cybersecurity specialist

US Joint Activities

Supervisory IT Cybersecurity Specialist (INFOSEC)

Defense Information Systems Agency

<div>
 
 Summary
 
 
 
 The recent graduates program targets individuals who have graduated recently from qualifying educational institutions or programs. To be eligible, applicants must apply within 2 years of degree or certificate completion, except for veterans precluded from doing so due to their military service obligations, who will have up to 6 years after degree or certificate completion. Successful applicants will be placed in a dynamic, career development program.
 
 
 Duties
 
 
 Help
 
 
 <ul>
 <li>
 As a participant in the Recent Graduates Program, you will receive both formal and on-the-job training to develop the required knowledge and skill to successfully perform the duties of the position.
 </li>
 <li>
 The incumbent will complete formal and informal training, as well as rotational assignments intended to provide and enhance necessary technical competencies.
 </li>
 <li>
 Perform in-depth analysis of automated systems to accomplish design and programming assignment.
 </li>
 <li>
 The incumbent may also prepare system documentation for complex assignments in accordance with agency standards.
 </li>
 <li>
 Responsible for the cybersecurity of a program, organization, system, or enclave as an Information Systems Security Manager.
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 Help
 
 
 Conditions of employment
 
 
 <ul>
 <li>
 Must be a U.S. Citizen.
 </li>
 <li>
 This national security position, which may require access to classified information, requires a favorable suitability review and security clearance as a condition of employment. Failure to maintain security eligibility may result in termination.
 </li>
 <li>
 Current Federal Career/Career-Conditional employee, will be placed on an Excepted appointment.
 </li>
 <li>
 This position is covered under DoD Manual 8140 which will be subject to future Cyber Workforce requirements as defined by the Manual.
 </li>
 <li>
 This is a drug testing designated position.
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 
 Who May Be Considered:
 
 
 
 Individuals who have obtained a qualifying Associates, Bachelor's, Master's, Professional, Doctorate, Vocational or Technical degree or certificate from a qualifying educational institution, within the previous 2 years.
 
 
 
 OR
 
 
 
 Veterans (as defined in 5 U.S.C. 2108) who were unable to apply within 2 years of obtaining a qualifying Associates, Bachelor's, Master's, Professional, Doctorate, Vocational or Technical degree or certificate from a qualifying educational institution due to their military service obligation. Veterans have a full 2-year eligibility period to apply upon his/her release or discharge from active duty. The eligibility period for veterans must be within 6 years of degree completion.
 
 You MUST provide your DD-214 to support this claim.
 
 
 
 
 In addition to the eligibility requirement above, you must also meet the Basic Requirement:
 
 
 
 <ul>
 <li>
 Undergraduate or Graduate Education: Degree in computer science, engineering, information science, information systems management, mathematics, operations research, statistics, or technology management or degree that provided a minimum of 24 semester hours in one or more of the fields identified above and required the development or adaptation of applications, systems or networks.
 
 
 </li>
 </ul>
 
 
 OR
 
 
 
 
 <ul>
 <li>
 Attention to Detail - experience reviewing my own information technology-related work or data to ensure accuracy, completeness, and consistency with standards. My work or the data that I produce is typically reviewed by my supervisor or another colleague
 </li>
 <li>
 Customer Service - experience having brief contact with customers to provide information about available information technology products and services and providing customers with standard products or routine services to address information technology needs
 </li>
 <li>
 Oral Communication - experience informing my supervisor and other IT staff of the status of information technology systems, projects, or daily operations, including the status of information technology systems, projects, or daily operations, including the communication of basic technical information to a non-technical audience
 </li>
 <li>
 Problem Solving - identifying or selecting from a number of alternatives to address routine information technology-related issues by gathering and applying information from standard sources that provide a limited number of solutions
 
 
 </li>
 </ul>
 
 In addition to the Eligibility, and the Basic Requirement, your resume must demonstrate the following Qualifying Experience:
 
 
 
 <ul>
 <li>
 For the GG - 07 qualifying experience is defined as: assisting with developing or modifying information systems to meet user requirements
 </li>
 <li>
 For the GG - 09 qualifying experience is defined as: providing consultation and instruction on complex databases or providing advice to decision makers regarding program goals and establishing priorities to support the organizational mission.
 
 
 </li>
 </ul>
 *****Candidates must describe how they meet the qualifying experience within the body of their resume.
 
 
 <ul>
 <li>
 Veterans - DD-214 are required, and will render an ineligible rating if not submitted.
 </li>
 <li>
 Transcripts are required along with proof of degree conferral, with a minimum cumulative GPA of 2.50.
 
 
 </li>
 </ul>
 The absence of this information will result in an ineligible rating.
 
 
 Education
 
 
 
 SUBSTITUTION OF EDUCATION FOR EXPERIENCE AT THE GG-07 LEVEL
 
 : Bachelor's degree with Superior Academic Achievement or 1 academic year of graduate education (or law school, as specified in qualification standards or individual occupational requirements). Superior Academic Achievement: S.A.A. is based on (1) class standing, (2) grade-point average, or (3) honor society membership.
 
 
 
 SUBSTITUTION OF EDUCATION FOR EXPERIENCE AT THE GG-09 LEVEL:
 
 Two full years of progressively higher level graduate education, or Master's or equivalent graduate degree such as LL.B. or J.D., may be substituted to meet the experience requirement.
 
 
 If you are using education to qualify for this position you will need to submit your unofficial/official transcripts with your application. Failure to provide transcripts, or a determination that you do not possess the education requirement, will result in objection to your qualifications, and removal from consideration in accordance with competitive examining procedures.
 
 
 
 Qualifying Education Institution:
 
 Any of the following educational institutions or curricula that have been accredited by an accrediting body recognized by the Secretary of the U.S. Department of Education http://ope.ed.gov/accreditation/
 
 
 
 Foreign Education:
 
 If you are using education completed in foreign colleges or universities to meet the qualification requirements, you must show that the education credentials have been evaluated by the National Association of Credential Evaluation Services at the time of application. National Association of Credential Evaluation Services .
 
 
 Additional information
 
 
 <ul>
 <li>
 CES Interns are NOT eligible for conversion to a career/career-conditional appointment.
 </li>
 <li>
 CES Interns are eligible for non-competitive conversion to a term or permanent CES position in a CES designated organization:
 </li>
 <li>
 A three year trial period may be required if you have not previously completed a trial or probationary period in the excepted or competitive service.
 </li>
 <li>
 Management has the prerogative to select at either grade level.
 </li>
 <li>
 Candidates selected through this announcement may be offered non-competitive promotion opportunities to developmental positions in the full performance work level of the Cyber Excepted Service. However, promotion is not guaranteed, and no promise of a promotion is implied.
 </li>
 <li>
 Selectee of this recruitment will be required to sign a Recent Graduate Program Participant Agreement.
 </li>
 <li>
 Individuals tentatively selected for drug testing designated positions at the Defense Information Systems Agency will be required to submit to urinalysis for illegal drugs prior to appointment or placement.
 </li>
 <li>
 Telework availability will be based upon the mission requirements and supervisory determination.
 </li>
 <li>
 We may use this announcement to fill additional vacancies within 90 days of the closing date.
 </li>
 <li>
 Moving costs MAY be paid.
 </li>
 <li>
 Recruitment, relocation, or retention incentives MAY be authorized.
 </li>
 <li>
 The Tax Cuts and Jobs Act of 2017 makes certain reimbursements/payments taxable. For information on these changes and the Relocation Income Tax Allowance (RITA), for which some appointees are eligible, click here.
 </li>
 <li>
 This position is covered under DoD Manual 8140 which will be subject to future Cyber Workforce requirements as defined by the Manual.
 </li>
 <li>
 This position has been designated as "Mission Essential." Incumbent will be required to report to work or relocate to a new duty location, within the United States, in times of local/national emergency.
 </li>
 <li>
 Males born after 12-31-59 must be registered or exempt from Selective Service (to verify your registration status click here).
 </li>
 <li>
 Because this position is in the Cyber Excepted Service, Veterans' Preference will be applied to preference eligible candidates, as defined by Section 2108 of the Title 5 U.S.C. in accordance with the procedures provided in DoD Instruction 1400.25, Volume 3005, "CES Employment and Placement." If you are a veteran claiming veteran's preference, as defined by Section 2108 of Title 5 U.S.C., you must submit documents verifying your eligibility with your application package.
 </li>
 <li>
 For more information on Cyber Excepted Service Personnel System, click here.
 </li>
 <li>
 For more information on veterans' preference, click here.
 </li>
 <li>
 For more information regarding qualifications requirements, click here.
 </li>
 <li>
 You may submit a cover letter which will be forwarded to the selecting official with your resume. Your cover letter will not be used to verify your qualifications or eligibility.
 </li>
 <li>
 All applicants are encouraged to apply electronically. If you are unable to apply on-line, you may contact 317-212-0454 for assistance.
 </li>
 <li>
 If selected, the authorized rate of pay may exceed the stated maximum salary rate range under certain circumstances.
 
 
 </li>
 </ul>
 Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution.
 
 
 Help
 
 
 A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new windowLearn more about federal benefits.
 
 
 Review our benefits
 
 
 Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered.
</div>

IT CYBERSECURITY SPECIALIST (INFOSEC) CES Recent Graduate

Safety Services Company

<div>About Us:
Safety Services Company is North America&rsquo;s leading provider of contractor compliance-managed services, safety training, and materials. For over 20 years, we&rsquo;ve been helping 100,000+ contractors &ldquo;escape the chaos of compliance.&rdquo; Named to the Inc. 5000 list of fastest-growing companies 7 times, we continue to grow because we never lose sight of our purpose: helping people succeed.
Job Summary:
The Technology Systems Specialist is responsible for maintaining, securing, and supporting the organization's technology infrastructure. This role serves as a key resource for cybersecurity operations, end-user support, hardware lifecycle management, and data center/server room operations. The specialist proactively protects company systems and data, responds to technical issues, manages technology assets, and ensures critical infrastructure remains secure, reliable, and operational. 
 
Key Responsibilities:
Cybersecurity &amp; Information Security
<ul><li>Own and manage the organization's cybersecurity program and SOC 2 compliance initiatives.
</li></ul><ul><li>Implement, monitor, and maintain security controls to protect company systems, data, and assets.
</li><li>Manage and maintain AWS security posture, including administration and optimization of Security Groups, network access controls, and IAM policies to enforce least-privilege access and protect critical cloud resources.
</li><li>Conduct risk assessments, vulnerability management, and incident response activities.
</li><li>Develop and maintain security policies, procedures, and documentation.
</li><li>Ensure ongoing compliance with SOC 2 requirements through evidence collection, control monitoring, and audit coordination.
</li><li>Lead internal and external security audits and remediation efforts.
</li><li>Manage third-party/vendor security assessments and risk reviews.
</li><li>Monitor security metrics and provide regular reporting to leadership.
</li><li>Drive continuous improvement of the organization's security posture and compliance program.
</li></ul>Help Desk &amp; End User Support
<ul><li>Serve as primary point of contact for IT support requests and technology-related incidents.
</li><li>Respond to, prioritize, and resolve Help Desk tickets in accordance with service level expectations.
</li><li>Troubleshoot hardware, software, network, and connectivity issues.
</li><li>Provide technical assistance and training to employees regarding hardware, software, and technology best practices.
</li><li>Support user onboarding and offboarding activities, including account provisioning and equipment deployment.
</li></ul>Essential Duties and Other Responsibilities as Assigned
<ul><li>Manage the full lifecycle of company technology assets, including procurement, inventory tracking, deployment, maintenance, and retirement.
</li><li>Configure, deploy, and maintain desktops, laptops, monitors, peripherals, and related equipment.
</li><li>Maintain accurate inventory records, asset assignments, warranty information, and replacement schedules.
</li><li>Coordinate equipment distribution, retrieval, upgrades, and replacements for employees.
</li><li>Maintain server rooms, network closets, and data center environments to ensure optimal performance, organization, and security.
</li><li>Monitor critical infrastructure including servers, network equipment, UPS systems, environmental controls, and backup systems.
</li><li>Perform routine inspections to verify equipment health, cable management, power availability, cooling performance, and physical security controls.
</li><li>Support backup, recovery, and system availability processes.
</li></ul>Qualifications:
<ul><li>Associate's or Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field, or equivalent work experience.
</li><li>1-3 years of experience in IT support, systems administration, cybersecurity, or related technology roles.
</li><li>Knowledge of Windows operating systems, Active Directory, Microsoft 365, networking fundamentals, and endpoint management.
</li><li>Understanding of cybersecurity principles including access control, vulnerability management, incident response, and security monitoring.
</li><li>Experience using Help Desk or ticket management systems.
</li><li>Strong troubleshooting, analytical, and problem-solving skills.
</li><li>Excellent communication and customer service abilities.
</li><li>Knowledge of regulatory compliance frameworks and security standards.
</li></ul>What we bring:
<ul><li>Work-life balance: Paid holidays, sick leave, and unlimited vacation time off.
</li><li>Health: Affordable insurance options for medical, dental, and vision.
</li><li>Growth: Career pathing, leadership development, and ongoing training.
</li><li>Culture: A values-driven workplace rooted in love for people, authenticity, continuous improvement, and collective growth. SSC&rsquo;s values are:
</li></ul><div><div><ul><li>Love for People
</li></ul><ul><li>Trustworthiness
</li></ul><ul><li>Authenticity
</li></ul><ul><li>Positivity
</li></ul><ul><li>Grace
</li></ul><ul><li>Flexibility 
</li></ul></div><div><ul><li>Belonging
</li></ul><ul><li>Active Listening
</li></ul><ul><li>Teamwork
</li></ul><ul><li>Data-Driven Decision-Making
</li></ul><ul><li>Continuous Improvement
</li></ul><ul><li>Collective Growth</li></ul></div></div></div>

Technology Systems Specialist

J.B. Hunt

<div>EMERGING TECHNOLOGY / CYBERSECURITY ENGINEER
MILITARY FRIENDLYPREFERRED - HOH SPONSOR
Position Overview
The Emerging Technology / Cybersecurity Engineer will support Zermount and our federal client in modernizing cybersecurity authorization, cloud security, security architecture review, and emerging technology assessment processes.
This is a senior, client-facing cybersecurity engineering and assessment role focused on helping the client securely adopt SaaS, AI-enabled technologies, cloud services, and other emerging capabilities. The position blends federal RMF and continuous ATO expertise, security architecture review, AI security testing, cloud compliance, control validation, and process modernization.
The successful candidate will help reduce authorization timelines by developing reusable security patterns, repeatable assessment baselines, structured test plans, and continuous ATO-ready evidence. The ideal candidate has strong experience in federal cybersecurity, RMF, ATO, cloud security, security architecture, SaaS/product assessments, vulnerability management, emerging technology risk, and AI security
This position requires a hands-on professional who can work across cybersecurity, engineering, procurement, legal, privacy, records management, vendor, product, and mission teams to evaluate technologies, validate controls, document risk, and accelerate secure adoption.
DutiesResponsibilities
Security Architecture Review<ul><li>
Conduct Security Architecture Reviews for SaaS, cloud, AI-enabled tools, non-COTS technologies, embedded AI capabilities, operating system baselines, and supporting infrastructure.</li><li>
Integrate architecture review activities with existing cybersecurity workflows, including ATO intake, security assessment, vulnerability scanning, cloud compliance, change management, and authorization decision support.</li><li>
Review system designs, data flows, identity models, access controls, logging approaches, network architecture, tenant isolation, administrative control structures, and security boundary assumptions.</li><li>
Develop security architecture patterns and reusable designs that enable faster assessments and ATO decisions by aligning solutions with federal security controls early in the lifecycle.</li><li>
Translate technical architecture findings into actionable risk statements, control recommendations, remediation plans, POA&amp;Ms, and acceptance decision inputs.</li></ul>
Emerging Technology Assessment and AI Security Testing<ul><li>
Perform cybersecurity assessments of commercial SaaS products, non-COTS AI products, embedded AI components, cloud-hosted services, operating system baselines, and related technologies during intake and change events.</li><li>
Evaluate AI-specific threats and vulnerabilities, to include direct, indirect, and instruction smuggling prompt injection, jailbreak susceptibility, data leakage/sensitive data exposure, model poisoning, RAG/vector database exposure, unintended model behavior, tool or agent misuse, insecure plugin use, and unsafe browsing capabilities.</li><li>
Execute structured AI and emerging technology testing, including functional and accuracy testing, adversarial testing, data exfiltration probes, red-team scenarios, control regression testing, and validation of previously accepted security controls.</li><li>
Develop structured AI test cases, adversarial prompts, expected results, pass/fail criteria, scoring rubrics, and repeatable evaluation scripts aligned to NIST AI RMF, OWASP Top 10 for LLM/GenAI, MITRE ATLAS, client security baselines, and federal ATO acceptance criteria.</li><li>
Validate logging coverage, DLP efficacy, safety controls, accuracy thresholds, telemetry availability, and technical acceptance criteria prior to production use.</li><li>
Document findings, support remediation planning, and perform retesting to verify closure of identified security gaps.</li></ul>
Engineering Controls and Implementation Support<ul><li>
Design and support implementation of baseline security controls, including identity integration, RBAC, DLP, logging and telemetry, SIEM integration, network segmentation, tenant isolation, and feature-level security controls.</li><li>
Develop or contribute automation artifacts such as scripts, Infrastructure as Code snippets, configuration templates, security checklists, and deployment patterns.</li><li>
Configure, test, or validate vendor systems and internal deployments against approved baseline controls and client security requirements.</li><li>
Coordinate with commercial vendors, cloud teams, platform teams, product teams, and internal engineering teams to implement, test, and validate required security controls.</li><li>
Provide recommendations to disable or restrict high-risk capabilities such as public browsing, external plugins, unmanaged connectors, excessive permissions, unapproved data access, or other features that increase mission or data risk.</li></ul>
Process, Baseline, and Knowledge Transfer<ul><li>
Develop repeatable test plans, assessment checklists, intake procedures, triage workflows, pilot assessment templates, production readiness criteria, and operational runbooks.</li><li>
Create scalable baseline templates for Low, Moderate, and High-risk tiers with required controls, evidence expectations, test procedures, and acceptance criteria.</li><li>
Support development of reusable security patterns for SaaS, AI-enabled applications, cloud-hosted services, operating system baselines, and emerging technology deployments.</li><li>
Deliver knowledge transfer, training, and working sessions for client staff to operate and maintain security baselines, assessment processes, and test suites.</li><li>
Support continuous improvement of cybersecurity intake, assessment, authorization, monitoring, and remediation processes.</li></ul>
Product and Stakeholder Support<ul><li>
Engage with commercial vendors, procurement, legal, engineering, cybersecurity, privacy, records management, product, and mission teams to support technology intake, contracting, evidence collection, control validation, and remediation activities.</li><li>
Coordinate with vendor contacts and internal client stakeholders to obtain security documentation, clarify technical capabilities, validate control implementation, and resolve assessment findings.</li><li>
Provide regular status reporting, metrics, risk updates, testing results, and recommendations to support timely security acceptance and authorization decisions.</li><li>
Track assessment activities, findings, remediation actions, POA&amp;Ms, retesting results, risk decisions, and authorization milestones through established client workflows.</li><li>
Participate in client meetings, technical working sessions, vendor discussions, security reviews, and authorization decision support activities.</li><li>
Prepare executive-level status reports, technical assessment summaries, testing reports, briefings, and recommendations to mitigate identified risks.</li><li>
Perform additional duties as required.</li></ul>
Roadmap, Strategy, and Continuous ATO Support<ul><li>
Provide Support the development and execution of cybersecurity authorization and compliance strategies designed to reduce ATO processing time and improve cloud compliance.</li><li>
Provide input into continuous ATO and continuous monitoring approaches, including evidence collection, automated control validation, risk triggers, POA&amp;M visibility, and decision-ready reporting.</li><li>
Assist the Cybersecurity Division in designing compliance processes and systems that support continuous authorization and reduce manual processing delays.</li><li>
Plan and run controlled pilots using synthetic or de-identified data, where feasible, to validate technical, security, privacy, and operational readiness.</li><li>
Support development of roadmap recommendations, implementation priorities, metrics, and process improvements to advance secure adoption of SaaS, AI-enabled technologies, cloud services, and emerging capabilities.</li></ul>
Qualifications
Minimum Requirements:<ul><li>
5+ years of cybersecurity, security architecture, cloud security, GRC, RMF, ATO, or federal compliance experience.</li><li>
Experience supporting federal cybersecurity programs, including RMF, ATO, security assessment, continuous monitoring, vulnerability management, or cloud compliance.</li><li>
Working knowledge of the NIST Risk Management Framework, NIST Cybersecurity Framework, NIST Special Publications, FISMA, FedRAMP, and federal security control expectations.</li><li>
Experience assessing SaaS, cloud services, commercial products, emerging technologies, or enterprise systems for security and compliance risk.</li><li>
Ability to review technical architectures, data flows, identity models, access controls, logging, network segmentation, tenant isolation, and security control implementation.</li><li>
Experience developing POA&amp;Ms, risk statements, security recommendations, assessment reports, test plans, metrics, and executive-level status updates.</li><li>
Strong written and verbal communication skills, including the ability to brief technical risks and recommendations to cybersecurity, engineering, program, and executive stakeholders.</li><li>
Ability to coordinate across vendors, engineering teams, cybersecurity teams, procurement, legal, privacy, records management, and mission stakeholders.</li></ul>
Preferred Qualifications:<ul><li>
Experience assessing AI-enabled technologies, machine learning platforms, generative AI tools, RAG architectures, vector databases, AI agents, or commercial AI SaaS products.</li><li>
Knowledge of AI security risks, including prompt injection, jailbreaks, model misuse, data leakage, training data exposure, adversarial testing, tool/agent misuse, and AI governance.</li><li>
Experience with continuous ATO, ongoing authorization, automated evidence collection, cybersecurity authorization modernization, or continuous monitoring.</li><li>
Experience with cloud environments such as AWS, Azure, or Google Cloud Platform.</li><li>
Experience with DevSecOps, CI/CD security, Infrastructure as Code, container security, or cloud-native security controls.</li><li>
Experience integrating security telemetry into SIEM, SOAR, GRC, vulnerability management, or continuous monitoring platforms.</li><li>
Familiarity with security tools such as Splunk, Microsoft Sentinel, QRadar, Tenable, Security Hub, Defender, Prisma Cloud, ServiceNow, or similar platforms.</li><li>
Experience with AI/LLM evaluation, red-teaming, guardrail, or model-security testing tools such as Microsoft PyRIT, NVIDIA Garak, Promptfoo, DeepEval, OpenAI Evals, Azure AI Foundry Evaluation, Amazon Bedrock Guardrails, Google Vertex AI Evaluation, Lakera Guard, HiddenLayer, Protect AI ModelScan/Guardian, or equivalent tools.</li><li>
Experience developing reusable security baselines, control templates, architecture patterns, runbooks, assessment playbooks, and technical acceptance criteria.</li></ul>
Competencies<ul><li>
Security architecture review</li><li>
AI and emerging technology risk assessment</li><li>
Cloud and SaaS security assessment</li><li>
Continuous ATO and compliance modernization</li><li>
Control validation and evidence collection</li><li>
Federal cybersecurity and RMF expertise</li><li>
POA&amp;M development and remediation tracking</li><li>
Security testing and adversarial assessment</li><li>
Vendor and stakeholder coordination</li><li>
Executive-level reporting and recommendations</li><li>
Process development, baselining, and knowledge transfer</li></ul>
Education<ul><li>
Bachelor of Science (or higher) in one of the following: Computer Science, Information Technology, Cybersecurity, Engineering, or equivalent.</li><li><ul><li>
Years of experience may be considered in lieu of a degree.
</li></ul></li></ul>Certifications
At least one of the following certifications is required:
<ul><li>GIAC Certified Incident Handler (GCIH); Security+; Certified Information Security Manager (CISM), Certified in Governance of Enterprise IT (CGEIT); Certified Information Systems Security Professional (CISSP); Certified Information Security Auditor (CISA); Certified Cloud Security Professional (CCSP); AWS Certified Security Specialist; Microsoft Certified: Cybersecurity Architect Expert; Microsoft Azure Azure Security Engineer Associate; or another equal GIAC certification related to cloud, incident response, security engineering, or penetration testing.
</li></ul>Clearance Level<ul><li>
Public Trust, but an active Secret Clearance is preferred.</li></ul>
Work Location<ul><li>
Primary location(s) are Arlington and Alexandria VA. Remote work is authorized, but the employee may have to report to one of the primary sites occasionally or as requested by management or the client.
</li></ul>Hours of Operation<ul><li>
6:00 am ET &ndash; 6:00 pm ET</li></ul></div>

EMERGING TECHNOLOGY / CYBERSECURITY ENGINEER

BRMi

<div>Overview:
<div>
HYBRID</div><div>
Public Trust Clearance requirement.</div><div></div><div> 
BRMi is seeking a Security Analyst to support cybersecurity operations, risk management, compliance, and information assurance activities in support of NIH enterprise IT environments. The Security Analyst will work closely with technical teams, system owners, and government stakeholders to ensure the confidentiality, integrity, and availability of systems, networks, and data.</div><div></div><div> 
The ideal candidate will possess strong technical cybersecurity expertise, experience supporting federal security requirements, and the ability to identify, assess, and mitigate security risks across complex IT environments.</div><div></div><div> 
Benefits: 
<ul><li>Comprehensive Medical, Dental, and Vision Insurance</li><li>Employer-Paid Life Insurance</li><li>Employer-Paid Short-Term and Long-Term Disability Insurance</li><li>401(k)</li><li>Paid Time Off (PTO) that includes Vacation Leave, Sick Leave, and 11 Paid Holidays</li><li>Educational Assistance</li></ul></div><div></div><div> 
Salary: $100K-$120K</div><div>
HYBRID</div><div>
Work Location: Primary place of performance is Bethesda, Maryland, supporting NIH facilities and approved remote work locations in accordance with Government policies.</div><div></div><div> 
Click here to learn about BRMi's culture.</div><div></div><div> 
Click here to see BRMi&rsquo;s Glassdoor reviews</div>
Responsibilities:
<ul><li><div>
Cybersecurity Operations</div><ul><li>
Monitor, analyze, and respond to cybersecurity events, incidents, and vulnerabilities.</li><li>
Support security monitoring, threat detection, and incident response activities.</li><li>
Conduct security assessments and identify potential risks and weaknesses.</li><li>
Recommend and implement corrective actions to improve security posture.</li><li>
Assist in the development and maintenance of security procedures and standards.</li></ul></li><div></div><li><div> 
Risk Management &amp; Compliance</div><ul><li>
Support Risk Management Framework (RMF) activities.</li><li>
Assist with security control assessments, testing, and documentation.</li><li>
Develop and maintain System Security Plans (SSPs), POA&amp;Ms, security assessments, and supporting documentation.</li><li>
Ensure compliance with federal cybersecurity requirements, policies, and standards.</li><li>
Support system authorization and continuous monitoring activities.</li></ul></li><div></div><li><div> 
Vulnerability Management</div><ul><li>
Analyze vulnerability scan results and coordinate remediation activities.</li><li>
Track remediation efforts and ensure timely resolution of identified findings.</li><li>
Collaborate with infrastructure and application teams to address security risks.</li><li>
Provide recommendations for security hardening and configuration management.</li></ul></li><div></div><li><div> 
Security Engineering Support</div><ul><li>
Evaluate security controls and system configurations.</li><li>
Support implementation of cybersecurity technologies and solutions.</li><li>
Assist with identity and access management activities.</li><li>
Participate in security architecture reviews and technology evaluations.</li><li>
Support cloud security and modernization initiatives as required.</li></ul></li><div></div><li><div> 
Reporting &amp; Stakeholder Engagement</div><ul><li>
Prepare security reports, risk assessments, and compliance documentation.</li><li>
Present findings and recommendations to technical and non-technical stakeholders.</li><li>
Support audits, inspections, and security reviews.</li><li>
Maintain effective communication with government leadership and project teams.</li></ul></li><li>
Perform other duties as assigned</li></ul>
Qualifications:
<ul><li>Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field.</li><li>
5&ndash;8 years of cybersecurity, information assurance, or information security experience.</li><li>
Experience supporting federal cybersecurity programs and compliance requirements.</li><li>
Knowledge of NIST Cybersecurity Framework, NIST 800-53, RMF, FISMA, and federal security requirements.</li><li>
Experience conducting security assessments, vulnerability management, and risk analysis.</li><li>
Experience supporting system authorization and continuous monitoring activities.</li><li>
Strong analytical, problem-solving, and communication skills.</li><li>
Ability to obtain and maintain a federal background investigation.</li><li>
Candidates must possess the following certifications: 
<ul><li>
Security+</li><li>
Certified Information Systems Security Professional (CISSP)</li><li>
Certified Information Security Manager (CISM)</li><li>
Certified Ethical Hacker (CEH)</li></ul></li><li>
Preferred Experience 
<ul><li>
Experience supporting NIH, HHS, or other federal civilian agencies.</li><li>
Experience with Splunk, Tenable, Nessus, Microsoft Defender, or similar security tools.</li><li>
Experience supporting cloud environments including Azure or AWS.</li><li>
Experience with security incident response and threat hunting.</li><li>
Experience supporting biomedical research, scientific computing, or healthcare IT environments.</li></ul></li></ul><div>
** BRMi will not sponsor applicants for work visas for this position.**</div><div>
**This is a W2 opportunity only**</div><div></div><div> 
EOE/Minorities/Females/Vet/Disabled</div><div>
We are an equal opportunity employer that values diversity and commitment at all levels. All individuals, regardless of personal characteristics, are encouraged to apply. Employment policies and decisions on employment and promotion are based on merit, qualifications, performance, and business needs. The decisions and criteria governing the employment relationship with all employees are made in a nondiscriminatory manner, without regard to race, religion, color, national origin, sex, age, marital status, physical or mental disability, medical condition, veteran status, or any other factor determined to be unlawful by federal, state, or local statutes.</div></div>

Security Analyst

muvi Cinemas

<div>
 
 
 Job Title: Cybersecurity Engineer
 
 
 
 
 Location:
 
 Riyadh, Saudi Arabia
 
 
 
 Company:
 
 Muvi Cinemas
 
 
 
 Role Overview:
 
 
 
 We are seeking a highly skilled and proactive Cybersecurity Engineer to join the IT Department at Muvi Cinemas and protect the organization's networks, systems, applications, and data from cyber threats. Reporting to the Director of TechOps, the role is responsible for designing, implementing, and maintaining security infrastructure, identifying vulnerabilities, responding to security incidents, implementing security controls, and ensuring compliance with cybersecurity frameworks and regulatory requirements. This position plays a critical role in safeguarding Muvi Cinemas' digital assets, customer data, point-of-sale systems, and entertainment technology platforms while ensuring adherence to Saudi National Cybersecurity Authority (NCA) regulations and international security standards.
 
 
 
 Key Responsibilities:
 
 
 
 
 Security Infrastructure &amp; Architecture
 
 
 <ul>
 <li>
 Design, implement, and manage cybersecurity infrastructure including firewalls, intrusion detection/prevention systems (IDS/IPS), SIEM, endpoint protection, and network security solutions.
 </li>
 <li>
 Develop and maintain security architecture aligned with Muvi Cinemas' business requirements, industry best practices, and regulatory standards.
 </li>
 <li>
 Deploy and configure security tools across on-premises, cloud, and hybrid environments supporting cinema operations, ticketing systems, and corporate infrastructure.
 </li>
 <li>
 Implement network segmentation, zero-trust architecture, and defense-in-depth strategies to protect critical assets including POS systems, customer databases, and entertainment platforms.
 </li>
 <li>
 Evaluate and recommend new security technologies, tools, and solutions to enhance the organization's security posture.
 </li>
 <li>
 Manage and optimize security information and event management (SIEM) platforms for real-time monitoring and threat detection.
 </li>
 </ul>
 
 
 Vulnerability Management &amp; Penetration Testing
 
 
 <ul>
 <li>
 Conduct regular vulnerability assessments and penetration testing across networks, systems, applications, and infrastructure.
 </li>
 <li>
 Identify, classify, and prioritize security vulnerabilities based on risk severity and business impact.
 </li>
 <li>
 Develop and track remediation plans with system owners and IT teams to address identified vulnerabilities.
 </li>
 <li>
 Perform security code reviews and application security assessments for web applications, mobile apps, and customer-facing platforms.
 </li>
 <li>
 Manage vulnerability scanning tools and maintain vulnerability databases and tracking reports.
 </li>
 <li>
 Conduct red team/blue team exercises and adversary simulations to test organizational defenses.
 </li>
 </ul>
 
 
 Security Operations &amp; Incident Response
 
 
 <ul>
 <li>
 Monitor security events, alerts, and logs using SIEM and security monitoring tools to detect and respond to threats in real-time.
 </li>
 <li>
 Lead incident response activities including identification, containment, eradication, recovery, and post-incident analysis.
 </li>
 <li>
 Develop and maintain incident response plans, playbooks, and escalation procedures.
 </li>
 <li>
 Conduct forensic investigations and root cause analysis for security incidents and breaches.
 </li>
 <li>
 Coordinate with internal teams and external partners during security incidents.
 </li>
 <li>
 Prepare incident reports and present findings and recommendations to management.
 </li>
 </ul>
 
 
 Data Protection &amp; Privacy
 
 
 <ul>
 <li>
 Implement data protection controls to safeguard customer personal data, payment card information, and business-sensitive data.
 </li>
 <li>
 Ensure compliance with PCI DSS (Payment Card Industry Data Security Standard) requirements for payment processing and point-of-sale systems.
 </li>
 <li>
 Support data classification, data loss prevention (DLP), and encryption strategies.
 </li>
 <li>
 Monitor and enforce data handling policies across all business units and technology platforms.
 </li>
 <li>
 Ensure compliance with Saudi Personal Data Protection Law (PDPL) and related regulations.
 </li>
 </ul>
 
 
 Network &amp; Endpoint Security
 
 
 <ul>
 <li>
 Manage and maintain network security devices including firewalls, VPNs, WAFs, and proxy servers.
 </li>
 <li>
 Implement and manage endpoint detection and response (EDR) solutions across all corporate and operational endpoints.
 </li>
 <li>
 Monitor network traffic for anomalies, unauthorized access, and potential security threats.
 </li>
 <li>
 Secure wireless networks, IoT devices, and operational technology (OT) systems across cinema locations.
 </li>
 <li>
 Manage access control systems, identity management, and multi-factor authentication (MFA) implementations.
 </li>
 </ul>
 
 
 Cloud Security
 
 
 <ul>
 <li>
 Implement and manage security controls for cloud environments (AWS, Azure, GCP, or similar).
 </li>
 <li>
 Conduct cloud security assessments and ensure proper configuration of cloud services.
 </li>
 <li>
 Monitor cloud workloads, storage, and applications for security threats and compliance.
 </li>
 <li>
 Develop and enforce cloud security policies and governance frameworks.
 </li>
 </ul>
 
 
 Compliance &amp; Regulatory Adherence
 
 
 <ul>
 <li>
 Ensure compliance with Saudi National Cybersecurity Authority (NCA) regulations, Essential Cybersecurity Controls (ECC), and related frameworks.
 </li>
 <li>
 Support compliance with PCI DSS, ISO 27001, NIST, and other applicable security standards.
 </li>
 <li>
 Prepare and maintain documentation for security audits, certifications, and regulatory assessments.
 </li>
 <li>
 Conduct security risk assessments and maintain risk registers.
 </li>
 <li>
 Stay updated on evolving cybersecurity regulations, threats, and industry trends.
 </li>
 </ul>
 
 
 Security Awareness &amp; Training
 
 
 <ul>
 <li>
 Develop and deliver cybersecurity awareness training programs for employees across all Muvi Cinemas locations.
 </li>
 <li>
 Conduct phishing simulations and social engineering exercises to assess and improve organizational security awareness.
 </li>
 <li>
 Create security guidelines, best practices, and communication materials for staff education.
 </li>
 <li>
 Foster a culture of security awareness and responsibility across the organization.
 </li>
 </ul>
 
 
 Documentation &amp; Reporting
 
 
 <ul>
 <li>
 Maintain comprehensive security documentation including policies, procedures, standards, and guidelines.
 </li>
 <li>
 Prepare regular security reports, dashboards, and metrics for the Director of TechOps and CIO.
 </li>
 <li>
 Document security architectures, configurations, and operational procedures.
 </li>
 <li>
 Track and report on security KPIs, incident trends, and compliance status.
 </li>
 </ul>
 
 
 Qualifications:
 
 
 <ul>
 <li>
 
 Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Network Engineering, or a related field.
 
 </li>
 <li>
 
 Fluency in English (written and spoken) is mandatory.
 
 </li>
 <li>
 Proficiency in Arabic is preferred.
 </li>
 <li>
 Minimum 3-5 years of experience in cybersecurity engineering, security operations, or information security roles.
 </li>
 <li>
 
 Professional cybersecurity certifications are mandatory (one or more of the following): CEH, CompTIA Security+, CCNA Security, OSCP, GIAC, or equivalent.
 
 </li>
 <li>
 Advanced certifications such as CISSP, CISM, or CCSP are a strong advantage.
 </li>
 <li>
 Strong hands-on experience with security tools including firewalls (Palo Alto, Fortinet, Cisco ASA), SIEM platforms (Splunk, QRadar, Sentinel), IDS/IPS, EDR, and vulnerability scanners.
 </li>
 <li>
 Experience with cloud security (AWS, Azure, or GCP).
 </li>
 <li>
 Knowledge of PCI DSS compliance requirements for payment and retail environments.
 </li>
 <li>
 Familiarity with Saudi NCA Essential Cybersecurity Controls (ECC) and regulatory frameworks.
 </li>
 <li>
 Experience with ISO 27001, NIST Cybersecurity Framework, or similar standards.
 </li>
 <li>
 Strong understanding of networking protocols, operating systems (Windows, Linux), and scripting (Python, Bash, PowerShell).
 </li>
 </ul>
 
 
 Key Competencies:
 
 
 <ul>
 <li>
 Strong technical knowledge of cybersecurity infrastructure and security operations.
 </li>
 <li>
 Excellent analytical, problem-solving, and critical thinking abilities.
 </li>
 <li>
 Proactive threat detection and incident response capabilities.
 </li>
 <li>
 Strong understanding of network security, endpoint security, and cloud security.
 </li>
 <li>
 Data protection and privacy compliance expertise.
 </li>
 <li>
 Excellent communication and documentation skills.
 </li>
 <li>
 Ability to work under pressure and respond to security incidents effectively.
 </li>
 <li>
 Continuous learning mindset and passion for cybersecurity.
 </li>
 <li>
 Team collaboration and cross-functional coordination skills.
 </li>
 <li>
 Professionalism, integrity, and confidentiality.
 </li>
 </ul>
</div>

Cyber Security Engineer

malomatia

<div>
 
 Job Description
 
 
 
 We are seeking a skilled
 
 Application Security Specialist
 
 to join our Cybersecurity Practice. In this role, you will work closely with our application security, development, and QA teams to secure our clients&rsquo; applications across their entire lifecycle. You will conduct security testing, perform penetration tests, and assess vulnerabilities across web, mobile, API applications.
 
 
 Your responsibilities will span application penetration testing, automated security scanning (SAST, DAST, SCA), threat modelling, secure code review, and developer enablement. You will embed security best practices throughout the software development lifecycle and ensure that applications are designed and built with robust security controls.
 
 
 You will collaborate with development and DevOps teams to integrate security into CI/CD pipelines, triage and validate findings, and provide clear, actionable remediation guidance. The role requires hands-on technical expertise, strong analytical skills, and the ability to translate complex security findings into practical fixes that developers can implement.
 
 
 
 Responsibilities
 
 
 
 <ul>
 <li>
 Penetration Testing:Conduct penetration tests on web applications, mobile applications, APIs, and thick-client applications. Prepare detailed reports with clear risk ratings and actionable remediation recommendations.
 </li>
 <li>
 Security Scanning:Implement, tune, and manage automated security scanning tools (SAST, DAST, SCA) to continuously identify vulnerabilities in code, configurations, and third-party dependencies across all application types.
 </li>
 <li>
 Threat Modelling:Perform threat modelling to identify potential security risks and attack surfaces associated with applications early in the design process, and provide guidance on mitigating these risks.
 </li>
 <li>
 Secure Code Review:Review application source code for security vulnerabilities across multiple platforms and languages, and offer practical, developer-friendly recommendations for remediation.
 </li>
 <li>
 DevSecOps Integration:Integrate security testing and controls into CI/CD pipelines, enabling continuous and automated security validation as part of the development workflow.
 </li>
 <li>
 Training &amp; Awareness:Develop and deliver secure coding training sessions and workshops to raise application security awareness among development teams and other stakeholders.
 </li>
 <li>
 Tool Evaluation:Assess and recommend tools and technologies to enhance application security testing and monitoring capabilities across various platforms.
 </li>
 <li>
 Documentation:Create and maintain comprehensive documentation related to security assessments, vulnerability management, and application security standards and policies.
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 <ul>
 <li>
 Education: Bachelor&rsquo;s / college degree in Computer Science, Information Security, or a related field.
 </li>
 <li>
 Experience: At least 3 years of experience in application security, secure software development, penetration testing, or a closely related field.
 </li>
 <li>
 Certifications: Relevant professional certifications are highly desirable. These may include, but are not limited to:
 </li>
 <ul>
 <li>
 OffSec certifications (e.g., OSWA, OSWE)
 </li>
 <li>
 eLearnSecurity (e.g., eWPT, eWPTX)
 </li>
 <li>
 GIAC / SANS (e.g., SEC542, GWAPT)
 </li>
 <li>
 BCSP or other application security certifications.
 </li>
 </ul>
 <li>
 Technical Skills: Proficiency with security testing tools such as Burp Suite (required), and familiarity with Snyk, HCL AppScan, Fority, and Postman (preferred). Strong understanding of secure coding practices and hands-on experience with at least one programming language. Familiarity with DevSecOps practices and CI/CD pipelines is preferred.
 </li>
 <li>
 Knowledge: In-depth knowledge of application security principles and practices, with strong familiarity with security frameworks and guidelines (e.g., OWASP Top 10, ASVS, MASVS, WSTG, MSTG). Understanding of common vulnerability classes, exploitation techniques, and remediation strategies. Knowledge of Qatar National Information Assurance (NIA) is a plus.
 </li>
 </ul>
</div>

Application Security

Search 2849+ Cybersecurity specialist jobs near you this July. New roles added regularly across leading industries. Apply today.