cybersecurity engineer

Dutch Bros Coffee

<div><p>It's fun to work in a company where people truly believe in what they are doing. At Dutch Bros Coffee, we are more than just a coffee company. We are a fun-loving, mind-blowing company that makes a difference one cup at a time.</p><p></p><p><b>
Position Overview:</b><br>
We&rsquo;re looking for a Cybersecurity Engineer to drive the design, implementation, and automation of advanced security controls across our Security Operations team. Reporting to the Manager, Cybersecurity Operations this role drives key cybersecurity programs, including the Security Operations Center (SOC), Vulnerability Management, Data Loss Prevention (DLP), ensuring the confidentiality, integrity, and availability of critical assets. This role will be tasked with supporting security strategies and initiatives while proactively addressing emerging cybersecurity risks. Strong technical expertise and a proactive approach to challenges are essential for success in this role.</p><p><b><br>
Job Qualifications:</b></p><ul><li><p>
2&ndash;4+ years of hands-on experience in Security Engineering roles</p></li><li><p>
1+ year of hands-on experience in Software Engineering</p></li><li><p>
Strong understanding of security principles, software development, Identity and Access Management (IAM), networking, vulnerability management, Security Orchestration, Automation, and Response (SOAR), and security operations</p></li><li><p>
Hands-on experience with:</p><ul><li><p>
Zero Trust methodologies and Secure Service Edge (SSE) platforms (Cloudflare, Cisco, Microsoft, Palo Alto Networks)</p></li><li><p>
Python, REST APIs, and data formats (JSON, CSV, XML)</p></li><li><p>
Security automation (SOAR, CI/CD, Infrastructure as Code)</p></li><li><p>
Azure and AWS cloud environments</p></li><li><p>
IAM and Privileged Identity Management (PIM) solutions (Entra ID, CyberArk, Okta, Auth0)</p></li><li><p>
Linux and Windows administration</p></li><li><p>
SIEM platforms (Microsoft Sentinel, Splunk, Rapid7)</p></li><li><p>
Vulnerability management platforms (Qualys, Rapid7, Tenable)</p></li></ul></li><li><p>
Experience with:</p><ul><li><p>
DevOps methodologies and best practices</p></li><li><p>
Next-Generation Firewalls (Palo Alto, Fortinet, Sophos, Check Point)</p></li><li><p>
Compliance frameworks (PCI DSS, SOX, NIST, CIS Controls)</p></li><li><p>
Endpoint Detection and Response (EDR) platforms (Microsoft Defender, CrowdStrike, SentinelOne)</p></li><li><p>
Data Loss Prevention (DLP) solutions (Microsoft Purview, Symantec, Trellix)</p></li><li><p>
Large Language Models (LLMs) and prompt engineering concepts</p></li><li><p>
Strong problem-solving, communication, and technical documentation skills</p></li><li><p>
Proven ability to collaborate effectively with cross-functional technical teams</p></li></ul></li><li><p>
Preferred / Highly Desired Qualifications:</p><ul><li><p>
CISSP, CCSP, or OSCP</p></li><li><p>
AWS Certified Solutions Architect &ndash; Associate</p></li><li><p>
AWS Certified Security &ndash; Specialty</p></li><li><p>
Microsoft Certified: Azure Security Engineer Associate</p></li><li><p>
CCNA</p></li><li><p>
HashiCorp Certified: Terraform Associate</p></li></ul></li></ul><p><b><br>
Location Requirement:</b><br>
This role is located in Tempe, Arizona. This position is required to be in office 4 days per week (Mon-Thurs); Fridays are optional remote work days.<br>
<br>
<b>Key Result Areas (KRAs):</b></p><p>
Security Operations Center (SOC) Automation &amp; Operations</p><ul><li><p>
Design and implement automated workflows and processes for Security Operations Center (SOC) operations.</p></li><li><p>
Manage and optimize day-to-day SOC tools and operations to ensure effective monitoring, detection, and response to security incidents.</p></li><li><p>
Develop and enhance SOC processes and procedures to improve operational efficiency, scalability, and advanced threat detection capabilities.</p></li></ul><p>
Incident Response</p><ul><li><p>
Lead and facilitate the incident response lifecycle, including identification, containment, eradication, and recovery from security incidents.</p></li><li><p>
Conduct post-incident reviews and drive implementation of lessons learned to improve overall security posture.</p></li><li><p>
Partner with IT and GRC teams to maintain incident response readiness, including development of playbooks and execution of incident simulation exercises.</p></li></ul><p>
Vulnerability Management</p><ul><li><p>
Support and enhance the vulnerability management program, including assessments, prioritization, tracking, and remediation strategies.</p></li><li><p>
Collaborate with IT and development teams to ensure timely patching and mitigation of identified vulnerabilities.</p></li><li><p>
Define and track program metrics, reporting status and risk trends to leadership.</p></li></ul><p>
Data Loss Prevention (DLP)</p><ul><li><p>
Contribute to the enterprise Data Loss Prevention (DLP) strategy to protect sensitive data across systems and prevent unauthorized access or exfiltration.</p></li><li><p>
Participate in audits and assessments to evaluate DLP effectiveness and ensure compliance with internal and external requirements.</p></li></ul><p>
Microsoft Security Ecosystem Integration</p><ul><li><p>
Maximize utilization and ROI of the Microsoft 365 E5 and Entra security stack.</p></li><li><p>
Manage and ensure full deployment of Microsoft Defender suite (Endpoint, Cloud Apps, Identity) across 95% of eligible assets.</p></li><li><p>
Integrate Microsoft Sentinel SIEM with key enterprise data sources, including SASE, EDR, IAM, and vulnerability management platforms, to enable unified threat detection and response.</p></li><li><p>
Reduce mean time to detect (MTTD) and mean time to respond (MTTR) by 30% through automation, correlation rules, and detection engineering within Sentinel.</p></li></ul><p>
Security Automation &amp; AI-Driven Operations</p><ul><li><p>
Leverage automation and AI to streamline detection, response, and compliance workflows across security operations.</p></li><li><p>
Automate 60% of repetitive SOC tasks using SOAR platforms, AI models, and scripted playbooks (Python, Logic Apps).</p></li><li><p>
Implement LLM-based enrichment and triage of security alerts to reduce analyst review time by 40%.</p></li><li><p>
Develop and integrate automated patch validation and remediation workflows using Infrastructure as Code (IaC) and CI/CD pipelines.</p></li><li><p>
Build and deploy anomaly detection models for user and system behavior monitoring to enhance proactive threat detection.</p></li></ul><p><b><br>
Skills:</b></p><ul><li><p>
Change Management</p></li><li><p>
Collaborative</p></li><li><p>
Communication</p></li><li><p>
Critical Problem Solving</p></li></ul><p><b><br>
Physical Requirements:</b></p><ul><li><p><b>
In-Office Environment:</b>Must be able to work in a busy, crowded, and loud office with frequent distractions and interruptions</p></li><li><p>
Must be able to collaborate in-person with occasional impromptu in-person meetings</p></li><li><p><b>
Office Conditions:</b>Adaptability to typical office conditions, which may include exposure to air conditioning, heating, artificial lighting, and varying noise levels</p></li><li><p><b>
Mobility</b>: Ability to sit, stand, reach, twist, stretch, and work at a desk for long stretches. Must be able to occasionally move or lift office items up to 25 pounds</p></li><li><p><b>
Hearing Requirements:</b>Hearing must be sufficient or correctable to ensure clear understanding of spoken information, including participating in virtual meetings and phone calls. Use of hearing aids or other assistive devices is acceptable if needed.</p></li><li><p><b>
Reading and Writing Proficiency:</b>Ability to read and write in English is essential for processing documents, drafting reports, and following up on necessary actions. Proficiency in written communication is required to handle job-related tasks effectively.</p></li><li><p><b>
Vision Requirements:</b>Vision must be adequate or correctable to perform essential job duties, such as reading documents on a computer screen and using other visual tools. Use of corrective lenses or other measures to meet visual requirements is expected if needed.</p></li><li><p><b>
Technology Proficiency:</b>Must be proficient in operating a computer and other office productivity tools such as printers, scanners, and collaboration software.</p></li><li><p><b>
Effective Communication:</b>Must possess strong verbal and written communication skills to interact effectively with team members, clients, and other stakeholders via email, video conferencing, and other in office communication tools.</p></li></ul><p></p><p><b>
Compensation:</b></p><p>
DOE</p><p></p><p>
If you like wild growth and working in a unique and fun environment, surrounded by positive community, you'll enjoy your career with us!</p></div>

Cybersecurity Engineer

Vantage Data Centers

<div><h1 class="jobSectionHeader"><b>About Vantage Data Centers</b></h1><p><br>
Vantage Data Centers powers, cools, protects and connects the technology of the world&rsquo;s well-known hyperscalers, cloud providers and large enterprises. Developing and operating across North America, EMEA and Asia Pacific, Vantage has evolved data center design in innovative ways to deliver dramatic gains in reliability, efficiency and sustainability in flexible environments that can scale as quickly as the market demands.</p><p></p><h1 class="jobSectionHeader"><b>
Position Overview
</b></h1><p>The Vantage Cybersecurity Department is very hands-on. In most cases, we specify, purchase, configure, and maintain all networking and server hardware with a keen focus on cybersecurity measures. We also work closely with partner Value Added Resellers (VARs) to learn about the latest technological changes and cybersecurity trends so that we can make informed purchase decisions. We are always looking for ways to strike the best balance between technology, performance, cost, and cybersecurity. Vantage Cybersecurity Department also participates in designing each of our new data center building&rsquo;s cybersecurity infrastructure. If you like getting your hands dirty and helping to design, build, and maintain cybersecurity infrastructure in a modern data center, then come work at Vantage. We&rsquo;re expanding with many new builds, enhancing our focus on safeguarding data and infrastructure in the face of evolving cyber threats.</p><p></p><p>
The ICS/OT Cybersecurity Engineer will support the security of a global OT environment by implementing, and validating cybersecurity controls across ICS/OT systems. The role includes performing risk and vulnerability assessments, contributing to secure architecture and strategy, and delivering hands-on implementation of OT security solutions such as segmentation, monitoring, and privileged remote access.</p><p>
The engineer will also support controlled security testing and purple team activities to validate controls, identify attack paths, and improve detection and response. Additional responsibilities include analysis of security events, root cause investigation, and continuous improvement of monitoring and response capabilities, while working closely with other teams to ensure a safe, non disruptive security posture.</p><p></p><h1 class="jobSectionHeader"><b>
Responsibilities</b></h1><ul><li><p>
Partner closely with the OT Cybersecurity Manager, other OT Cybersecurity Engineers, and wider cybersecurity functions including GRC and Threat Intelligence.</p></li><li><p>
Represent OT Cybersecurity, supporting on call activities and participating in meetings with site operations, vendors, and internal stakeholders to drive consistent implementation of OT cybersecurity practices.</p></li><li><p>
Perform OT Cybersecurity Risk assessments against best practices and industry frameworks (e.g., ISA/IEC 62443, NIST SP 800-82, NIST CSF) including participating in audits.</p></li><li><p>
Act as a key contributor in OT security testing by conducting controlled, non disruptive vulnerability assessments, security validation, and simulation based (purple team) activities to identify vulnerabilities, validate security controls, and assess potential attack paths in coordination with engineering and operations teams.</p></li><li><p>
Conduct technical data collection and analysis, including packet capture (PCAP), firewall rule reviews, system configuration reviews, Active Directory enumeration where relevant, and industrial network traffic analysis to identify vulnerabilities, attack paths, anomalous activity, and misconfigurations.</p></li><li><p>
Support integration of OT security monitoring into SOC workflows, including alert tuning, use case development, detection improvement, and SOAR playbook development.</p></li><li><p>
Support validation of alerts, reduce false positives, identify detection gaps, and improve response effectiveness against relevant OT attack techniques.</p></li><li><p>
Support Implementation and Ongoing management of Privileged Remote Access (PRA) solution to control and monitor third party access to critical OT environments.</p></li><li><p>
Perform OT asset discovery, inventory management, and risk classification using OT monitoring platforms (e.g., passive monitoring tools), and support the deployment and configuration of ICS/OT IDS solutions.</p></li><li><p>
Work closely with data center teams to ensure cybersecurity controls do not impact uptime, safety, or operational resilience.</p></li><li><p>
Researching, developing, operationalizing, evaluating, and improving OT defensive tactics, techniques, and procedures (TTPs) for detecting and responding to cyber threats</p></li><li><p>
Maintain and create documentation as needed</p></li><li><p>
Perform other ad hoc duties to support the company&rsquo;s security goals.</p></li></ul><p></p><h1 class="jobSectionHeader"><b>
Job Requirements
</b></h1><ul><li><p><b>Hands-on experience in IT / OT environments</b>, deploying, configuring, and supporting IT / OT cybersecurity solutions across industrial systems and critical infrastructure.</p></li><li><p><b>
Proven experience performing cybersecurity risk assessments</b> across IT / OT environments, including identification of threats, vulnerabilities, and operational impacts.</p></li><li><p><b>
Understanding of security testing methodologies</b>, including white box, grey box, and controlled (non-disruptive) assessment approaches in IT / OT environments.</p></li><li><p><b>
Strong knowledge of cyber threats</b>, attack vectors, exploits, and adversary tactics, techniques, and procedures (TTPs), with the ability to apply this knowledge to real-world scenarios.</p></li><li><p><b>
Experience in purple team or security validation activities</b>, including simulating attack scenarios in a controlled manner to validate security controls, detection capabilities, and response effectiveness.</p></li><li><p><b>
Ability to analyse network traffic and host-based data</b> (e.g., logs, packet captures, system configurations) to identify anomalies, security events, and potential attack paths.</p></li><li><p><b>
Strong understanding of networking fundamentals</b>, including routing, switching, VLANs, segmentation, and secure network design for IT / OT environments.</p></li><li><p><b>
Experience supporting or participating in incident response</b> activities and tabletop exercises, helping validate readiness and improve coordination across teams.</p></li><li><h2 class="jobSectionHeader"><b><br>
Knowledge and Experience in one or more of the following areas:</b><b>
</b></h2></li><li><p>Building Management Systems (BMS)</p></li><li><p>
Electrical Power Monitoring Systems (EPMS)</p></li><li><p>
SCADA platforms</p></li><li><p>
PLC platforms (e.g., Siemens, Schneider, Rockwell)</p></li><li><p>
Industrial Protocols (Modbus, DNP3, BACnet, OPC, S7, CIP)</p></li><li><p>
Passive OT monitoring solutions (e.g., Tenable, Nozomi, Claroty)</p></li><li><p>
Firewalls (IDS/IPS, DPI, application control, web filtering)</p></li><li><p>
Network infrastructure (routing, switching, wireless, segmentation)</p></li><li><p>
SIEM, SOAR, and XDR platforms</p></li><li><p>
Log analysis, alert investigation, and incident response workflows</p></li><li><p>
Familiarity with security testing and analysis tools such as Kali Linux, Nmap, Wireshark, Metasploit (controlled use), and other network and protocol analysis tools</p></li><li><p><br>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Engineering, or related focused technical training or 4 additional years of engineering experience that may have been acquired in the military, public or private sectors.</p></li><li><p>
Following certifications are preferred CCNA, GICSP, GRID, other Network and Security certifications</p></li><li><p>
Following certifications are nice to have OSCP / OSCP+, GPEN</p></li><li><p>
Understanding of general cybersecurity frameworks (ISO IEC 27001/27002, ISO 15408, NIST Cybersecurity Framework (CSF), NIST SP800-53)</p></li><li><p>
Excellent written and verbal communication skills with transparent and timely communication</p></li><li><p>
Expected travel is less than 20% but may be higher during construction projects. May grow and evolve over time</p></li><li><p>
Be available outside standard working hours when required</p></li><li><p>
Data Center experience is strongly preferred, but not required</p></li></ul><p></p><p><br>
#LI-FW1</p><p><br>
We operate with No Ego and No Arrogance. We work to build each other up and support one another, appreciating each other&rsquo;s strengths and respecting each other&rsquo;s weaknesses. We find joy in our work and each other, actively seeking opportunities to inject fun into what we do. Our hard and efficient work is rewarded with an above market total compensation package. We offer a comprehensive suite of health and welfare, retirement, and paid leave benefits exceeding local expectations.</p><p><br>
Throughout the year, the advantage of being part of the Vantage team is evident with an array of benefits, recognition, training and development, and the knowledge that your contribution adds value to the company and our community.</p><p></p><p>
Don't meet all the requirements? Please still apply if you think you are the right person for the position. We are always keen to speak to people who connect with our mission and values.</p><p></p><p>
Vantage Data Centers is an Equal Opportunity Employer</p><p>
Vantage Data Centers does not accept unsolicited resumes from search firm agencies. Fees will not be paid in the event a candidate submitted by a recruiter without an agreement in place is hired; such resumes will be deemed the sole property of Vantage Data Centers.</p></div>

OT Cybersecurity Engineer

Barracuda Networks

<div><div>Job ID 27- 0222</div><div>
</div><div></div><div>
Come join our passionate team! Barracuda is a leading cybersecurity company providing complete protection against complex threats. Our platform protects email, data, applications, and networks with innovative solutions, and a managed XDR service, to strengthen cyber resilience. Hundreds of thousands of IT professionals and managed service providers worldwide trust us to protect and support them with solutions that are easy to buy, deploy, and use.</div><div>
</div><div>
We know a diverse workforce adds to our collective value and strength as an organization. Barracuda Networks is proud to be an Equal Opportunity Employer, committed to equal employment opportunity and equitable compensation regardless of race, gender, religion, sex, sexual orientation, national origin, or disability.<br>
</div><div></div><div><b>
Envision yourself at Barracuda:</b></div><div>
</div><div>
Barracuda XDR is seeking a passionate and seasoned <b>Cybersecurity Engineer</b> to help us deliver excellent threat research, detection capabilities, and incident response guidance to our customers. You must possess a strong background in security and data engineering, automation, use-case development, threat hunting, and attack simulation. This is a unique opportunity to work with over 40 different cloud, endpoint, and network data sources blending security knowledge with data engineering. Our global 24x7 SOC team is innovative, competitive, and committed to continuous improvement. We are looking for candidates with strong communication, support, and leadership skills. This role requires flexibility and an eagerness to learn new technologies</div><div><b>
</b></div><div><b>
What you&rsquo;ll be working on:</b></div><div><i>
</i></div><ul><li>
Detection engineering and use-case development.
</li><li>ETL, normalization, SQL, python notebooks, anomaly detection.
</li><li>Emerging threat research and threat intelligence gathering.
</li><li>SOC tier 3 escalation support.
</li><li>Security orchestration, automation, and response (SOAR).
</li><li>Adversarial emulation and ethical hacking.
</li><li>Incident response and report writing.
</li><li>Fun cutting-edge security projects.</li></ul><div><b>
What you bring to the role:</b></div><div>
</div><div>
Strong foundation in security operations, which provides the context for advanced engineering projects within the Barracuda XDR SOC.<br>
</div><div>
Security Operations</div><ul><li>
At least 4-6 years of experience working for a SOC or CIRT is required.
</li><li>Comfortable and confident leading complex security investigations.
</li><li>Strong threat hunting abilities in SIEM solutions such as Elastic or Splunk.
</li><li>Basic hands-on experience with Kali Linux and other offensive security tools.
</li><li>Experience working with API-based integrations or SOAR applications.
</li><li>Basic familiarity with cloud services such as AWS and Azure and network technologies like the TCP/IP stack, firewall management, IDS/IPS, and log collection techniques.</li></ul><div>
 Security and Data Engineering</div><ul><li>
At least 2 years of experience with CICD, Python and SQL is required.
</li><li>Deep understanding of end-to-end detection engineering: research, development, automation, testing (Attack-and-Defend), and documentation.
</li><li>Familiarity with platforms such as Elastic and Databricks is preferred.</li></ul><div>
 General Requirements</div><ul><li>
Strong verbal and written communication skills.
</li><li>Willingness to work across time zones when required &ndash; we have team members in US East and Ireland also.
</li><li>Experience with publishing blogs, Github projects, and speaking engagements.
</li><li>A college degree in Computer Science, Data Science, Cybersecurity, or a related domain.
</li><li>Relevant security industry certifications such as CySA+, PNPT, or eJPT are preferred</li></ul><div><b>
What you&rsquo;ll get from us:</b></div><div>
</div><div>
A team where you can voice your opinion, make an impact, and where you and your experience are valued. Internal mobility &ndash; there are opportunities for cross training and the ability to attain your next career step within Barracuda.</div><div>
</div><ul><li>
Equity, in the form of non-qualifying options
</li><li>High-quality health benefits
</li><li>Retirement Plan with employer match
</li><li>Career-growth opportunities
</li><li>Flexible Time Off and Paid Time Off benefits
</li><li>Volunteer opportunities</li></ul><div>
The anticipated salary range for this role is 105,000 to 140,000. Actual compensation offered will be dependent upon the individual's skills, experience, and qualifications as they directly relate to the requirements of the position, the budget for the position, and applicable employment laws.</div><div>
</div><div></div><div>
At Barracuda, we believe in fair and equitable compensation practices that reflect both market realities and the unique circumstances of each geographical location. We recognize that cost-of-living disparities, market conditions, and other factors can significantly impact compensation expectations in different regions. The compensation range provided in this job description is for illustrative purposes only and may not reflect the actual compensation offers for the position in your location. Final compensation will be determined based on a variety of factors including the candidates&rsquo; qualifications and experience.<br>
</div><div></div><div>
#LI-remote</div></div>

One Federal Solution

<div>
 One Federal Solution provides cybersecurity technical leadership and engineering expertise across federal mission environments. We deliver strategic direction for cybersecurity, cloud engineering, Agile DevSecOps, AI/ML, and Zero Trust initiatives while applying Federal, DHS, and IC security architectures and standards. Our team translates emerging technologies and cybersecurity practices into actionable plans and oversees execution across contractor and stakeholder teams to deliver secure, mission-focused solutions.
 <br/>
 <br/>
 <strong>
  Senior Cybersecurity Engineer Task and Duties:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Provide overall technical direction across cybersecurity task areas
  </li>
  <li>
   Lead technical planning and execution involving cybersecurity, cloud engineering, agile DevSecOps, AI/ML, and Zero Trust activities
  </li>
  <li>
   Apply Federal, DHS, and IC cybersecurity architectures, standards, and technologies
  </li>
  <li>
   Translate cybersecurity architectures, standards, technologies, and emerging practices into technical plans
  </li>
  <li>
   Oversee implementation of technical plans across contractor and stakeholder teams
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Senior Cybersecurity Engineer Qualifications:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Minimum 10 years of demonstrated cybersecurity engineering experience for projects of similar size and scope
  </li>
  <li>
   Knowledge of Federal, DHS, and IC cybersecurity architectures, standards, and technologies
  </li>
  <li>
   Knowledge of emerging cybersecurity practices
  </li>
  <li>
   Active Top Secret/SCI
  </li>
  <li>
   Mandatory certifications in Amazon Web Services (AWS), CISSP, and Scrum practices, all in good standing at award and throughout the period of performance
  </li>
  <li>
   Desired: certifications in other cloud computing platforms, including Google, Microsoft Azure, and Microsoft Office 365
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  About One Federal Solution
  <br/>
  <br/>
 </strong>
 One Federal Solution (OFS) is an innovative Professional Services provider with over 20 years of experience supporting Defense and Civilian agencies. OFS specializes in Business Intelligence, Acquisition and Procurement, and other Professional Services. We are pioneers, builders, thought leaders, and pride ourselves on thinking outside the box to co-create with our customers, helping them achieve exceptional enterprise-wide outcomes. As a certified Service-Disabled Veteran-Owned Small Business (SDVOSB), OFS is committed to providing high-performance professionals who deliver excellence to our government partners.
</div>


Senior Cybersecurity Engineer

Astrion

<div>Overview:<div></div><div><b><br>
Senior Cybersecurity Engineer</b></div><div><b>
LOCATION</b>: Hanscom AFB, MA</div><div><b>
Salary Range</b>:$165-$175,000 annually*</div><ul><li><b><i>depending on experience, certifications, and qualifications</i></b></li></ul><div><b>
JOB STATUS: </b>Full-time</div><div><b>
CLEARANCE</b>:Secret</div><div><b>
TRAVEL: </b>Limited, as needed</div><div></div><div><b><br>
**Postion is Contingent upon Award**</b></div><div></div><div><br>
Astrion has an exciting opportunity for a <b>Senior Cybersecurity Engineer </b>located at the <b>Hanscom AFB </b>in <b>Bedford Massachusetts </b>to support the the Air Force Life Cycle Management Center Electronic Systems PEO (AFLCMC/ES). The Electronic Systems System (ESS) Division aka Force Protection Division's mission responsibility is to manage and execute the modernization, design, development, testing, fielding, and sustainment of the various software and hardware within the ESS Portfolio.</div><div></div><div><b><br>
REQUIRED QUALIFICATIONS / SKILLS:</b></div><ul><li><b>
Citizenship: </b>Must be a US citizen</li><li><b>
Clearance</b>: Must have and be able to maintain a Secret level clearance</li></ul><div><b>
PREFERRED QUALIFICATIONS / SKILLS</b>:</div><ul><li><div><b>
Education:</b> Bachelor&rsquo;s degree in a professional engineering discipline from an ABET-accredited educational program and at least 10-15 years of experience in the respective technical/professional discipline, 10 of which must be in the DoD.</div></li><div></div><li><div><b><br>
Certifications: </b>CISSP</div><ul><li><div>
Understanding of cybersecurity in DoD cloud infrastructure.</div></li><li><div>
Knowledge of Agile methodologies including CI/CD, DevSecOps, and DevOps.</div></li><li>
Expereinece with systems analysis and eMASS</li><li><div>
Strong ability to communicate technical topics effectively in both written and verbal forms.</div></li></ul><div><b><i>
Technical Skills</i></b></div><ul><li>
STIG compliance</li><li><div>
Risk Management Framework (RMF) implementation and documentation.</div></li><li><div>
DoD cybersecurity policies and compliance.</div></li><li><div>
System Authorization and Accreditation (A&amp;A) processes.</div></li><li><div>
DoD cloud infrastructure security.</div></li><li><div>
Agile development methods including CI/CD, DevSecOps, and DevOps.</div></li><li><div>
Security risk, vulnerability, and contingency planning.</div></li><li><div>
PKI management and access control.</div></li><li><div>
Classified material handling and accountability.</div></li></ul><div><b><i>
Interpersonal Skills</i></b></div><ul><li><div>
Strong verbal and written communication skills for both technical and non-technical audiences.</div></li><li><div>
Ability to collaborate with government, contractor, and industry stakeholders.</div></li><li><div>
Effective problem-solving and analytical thinking.</div></li><li><div>
Ability to work independently and manage multiple priorities in a fast-paced environment.</div></li><li><div>
Adaptability to evolving program requirements and security challenges.</div></li></ul></li></ul><div><b>
RESPONSIBILITIES</b>:</div><div>
Duties include, but not limited to:</div><ul><li><div>
Assist in the development of security documentation including System Security Management Plans, Program Protection Plans, Security Risk Analyses, OPSEC Plans, and other required system security engineering artifacts.</div></li><li><div>
Support RMF Authorization and Accreditation (A&amp;A) activities, ensuring compliance with DoD and Air Force cybersecurity policies.</div></li><li><div>
Manage system user accounts, ports/protocols, PKI requirements, and access control lists.</div></li><li><div>
Implement and track system security updates, configurations, and vulnerability remediation in accordance with DoD requirements.</div></li><li><div>
Conduct risk and vulnerability assessments; recommend security policies, contingency plans, and disaster recovery procedures.</div></li><li><div>
Participate in system/network design to ensure alignment with security policies.</div></li><li><div>
Provide leadership in analyzing and integrating cybersecurity requirements into system design and operations.</div></li><li><div>
Review and assess the implementation of RMF security controls across system architecture, documentation, and design artifacts.</div></li><li><div>
Collaborate with stakeholders to ensure RMF A&amp;A approval by all Authorizing Officials.</div></li><li><div>
Maintain and audit databases for classified information, visits, and clearances.</div></li><li><div>
Support classified material handling, accountability, and compliance with security classification guides.</div></li><li><div>
Develop and deliver security awareness training and education programs.</div></li><li><div>
Prepare and review acquisition security documentation and ensure compliance with CDRLs.</div></li><li><div>
Plan and implement security-related surveys, assessments, and evaluations throughout the program life cycle.</div></li></ul></div>

Systems Planning and Analysis, Inc. (SPA)

<div>Overview:
<div>
Systems Planning and Analysis, Inc. (SPA) delivers high-impact, technical solutions to complex national security issues. With over 50 years of business expertise and consistent growth, we are known for continuous innovation for our government customers, in both the US and abroad. Our exceptionally talented team is highly collaborative in spirit and practice, producing <i>Results that Matter</i>. Come work with the best! We offer opportunity, unique challenges, and clear-sighted commitment to the mission. SPA: Objective. Responsive. Trusted.</div><div></div><div><br>
The Space and Intelligence Division provides professional services to the US Space Force, Combatant Commands, Intelligence Community, and NASA. Our work includes enterprise architectural assessments, systems engineering and integration, test, planning and execution, cost estimating and analysis, acquisition support, and cybersecurity. We are trusted partners developing approaches and concepts to meet emerging high priority needs, assessing cutting-edge technologies, and supporting capabilities for our National Defense. Come join the fastest growing Division at Systems Planning and Analysis, Inc.!</div><div></div><div><br>
The Space Systems Group (SSG), part of SPA&rsquo;s Space and Intelligence Division, provides timely and objective assessments and recommendations integrating technical, operational, programmatic, policy and business analysis. We focus on our key clients in the Space community including the US Space Force&rsquo;s Space Systems Command (USSF/SSC), one of the three designated Field Commands under USSF. We work tirelessly to provide integrated solutions based on information and communications throughout the chain of command. We provide clear and consistent analysis and recommendations which are aligned to strategic and leadership goals while balancing the ability to execute on time and on budget within the technical communities. Come join an organization responsible for being a key enabler of Spacepower!</div><div></div><div><br>
SPA has an immdiate need for a <b>Platform Cybersecurity Engineer.</b></div>
Responsibilities:
<div>
SPA is seeking a Platform Cybersecurity Engineer to help secure and advance a secure Platform-as-a-Service environment supporting USSF/SSC. This role is central to ensuring that the platform, which is used by multiple software delivery teams and mission partners, remains secure, resilient, and compliant across IL4, IL5, IL6 and SCI Azure cloud environments. The successful candidate will integrate deeply with DevSecOps workflows, product teams, and platform engineering stakeholders to implement practical security controls that enable rapid, secure delivery of mission-critical capabilities. As a key member of the cybersecurity and platform engineering ecosystem, you will combine cloud-native security engineering with disciplined RMF implementation to sustain and evolve the platform&rsquo;s accreditation posture. You will be expected to get hands-on to shape secure cloud architectures, implement technical safeguards, support authorization activities, and improve detection, monitoring, and response capabilities across the environment. This position is ideal for an engineer who understands modern cloud security in Azure, can translate RMF requirements into actionable technical solutions, and thrives within fast-paced, mission‑oriented environments. Your contributions will directly influence platform trust, operational readiness, and the speed at which space mission capabilities can be delivered to the warfighter.</div><div></div><div><b><br>
Key Responsibilities Include:
</b></div><ul><li>Design and implement cloud-native security controls across Azure services, identity and access management, containerized workloads, and infrastructure-as-code to ensure a secure and reliable PaaS foundation.</li><li>
Support platform authorization activities by developing, maintaining, and validating RMF documentation, control implementation evidence, architecture diagrams, and continuous monitoring artifacts aligned with DoD and USSF/SSC requirements.</li><li>
Enhance platform observability and protection by improving logging, monitoring, alerting, and detection capabilities; tuning signals. and integrating with existing cybersecurity tools and workflows.</li><li>
Collaborate with platform engineering, DevSecOps, and product teams to embed security into the design of services, pipelines, and deployments &ndash; emphasizing automation, secure configurations, and repeatable patterns.</li><li>
Conduct assessments, threat analyses, and technical reviews of platform changes, helping to manage risks and ensure compliance while enabling speed and mission value.</li><li>
Contribute to the maturation of platform governance, zero-trust practices, secure cloud baselines, and policy-as-code enforcement across the environment.</li></ul><div></div><div><b><br>
Expected Outcomes:</b></div><div>
Success in this role is defined by the ability to secure, sustain, and evolve the PaaS environment in a way that strengthens mission confidence and platform adoption.</div><ul><li>
Maintain a secure, compliant, and resilient Azure-based platform across IL4, IL5, IL6, and SCI environments, ensuring consistent delivery of cyber protections without slowing development velocity.</li><li>
Improve platform accreditation and continuous monitoring by producing accurate, high-quality RMF artifacts and ensuring traceable, validated control implementations.</li><li>
Strengthen the platform&rsquo;s detection and response posture through enhanced logging, monitoring, and automation that meaningfully reduce risks and operational blind spots.</li><li>
Build strong, trust-based relationships with platform teams, product owners, and mission stakeholders to position security as an enabler of capability delivery rather than a bottleneck.</li><li>
Contribute to the platform&rsquo;s long-term evolution by identifying gaps, shaping security enhancements, and driving improvements that align with emerging mission needs and evolving USSF/SSC priorities.</li></ul><div>
 This is a fully remote position.</div>
Qualifications:
<div><b>
About the Must Haves</b></div><ul><li>
US Citizen and current active DoD Secret clearance</li><li>
Bachelor&rsquo;s degree in Computer Science, Cybersecurity, Engineering, IT, or a related field</li><li>
Possession of a DoD 8140 IAT II certification</li><li>
Minimum 8 years of experience performing the following:<ul><li>
Hands-on experience securing Azure cloud environments, including identity, networking, monitoring, logging, and service configuration</li><li>
Practical experience implementing NIST 800‑53 security controls and supporting DoD RMF accreditation activities</li><li>
Demonstrated ability to work across engineering, cybersecurity, and DevSecOps teams to implement secure solutions in fast-paced delivery environments</li></ul></li></ul><div></div><div><br>
At SPA, we strive to deliver a robust total compensation package that will attract and retain top talent. Elements of the compensation package include competitive base pay and variable compensation opportunities.</div><div><br>
</div><div>SPA provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, etc.</div><div></div><div><br>
Please note that the salary information shown below is a general guideline only. Salaries are commensurate with experience and qualifications, as well as market and business considerations. Pay Transparency Range: 160k - 185k</div></div>

Platform Cybersecurity Engineer

J.B. Hunt

<div><p><b>EMERGING TECHNOLOGY / CYBERSECURITY ENGINEER</b></p><p><b>
MILITARY FRIENDLYPREFERRED - HOH SPONSOR</b></p><p>
</p><p><b>Position Overview</b></p><p>
The Emerging Technology / Cybersecurity Engineer will support Zermount and our federal client in modernizing cybersecurity authorization, cloud security, security architecture review, and emerging technology assessment processes.</p><p>
</p><p>This is a senior, client-facing cybersecurity engineering and assessment role focused on helping the client securely adopt SaaS, AI-enabled technologies, cloud services, and other emerging capabilities. The position blends federal RMF and continuous ATO expertise, security architecture review, AI security testing, cloud compliance, control validation, and process modernization.</p><p>
</p><p>The successful candidate will help reduce authorization timelines by developing reusable security patterns, repeatable assessment baselines, structured test plans, and continuous ATO-ready evidence. The ideal candidate has strong experience in federal cybersecurity, RMF, ATO, cloud security, security architecture, SaaS/product assessments, vulnerability management, emerging technology risk, and AI security</p><p>
</p><p>This position requires a hands-on professional who can work across cybersecurity, engineering, procurement, legal, privacy, records management, vendor, product, and mission teams to evaluate technologies, validate controls, document risk, and accelerate secure adoption.</p><p><b>
DutiesResponsibilities</b></p><p><b>
Security Architecture Review</b></p><ul><li>
Conduct Security Architecture Reviews for SaaS, cloud, AI-enabled tools, non-COTS technologies, embedded AI capabilities, operating system baselines, and supporting infrastructure.</li><li>
Integrate architecture review activities with existing cybersecurity workflows, including ATO intake, security assessment, vulnerability scanning, cloud compliance, change management, and authorization decision support.</li><li>
Review system designs, data flows, identity models, access controls, logging approaches, network architecture, tenant isolation, administrative control structures, and security boundary assumptions.</li><li>
Develop security architecture patterns and reusable designs that enable faster assessments and ATO decisions by aligning solutions with federal security controls early in the lifecycle.</li><li>
Translate technical architecture findings into actionable risk statements, control recommendations, remediation plans, POA&amp;Ms, and acceptance decision inputs.</li></ul><p><b>
Emerging Technology Assessment and AI Security Testing</b></p><ul><li>
Perform cybersecurity assessments of commercial SaaS products, non-COTS AI products, embedded AI components, cloud-hosted services, operating system baselines, and related technologies during intake and change events.</li><li>
Evaluate AI-specific threats and vulnerabilities, to include direct, indirect, and instruction smuggling prompt injection, jailbreak susceptibility, data leakage/sensitive data exposure, model poisoning, RAG/vector database exposure, unintended model behavior, tool or agent misuse, insecure plugin use, and unsafe browsing capabilities.</li><li>
Execute structured AI and emerging technology testing, including functional and accuracy testing, adversarial testing, data exfiltration probes, red-team scenarios, control regression testing, and validation of previously accepted security controls.</li><li>
Develop structured AI test cases, adversarial prompts, expected results, pass/fail criteria, scoring rubrics, and repeatable evaluation scripts aligned to NIST AI RMF, OWASP Top 10 for LLM/GenAI, MITRE ATLAS, client security baselines, and federal ATO acceptance criteria.</li><li>
Validate logging coverage, DLP efficacy, safety controls, accuracy thresholds, telemetry availability, and technical acceptance criteria prior to production use.</li><li>
Document findings, support remediation planning, and perform retesting to verify closure of identified security gaps.</li></ul><p><b>
Engineering Controls and Implementation Support</b></p><ul><li>
Design and support implementation of baseline security controls, including identity integration, RBAC, DLP, logging and telemetry, SIEM integration, network segmentation, tenant isolation, and feature-level security controls.</li><li>
Develop or contribute automation artifacts such as scripts, Infrastructure as Code snippets, configuration templates, security checklists, and deployment patterns.</li><li>
Configure, test, or validate vendor systems and internal deployments against approved baseline controls and client security requirements.</li><li>
Coordinate with commercial vendors, cloud teams, platform teams, product teams, and internal engineering teams to implement, test, and validate required security controls.</li><li>
Provide recommendations to disable or restrict high-risk capabilities such as public browsing, external plugins, unmanaged connectors, excessive permissions, unapproved data access, or other features that increase mission or data risk.</li></ul><p><b>
Process, Baseline, and Knowledge Transfer</b></p><ul><li>
Develop repeatable test plans, assessment checklists, intake procedures, triage workflows, pilot assessment templates, production readiness criteria, and operational runbooks.</li><li>
Create scalable baseline templates for Low, Moderate, and High-risk tiers with required controls, evidence expectations, test procedures, and acceptance criteria.</li><li>
Support development of reusable security patterns for SaaS, AI-enabled applications, cloud-hosted services, operating system baselines, and emerging technology deployments.</li><li>
Deliver knowledge transfer, training, and working sessions for client staff to operate and maintain security baselines, assessment processes, and test suites.</li><li>
Support continuous improvement of cybersecurity intake, assessment, authorization, monitoring, and remediation processes.</li></ul><p>
</p><p></p><p><b>Product and Stakeholder Support</b></p><ul><li>
Engage with commercial vendors, procurement, legal, engineering, cybersecurity, privacy, records management, product, and mission teams to support technology intake, contracting, evidence collection, control validation, and remediation activities.</li><li>
Coordinate with vendor contacts and internal client stakeholders to obtain security documentation, clarify technical capabilities, validate control implementation, and resolve assessment findings.</li><li>
Provide regular status reporting, metrics, risk updates, testing results, and recommendations to support timely security acceptance and authorization decisions.</li><li>
Track assessment activities, findings, remediation actions, POA&amp;Ms, retesting results, risk decisions, and authorization milestones through established client workflows.</li><li>
Participate in client meetings, technical working sessions, vendor discussions, security reviews, and authorization decision support activities.</li><li>
Prepare executive-level status reports, technical assessment summaries, testing reports, briefings, and recommendations to mitigate identified risks.</li><li>
Perform additional duties as required.</li></ul><p><b>
Roadmap, Strategy, and Continuous ATO Support</b></p><ul><li>
Provide Support the development and execution of cybersecurity authorization and compliance strategies designed to reduce ATO processing time and improve cloud compliance.</li><li>
Provide input into continuous ATO and continuous monitoring approaches, including evidence collection, automated control validation, risk triggers, POA&amp;M visibility, and decision-ready reporting.</li><li>
Assist the Cybersecurity Division in designing compliance processes and systems that support continuous authorization and reduce manual processing delays.</li><li>
Plan and run controlled pilots using synthetic or de-identified data, where feasible, to validate technical, security, privacy, and operational readiness.</li><li>
Support development of roadmap recommendations, implementation priorities, metrics, and process improvements to advance secure adoption of SaaS, AI-enabled technologies, cloud services, and emerging capabilities.</li></ul><p><b>
Qualifications</b></p><p><b>
Minimum Requirements:</b></p><ul><li>
5+ years of cybersecurity, security architecture, cloud security, GRC, RMF, ATO, or federal compliance experience.</li><li>
Experience supporting federal cybersecurity programs, including RMF, ATO, security assessment, continuous monitoring, vulnerability management, or cloud compliance.</li><li>
Working knowledge of the NIST Risk Management Framework, NIST Cybersecurity Framework, NIST Special Publications, FISMA, FedRAMP, and federal security control expectations.</li><li>
Experience assessing SaaS, cloud services, commercial products, emerging technologies, or enterprise systems for security and compliance risk.</li><li>
Ability to review technical architectures, data flows, identity models, access controls, logging, network segmentation, tenant isolation, and security control implementation.</li><li>
Experience developing POA&amp;Ms, risk statements, security recommendations, assessment reports, test plans, metrics, and executive-level status updates.</li><li>
Strong written and verbal communication skills, including the ability to brief technical risks and recommendations to cybersecurity, engineering, program, and executive stakeholders.</li><li>
Ability to coordinate across vendors, engineering teams, cybersecurity teams, procurement, legal, privacy, records management, and mission stakeholders.</li></ul><p><b>
Preferred Qualifications:</b></p><ul><li>
Experience assessing AI-enabled technologies, machine learning platforms, generative AI tools, RAG architectures, vector databases, AI agents, or commercial AI SaaS products.</li><li>
Knowledge of AI security risks, including prompt injection, jailbreaks, model misuse, data leakage, training data exposure, adversarial testing, tool/agent misuse, and AI governance.</li><li>
Experience with continuous ATO, ongoing authorization, automated evidence collection, cybersecurity authorization modernization, or continuous monitoring.</li><li>
Experience with cloud environments such as AWS, Azure, or Google Cloud Platform.</li><li>
Experience with DevSecOps, CI/CD security, Infrastructure as Code, container security, or cloud-native security controls.</li><li>
Experience integrating security telemetry into SIEM, SOAR, GRC, vulnerability management, or continuous monitoring platforms.</li><li>
Familiarity with security tools such as Splunk, Microsoft Sentinel, QRadar, Tenable, Security Hub, Defender, Prisma Cloud, ServiceNow, or similar platforms.</li><li>
Experience with AI/LLM evaluation, red-teaming, guardrail, or model-security testing tools such as Microsoft PyRIT, NVIDIA Garak, Promptfoo, DeepEval, OpenAI Evals, Azure AI Foundry Evaluation, Amazon Bedrock Guardrails, Google Vertex AI Evaluation, Lakera Guard, HiddenLayer, Protect AI ModelScan/Guardian, or equivalent tools.</li><li>
Experience developing reusable security baselines, control templates, architecture patterns, runbooks, assessment playbooks, and technical acceptance criteria.</li></ul><p><b>
Competencies</b></p><ul><li>
Security architecture review</li><li>
AI and emerging technology risk assessment</li><li>
Cloud and SaaS security assessment</li><li>
Continuous ATO and compliance modernization</li><li>
Control validation and evidence collection</li><li>
Federal cybersecurity and RMF expertise</li><li>
POA&amp;M development and remediation tracking</li><li>
Security testing and adversarial assessment</li><li>
Vendor and stakeholder coordination</li><li>
Executive-level reporting and recommendations</li><li>
Process development, baselining, and knowledge transfer</li></ul><p><b>
Education</b></p><ul><li>
Bachelor of Science (or higher) in one of the following: Computer Science, Information Technology, Cybersecurity, Engineering, or equivalent.</li><li><ul><li>
Years of experience may be considered in lieu of a degree.
</li></ul></li></ul><p><b>Certifications</b></p><p>
At least one of the following certifications is required:
</p><p></p><ul><li>GIAC Certified Incident Handler (GCIH); Security+; Certified Information Security Manager (CISM), Certified in Governance of Enterprise IT (CGEIT); Certified Information Systems Security Professional (CISSP); Certified Information Security Auditor (CISA); Certified Cloud Security Professional (CCSP); AWS Certified Security Specialist; Microsoft Certified: Cybersecurity Architect Expert; Microsoft Azure Azure Security Engineer Associate; or another equal GIAC certification related to cloud, incident response, security engineering, or penetration testing.
</li></ul><p><b>Clearance Level</b></p><ul><li>
Public Trust, but an active Secret Clearance is preferred.</li></ul><p><b>
Work Location</b></p><ul><li>
Primary location(s) are Arlington and Alexandria VA. Remote work is authorized, but the employee may have to report to one of the primary sites occasionally or as requested by management or the client.
</li></ul><p><b>Hours of Operation</b></p><ul><li>
6:00 am ET &ndash; 6:00 pm ET</li></ul></div>

EMERGING TECHNOLOGY / CYBERSECURITY ENGINEER

Search 6407+ Cybersecurity engineer jobs near you this July. New roles added regularly across leading industries. Apply today.

6407 cybersecurity engineer jobs Near Me

Cybersecurity Engineer

OT Cybersecurity Engineer

Cybersecurity Engineer

Senior Cybersecurity Engineer

Senior Cybersecurity Engineer

Platform Cybersecurity Engineer

EMERGING TECHNOLOGY / CYBERSECURITY ENGINEER