false positives</li>
<li>Experience with content development within ArcSight and Kibana to facilitate Cyber Analysts ability to investigate malicious events</li>
<li>Creation of ArcSight rules based on use cases of malicious events</li>
<li>Tuning and aggregation of queries and filters</li>
<li>Skilled in troubleshooting event flow through Enterprise Audit infrastructure</li>
<li>Skilled in troubleshooting event format and parsing for ingest into data storage and into SIEM tools</li>
</ul><p></p><ul><li>Active TS/SCI Clearance</li>
<li>DoD 8570.01-M IAT Level II and CSSP Infrastructure Support certifications</li>
<li>6+ years Experience with SIEM and Development Projects</li>
<li>6+ years Experience with SIEM support for projects and technical exchange meetings</li>
<li>6+ years Experience developing and maintaining enterprise audit projects</li>
</ul><p></p><p><b>Desired Skills:</b></p>
<ul><li>Kibana</li>
<li>Data Analytics</li>
</ul></div></div><p></p><div><div><div><h3 class="jobSectionHeader"><b>Work Requirements</b></h3>
</div></div><div></div><div><div>Years of Experience
<p>6 + years of related experience</p>
<ul><li>may vary based on technical training, certification(s), <b><i>or</i></b> degree</li></ul>
</div><div></div><div>Certification
</div><p></p><div>Travel Required
<p>None</p>
</div><div></div><div>Citizenship
<p>U.S. Citizenship Required</p>
</div></div></div></div><div><h3 class="jobSectionHeader"><b>Salary and Benefit Information</b></h3>
<p>The likely salary range for this position is $128,039 - $173,229. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.
</p>
<h3 class="jobSectionHeader"><b>Our Identity Verification Process</b></h3>
<p>As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.</p>
<h3 class="jobSectionHeader"><b>About Our Work</b></h3>
<div></div><p>We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.</p>
<p>Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.</p>
<p><i>Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans</i></p></div></div></div></div>

Cybersecurity Operations Specialist -SIEM Services (Evergreen)

Search 4334+ Cyber security specialist jobs near you this July. New roles added regularly across leading industries. Apply today.