rn physician informatics advocate intermediate

data security lead analyst

rn physician informatics advocate intermediate Jobs in Tampa

security operations center engineer Jobs in Tampa

security operations center engineer

senior cloud security engineer Jobs in Tampa

senior cloud security engineer

senior data security architect Jobs in Tampa

senior data security architect

information security ntern

Gerdau

<div></div><div><div><div><div>LOCATION:</div></div><div><div><div><div><ul>
<li>
Posted on Mar 11 2026</li>
<li>Tampa, Florida, United States</li>
</ul></div></div></div></div></div><div></div><div><div><div>
AREA:</div></div><div><div>
G.Start Internships</div></div></div><div><div><div>
At Gerdau, we empower our people to grow, thrive, and make a difference&mdash;together. With a culture built on trust and teamwork, we offer meaningful work, continuous development, and opportunities to shape your future. We invite you to come work with us, where your contributions are valued, your voice is heard, and your career is forged with purpose
PROGRAM DESCRIPTION
Gerdau is seeking college students to participate in our, G.Start program. G.Start is a paid internship program with the goal of developing students for future technical and managerial positions G.Start internships are project-focused and mutually-beneficial. G.Start is a program that values the diversity and inclusion of our business and society.
Gerdau is looking for G.Start candidates who have an eagerness to grow personally and professionally, being a part of a global company with more than 120 years of entrepreneurship and achievements in the steel industry. This program is for individuals with high learning agility and willingness to adapt and develop continuously, who aim at consistently outperforming in a variety of settings and circumstances.
Who We Are
Gerdau is a major steel manufacturing company, operating in 10 countries, and employing over 30,000 individuals. The North American business divisions (Gerdau Long Steel North America and Gerdau Specialty Steel North America) produce long and special steel products for the agriculture, energy, industrial, automotive, and manufacturing markets. We stimulate the economy through our network of recycling operations and mills, operating ten mills in the U.S. and three in Canada. Our mills utilize efficient and clean production practices, including the use of electric arc furnace (EAF) technology. The use of this technology and its process makes our steel one of the greenest choices available.
Opportunities to Learn
In the role as Information Security G-Start you will have the opportunity to:<ul><li>
Work with a talented group of Information Security Professionals that can give you keen insights into the field of Information Security, IAM and GRC and how Human Risk Management (HRM) is used to reduce security risk through behavior-based programs.</li><li>
Gain hands-on experience supporting continuous security awareness and phishing simulation programs.</li><li>
Understand how data, metrics, and trends are used to measure human-related security risk</li><li>
Gain exposure to information security audit activities, learning how evidence is collected and validated</li><li>
Develop practical skills using tools such as KnowBe4, Microsoft SharePoint, Power Automate, and Power BI. Learn how automation and process optimization reduces manual work in security operations
</li></ul>Job Responsibilities and the Individual
This position will support the Information Security team, with a focus on Human Risk Management / Security Awareness, Audit Support and IAM. The responsibilities may include, but are not limited to:
Human Risk Management (HRM) &amp; Security Awareness<ul><li>
Assist with maintaining security awareness communications</li><li>
Help track, organize, and validate phishing and training data to support trend analysis</li><li>
Support information security training activities</li><li>
Help maintain simple recognition initiatives that reinforce positive security behavior</li></ul>
Audit &amp; Compliance Support<ul><li>
Support information security audit activities (internal and external)</li><li>
Assist with audit evidence collection, organization, and validation</li><li>
Help track audit requests, deadlines, and follow-ups</li><li>
Support preparation of documentation used during audits</li></ul>
IAM (Identity and Access Management)<ul><li>
IAM process review (policies, guidelines and procedures)</li><li>
Application group access review</li><li>
Ticket escalation and support in the approval process</li><li>
Develop practical skills using tools such as AD (Active Directory), Service Now, Azure, Change Auditor and Active Roles.</li></ul> 
Start shaping the future with us!
Equal Opportunity Statement: Gerdau believes in equal employment opportunities for all and the importance of each employee and applicant as an individual. It is the policy of Gerdau that there will be no discrimination against any employee or applicant for employment on the basis of race, religion, creed, color, national origin, citizenship, marital status, sex, age, sexual orientation, genetic information, gender identity, veteran status, political ideology, ancestry, the presence of any physical, sensory, or mental disabilities, or other legally protected status. All applicants must be legally eligible to work in the country of hire without current or future sponsorship.
Gerdau believes in equal employment opportunity related to all employees and applicants for employment. It is the policy of Gerdau that there will be no discrimination against any employee or applicant for employment on the basis of race, religion, color, national origin, citizenship, marital status, sex, age, sexual orientation, genetic information, gender identity, veteran status, disability, or other legally protected status. All external applicants must be legally eligible to immediately work in the country of hire without current or future sponsorship.
If you are vision-impaired or have some other disability under the Americans with Disabilities Act / Accessible Canada Act or a similar law, and you wish to discuss potential accommodations related to applying for employment at Gerdau, please contact our Talent Acquisition Team at (866)-788-2798 or recruiting@gerdau.com</div></div></div></div><div></div>

Information Security Ntern

General Dynamics Information Technology

<div><div><div>Your Impact
Own your opportunity to support our nation's defense. Make an impact by connecting and securing critical operations across the globe, keeping our country safe and secure.
Job Description<div>
General Dynamics Information Technology (GDIT) is seeking a highly skilled and motivated Security Operations Center (SOC) Engineer to join our dynamic Cybersecurity team. In this role, you will be instrumental in developing and maintaining the tools and capabilities used to monitor, analyze, and respond to security threats. The ideal candidate brings a strong foundation in cybersecurity principles, hands-on experience with SIEM platforms, and the ability to thrive in a fast-paced, collaborative environment. Advance your career and support critical national security missions as a SOC Cybersecurity Engineer at GDIT, where technologists have diverse pathways to grow and make an impact across federal cyber operations.
HOW A SECURITY OPERATIONS CENTER (SOC) ENGINEER WILL MAKE AN IMPACT :<ul><li>
Engineering &amp; Tuning: Develop, refine, and maintain detection rules in SIEM and EDR platforms to enhance detection quality and minimize false positives.</li><li>
Tool Development &amp; Integration: Design and implement custom security tools and integrations using APIs to connect and optimize security platforms.</li><li>
Detection Engineering: Build and optimize complex SIEM detections (e.g., Splunk) to identify advanced threats.</li><li>
SOAR Automation: Create automation playbooks for tasks such as alert triage, IP blocking, and host isolation.</li><li>
Log Pipeline Management: Oversee ingestion, normalization, and parsing of custom data sources to ensure end‑to‑end visibility.</li><li>
Incident Monitoring &amp; Response: Monitor and analyze security events from SIEM, IDS/IPS, firewalls, and other security tools; respond to incidents in real time.</li><li>
Security Architecture: Partner with the SOC Architect to design scalable, resilient security infrastructure.</li><li>
Collaboration &amp; Communication: Work closely with cybersecurity, IT, and engineering teams to ensure cohesive incident response and system integration.</li><li>
Security Enhancements: Identify opportunities to strengthen security processes, implement best practices, and contribute to continuous SOC improvement.</li></ul>
WHAT YOU&rsquo;LL NEED TO SUCCEED:<ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Information Technology, or related discipline, or equivalent experience</li><li>
Minimum 5 years of experience in a SOC or cybersecurity-focused role</li><li>
Hands-on experience with SIEM tools such as Splunk, IBM QRadar, or ArcSight</li><li>
Strong understanding of cybersecurity concepts including network security, firewalls, IDS/IPS, and vulnerability management</li><li>
Familiarity with incident response practices and NIST security frameworks</li><li>
Strong analytical skills, attention to detail, and ability to prioritize effectively</li><li>
At least one relevant certification (e.g., CompTIA Security+, CySA+, CISSP, CEH, CISM, CASP, GSEC, GCIH)</li><li>
Experience with HBSS/ Trellix</li><li>
Excellent written and verbal communication skills</li></ul>
Security Clearance Level: active TS/SCI clearance
US Citizenship required
Work is onsite at customer facility
Desired Skills:<ul><li>
Security Stack Mastery: Hands-on experience building/configuring SIEM, EDR/XDR, and SOAR platforms.</li><li>
Data Normalization: Experience with log parsing (Regex) and data modeling (CIM compliance).</li><li>
Familiarity with advanced threat detection, indicators of compromise, attack frameworks and incident response methodologies.</li><li>
Experience with threat intelligence, malware analysis, threat hunting.</li><li>
Experience with vulnerability management tools and techniques.</li><li>
Experience with endpoint security products.</li><li>
Experience with cloud security (VMWare Cloud Foundations).</li><li>
Experience with Zero Trust architecture and principles.</li><li>
Knowledge of scripting languages (e.g., PowerShell, Python, Bash) is a plus.</li></ul><div> 
GDIT IS YOUR PLACE 
At GDIT, the mission is our purpose, and our people are at the center of everything we do. 
<ul><li>Growth: AI-powered career tool that identifies career steps and learning opportunities</li><li>Support: An internal mobility team focused on helping you achieve your career goals</li><li>Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off</li><li>Community: Award-winning culture of innovation and a military-friendly workplace</li></ul> 
OWN YOUR OPPORTUNITY 
Explore a career in cyber at GDIT and you&rsquo;ll find endless opportunities to grow alongside colleagues who share your focus on defending and protecting what matters.</div>
#armajobs</div></div><div><div><div>
Work Requirements</div></div><div></div><div><div>
Years of Experience<div>
5 + years of related experience</div><ul><li>may vary based on technical training, certification(s), or degree</li></ul></div><div></div><div>
Certification
Certified Information Systems Security Professional (CISSP) | International Information System Security Certification Consortium (ISC2) - International Information System Security Certification Consortium (ISC2)
Splunk Enterprise Certified Admin | Splunk - Splunk
CompTIA Security+ CE | CompTIA - CompTIA</div><div></div><div>
Travel Required<div>
Less than 10%</div></div><div></div><div>
Citizenship<div>
U.S. Citizenship Required</div></div></div></div></div><div>
Salary and Benefit Information<div>
The likely salary range for this position is $114,750 - $155,250. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range. 
View information about benefits and our total rewards program.</div>
About Our Work<div>
We are GDIT. A global technology and professional services company that delivers technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across over 50 countries worldwide, offering leading capabilities in digital modernization, AI/ML, cloud, cyber and application development. Together with our customers, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.</div><div>
Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.</div><div>
Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans</div></div></div>

Security Operations Center Engineer

Moffitt Cancer Center

<div>
 
 Working at Moffitt is both a career and a mission: to contribute to the prevention and cure of cancer. As the only National Cancer Institute-designated Comprehensive Cancer Center based in Florida, Moffitt employs some of the best and brightest minds from around the world. Join a dedicated team of nearly 10,000 who are shaping the future we envision. Moffitt has been recognized as a Best and Brightest Company to Work for in the Nation, a Digital Health Most Wired Organization and continually named one of the Tampa Bay Time&rsquo;s Top Workplaces. A National Cancer Institute (NCI)-designated Comprehensive Cancer Center since 2001.
 
 
 
 
 
 
 Summary
 
 
 
 
 
 
 Workday Security Analyst II
 
 
 
 
 
 Position Highlights:
 
 <ul>
 <li>
 The Security Analyst II is responsible for maintaining and supporting the organization's Workday security infrastructure, ensuring secure and efficient access management for all users. This role focuses on day-to-day operational security activities, including user provisioning through Workday and SailPoint, managing security groups, maintaining role-based access controls, domain security policies and business process security policies.
 </li>
 <li>
 The analyst supports the full security life cycle by configuring security in Workday, performing routine audits, responding to security incidents, and maintaining accurate documentation. By ensuring compliance with internal policies and regulatory requirements, the Analyst helps safeguard sensitive HR and financial data while enabling seamless business operations.
 </li>
 <li>
 The analyst supports Workday's infrastructure through governance, sustains continuous policy improvements, and keeps the organization audit-ready. This role will help shape our security framework as we launch Workday and enforce the policies after go-live.
 </li>
 <li>
 This role focuses on developing, maintaining, and monitoring security governance frameworks, including security policies and audit procedures. The analyst partners with HR, IT, and Internal Audit teams to perform regular security audits, document controls, and support internal and external audits. The role also proactively identifies risks, recommends process improvements, and contributes to the overall security strategy, ensuring the Workday environment remains secure, compliant, and well-governed.
 </li>
 </ul>
 
 
 
 
 Responsibilities:
 
 <ul>
 <li>
 Demonstrate proof of security controls during internal and external audits.
 </li>
 <li>
 Provision and deprovision access in Workday.
 </li>
 <li>
 Monitor segragation of duties
 </li>
 <li>
 Collaborate with IT and business customers on security-impacting changes.
 </li>
 <li>
 Document change controls for security changes made.
 </li>
 <li>
 Support Workday releases with a focus on security impacts and security regression testing.
 </li>
 <li>
 Drive continuous improvement in security governance processes.
 </li>
 <li>
 Educate business leaders on security policies
 </li>
 <li>
 Contribute to any discussions and decisions concerning enterprise application security.
 </li>
 <li>
 Monitor emerging threats and recommend proactive security enhancements.
 </li>
 <li>
 Proactively stay up to date on Workday releases involving security.
 </li>
 <li>
 Champion security feature adoption where beneficial.
 </li>
 <li>
 Develop and enforce Workday security governance policies.
 </li>
 <li>
 Perform security audits, assessments, and readiness for internal and external compliance requirements.
 </li>
 <li>
 Monitor system activity and ensure policy compliance.
 </li>
 <li>
 Lead audit readiness efforts and maintain documentation.
 </li>
 <li>
 Review security roles and access controls for adherence to policy.
 </li>
 <li>
 Develop and maintain awareness of divisional and data security and comply with policies and procedures.
 </li>
 <li>
 Ensure alignment of security practices with organizational goals and regulatory standards.
 </li>
 </ul>
 
 
 
 
 Credentials and Experience:
 
 <ul>
 <li>
 Bachelor&rsquo;s Degree: Information Security, Computer Science, Risk Management, or a related field
 </li>
 <li>
 Minimum of 3 years of experience in IT governance, risk, and compliance (GRC).
 </li>
 <li>
 Minimum of 2 years of experience with Workday security and SailPoint access control.
 </li>
 <li>
 Knowledge of security frameworks and regulatory compliance (e.g., SOX).
 </li>
 <li>
 Experience configuring, maintaining, and auditing Workday security, including domains, business processes, and security groups.
 </li>
 <li>
 Hands-on experience with user provisioning, deprovisioning, and access management in Workday.
 </li>
 <li>
 Experience performing security impact assessments for configuration changes and enhancements.
 </li>
 <li>
 Managing role-based access controls and segration of duties monitoring.
 </li>
 <li>
 Troubleshooting SSO/SAML authentication and access issues.
 </li>
 <li>
 Conducting security reviews, risk assessments, and remediation planning.
 </li>
 <li>
 Experience handling security incidents, escalations, and break/fix support.
 </li>
 <li>
 Partnering with HR, Financials and Supply Chain customers for issue resolution.
 </li>
 <li>
 Experience monitoring integration and EIB access to ensure data security.
 </li>
 <li>
 Building security audit reports and dashboards.
 </li>
 <li>
 Supporting Workday releases, feature adoption, and security regression testing.
 </li>
 <li>
 Documenting change controls, and approvals for security updates.
 </li>
 <li>
 Partnering with stakeholders to prioritize and execute security enhancements.
 </li>
 </ul>
 
 
 
 
 Certification:
 
 <ul>
 <li>
 Workday Security (within 9 months of hire/job change)
 </li>
 <li>
 CISSP (Certified Information System Security) or CISM (Certified Information Security Manager) preferred
 </li>
 </ul>
 
 
</div>

Workday Security Analyst II

MUFG

<div>Do you want your voice heard and your actions to count?
Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world&rsquo;s leading financial groups. Across the globe, we&rsquo;re 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.
With a vision to be the world&rsquo;s most trusted financial group, it&rsquo;s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.
Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.
The selected colleague will work at an MUFG office or client sites four days per week and work remotely one day. A member of our recruitment team will provide more details.
Education:
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field, or relevant industry certifications. Equivalent work experience equally preferable.
Qualifications:<ul><li>
At least 3 years of experience in designing, implementing, and securing public cloud platforms and services, preferably in AWS and Azure; OCI is a plus.</li><li>
Professional experience in highly regulated industries, preferably in financial industry is major plus.</li></ul><div>
Required certifications - at least one the following: 
<ul><li>AWS Certified Solutions Architect (Associate and/or Professional)</li><li>AWS Certified Security - Specialty,</li><li>Microsoft Certified: Azure Security Engineer Associate</li></ul> 
The following certifications are a plus: 
<ul><li>ISC2 Certified Cloud Security Professional (CCSP)</li><li>ISC2 Certified Information Systems Security Professional (CISSP)</li><li>ISACA Certified Information Systems Manager (CISM)</li><li>EC-Council Certified Ethical Hacker (CEH)</li></ul></div>
Functional Skills:<ul><li>
Expertise in public cloud service providers, especially in Amazon Web Services (AWS) and Microsoft Azure; Oracle Cloud Infrastructure (OCI) is a plus.</li><li>
Hands on experience with public cloud-native platforms and services - such as Compute, Network, Storage, and ideally Generative AI/Agentic AI public cloud services - with understanding of security control requirements to securely implement for usage of services.</li><li>
Hands on experience with public cloud-native security services specialized in Threat Detection, Encryption, Data Protection, Compliance, Identity and Access Management / Permission guardrails, etc.</li><li>
Preferably, hands on experience with solutioning and configuring automated security policies in Cloud Native Application Protection (CNAPP) inclusive of capabilities such as Cloud Security Posture Management (CSPM), Infrastructure-as-code (IaC) Scanning, etc.</li><li>
Deep understanding of cloud security frameworks (e.g., AWS Well-Architected Framework, Azure Well-Architected Framework), industry compliance requirements, and best practices</li><li>
Familiar with Infrastructure as code, preferably Hashicorp Terraform; AWS CloudFormation, and Azure Resource Manager (ARM) templates.Strong analytical skills to identify potential security risks and automate security compliance checks.</li><li>
Excellent problem-solving abilities and the capacity to work effectively under pressure.</li><li>
Be proactive, with a strategic approach to security management, ensuring that the public cloud platform and solutions are not only secure but also compliant at all times through automated policies and validation.</li></ul>
Foundational Skills:<div>
Exceptional team member who will drive innovation while never losing sight of the basics 
<ul><li>Exceptional ability to champion ideas, execute and drive positive change</li><li>Strong drive to build a best in the world program driven by security excellence</li><li>Strategic, creative, and innovative mind</li><li>Zero tolerance for operational, design, and strategy-oriented gaps</li><li>Absolute self-starter who will take the lead and initiative to find and solve problems</li><li>Be able to effectively communicate many examples of where you drove positive change with organization buy-in and cooperation.</li></ul></div>
Responsibilities:<ul><li>
Identify threats, and design and develop appropriate defense measures.</li><li>
Evaluate public cloud platform's, native cloud services', public cloud workloads' changes for security implications.</li><li>
Ensure public cloud platform, services, and workloads are secure by design, which includes identifying, presenting opportunities of improvement on enhance the security posture of the public cloud environments.</li><li>
Configure continuous compliance validation to ensure ongoing adherence to security policies and regulations.</li><li>
Support the monitoring of cloud environments for security incidents and for rapid response through automated mechanisms.</li><li>
Collaborate with cross-functional teams, including developers, cloud engineers, architects, and operations, to (1) embed security-as-code practices into the DevOps pipeline, and (2) implement technical enhancements to the security design/posture of the public cloud environments.</li><li>
Serve as a subject matter expert on public cloud technologies and security solutions</li><li>
Provide guidance and mentorship to team members. Foster a culture of continuous improvement, innovation, and knowledge sharing across the organization.</li><li>
Stay updated on the latest cloud security threats and advancements</li></ul>
Other:<ul><li>
As per MUFG&rsquo;s work policy, must work onsite 4 days and 1 day remotely out of either Tampa, FL, or Jersey City, NJ office.</li><li>
The typical base pay range for this role is between $140K - $185K depending on job-related knowledge, skills, experience, and location. This role may also be eligible for certain discretionary performance-based bonus and/or incentive compensation. Additionally, our Total Rewards program provides colleagues with a competitive benefits package (in accordance with the eligibility requirements and respective terms of each) that includes comprehensive health and wellness benefits, retirement plans, educational assistance and training programs, income replacement for qualified employees with disabilities, paid maternity and parental bonding leave, paid vacation, sick days, and holidays. For more information on our Total Rewards package, please click the link below.</li></ul>
MUFG Benefits Summary
We will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws (including (i) the San Francisco Fair Chance Ordinance, (ii) the City of Los Angeles&rsquo; Fair Chance Initiative for Hiring Ordinance, (iii) the Los Angeles County Fair Chance Ordinance, and (iv) the California Fair Chance Act) to the extent that (a) an applicant is not subject to a statutory disqualification pursuant to Section 3(a)(39) of the Securities and Exchange Act of 1934 or Section 8a(2) or 8a(3) of the Commodity Exchange Act, and (b) they do not conflict with the background screening requirements of the Financial Industry Regulatory Authority (FINRA) and the National Futures Association (NFA). The major responsibilities listed above are the material job duties of this role for which the Company reasonably believes that criminal history may have a direct, adverse and negative relationship potentially resulting in the withdrawal of conditional offer of employment, if any.
The above statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities duties and skills required of personnel so classified.
We are proud to be an Equal Opportunity Employer and committed to leveraging the diverse backgrounds, perspectives and experience of our workforce to create opportunities for our colleagues and our business. We do not discriminate on the basis of race, color, national origin, religion, gender expression, gender identity, sex, age, ancestry, marital status, protected veteran and military status, disability, medical condition, sexual orientation, genetic information, or any other status of an individual or that individual&rsquo;s associates or relatives that is protected under applicable federal, state, or local law.</div>

Senior Cloud Security Engineer

<div>Do you want your voice heard and your actions to count?
Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world&rsquo;s leading financial groups. Across the globe, we&rsquo;re 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.
With a vision to be the world&rsquo;s most trusted financial group, it&rsquo;s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.
Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.
The selected colleague will work at an MUFG office or client sites four days per week and work remotely one day. A member of our recruitment team will provide more details.
Job Summary<div><div><div><div>
Being part of the red team provides you with the opportunity to work on the cutting edge of cybersecurity and help drive the improvement of detection capabilities as well as strengthening of defenses to improve our overall security posture. The role also offers you with the opportunity to lead and mentor junior team members and provide guidance on complex projects.
Major Responsibilities
<ul><li>Developing guidelines for the usage, control, maintenance and audit-readiness of information and computer resources that are used in the distributed processing environment.</li><li>
Analyzing and addressing customer security requirements for all business applications existing on a distributed platform.</li><li>
Assisting in the evaluation, selection, and installation of security software products for distributed platforms.</li><li>
Identifying distributed systems security issues as they arise and coordinating with the security architect to ensure that issues are addressed and resolved in a timely basis.</li><li>
Conduct tactical assessments that require expertise in social engineering, application security (web and mobile), physical methods, lateral movement, threat analysis, internal and external network architecture and a wide array of products</li><li>
Document and formally report testing initiatives, along with remediation recommendations and validation</li><li>
Maintain tools and scripts used in penetration-testing and red team processes</li><li>
Conduct research into real-world threat actor tactics, techniques, and procedures (TTPs) and apply that knowledge to Red Team Exercises</li><li>
Assess new technologies, software applications, and devices for potential avenues of exploitation</li><li>
Develop exploits based on identified vulnerabilities</li><li>
Develop scripts, tools, or methodologies to enhance Red Team processes</li><li>
Work with teammates to consistently learn and share advanced skills and foster team excellence</li></ul>
Qualification<ul><li>
Bachelor's Degree in Computer Science or related fields; applicable specialized training; or equivalent work experience - equally preferable</li><li>
Certified Information Systems Security Professional (CISSP), Global Information Assurance Certification (GIAC), Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Certified Information Security Manager (CISM), OSCP, OSCE, GWAPT, or other security certifications desired</li><li>
Understanding of one or more compliance frameworks: NIST, FFIEC, GLBA, SOX, PCI, etc.</li><li>
5-7 year of experience conducting penetration-testing/red team engagements</li><li>
Experience in planning and executing advanced attacks that evade network and endpoint security controls to demonstrate the potential adverse impact caused by a threat actor</li><li>
Experience with implementing red team assessment methods, tools, and techniques</li><li>
Experience identifying and exploiting common web-application vulnerabilities, such as: SQL Injection, DOM Manipulation, Authorization System Bypass, Design Logic issues, bounds checking, role &amp; access validation, and filter evasion.</li><li>
Experience handcrafting/dissecting HTTP conversations</li><li>
Experience in developing, extending, or modifying exploits and offensive security tools (shellcode, implants, reflective loaders, etc.), as well as operational experience exploitation, lateral movement, and persistence on Windows and Linux systems, bypassing preventative and detective endpoint, network security controls, and C2 frameworks (Cobalt Strike and Mythic).</li><li>
Experience in AI red teaming, including adversarial testing, prompt injection analysis, and vulnerability assessments of large language models.</li></ul>
The typical base pay range for this role is between $110K - $135K depending on job-related knowledge, skills, experience and location. This role may also be eligible for certain discretionary performance-based bonus and/or incentive compensation. Additionally, our Total Rewards program provides colleagues with a competitive benefits package (in accordance with the eligibility requirements and respective terms of each) that includes comprehensive health and wellness benefits, retirement plans, educational assistance and training programs, income replacement for qualified employees with disabilities, paid maternity and parental bonding leave, and paid vacation, sick days, and holidays. For more information on our Total Rewards package, please click the link below.
MUFG Benefits Summary</div></div></div></div>
We will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws (including (i) the San Francisco Fair Chance Ordinance, (ii) the City of Los Angeles&rsquo; Fair Chance Initiative for Hiring Ordinance, (iii) the Los Angeles County Fair Chance Ordinance, and (iv) the California Fair Chance Act) to the extent that (a) an applicant is not subject to a statutory disqualification pursuant to Section 3(a)(39) of the Securities and Exchange Act of 1934 or Section 8a(2) or 8a(3) of the Commodity Exchange Act, and (b) they do not conflict with the background screening requirements of the Financial Industry Regulatory Authority (FINRA) and the National Futures Association (NFA). The major responsibilities listed above are the material job duties of this role for which the Company reasonably believes that criminal history may have a direct, adverse and negative relationship potentially resulting in the withdrawal of conditional offer of employment, if any.
The above statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities duties and skills required of personnel so classified.
We are proud to be an Equal Opportunity Employer and committed to leveraging the diverse backgrounds, perspectives and experience of our workforce to create opportunities for our colleagues and our business. We do not discriminate on the basis of race, color, national origin, religion, gender expression, gender identity, sex, age, ancestry, marital status, protected veteran and military status, disability, medical condition, sexual orientation, genetic information, or any other status of an individual or that individual&rsquo;s associates or relatives that is protected under applicable federal, state, or local law.</div>

Red Team Operator, Assistant Vice President

Venatore

<div>About Us 
Venatore is a woman-owned small business headquartered in Tampa, Florida, providing mission-driven technology and professional services to federal defense and civilian agencies. We deliver expertise in information technology, engineering, logistics, and program support to help our clients achieve operational excellence and mission success.
About the Job 
Venatore is seeking a Splunk SOAR Engineer to support U.S. Central Command (USCENTCOM) operations by designing, implementing, and optimizing enterprise-level Security Orchestration, Automation, and Response (SOAR) capabilities. This role is responsible for transforming manual incident response processes into scalable, automated workflows that accelerate threat detection, containment, and remediation. The Splunk SOAR Engineer will lead the full lifecycle of platform architecture, integration, content development, and performance optimization while collaborating closely with SOC analysts, threat hunters, and incident response teams. An active TS/SCI clearance is required.
Responsibilities
Platform Architecture &amp; Engineering<ul><li>
Design, deploy, document, and maintain distributed Splunk SOAR (Phantom) platform architecture to ensure high availability, scalability, and performance.</li><li>
Support system upgrades, patching, and performance tuning across the SOAR infrastructure.</li><li>
Provide advanced troubleshooting and resolution of platform issues and playbook execution errors.</li><li>
Adhere to security best practices and compliance requirements within the operational environment.</li></ul>
Playbook Development &amp; Automation<ul><li>
Develop, customize, and maintain complex SOAR playbooks using Python and the Phantom Playbook Editor for automated enrichment, triage, containment, and remediation of security incidents (e.g., phishing, malware, unauthorized access).</li><li>
Translate manual security procedures into robust, automated workflows aligned with SecOps best practices.</li><li>
Establish and track automation metrics, including utilization rates, automation coverage, and Mean Time to Respond (MTTR) improvements.</li></ul>
Integration &amp; Interoperability<ul><li>
Integrate Splunk SOAR with Splunk Enterprise Security (ES) and other core security technologies, including EDR/XDR platforms, firewalls, vulnerability scanners, threat intelligence platforms, and ticketing systems.</li><li>
Develop custom apps and integrations to connect proprietary or unsupported security tools using RESTful APIs and custom connectors.</li><li>
Manage and optimize data flow between Splunk ES and Splunk SOAR to ensure effective event-triggered automation actions.</li></ul>
Collaboration &amp; Documentation<ul><li>
Partner with SOC analysts, threat hunters, and incident response teams to gather requirements and document workflows.</li><li>
Develop and maintain detailed technical documentation for platform configurations, integrations, and automation content.</li><li>
Provide training and mentorship to SOC staff on SOAR usage, content development, and automation best practices.</li><li>
Evaluate and integrate emerging security technologies and threat intelligence feeds into the automation ecosystem.</li></ul>
Required Qualifications<ul><li>
Active TS/SCI security clearance.</li><li>
U.S. citizenship.</li><li>
Applicable DoD 8140 or DoD 8570 certification.</li><li>
8+ years of related experience in security engineering or security operations.</li><li>
Hands-on expertise with Splunk SOAR (Phantom) administration, configuration, and maintenance in a distributed enterprise environment.</li><li>
Advanced proficiency in Python scripting for playbook development, custom apps, and integrations.</li><li>
Proven experience integrating SOAR platforms with Splunk Enterprise Security (ES), SIEMs, EDR/XDR tools, and other security technologies.</li><li>
Strong understanding of security operations principles, incident response lifecycles, and threat detection methodologies.</li><li>
Experience working with RESTful APIs and developing tool connectors.</li><li>
Proficiency in data manipulation, log parsing, and understanding of the Common Information Model (CIM) in a security context.</li><li>
Strong verbal and written communication skills with the ability to convey complex automation concepts to technical and non-technical audiences.</li></ul>
Preferred Qualifications<ul><li>
Familiarity with cloud security logging, containerization (Docker/Kubernetes), and CI/CD pipelines for playbook deployment.</li><li>
Knowledge of the MITRE ATT&amp;CK framework and its application in automated detection and response use cases.</li><li>
Experience using Git or other version control systems for SOAR content management.</li><li>
Familiarity with network protocols, Windows and Linux operating systems, and enterprise security architecture components.</li><li>
Splunk Enterprise Security Certified Admin or Architect certification.</li><li>
Splunk SOAR (Phantom) Certified Content Developer or Administrator certification.</li><li>
Experience with other SOAR platforms (e.g., Palo Alto Cortex XSOAR, IBM Resilient).</li><li>
Experience supporting USCENTCOM or multi-domain defense security operations environments.</li><li>
ITIL 4 Foundation certification.</li></ul>
Benefits 
Venatore offers a competitive benefits package designed to support the well-being of our employees, including:<ul><li>
Paid Time Off (PTO)</li><li>
10 Federal Holidays</li><li>
401(k) with company matching</li><li>
Medical, dental, and vision insurance</li><li>
Paid parental leave</li><li>
Paid military leave</li></ul>
Venatore is an equal opportunity employer and considers qualified applicants without regard to disability or protected veteran status.</div>

Splunk SOAR Engineer

Barbaricum

<div><div>Barbaricum is a rapidly growing government contractor providing leading-edge support to federal customers, with a particular focus on Defense and National Security mission sets. We leverage more than 17 years of support to stakeholders across the federal government, with established and growing capabilities across Intelligence, Analytics, Engineering, Mission Support, and Communications disciplines. Founded in 2008, our mission is to transform the way our customers approach constantly changing and complex problem sets by bringing to bear the latest in technology and the highest caliber of talent.

Headquartered in Washington, DC's historic Dupont Circle neighborhood, Barbaricum also has a corporate presence in Tampa, FL, Bedford, IN, and Dayton, OH, with team members across the United States and around the world. As a leader in our space, we partner with firms in the private sector, academic institutions, and industry associations with a goal of continually building our expertise and capabilities for the benefit of our employees and the customers we support. Through all of this, we have built a vibrant corporate culture diverse in expertise and perspectives with a focus on collaboration and innovation. Our teams are at the frontier of the Nation's most complex and rewarding challenges. Join our team.</div>
Barbaricum is seeking a Senior Data Security Engineer (DRM Specialist) to support a Zero Trust cybersecurity initiative for U.S. Special Operations Command (USSOCOM). This role will serve as the technical subject matter expert for Digital Rights Management (DRM), encryption policy enforcement, and data-centric security architecture across classified and unclassified environments. 


The selected candidate will design and implement attribute-based encryption and rights management policies to ensure sensitive data remains protected regardless of location or transport. This position plays a critical role in integrating identity attributes, data classification, and encryption technologies to enable dynamic, policy-driven access control across the enterprise. 


Responsibilities:
<ul>
<li>Architect and configure enterprise DRM platforms including Kiteworks Private Content Network and Microsoft Purview Information Protection.</li>
<li>Design and implement Attribute-Based Access Control (ABAC) policies to enforce dynamic access decisions based on user clearance, role, and device trust posture.</li>
<li>Manage the lifecycle of encryption keys and cryptographic infrastructure, including Bring Your Own Key (BYOK) and customer-managed key models.</li>
<li>Implement advanced secure collaboration capabilities allowing controlled viewing and editing of sensitive documents.</li>
<li>Configure rights management policies restricting unauthorized actions such as copy, printing, screen capture, or external sharing.</li>
<li>Integrate DRM platforms with identity systems and data classification tools to ensure consistent policy enforcement.</li>
<li>Support operations across hybrid and air-gapped classified networks.</li></ul> 


Required Qualifications:
<ul>
<li>Active DoD Top Secret clearance with SCI eligibility.</li>
<li>Master's degree in Cybersecurity, Computer Science, Mathematics, or related technical field.</li>
<li>10+ years of relevant cybersecurity or data protection experience.</li>
<li>Extensive experience implementing enterprise Digital Rights Management (EDRM) or Information Rights Management (IRM) solutions.</li>
<li>Strong knowledge of cryptographic protocols and standards (AES-256, RSA, PKI).</li>
<li>Experience designing and implementing Attribute-Based Access Control (ABAC) policies.</li>
<li>Experience supporting cross-domain or classified network environments.</li></ul> 


Preferred Qualifications:
<ul>
<li>Experience with Hardware Security Modules (HSM) such as Thales or Entrust.</li>
<li>Knowledge of NIST SP 800-53 security controls.</li>
<li>Experience integrating DRM platforms with identity governance solutions such as SailPoint.</li>
<li>Kiteworks administrator certification.</li></ul> 


Required Certifications:
<ul>
<li>CompTIA Security+ CE (DoD 8570 IAT Level II)</li>
</ul>
Preferred Certifications:
<ul>
<li>Microsoft Information Protection Administrator (SC-400)</li>
<li>Certified Information Systems Security Professional (CISSP)</li>
</ul><div>
EEO Commitment

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law.</div></div>

Senior Data Security Engineer (DRM Specialist)

Explore 171+ Information security ntern in Tampa this March. Find roles across top companies and apply now to boost your career.