penetration tester

Rividium

<div>RiVidium Inc. is seeking an experienced Vulnerability Assessment &amp; Penetration Testing Specialist ? Level III to serve the team for all Cybersecurity and Intelligence Enterprise Information Technology Services (CIEITS) program activities.
The Vulnerability Assessment &amp; Penetration Testing Specialist ? Level III serves as the senior technical expert responsible for planning, executing, and leading advanced penetration testing, vulnerability assessments, software assurance, and cyber supply chain risk management activities across the Department of Homeland Security (DHS) Intelligence Enterprise (DHS IE). This role performs comprehensive security assessments of enterprise networks, cloud environments, applications, operating systems, and Cross Domain Solutions (CDS) using industry-recognized methodologies and advanced manual testing techniques.
The specialist leverages frameworks such as MITRE ATT&amp;CK, OWASP, NIST, and industry best practices to identify vulnerabilities that may not be detected by automated tools. The position also supports software assurance initiatives through secure code reviews, application security testing, and Supply Chain Risk Management (SCRM) activities to strengthen the cybersecurity posture of DHS IE systems.
Working closely with Security Operations Center (SOC) personnel, Cybersecurity Engineers, Information System Security Officers (ISSOs), Information System Security Managers (ISSMs), developers, and Government stakeholders, the Vulnerability Assessment &amp; Penetration Testing Specialist provides expert recommendations to reduce enterprise cyber risk while ensuring compliance with Federal, DHS, and Intelligence Community (IC) cybersecurity requirements.
Key Responsibilities
<ul><li>Lead and conduct comprehensive penetration testing engagements for DHS Intelligence Enterprise systems, networks, applications, cloud environments, and infrastructure.</li>
<li>Perform penetration testing using industry-recognized methodologies, including:
<ul><li>MITRE ATT&amp;CK Framework</li>
<li>OWASP Web Security Testing Guide</li>
<li>NIST penetration testing guidance</li>
<li>PTES (Penetration Testing Execution Standard)</li>
</ul></li><li>Plan and execute all phases of penetration testing, including:
<ul><li>Pre-engagement planning</li>
<li>Rules of Engagement (ROE)</li>
<li>Threat intelligence gathering</li>
<li>Threat modeling</li>
<li>Vulnerability identification</li>
<li>Exploitation</li>
<li>Post-exploitation analysis</li>
<li>Reporting and remediation recommendations</li>
</ul></li><li>Utilize advanced manual testing techniques to identify vulnerabilities that are not detectable through automated scanning tools.</li>
<li>Perform network, web application, wireless, cloud, and infrastructure penetration testing using ethical hacking techniques while ensuring no disruption to production environments.</li>
<li>Validate Security Operations Center (SOC) detection and incident response capabilities through controlled adversary emulation and red team testing.</li>
<li>Assess logging, monitoring, detection, and response mechanisms to identify gaps in defensive capabilities.</li>
<li>Perform software assurance reviews by conducting security and compliance testing of software requests and applications prior to deployment.</li>
<li>Review Software Assurance Request Forms and provide technical adjudication and security recommendations.</li>
<li>Conduct vulnerability assessments of enterprise systems and deliver comprehensive Security Assessment Reports (SARs) and Vulnerability Assessment Reports (VARs) within established service-level agreements.</li>
<li>Perform Supply Chain Risk Management (SCRM) and Cyber Supply Chain Risk Management (C-SCRM) assessments for software, hardware, and third-party technologies supporting DHS IE.</li>
<li>Conduct secure source code reviews using both automated and manual analysis techniques to identify software vulnerabilities and coding weaknesses.</li>
<li>Utilize static application security testing (SAST), dynamic application security testing (DAST), and software composition analysis (SCA) tools to evaluate software security.</li>
<li>Maintain the penetration testing toolkit, ensuring monthly software updates, quarterly configuration reviews, and compliance with approved security baselines.</li>
<li>Develop comprehensive penetration testing reports documenting:
<ul><li>Testing methodology</li>
<li>Attack paths</li>
<li>Exploited vulnerabilities</li>
<li>MITRE ATT&amp;CK mappings</li>
<li>Risk ratings</li>
<li>Technical findings</li>
<li>Executive summaries</li>
<li>Remediation recommendations</li>
</ul></li><li>Develop and maintain Standard Operating Procedures (SOPs) supporting penetration testing, software assurance, vulnerability assessment, and SCRM activities.</li>
<li>Collaborate with cybersecurity engineering, DevSecOps, cloud engineering, and system administration teams to remediate identified vulnerabilities.</li>
<li>Support cybersecurity audits, security assessments, authorization activities, and continuous monitoring initiatives.</li>
<li>Participate in cybersecurity working groups and provide technical guidance on emerging threats, offensive security techniques, and vulnerability management best practices.</li></ul> 

Minimum Qualifications
<ul><li>Active Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance.</li>
<li>Minimum 7?10 years of experience performing penetration testing, vulnerability assessments, software assurance, and offensive cybersecurity activities within Federal Government or Intelligence Community environments.</li>
<li>Current Certified Ethical Hacker (CEH) certification.</li>
<li>Current Certified Information Systems Security Professional (CISSP) certification.</li>
<li>Expert knowledge of:
<ul><li>MITRE ATT&amp;CK Framework</li>
<li>OWASP Testing Methodology</li>
<li>OWASP Top 10</li>
<li>NIST Cybersecurity Framework</li>
<li>Penetration Testing Execution Standard (PTES)</li>
</ul></li><li>Demonstrated experience with penetration testing and vulnerability assessment tools such as:
<ul><li>Burp Suite Professional</li>
<li>Nessus / ACAS</li>
<li>Nmap</li>
<li>Metasploit Framework</li>
<li>Wireshark</li>
<li>Kali Linux</li>
<li>WebInspect</li>
<li>Nikto</li>
<li>Other industry-standard offensive security tools</li>
</ul></li><li>Experience performing software assurance using:
<ul><li>SonarQube</li>
<li>GitLab Security</li>
<li>Static Application Security Testing (SAST)</li>
<li>Dynamic Application Security Testing (DAST)</li>
<li>Software Composition Analysis (SCA)</li>
</ul></li><li>Minimum 2 years of experience in each of the following:
<ul><li>Software Assurance</li>
<li>Penetration Testing</li>
<li>Vulnerability Assessment</li>
<li>Patch Management</li>
<li>Secure Cloud and Hybrid Cloud Security Engineering</li>
</ul></li><li>Experience performing secure code reviews and identifying application security vulnerabilities.</li>
<li>Bachelor's degree in Cybersecurity, Computer Science, Software Engineering, Information Systems, or a related technical discipline.</li></ul> 

Preferred Qualifications
<ul><li>Offensive Security Certified Professional (OSCP) certification.</li>
<li>GIAC Penetration Tester (GPEN) certification.</li>
<li>Experience conducting penetration testing of Cross Domain Solutions (CDS) and classified information systems.</li>
<li>Experience supporting DHS Intelligence &amp; Analysis (I&amp;A) or other Intelligence Community cybersecurity programs.</li>
<li>Familiarity with:
<ul><li>DISA Security Technical Implementation Guides (STIGs)</li>
<li>Container security (Docker, Kubernetes)</li>
<li>Kubernetes security</li>
<li>Serverless application security</li>
<li>Secure DevSecOps pipelines</li>
</ul></li><li>Experience supporting Cloud Service Provider (AWS, Azure, or Google Cloud) penetration testing and cloud-native security assessments.</li>
<li>Experience performing adversary emulation, purple team, or red team exercises.</li>
<li>Familiarity with NIST SP 800-161 Cyber Supply Chain Risk Management (C-SCRM) guidance.</li></ul> 

Required Certifications
The following current certifications are required:
<ul><li>Certified Ethical Hacker (CEH)</li>
<li>Certified Information Systems Security Professional (CISSP)</li>
</ul>
Preferred certifications include:
<ul><li>Offensive Security Certified Professional (OSCP)</li>
<li>GIAC Penetration Tester (GPEN)</li>
</ul>
Clearance Requirement
Active Top Secret/Sensitive Compartmented Information (TS/SCI) Clearance Required</div>

Vulnerability Assessment & Penetration Testing Specialist ? Level III

DEF-LOGIX

<div>Location: Washington, DC (On-site) 
We are seeking a highly experienced Senior Penetration Testing, Software Assurance, and Vulnerability Assessment Engineer to provide technical expertise in penetration testing, software assurance, vulnerability assessment, and cybersecurity engineering. The successful candidate will support the identification, assessment, and mitigation of security vulnerabilities across enterprise, cloud, hybrid, and cross-domain environments while ensuring alignment with Federal cybersecurity requirements and best practices.

The ideal candidate will possess extensive experience performing penetration testing using automated tools, supporting secure engineering initiatives, and strengthening the overall cybersecurity posture of mission-critical systems.

Key Responsibilities:
<ul>
<li>Perform penetration testing using a range of automated tools to identify and validate security vulnerabilities.</li>
<li>Conduct software assurance activities to evaluate and improve application security.</li>
<li>Perform vulnerability assessments and recommend appropriate remediation strategies.</li>
<li>Support security patch management activities to reduce cybersecurity risk.</li>
<li>Provide cybersecurity engineering support for secure cloud and hybrid environments.</li>
<li>Support cybersecurity activities involving Cross Domain Solutions (CDS).</li>
<li>Develop technical findings, risk assessments, and remediation recommendations.</li>
<li>Collaborate with Government stakeholders and technical teams to improve system security and resilience.</li>
<li>Support the implementation of cybersecurity best practices across enterprise environments.</li>
</ul>
Minimum Qualifications:
<ul>
<li>Minimum 10 years of demonstrated cybersecurity experience.</li>
<li>At least 2 years of recent experience in each of the following areas:</li>
<li>Software assurance</li>
<li>Penetration testing using a range of automated tools</li>
<li>Vulnerability assessment</li>
<li>Security patch management</li>
<li>Secure cloud and hybrid engineering</li>
<li>Cross Domain Solutions (CDS)</li>
<li>Demonstrated experience identifying, assessing, and mitigating cybersecurity vulnerabilities.</li>
<li>One of the following qualification paths:</li>
<li>Certified Ethical Hacker (CEH) and Certified Information Systems Security Professional (CISSP) certifications, in good standing; or</li>
<li>Comparable demonstrable experience.</li>
</ul>
Preferred Qualifications:
<ul>
<li>Current or prior experience supporting the U.S. Department of Homeland Security (DHS).</li>
<li>Demonstrated experience working within DHS organizations or supporting DHS penetration testing, software assurance, and vulnerability assessment initiatives is highly preferred.</li></ul></div>

Senior Penetration Testing, Software Assurance and Vulnerability

CrowdStrike

<div>As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn&rsquo;t changed &mdash; we&rsquo;re here to stop breaches, and we&rsquo;ve redefined modern security with the world&rsquo;s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We&rsquo;re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.<div><div> 
About The Role: 
The Senior Consultant will lead a team dedicated to performing Red Team activities simulating known threat actor, to help CrowdStrike customers determine the impact and likelihood of threat actor to accomplish objective across the Kill Chain and MITRE ATT&amp;CK Framework. The Senior Red Team Consultant is expected to be able to coordinate with senior leadership, plan, and oversee execution of assessments and assist the other CrowdStrike Services&rsquo; functions to help improve customers security defense. This person should be capable of supporting, managing, and mentoring less experienced red team members. 
 
What You'll Do:<ul><li>
Act as a primary contact for coordination of Red Team activities as well as coordinating and leading all penetration testing activities.</li><li>
Develop reporting including mitigations strategies of results of Red Team activities for both management and technical audiences.</li><li>
Must be able to effectively communicate at all levels (executive leadership and technical support teams) within CrowdStrike.</li><li>
Organize resources to perform penetration assessments of operating systems, applications, databases and network infrastructure components to detect, enumerate threats.</li><li>
Work with a diverse team and lead/assist in developing and improving an information security program and information security resources.</li><li>
Provide guidance using specialized knowledge and toolsets to operational teams during enterprise wide crisis scenarios, e.g. large-scale production service outages, outside of the routine change management process.</li><li>
Must be able to work as an operator and project manager on various types of penetration testing offerings.</li></ul>
What You'll Need:<ul><li>
Minimum 5 years of experience in a Red Team/Penetration Testing activities is highly preferred</li><li>
Minimum 1 year of experience in a Leadership role is highly preferred</li><li>
Security community participation (conference speaker, tool development contributor, &hellip;) is highly preferred</li><li>
Advanced experience with Security Assessment Toolsets (Metasploit, NMAP, Cobalt Strike, Nessus, Burp Suite, etc.)</li><li>
Comprehensive understanding of the security methodologies, technologies, and best practices</li><li>
Windows / Linux / UNIX / Mac operating systems</li><li>
Advanced experience with Networking components (routers, switches, load balancers, wireless access points, etc.)</li><li>
Comprehensive knowledge of firewalls, proxies, mail servers and web servers</li><li>
Advanced experience with operational support for operating systems, applications and networks</li><li>
Advanced experience with Red Teaming (vulnerability/penetration testing/adversary emulation assessments)</li><li>
Advanced experience in automation and scripting of applications and systems</li><li>
Desirable Certifications: OSCP, GPEN, OSCE, GCIH, GXPN</li><li>
Occasional travel may be required (&lt;25%)</li><li>
Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.</li></ul>
#LI-GP2
#LI-GT1
#LI-Remote</div></div> 
Benefits of Working at CrowdStrike:
<ul><li>Market leader in compensation and equity awards</li><li>
Comprehensive physical and mental wellness programs</li><li>
Competitive vacation and holidays for recharge</li><li>
Paid parental and adoption leaves</li><li>
Professional development opportunities for all employees regardless of level or role</li><li>
Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections</li><li>
Vibrant office culture with world class amenities</li>
Great Place to Work Certified&trade; across the globe 
<li>
</li></ul> 
CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program. 
CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions-including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs-on valid job requirements. 
If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at recruiting@crowdstrike.com for further assistance.</div>

Principal / Senior Red Team Services Consultant (Remote, UAE/KSA)

<div>RiVidium Inc. is seeking a Vulnerability Assessment Analyst who will perform assessments of systems and networks within the NE or enclave and identifies where those systems/networks deviate from acceptable configurations, enclave policy, or local policy. Measures effectiveness of defense-in-depth architecture against known vulnerabilities.
TASKS:
<ul><li>Analyze organization's cyber defense policies and configurations and evaluate compliance with regulations and organizational directives.</li>
<li>Conduct and/or support authorized penetration testing on enterprise network assets.</li>
<li>Maintain deployable cyber defense audit toolkit (e.g., specialized cyber defense software and hardware) to support cyber defense audit missions.</li>
<li>Maintain knowledge of applicable cyber defense policies, regulations, and compliance documents specifically related to cyber defense auditing.</li>
<li>Prepare audit reports that identify technical and procedural findings, and provide recommended remediation strategies/solutions.</li>
<li>Conduct required reviews as appropriate within environment (e.g., Technical Surveillance, Countermeasure Reviews [TSCM], TEMPEST countermeasure reviews).</li>
<li>Perform technical (evaluation of technology) and nontechnical (evaluation of people and operations) risk and vulnerability assessments of relevant technology focus areas (e.g., local computing environment, network and infrastructure, enclave boundary, supporting infrastructure, and applications).</li>
<li>Make recommendations regarding the selection of cost-effective security controls to mitigate risk (e.g., protection of information, systems and processes).</li>
</ul>
ABILITIES:
<ul><li>Skill in conducting vulnerability scans and recognizing vulnerabilities in security systems.</li>
<li>Skill in assessing the robustness of security systems and designs.</li>
<li>Skill in detecting host and network based intrusions via intrusion detection technologies (e.g., Snort).</li>
<li>Skill in mimicking threat behaviors.</li>
<li>Skill in the use of penetration testing tools and techniques.</li>
<li>Skill in the use of social engineering techniques. (e.g., phishing, baiting, tailgating, etc.).</li>
<li>Skill in using network analysis tools to identify vulnerabilities. (e.g., fuzzing, nmap, etc.).</li>
<li>Skill in reviewing logs to identify evidence of past intrusions.</li>
<li>Skill in conducting application vulnerability assessments.</li>
<li>Skill in performing impact/risk assessments.</li>
<li>Skill to develop insights about the context of an organization?s threat environment</li>
<li>Skill to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).</li>
</ul>
Requirements:
<ul><li>Bachelor degree or higher from an accredited college or university
<ul><li>Prefer an accredited Computer Science, Cyber Security, Information Technology, Software Engineering, Information Systems, or Computer Engineering degree; or a degree in a Mathematics or Engineering field.</li>
</ul></li><li>IAT/ IAM Level 2</li>
<li>Active TS/SCI clearence</li></ul></div>

Vulnerability Assessment Analyst - Intermediate

Intel

<div>
 
 Job Details
 
 
 
 Job Description:
 
 
 The Cyber Defense organization is seeking an Information Security Engineer to support comprehensive offensive and defensive security operations across multiple enterprise environments. You will join a highly collaborative Agile DevOps delivery team of information security professionals responsible for proactively identifying/remediating vulnerabilities, conducting threat assessments, and implementing robust security measures to protect Intel's critical assets, systems, and applications.
 
 
 The Cyber Defense team manages security controls spanning vulnerability scanning, security patching, penetration testing, application security, cloud security, and lab security across all Intel domains. Our offensive security operations include thorough security assessments of enterprise-connected assets including physical hosts, network devices, applications, virtual machines, cloud infrastructure, and social engineering vectors.
 
 
 This role requires a passion for quality, security, automation, and the skills to understand complex systems with a desire for continual improvement and innovation. You will join a DevOps team of Information Security professionals responsible for developing, configuring, and operating security controls.
 
 
 This includes security controls validation, discovery, offensive security, attack detection and containment, vulnerability detection and remediation, development of AI models and agentic systems that respond to AI generated attack paths.
 
 
 
 As an Information Security Engineer your responsibilities will be, but not limited to:
 
 
 
 <ul>
 <li>
 Configuration, management, and operations of core platforms within the Cyber Defense organization (e.g. vulnerability/application scanning, security patching, asset discovery/identification, exposure management, etc.).
 </li>
 <li>
 Perform external attack surface management responsibilities such as, attack path analysis, exposure exploitability analysis, and tactical remediation and containment of high-risk exposures
 </li>
 <li>
 Verify efficacy of security controls implemented on a variety of Intel enterprise systems, infrastructure, and applications.
 </li>
 <li>
 Recommend remediation actions to discovered security vulnerabilities and weaknesses.
 </li>
 <li>
 Evaluate threat intelligence and determine potential risk to Intel. Understand and emulate adversary Tactics, Techniques, and Procedures in assessing the security posture of a wide range of systems.
 </li>
 <li>
 Work closely with software development engineers, system engineers, and other information security teams in supporting information security projects and initiatives.
 </li>
 <li>
 Develop and support security solutions that integrate and interface with customers/business units.
 </li>
 <li>
 Produce quality reporting documentation, tailoring the relative detail of the content to the audience.
 </li>
 <li>
 Be a team player within the functional team, and across other Intel teams and stakeholders.
 </li>
 <li>
 Support vulnerability assessments of AI systems by running scans, documenting findings, and helping track remediation of identified issues in models and datasets.
 </li>
 <li>
 Collaborate with cross-functional teams to understand AI workflows and identify potential security gaps.
 </li>
 <li>
 Help develop defensive and / or offensive AI agents / to respond to or emulate AI assisted attackers.
 </li>
 <li>
 Support and work in an Agile and DevOps team focused on security operations, analytics, and solution development.
 
 
 </li>
 </ul>
 
 The Ideal Candidate Should Show The Following Behavioral Traits
 
 
 
 <ul>
 <li>
 Strong communication and coordination skills across multiple stakeholder groups.
 </li>
 <li>
 Demonstrated results leveraging perseverance, patience, persistence, problem-solving, vulnerability hunting, and the willingness to work well with ambiguity.
 
 
 </li>
 </ul>
 A collaborative team player with a good attitude, trustworthy, knows when to push and when to stop, and understands the potential downstream impacts of technical actions.
 
 
 
 Qualifications
 
 
 
 
 Minimum qualifications
 
 are required to be initially considered for this position
 
 
 <ul>
 <li>
 Bachelor's degree in Computer Engineering, Computer Science, Information Technology, Information Security, or any other science/engineering related field.
 </li>
 <li>
 5+ years of experience supporting Information Security operations, vulnerability management, and/or service delivery.
 
 
 </li>
 </ul>
 
 Preferred qualifications
 
 are in addition to the minimum requirements and are considered a plus factor in identifying top candidates.
 
 
 <ul>
 <li>
 Experience in Offensive Security and Vulnerability Management including Vulnerability Assessment, Identification, and Remediation.
 </li>
 <li>
 Server/system architectures, operating systems, system patching, system and security configuration, auditing, and automation.
 </li>
 <li>
 Windows and Linux administration (i.e., installation, configuration, and troubleshooting).
 </li>
 <li>
 Experience in adversary emulation, network penetration testing, web application penetration testing, and cloud penetration testing (e.g. Azure, GCP, AWS).
 </li>
 <li>
 Practical experience with Windows, PowerShell, Active Directory, EntraID (Azure Active Directory), Linux OS (various flavors), networking, scripting/coding (Python, C#, Ruby, JavaScript, BASH, Go, etc.), cloud security, and DevOps/CICD/container/K8s.
 </li>
 <li>
 Developing scripting and automation solutions to support system configuration, performance, and troubleshooting.
 </li>
 <li>
 AI/LLM and AI Agents knowledge and experience.
 </li>
 <li>
 Implementing and supporting cloud-based solutions / Network protocols (TCP/IP) as well as protocols associated with common device communications / Information Security best practices and technologies.
 </li>
 <li>
 Experience working in an Agile environment and with Scrum practices.
 </li>
 <li>
 Excellent communication skills, with a breadth of technical skills, and an eagerness to Information security certifications through industry recognized organizations such as: SANS, ISACA (CISM), ISC2 (CISSP), CompTIA (Security+), MCSE, AWS, CCNA, ITIL). Offensive security certifications (e.g. CEH, OSCP, CRTO) and other pen-testing certifications.
 
 
 </li>
 </ul>
 
 Job Type
 
 
 
 Experienced Hire
 
 
 
 Shift
 
 
 
 Shift 1 (United States of America)
 
 
 Primary Location:
 
 
 US, California, Folsom
 
 
 Additional Locations:
 
 
 US, Arizona, Phoenix
 
 
 
 Posting Statement
 
 
 
 All qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance.
 
 
 Position of Trust
 
 
 N/A
 
 
 
 Benefits
 
 
 
 We offer a total compensation package that ranks among the best in the industry. It consists of competitive pay, stock bonuses, and benefit programs which include health, retirement, and vacation. Find out more about the benefits of working at Intel.
 
 
 Annual Salary Range for jobs which could be performed in the US: $89,340.00 - 175,210.00 USD
 
 
 The range displayed on this job posting reflects the minimum and maximum target compensation for the position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific compensation range for your preferred location during the hiring process.
 
 
 
 Work Model for this Role
 
 
 
 This role will be eligible for our hybrid work model which allows employees to split their time between working on-site at their assigned Intel site and off-site. * Job posting details (such as work model, location or time type) are subject to change.
 
 
 ADDITIONAL INFORMATION: Intel is committed to Responsible Business Alliance (RBA) compliance and ethical hiring practices. We do not charge any fees during our hiring process. Candidates should never be required to pay recruitment fees, medical examination fees, or any other charges as a condition of employment. If you are asked to pay any fees during our hiring process, please report this immediately to your recruiter.
</div>

Information Security Engineer

ARMADA

<div><div>About the Company
<div>
Armada is the hyperscaler for the edge, delivering modular AI infrastructure from first deployment to AI factory with speed, scale and sovereignty. Named one of Fast Company's Most Innovative Companies and to the CNBC Disruptor 50, Armada's solutions are deployed in over 60 countries globally for organizations ranging from energy to defense.

With nearly $500 million in funding to date, Armada is backed by leading investors including Founders Fund, Lux, BlackRock and Microsoft (M12), alongside strategic partnerships with Microsoft, Dell, Palantir, NVIDIA, SpaceX, and Skydio. We are building the infrastructure layer for sovereign and edge AI - rugged, deployable compute for customers that cannot rely on centralized cloud.

Working at Armada means taking ownership, driving autonomy, and delivering impact. You'll tackle challenges that haven't been solved before and help build something transformative from the ground up. What you do here will not only define your career but help further Armada's mission to bridge the digital divide for customers around the world.</div></div> 
About the Role

You will own security engineering across our Azure cloud, hybrid infrastructure, and edge computing platform. The work is hands-on: building detections, testing our own applications, hardening Kubernetes, and putting controls into CI/CD. You will also help define how we secure AI/ML workloads running at the edge. 


Location. This role is office-based at our Bellevue, Washington office. 


What You'll Do (Key Responsibilities)

Cloud and Infrastructure Security
<ul>
<li>Design and implement security architecture across Azure, hybrid infrastructure, and edge deployments</li>
<li>Manage SIEM (Microsoft Sentinel), EDR/XDR, WAF, email security, and CSPM/CNAPP tooling</li>
<li>Write and tune detection rules, correlation logic, and automated response playbooks</li>
<li>Lead incident response from triage through containment and remediation</li>
</ul>
Offensive Security and Assessment
<ul>
<li>Perform security assessments, vulnerability scanning, and penetration testing across cloud, infrastructure, and application layers</li>
<li>Test web applications and APIs for authentication and authorization flaws, business logic abuse, and OWASP Top 10 issues</li>
<li>Threat model new services and architectures before they ship</li>
<li>Own the vulnerability lifecycle: risk-based prioritization, SLA tracking, and remediation follow-through with owning teams</li>
<li>Maintain SAST, DAST, SCA, secrets scanning, IaC scanning, and container image scanning into CI/CD as automated gates</li>
<li>Harden the software supply chain: build provenance, artifact signing, SBOM generation, dependency governance</li>
<li>Enforce guardrails as policy-as-code using Azure Policy, OPA/Gatekeeper, or Kyverno</li>
<li>Review designs and code with engineering teams and support secure deployments</li>
</ul>
AI/ML Security
<ul>
<li>Secure AI/ML development and deployment, including model and data supply chain integrity, inference endpoint exposure, prompt injection and agentic tool abuse, and training data governance</li>
</ul>
Governance
<ul>
<li>Maintain security policies, standards, and procedures aligned to NIST, ISO 27001, and SOC 2</li>
<li>Produce audit evidence and support customer security assessments</li>
<li>Track emerging threats and turn them into roadmap work</li></ul> 


Required Qualifications:
<ul>
<li>Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience</li>
<li>5+ years in information security, including 3+ years focused on cloud security</li>
<li>Strong hands-on experience with Azure security services including Defender for Cloud, Sentinel, Entra ID, Key Vault, Azure Policy, and network security</li>
<li>Production experience with several of: SIEM, EDR/XDR, WAF, email security, CSPM/CNAPP, vulnerability management</li>
<li>Experience securing Kubernetes and containerized workloads in production</li>
<li>Experience embedding security testing into CI/CD pipelines using SAST, DAST, SCA, secrets scanning, and IaC scanning</li>
<li>Hands-on application security testing experience covering web and API penetration testing and secure code review</li>
<li>Proficiency with vulnerability management platforms such as Nessus, Nexpose, Qualys, or Defender Vulnerability Management</li>
<li>Python and SQL/KQL for automation, tooling, and log analysis</li>
<li>Working knowledge of NIST, ISO 27001, and SOC 2</li>
<li>Incident response experience as a lead or primary responder</li>
<li>U.S. Citizenship required</li></ul> 


Preferred Qualifications:
<ul>
<li>Experience securing edge, disconnected, or intermittently connected environments</li>
<li>Experience securing AI/ML or LLM-based systems, including OWASP Top 10 for LLM Applications and MITRE ATLAS</li>
<li>Detection engineering experience: writing and tuning KQL, detection-as-code, purple team exercises</li>
<li>Infrastructure-as-code fluency with Terraform or Bicep</li>
<li>Familiarity with MITRE ATT&amp;CK for threat modeling and detection coverage mapping</li>
<li>Experience supporting SOC 2 Type II or FedRAMP audit cycles</li>
</ul>
Certifications

At least one from either group is preferred.
<ul>
<li>Defensive and architecture: CISSP, CCSP, Azure Security Engineer Associate (AZ-500), GCIH, GCIA</li>
<li>Offensive: OSCP, OSWE, OSWP, OSEE, GPEN, GWAPT, CEH</li></ul> 


Citizenship Requirements

For select roles, due to the nature of our clientele and the technologies involved, there may be specific nationality or citizenship indicated in the required qualifications section. These roles may involve access to sensitive information that is subject to export control regulations or other legal restrictions. In such cases, employment offers will be contingent upon your ability to comply with these requirements. 


Compensation

For U.S. Based candidates: To ensure fairness and transparency, the starting base salary range for this role for candidates in the U.S. are listed below, varying based on location experience, skills, and qualifications.

In addition to base salary, this role will also be offered equity and subsidized benefits (details available upon request). 


Benefits
<ul>
<li>Competitive base salary and equity</li>
<li>Medical, dental, and vision (subsidized cost)</li>
<li>Health savings accounts (HSA), flexible spending accounts (FSA), and dependent care FSAs (DCFSA)</li>
<li>Retirement plan options, including 401(k) and Roth 401(k)</li>
<li>Unlimited paid time off (PTO)</li>
<li>14 paid company holidays per year</li>
</ul>
#LI-ST1

#LI-Onsite

#770<div>
You're a Great Fit if You're
<ul>
<li>A go-getter with a growth mindset. You're intellectually curious, have strong business acumen, and actively seek opportunities to build relevant skills and knowledge</li>
<li>A detail-oriented problem-solver. You can independently gather information, solve problems efficiently, and deliver results with a &quot;get-it-done&quot; attitude</li>
<li>Thrive in a fast-paced environment. You're energized by an entrepreneurial spirit, capable of working quickly, and excited to contribute to a growing company</li>
<li>A collaborative team player. You focus on business success and are motivated by team accomplishment vs personal agenda</li>
<li>Highly organized and results-driven. Strong prioritization skills and a dedicated work ethic are essential for you</li></ul> 


Equal Opportunity Statement

At Armada, we are committed to fostering a work environment where everyone is given equal opportunities to thrive. As an equal opportunity employer, we strictly prohibit discrimination or harassment based on race, color, gender, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other characteristic protected by law. This policy applies to all employment decisions, including hiring, promotions, and compensation. Our hiring is guided by qualifications, merit, and the business needs at the time. 


Unsolicited Resumes and Candidates

Armada does not accept unsolicited resumes or candidate submissions from external agencies or recruiters. All candidates must apply directly through our careers page. Any resumes submitted by agencies without a prior signed agreement will be considered unsolicited and Armada will not be obligated to pay any fees.</div></div>

Security Engineer

Markon

<div>Description:
<div>
Markon is seeking a Systems Vulnerability Analyst to support the Fort Meade customer by identifying, assessing, and mitigating vulnerabilities across mission-critical systems and enterprise networks. This role conducts security assessments, analyzes network activity for indicators of malicious behavior, and develops mitigation strategies that strengthen the customer's cybersecurity posture. Working alongside Red, Blue, and Purple Teams, the Systems Vulnerability Analyst supports offensive and defensive cyber operations while helping implement security best practices and Zero Trust principles.</div>
Responsibilities:
<ul><li>Conduct vulnerability assessments and Red Team activities to identify security weaknesses across enterprise systems and networks.</li><li>
Analyze assessment results and develop detailed mitigation strategies and technical recommendations to reduce cyber risk.</li><li>
Support Blue Team and Purple Team operations by validating defensive controls and improving detection capabilities.</li><li>
Analyze network traffic, system logs, and security event data to identify malicious or unauthorized activity.</li><li>
Perform threat hunting activities using Indicators of Compromise (IOCs), behavioral analysis, and the MITRE ATT&amp;CK framework.</li><li>
Assess network architectures and security controls to identify vulnerabilities and improve system resilience.</li><li>
Support Zero Trust initiatives through evaluation of network infrastructure, system hardening, and cybersecurity architecture.</li><li>
Apply NIST, ISO 27001, and other cybersecurity frameworks to support security assessments and compliance activities.</li><li>
Develop Python scripts or automation tools to support vulnerability analysis, reporting, and security assessments.</li><li>
Prepare technical assessment reports, risk analyses, and mitigation recommendations for Government stakeholders.</li><li>
Travel OCONUS as required to support customer mission requirements.</li></ul>
Qualifications:
<div>
Required</div><ul><li>
TS/SCI with Active Polygraph with this Customer.</li><li>
Bachelor's degree and 11+ years of experience in cybersecurity, vulnerability analysis, or cyber operations.</li><li>
Demonstrated experience conducting Red Team assessments and developing mitigation reports.</li><li>
Experience supporting Blue Team and Purple Team operations.</li><li>
Experience performing network analysis, anomaly detection, and identifying Indicators of Compromise (IOCs).</li><li>
Experience applying the MITRE ATT&amp;CK framework during vulnerability assessments and threat analysis.</li><li>
Experience with NIST, ISO 27001, or comparable cybersecurity frameworks.</li><li>
Experience developing automation or analysis tools using Python.</li><li>
Strong analytical, communication, and technical writing skills.</li><li>
Willingness to travel OCONUS in support of customer mission requirements.</li></ul><div>
Desired</div><ul><li>
Experience implementing or assessing Zero Trust architectures supporting Computer Network Exploitation (CNE), Computer Network Operations (CNO), network infrastructure, or system hardening.</li><li>
Experience performing penetration testing or offensive security assessments.</li><li>
Relevant cybersecurity certifications such as CISSP, GPEN, GXPN, GCIH, GCFA, GCIA, OSCP, or equivalent.</li><li>
Experience supporting Intelligence Community or Department of Defense cyber operations.</li></ul>
Salary Range: USD $195,000.00 - USD $205,000.00 /Yr. 
 
The Markon pay range for this position is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law. Overview:
<div>
Eager to join a team where your skills are valued, your growth is nurtured, and your impact is profound? Look no further than Markon, a premier consulting firm deeply dedicated to advancing our nation's most critical missions.</div><div></div><div> 
At Markon, we don't just offer jobs &ndash; we offer opportunities for personal and professional transformation. Empowering our employees to lead, innovate, and excel, we foster an environment where new ideas are not just welcomed but celebrated. As a perennial Washington Post Top Workplace, we prioritize the well-being and success of our team members, ensuring they can bring their best selves to work.</div><div></div><div> 
Headquartered in Falls Church, Virginia, Markon has garnered national recognition for our unwavering dedication to excellence in serving the intelligence community, as well as federal civilian and defense agencies. Our growing reach extends across 17 states, 116 countries, and 5 continents, where our team of dynamic professionals collaborates to deliver unparalleled program and project management services.</div><div></div><div> 
Markon values people and the tremendous impact each individual can make &ndash; which is why we&rsquo;re consistently recognized as one of the best places to work in federal government consulting. Here, you can help solve the nation&rsquo;s most important challenges, surrounded by colleagues who help you grow, advance, and succeed. We are deeply dedicated to what matters &ndash; bringing out the best in each other to advance our clients&rsquo; missions. 
 
Join us and make a meaningful impact.</div><div></div><div> 
Markon is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, national origin, age, protected veteran status, or disability status. This job posting will remain open until the position is filled.</div><div></div><div> 
Benefits Offered: Medical, Dental, Vision, Life Insurance, Short-Term Disability, Long-Term Disability, 401(k) match, Flexible Spending Accounts, EAP, Training and Tuition Assistance, Paid Time Off, and Holidays.</div></div><div></div>

Systems Vulnerability Analyst 4

Search 108+ Penetration tester jobs near you this August. New roles added regularly across leading industries. Apply today.