principal cyber engineer

RogueThink Inc

<div><h1 class="jobSectionHeader"><b>Senior Principal Cyber Software Engineer</b></h1><p><b>
Location: </b>Chantilly, VA (On-Site / Customer Site)
</p><p><b>Clearance: </b>Active Secret clearance required; TS/SCI with polygraph preferred
</p><p><b>Employment Type: </b>Full-Time</p><h2 class="jobSectionHeader"><b>
About RogueThink</b></h2><p>
RogueThink is a forward-thinking IT services provider supporting mission-critical federal programs. We deliver secure, high-impact technology solutions in classified environments while fostering a culture of integrity, accountability, and technical excellence.</p><h2 class="jobSectionHeader"><b>
Position Overview</b></h2><p>
As a Senior Principal Cyber Software Engineer, you will support a mission-critical federal program focused on the design, development, and delivery of high-quality software solutions, with a strong emphasis on mobile and platform-level development. You will be responsible for defending architectural decisions in rigorous technical reviews and effectively communicating complex technical concepts to engineering teams and customer leadership. Your work will play a critical role in shaping mission direction and long-term technical success.</p><h2 class="jobSectionHeader"><b>
Key Responsibilities</b></h2><ul><li>
Design, develop, test, and deliver secure software solutions supporting mission objectives.</li><li>
Lead and contribute across the full software development lifecycle (SDLC).</li><li>
Develop applications for mobile platforms, including Android-based environments.</li><li>
Defend software architecture and design decisions in formal technical reviews.</li><li>
Collaborate with cross-functional teams, including cybersecurity and systems engineering.</li><li>
Produce and maintain high-quality software design and technical documentation.</li><li>
Support modernization, sustainment, and enhancement of existing systems.</li><li>
Provide technical leadership, code reviews, and mentorship to junior engineers.</li><li>
Operate effectively within Agile development environments.</li></ul><h2 class="jobSectionHeader"><b>
Required Qualifications</b></h2><ul><li>
Active Secret security clearance; clearance must be in place by the start date and remain active throughout employment.</li><li>
Bachelor's degree with a minimum of 8 years of professional software development experience; or Master's degree with 6 years; or PhD with 4 years.</li><li>
Proficiency in one or more programming languages, including C, Rust, Java, Kotlin, C++, C#, or Python.</li><li>
Experience developing software on Agile teams.</li><li>
Experience developing applications for mobile platforms.</li><li>
Strong understanding of cybersecurity fundamentals.</li><li>
Strong understanding of the software development lifecycle (SDLC).</li><li>
Experience writing and maintaining software design documentation.</li></ul><h2 class="jobSectionHeader"><b>
Preferred Qualifications</b></h2><ul><li>
Active Top Secret / SCI clearance with polygraph.</li><li>
Demonstrated leadership of software development teams and technical initiatives.</li><li>
In-depth understanding of cryptography best practices and secure software design.</li><li>
Advanced knowledge of Android and Linux system internals.</li><li>
Background in Android or Linux kernel and driver development.</li><li>
Familiarity with reverse engineering tools such as Ghidra or IDA Pro.</li><li>
Proven capability designing embedded software systems.</li><li>
Hands-on experience developing Flutter applications.</li><li>
Experience managing Linux virtual machines and virtualized environments.</li><li>
Working knowledge of Microsoft Azure DevOps pipelines and tooling.</li></ul><h2 class="jobSectionHeader"><b>
Why Join RogueThink</b></h2><p>
You will work on mission-critical federal programs that directly support national security and government transformation while collaborating with a high-performance engineering team that values innovation, autonomy, and technical excellence. This role provides access to secure development environments, exposure to emerging technologies, and meaningful opportunities for professional growth, including supported technical training, certifications, and clearance upgrades.</p><p><b>
Benefits at RogueThink</b></p><p>
At RogueThink, we believe our people are our greatest strength. We are committed to creating a supportive, rewarding, and growth-oriented environment. Our benefits reflect that commitment, with offerings designed to support your personal and professional well-being.</p><p><b>
Compensation</b></p><p>
We offer competitive compensation packages that reflect our core values of integrity, intelligence, and passion. In addition, performance bonuses are available to all employees and are based on individual contributions, company performance, and program management recommendations.</p><p><b>
Retirement Plans</b></p><p>
Our 401(k) Matching program provides dollar-for-dollar matching on the first 6% of employee contributions to a traditional or Roth 401(k) through Vanguard.</p><p><b>
Employee Referral Bonuses</b></p><p>
We value our employees' trusted recommendations. To recognize these referrals:</p><ul><li>
$8,000 bonus for successfully hired TS/SCI-cleared candidates</li><li>
$5,000 bonus for all other successful referrals</li></ul><p><b>
Paid Time Off (PTO)</b></p><p>
RogueThink offers competitive PTO policies that consider both program requirements and employee seniority.</p><p><b>
Observed Federal Holidays</b></p><p>
We observe the following holidays:</p><ul><li>
New Year's Day</li><li>
Martin Luther King Jr. Day</li><li>
Presidents Day</li><li>
Memorial Day</li><li>
Independence Day</li><li>
Labor Day</li><li>
Columbus Day</li><li>
Veterans Day</li><li>
Thanksgiving Day</li><li>
Christmas Day</li></ul><p><b>
Insurance Coverage</b></p><p>
We offer comprehensive insurance options, including:</p><ul><li>
Health, Dental, and Vision Insurance</li><li>
Disability Insurance</li><li>
Accident and Critical Illness Insurance</li><li>
Life Insurance</li></ul><p><b>
Leave Policies</b></p><ul><li>
Family Leave: Five paid days following the birth or adoption of a child</li><li>
Bereavement Leave: Three paid days for the loss of an immediate family member</li></ul><p><b>
Training and Development</b></p><p>
We invest in our people. RogueThink offers a combination of online and in-person training to ensure our workforce stays ahead of industry trends and evolving technologies.</p><p><b>
Educational Assistance</b></p><p>
We support your professional and continuing education goals by offering tuition assistance for eligible programs.</p><p><b>
Equal Opportunity Employer:</b> RogueThink is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive work environment for all employees.</p></div>

Senior Principal Cyber Software Engineer

Honeywell

<div><p>As an Advanced Cyber Security Architect/Engineer at Honeywell, you will lead the design and deployment of advanced cybersecurity solutions.</p></div>
<br><div><ul><li>This role requires a hands‑on approach to strengthening defenses against emerging threats while serving as the subject matter expert for complex technical challenges. You will collaborate closely with cross‑functional teams, stay current with evolving technologies, and contribute to a culture of continuous improvement.
</li><li>This role also requires travel to remote sites to configure network, windows, and cybersecurity products as part of project execution. In addition, you will provide ongoing operational support by troubleshooting network, Windows, and cybersecurity issues as part of daily service activities. Strong documentation skills are essential, as you will be responsible for maintaining accurate records of configurations, incidents, resolutions, and create design documents.
</li><li>Your work will play a critical role in safeguarding essential assets and information across diverse industries, ensuring the security and resilience of organizations worldwide. In this position, you will drive technical excellence, spearhead solution innovation, lead incident response activities, and perform digital analysis to protect systems that support modern global operations. At Honeywell, you will be part of an environment where cybersecurity and innovation intersect to build a safer, more secure future.</li></ul></div>
<br><div><ul><li>Possess 7 years of professional experience. In accordance with customer contractual obligations, engineers must be able to report on‑site within 4 hours during emergency situations.
</li><li>The role requires up to 90% travel.
</li><li>Demonstrate strong expertise in cybersecurity technologies, frameworks, and industry best practices. Hold relevant professional certifications, including Microsoft certifications, CCNP, VCP, and CISSP.
</li></ul><p><b><i>We are an equal opportunity employer and value diversity at our company. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
</i></b></p><p><b><i>We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.</i></b></p></div>
<br><div>Honeywell helps organizations solve the world's most complex challenges in automation, the future of aviation and energy transition. As a trusted partner, we provide actionable solutions and innovation through our Aerospace Technologies, Building Automation, Energy and Sustainability Solutions, and Industrial Automation business segments &ndash; powered by our Honeywell Forge software &ndash; that help make the world smarter, safer and more sustainable.</div>

Advanced Cyber Sec Archt/Engr

Paradox

<div><p><b>Your work days are brighter here.
</b></p><p></p><p>We&rsquo;re obsessed with making hard work pay off, for our people, our customers, and the world around us. As a Fortune 500 company and a leading AI platform for managing people, money, and agents, we&rsquo;re shaping the future of work so teams can reach their potential and focus on what matters most. The minute you join, you&rsquo;ll feel it. Not just in the products we build, but in how we show up for each other. Our culture is rooted in integrity, empathy, and shared enthusiasm. We&rsquo;re in this together, tackling big challenges with bold ideas and genuine care. We look for curious minds and courageous collaborators who bring sun-drenched optimism and drive. Whether you're building smarter solutions, supporting customers, or creating a space where everyone belongs, you&rsquo;ll do meaningful work with Workmates who&rsquo;ve got your back. In return, we&rsquo;ll give you the trust to take risks, the tools to grow, the skills to develop and the support of a company invested in you for the long haul. So, if you want to inspire a brighter work day for everyone, including yourself, you&rsquo;ve found a match in Workday, and we hope to be a match for you too.
</p><p></p><p><b>About the Team
</b></p>We are seeking a highly skilled Principal cybersecurity engineer to architect the development of our internal suite of Cybersecurity Risk Management and Automation tools. This role requires a rare blend of deep domain expertise in security risk and the technical ability to bridge the gap between high-level strategy and robust software execution.
<br>
As a Principle engineer, you will serve as the primary visionary for how our risk data is structured, analyzed, and automated, acting as the bridge between the Cybersecurity Risk organization and our Engineering teams.
<p></p><p><b>About the Role
</b></p><p></p><p><b>As a Principle engineer, you will serve as the primary visionary for how our risk data is structured, analyzed, and automated, acting as the bridge between the Cybersecurity Risk organization and our Engineering teams.
</b></p><p></p><p><b>About You
</b></p><p></p><h3 class="jobSectionHeader"><b>Key Responsibilities &amp; Focus Areas
</b></h3><ul><li><p><b>Strategic Technical Translation: </b>Architect high-level business and security &quot;end-states&quot; into sophisticated process designs and technical specifications. You will own the translation of risk philosophy into the logic used by our engineering squads.
</p></li><li><p><b>Risk Domain Authority: </b>Serve as the definitive Subject Matter Expert (SME) for defining risk metrics and calculation methodologies, specifically within:
</p><ul><li><p><b>Enterprise Risk (ERM): </b>Designing and implementing data-driven risk frameworks (e.g., NIST, FAIR) through sophisticated automation.
</p></li><li><p><b>Third-Party Risk (TPRM): </b>Architecting systems for automated due diligence, continuous monitoring, and assessment scoring for our vendor ecosystem.
</p></li></ul></li><li><p><b>Technical Implementation Lead: </b>While not managing people, you will lead the technical direction for software engineers focused on data pipelines (ELT) and tool development, ensuring the architectural integrity of the final product.
</p></li><li><p><b>Process Engineering: </b>Design and optimize automated internal processes, leveraging security telemetry to drive automated identification, prioritization, and remediation of risks at scale.
</p></li><li><p><b>Cross-Functional Influence: </b>Champion security risk automation across the organization, mentoring junior engineers and influencing stakeholders on best practices for data-driven risk modeling.
</p></li></ul><p></p><h3 class="jobSectionHeader"><b>Essential Technical &amp; Domain Qualifications
</b></h3><ul><li><p><b>Software Engineering &amp; Development: </b>Strong background in software engineering principles (SDLC, version control, API design). Must be proficient in at least one programming or scripting language (e.g., Python, Go, or Java) and capable of performing code reviews or building proof-of-concept (PoC) scripts for risk models and automated workflows.
</p></li><li><p><b>Mastery of Cybersecurity Risk: </b>A proven track record of designing and implementing Enterprise and Third-Party Risk Management (TPRM) programs at scale.
</p></li><li><p><b>Architectural Design: </b>Demonstrated ability to take a blank slate and define complex security processes, translating them into technical user stories, functional specifications, and logic diagrams.
</p></li><li><p><b>Technical Influence: </b>Experience leading the technical roadmap for software engineering teams or data scientists without direct reporting authority (e.g., Lead, Principal, or Staff level experience).
</p></li><li><p><b>Data &amp; Automation Engineering: </b>High proficiency in data pipeline logic, ELT/ETL processes, and data quality assurance, specifically as they apply to automating security telemetry.
</p></li><li><p><b>Advanced Risk Modeling: </b>Expertise in quantitative risk analysis (e.g., Monte Carlo simulations or FAIR methodology) and how to programmatically apply these models to software.
</p></li></ul><p></p><h3 class="jobSectionHeader"><b>Bonus Qualifications
</b></h3><ul><li><p><b>Experience building custom GRC (Governance, Risk, and Compliance) platforms.<br>
</b></p></li></ul><p><br>
<br>
<b>Our Approach to Flexible Work<br>
</b><br>
</p><p>With Flex Work, we&rsquo;re combining the best of both worlds: in-person time and remote. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. We know that flexibility can take shape in many ways, so rather than a number of required days in-office each week, we simply <b>spend at least half (50%) of our time each quarter in the office or in the field </b>with our customers, prospects, and partners (depending on role). This means you'll have the freedom to create a flexible schedule that caters to your business, team, and personal needs, while being intentional to make the most of time spent together. Those in our remote &quot;home office&quot; roles also have the opportunity to come together in our offices for important moments that matter.
</p><p></p><p><b>Are you being referred to one of our roles? If so, ask your connection at Workday about our Employee Referral process!
</b></p><p>At Workday, we value our candidates&rsquo; privacy and data security. Workday will never ask candidates to apply to jobs through websites that are not Workday Careers.<br>
</p><p></p><p>Please be aware of sites that may ask for you to input your data in connection with a job posting that appears to be from Workday but is not.<br>
</p><p></p><p>In addition, Workday will never ask candidates to pay a recruiting fee, or pay for consulting or coaching services, in order to apply for a job at Workday.</p></div>

Principal Cybersecurity Engineer

Workday

<div><div>Your work days are brighter here.</div><div></div><div>
We&rsquo;re obsessed with making hard work pay off, for our people, our customers, and the world around us. As a Fortune 500 company and a leading AI platform for managing people, money, and agents, we&rsquo;re shaping the future of work so teams can reach their potential and focus on what matters most. The minute you join, you&rsquo;ll feel it. Not just in the products we build, but in how we show up for each other. Our culture is rooted in integrity, empathy, and shared enthusiasm. We&rsquo;re in this together, tackling big challenges with bold ideas and genuine care. We look for curious minds and courageous collaborators who bring sun-drenched optimism and drive. Whether you're building smarter solutions, supporting customers, or creating a space where everyone belongs, you&rsquo;ll do meaningful work with Workmates who&rsquo;ve got your back. In return, we&rsquo;ll give you the trust to take risks, the tools to grow, the skills to develop and the support of a company invested in you for the long haul. So, if you want to inspire a brighter work day for everyone, including yourself, you&rsquo;ve found a match in Workday, and we hope to be a match for you too.</div><div></div><div>
About the Team</div>
We are seeking a highly skilled Principal cybersecurity engineer to architect the development of our internal suite of Cybersecurity Risk Management and Automation tools. This role requires a rare blend of deep domain expertise in security risk and the technical ability to bridge the gap between high-level strategy and robust software execution.<br>
As a Principle engineer, you will serve as the primary visionary for how our risk data is structured, analyzed, and automated, acting as the bridge between the Cybersecurity Risk organization and our Engineering teams.<div></div><div>
About the Role</div><div></div><div>
As a Principle engineer, you will serve as the primary visionary for how our risk data is structured, analyzed, and automated, acting as the bridge between the Cybersecurity Risk organization and our Engineering teams.</div><div></div><div>
About You</div><div></div><div>
Key Responsibilities &amp; Focus Areas</div><ul><li><div>
Strategic Technical Translation: Architect high-level business and security &quot;end-states&quot; into sophisticated process designs and technical specifications. You will own the translation of risk philosophy into the logic used by our engineering squads.</div></li><li><div>
Risk Domain Authority: Serve as the definitive Subject Matter Expert (SME) for defining risk metrics and calculation methodologies, specifically within:</div><ul><li><div>
Enterprise Risk (ERM): Designing and implementing data-driven risk frameworks (e.g., NIST, FAIR) through sophisticated automation.</div></li><li><div>
Third-Party Risk (TPRM): Architecting systems for automated due diligence, continuous monitoring, and assessment scoring for our vendor ecosystem.</div></li></ul></li><li><div>
Technical Implementation Lead: While not managing people, you will lead the technical direction for software engineers focused on data pipelines (ELT) and tool development, ensuring the architectural integrity of the final product.</div></li><li><div>
Process Engineering: Design and optimize automated internal processes, leveraging security telemetry to drive automated identification, prioritization, and remediation of risks at scale.</div></li><li><div>
Cross-Functional Influence: Champion security risk automation across the organization, mentoring junior engineers and influencing stakeholders on best practices for data-driven risk modeling.</div></li></ul><div></div><div>
Essential Technical &amp; Domain Qualifications</div><ul><li><div>
Software Engineering &amp; Development: Strong background in software engineering principles (SDLC, version control, API design). Must be proficient in at least one programming or scripting language (e.g., Python, Go, or Java) and capable of performing code reviews or building proof-of-concept (PoC) scripts for risk models and automated workflows.</div></li><li><div>
Mastery of Cybersecurity Risk: A proven track record of designing and implementing Enterprise and Third-Party Risk Management (TPRM) programs at scale.</div></li><li><div>
Architectural Design: Demonstrated ability to take a blank slate and define complex security processes, translating them into technical user stories, functional specifications, and logic diagrams.</div></li><li><div>
Technical Influence: Experience leading the technical roadmap for software engineering teams or data scientists without direct reporting authority (e.g., Lead, Principal, or Staff level experience).</div></li><li><div>
Data &amp; Automation Engineering: High proficiency in data pipeline logic, ELT/ETL processes, and data quality assurance, specifically as they apply to automating security telemetry.</div></li><li><div>
Advanced Risk Modeling: Expertise in quantitative risk analysis (e.g., Monte Carlo simulations or FAIR methodology) and how to programmatically apply these models to software.</div></li></ul><div></div><div>
Bonus Qualifications</div><ul><li><div>
Experience building custom GRC (Governance, Risk, and Compliance) platforms.</div></li></ul><div><br>
Our Approach to Flexible Work</div><div><br>
With Flex Work, we&rsquo;re combining the best of both worlds: in-person time and remote. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. We know that flexibility can take shape in many ways, so rather than a number of required days in-office each week, we simply spend at least half (50%) of our time each quarter in the office or in the field with our customers, prospects, and partners (depending on role). This means you'll have the freedom to create a flexible schedule that caters to your business, team, and personal needs, while being intentional to make the most of time spent together. Those in our remote &quot;home office&quot; roles also have the opportunity to come together in our offices for important moments that matter.</div><div></div><div>
Are you being referred to one of our roles? If so, ask your connection at Workday about our Employee Referral process!</div><div>
At Workday, we value our candidates&rsquo; privacy and data security. Workday will never ask candidates to apply to jobs through websites that are not Workday Careers.</div><div></div><div><br>
Please be aware of sites that may ask for you to input your data in connection with a job posting that appears to be from Workday but is not.</div><div></div><div><br>
In addition, Workday will never ask candidates to pay a recruiting fee, or pay for consulting or coaching services, in order to apply for a job at Workday.</div></div>

Palo Alto Networks

<div><b>Company Description</b><p><b><br>
Our Mission</b></p><p>
At Palo Alto Networks&reg; everything starts and ends with our mission:</p><p>
Being the cybersecurity partner of choice, protecting our digital way of life.<br>
Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we&rsquo;re looking for innovators who are as committed to shaping the future of cybersecurity as we are.</p><p><b>
Who We Are</b></p><p>
This role is remote, but distance is no barrier to impact. Our hybrid teams collaborate across geographies to solve big problems, stay close to our customers, and grow together. You will be part of a culture that values trust, accountability, and shared success where your work truly matters.</p><b><br>
Job Description</b><p><b><br>
Your Career</b></p><p>
As a Principal Consultant in Unit 42 you will have the opportunity to work across a number of proactive cyber security domains including Cloud Security, Security Operations, Cyber Risk Management and Artificial Intelligence in cyber security.</p><p>
We are seeking an individual who is passionate about cyber security, curious with a demonstrated track record of continuous learning, and has the technical acumen to embrace data, technological and innovative approaches to deliver the best consulting outcomes for clients, as they work to address the challenges associated with today&rsquo;s cyber threat landscape.</p><p><b>
Your Impact</b></p><ul><li><p>
Principal SOC Advisory</p><ul><li><p>
6+ years of consulting experience in SOC, security engineering, SIEM administration, and incident management and demonstrated success with serving large, multinational organisations in designing and implementing an organisation&rsquo;s security operations program, organisational structures, and capabilities</p></li><li><p>
Possess a deep technical knowledge in Security Incident and Event Management (SIEM) platforms, Security Orchestration and Response (SOAR) technologies, Endpoint Protection and Response/Next Gen Protection and Response (EDR/XDR) tools, Next GenFirewalls, Threat Intelligence and Hunting platforms</p></li></ul></li><li><p>
Defensive Security Skills (desired)</p><ul><li><p>
Experience in security operations design, engineering and/or analysis and investigations, ideally in complex environments, with security event correlations across a variety of sources i.e. cloud, network, endpoint, logs</p></li><li><p>
Ability to perform detailed assessments, identify areas for improvement and make recommendations to transform an organisation's cyber security operations and capabilities to better protect, detect and rapidly respond to modern threats.</p></li><li><p>
Demonstrated experience in improving an organisations security operations capabilities such as improvements in asset visibility, threat detection capabilities, automation techniques, case management, enablement of compliance and regulatory requirements</p></li><li><p>
Experience in conducting threat hunting and/or compromise assessments to identify active or dormant indicators of compromise (IoCs) or evidence of unknown threats within an organisations digital environment</p></li><li><p>
Relevant industry certifications including GIAC Defensible Security Architect (GDSA), GIAC Intrusion Analyst (GCIA), GIAC Continuous Monitoring (GMON), CISSP</p></li><li><p>
Understanding of cyber risk frameworks or industry standards such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC</p></li></ul></li><li><p>
Principal Cloud Security</p><ul><li><p>
6+ years of experience performing cloud security advisement and risk assessments based upon industry-accepted standards</p></li><li><p>
Hands-on experience with a cloud hosting provider (AWS, Azure, GCP, etc)</p></li><li><p>
Experience with a Cloud Application Security Broker - MCAS, Netskope</p></li><li><p>
Possess a deep technical knowledge in CASBs, Cloud Platforms and the dependencies around such an environment (WAF, SSO, Cloud Threats, API Security, Cloud Security Posture Management)</p></li><li><p>
Former experience with cloud migrations (cloud to cloud, or on-prem to cloud)</p></li><li><p>
Knowledge of command-line interfaces or scripting tools in cloud environments is a plus</p></li></ul></li><li><p>
Cloud Security skills (desired)</p><ul><li><p>
Secure software development practices, including SecDevOps</p></li><li><p>
Sound knowledge of applicable frameworks &amp; standards, including OWASP, MITRE ATT@CK &amp; D3FEND, CIS, NIST CSF, CSA CCM &amp; ISO 27107</p></li><li><p>
Relevant industry certifications including CSCP</p></li><li><p>
Understanding of cyber risk frameworks or industry standards such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC</p></li></ul></li><li><p>
Principal Cyber Risk Management</p><ul><li><p>
Experience in performing cyber security threat &amp; risk assessments to support the development of cyber security strategies and roadmaps</p></li><li><p>
Technical proficiency in a wide range of cyber risk management services, including cyber threat, risk and control assessments, secure software development practices, penetration testing, vulnerability assessments, among others</p></li><li><p>
Sound knowledge of applicable laws, compliance regulations, and industry standards as it relates to privacy, security, and compliance</p></li><li><p>
Sound knowledge of applicable frameworks, including MITRE ATT@CK &amp; D3FEND, CIS, NIST CSF, CSA CCM</p></li><li><p>
Strong communication and presentation skills</p></li></ul></li><li><p>
Cyber Risk Management skills (desired)</p><ul><li><p>
Experience in threat modelling &amp; application security risk assessments, secure software development practices, including SecDevOps</p></li><li><p>
FAIR Open certified &amp; experience in applying FAIR for cyber risk quantification</p></li><li><p>
Relevant industry certifications including CISSP, CISM, CISA</p></li><li><p>
Understanding of cyber risk frameworks or industry standards such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC</p></li></ul></li></ul><b><br>
Qualifications</b><p><b><br>
Your Experience</b></p><ul><li><p>
7+ years of experience performing cyber security consulting in at least two of the three domains above, with SME experience in one of the domains</p></li><li><p>
Experience managing a team of consultants</p></li><li><p>
Demonstrates a track record in strengthening existing and developing new client relationships</p></li><li><p>
Ability to strive in a startup environment</p></li><li><p>
Ability to perform travel requirements as needed to meet business demands</p></li><li><p>
Identified ability to grow into a valuable contributor to the practice and, specifically -</p><ul><li><p>
have an external presence via public speaking, conferences, and/or publications</p></li><li><p>
have credibility, executive presence, and gravitas</p></li><li><p>
be able to have a meaningful and rapid delivery contribution</p></li><li><p>
have the potential and capacity to understand all aspects of the business and an excellent understanding of PANW products</p></li><li><p>
be collaborative and able to build relationships internally, externally, and across all PANW functions, including the sales team</p></li></ul></li><li><p>
Bachelor&rsquo;s Degree in Information Security, Computer Science, Digital Forensics, Cyber Security OR equivalent years of professional experience or equivalent military experience to meet job requirements and expectations</p></li></ul><b><br>
Additional Information</b><p><b><br>
The Team</b></p><p>
Unit 42 Consulting is Palo Alto Network's security advisory team. Our vision is to create a more secure digital world by providing the highest quality incident response, cyber risk management, and digital forensic services to clients of all sizes. Our team is composed of recognized experts and incident responders with deep technical expertise and experience in investigations, data breach response, digital forensics, and information security. With a highly successful track record of delivering mission-critical cybersecurity solutions, we are experienced in working quickly to provide an effective incident response, attack readiness, and remediation plans with a focus on providing long-term support to improve our clients&rsquo; security posture.</p><div></div><p><b>
Our Commitment</b><br>
<br>
We&rsquo;re problem solvers that take risks and challenge cybersecurity&rsquo;s status quo. It&rsquo;s simple: we can&rsquo;t accomplish our mission without diverse teams innovating, together.</p><p>
We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at accommodations@paloaltonetworks.com.</p><p>
Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.</p><p>
All your information will be kept confidential according to EEO guidelines.</p></div>

Principal Consultant

<div>
 <strong>
  Our Mission
  <br/>
  <br/>
 </strong>
 At Palo Alto Networks&reg; everything starts and ends with our mission:
 <br/>
 <br/>
 Being the cybersecurity partner of choice, protecting our digital way of life.
 <br/>
 <br/>
 Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we&rsquo;re looking for innovators who are as committed to shaping the future of cybersecurity as we are.
 <br/>
 <br/>
 <strong>
  Who We Are
  <br/>
  <br/>
 </strong>
 This role is remote, but distance is no barrier to impact. Our hybrid teams collaborate across geographies to solve big problems, stay close to our customers, and grow together. You will be part of a culture that values trust, accountability, and shared success where your work truly matters.
 <br/>
 <br/>
 <strong>
  Job Description
  <br/>
  <br/>
 </strong>
 <strong>
  Your Career
  <br/>
  <br/>
 </strong>
 As a Principal Consultant in Unit 42 you will have the opportunity to work across a number of proactive cyber security domains including Cloud Security, Security Operations, Cyber Risk Management and Artificial Intelligence in cyber security.
 <br/>
 <br/>
 We are seeking an individual who is passionate about cyber security, curious with a demonstrated track record of continuous learning, and has the technical acumen to embrace data, technological and innovative approaches to deliver the best consulting outcomes for clients, as they work to address the challenges associated with today&rsquo;s cyber threat landscape.
 <br/>
 <br/>
 <strong>
  Your Impact
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Principal SOC Advisory
  </li>
  <ul>
   <li>
    6+ years of consulting experience in SOC, security engineering, SIEM administration, and incident management and demonstrated success with serving large, multinational organisations in designing and implementing an organisation&rsquo;s security operations program, organisational structures, and capabilities
   </li>
   <li>
    Possess a deep technical knowledge in Security Incident and Event Management (SIEM) platforms, Security Orchestration and Response (SOAR) technologies, Endpoint Protection and Response/Next Gen Protection and Response (EDR/XDR) tools, Next GenFirewalls, Threat Intelligence and Hunting platforms
   </li>
  </ul>
  <li>
   Defensive Security Skills (desired)
  </li>
  <ul>
   <li>
    Experience in security operations design, engineering and/or analysis and investigations, ideally in complex environments, with security event correlations across a variety of sources i.e. cloud, network, endpoint, logs
   </li>
   <li>
    Ability to perform detailed assessments, identify areas for improvement and make recommendations to transform an organisation's cyber security operations and capabilities to better protect, detect and rapidly respond to modern threats.
   </li>
   <li>
    Demonstrated experience in improving an organisations security operations capabilities such as improvements in asset visibility, threat detection capabilities, automation techniques, case management, enablement of compliance and regulatory requirements
   </li>
   <li>
    Experience in conducting threat hunting and/or compromise assessments to identify active or dormant indicators of compromise (IoCs) or evidence of unknown threats within an organisations digital environment
   </li>
   <li>
    Relevant industry certifications including GIAC Defensible Security Architect (GDSA), GIAC Intrusion Analyst (GCIA), GIAC Continuous Monitoring (GMON), CISSP
   </li>
   <li>
    Understanding of cyber risk frameworks or industry standards such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC
   </li>
  </ul>
  <li>
   Principal Cloud Security
  </li>
  <ul>
   <li>
    6+ years of experience performing cloud security advisement and risk assessments based upon industry-accepted standards
   </li>
   <li>
    Hands-on experience with a cloud hosting provider (AWS, Azure, GCP, etc)
   </li>
   <li>
    Experience with a Cloud Application Security Broker - MCAS, Netskope
   </li>
   <li>
    Possess a deep technical knowledge in CASBs, Cloud Platforms and the dependencies around such an environment (WAF, SSO, Cloud Threats, API Security, Cloud Security Posture Management)
   </li>
   <li>
    Former experience with cloud migrations (cloud to cloud, or on-prem to cloud)
   </li>
   <li>
    Knowledge of command-line interfaces or scripting tools in cloud environments is a plus
   </li>
  </ul>
  <li>
   Cloud Security skills (desired)
  </li>
  <ul>
   <li>
    Secure software development practices, including SecDevOps
   </li>
   <li>
    Sound knowledge of applicable frameworks &amp; standards, including OWASP, MITRE ATT@CK &amp; D3FEND, CIS, NIST CSF, CSA CCM &amp; ISO 27107
   </li>
   <li>
    Relevant industry certifications including CSCP
   </li>
   <li>
    Understanding of cyber risk frameworks or industry standards such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC
   </li>
  </ul>
  <li>
   Principal Cyber Risk Management
  </li>
  <ul>
   <li>
    Experience in performing cyber security threat &amp; risk assessments to support the development of cyber security strategies and roadmaps
   </li>
   <li>
    Technical proficiency in a wide range of cyber risk management services, including cyber threat, risk and control assessments, secure software development practices, penetration testing, vulnerability assessments, among others
   </li>
   <li>
    Sound knowledge of applicable laws, compliance regulations, and industry standards as it relates to privacy, security, and compliance
   </li>
   <li>
    Sound knowledge of applicable frameworks, including MITRE ATT@CK &amp; D3FEND, CIS, NIST CSF, CSA CCM
   </li>
   <li>
    Strong communication and presentation skills
   </li>
  </ul>
  <li>
   Cyber Risk Management skills (desired)
  </li>
  <ul>
   <li>
    Experience in threat modelling &amp; application security risk assessments, secure software development practices, including SecDevOps
   </li>
   <li>
    FAIR Open certified &amp; experience in applying FAIR for cyber risk quantification
   </li>
   <li>
    Relevant industry certifications including CISSP, CISM, CISA
   </li>
   <li>
    Understanding of cyber risk frameworks or industry standards such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC
    <br/>
   </li>
  </ul>
 </ul>
 <strong>
  Qualifications
  <br/>
  <br/>
 </strong>
 <strong>
  Your Experience
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   7+ years of experience performing cyber security consulting in at least two of the three domains above, with SME experience in one of the domains
  </li>
  <li>
   Experience managing a team of consultants
  </li>
  <li>
   Demonstrates a track record in strengthening existing and developing new client relationships
  </li>
  <li>
   Ability to strive in a startup environment
  </li>
  <li>
   Ability to perform travel requirements as needed to meet business demands
  </li>
  <li>
   Identified ability to grow into a valuable contributor to the practice and, specifically -
  </li>
  <ul>
   <li>
    have an external presence via public speaking, conferences, and/or publications
   </li>
   <li>
    have credibility, executive presence, and gravitas
   </li>
   <li>
    be able to have a meaningful and rapid delivery contribution
   </li>
   <li>
    have the potential and capacity to understand all aspects of the business and an excellent understanding of PANW products
   </li>
   <li>
    be collaborative and able to build relationships internally, externally, and across all PANW functions, including the sales team
   </li>
  </ul>
  <li>
   Bachelor&rsquo;s Degree in Information Security, Computer Science, Digital Forensics, Cyber Security OR equivalent years of professional experience or equivalent military experience to meet job requirements and expectations
   <br/>
  </li>
 </ul>
 <strong>
  Additional Information
  <br/>
  <br/>
 </strong>
 <strong>
  The Team
  <br/>
  <br/>
 </strong>
 Unit 42 Consulting is Palo Alto Network's security advisory team. Our vision is to create a more secure digital world by providing the highest quality incident response, cyber risk management, and digital forensic services to clients of all sizes. Our team is composed of recognized experts and incident responders with deep technical expertise and experience in investigations, data breach response, digital forensics, and information security. With a highly successful track record of delivering mission-critical cybersecurity solutions, we are experienced in working quickly to provide an effective incident response, attack readiness, and remediation plans with a focus on providing long-term support to improve our clients&rsquo; security posture.
 <br/>
 <br/>
 <strong>
  Our Commitment
  <br/>
  <br/>
 </strong>
 We&rsquo;re problem solvers that take risks and challenge cybersecurity&rsquo;s status quo. It&rsquo;s simple: we can&rsquo;t accomplish our mission without diverse teams innovating, together.
 <br/>
 <br/>
 We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at accommodations@paloaltonetworks.com.
 <br/>
 <br/>
 Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.
 <br/>
 <br/>
 All your information will be kept confidential according to EEO guidelines.
</div>


Matchtech

<p><strong>Principal Engineer - Product Security (Product Security Analyst) - 6 month contract - Frimley, Surrey - 85.40 ph UMB or 63.21 ph PAYE (Inside IR35)</strong></p><p><strong>The Umbrella rate quoted above is the Gross Umbrella rate (i.e. the rate we pay to the Umbrella Company inclusive of ALL employment costs). Please note, the rate paid by the Umbrella will be less, as will a Limited Deemed rate or Agency PAYE rate. Please get in touch to discuss the rates via these different payment vehicles.</strong></p><p> </p><p><strong>The Role</strong></p><p>The PSA Principal Engineer will be a focal point for security and information risk matters within the Product Security Engineering (PSyE) team and will be able to apply their deep level of subject matter expertise and experience to ensure that submarine systems and products are delivered and can be managed and supported through-life. They will be able to support the appropriate authorities/management to ensure the delivered solutions meet the specified contractual and regulatory requirements and can be operated securely, correctly and safely.</p><p> </p><p><strong>Role Responsiblities:</strong></p><p><em>Not limited to </em></p><ul><li>Risk Management Accreditation Document Set (RMADS).</li><li>Security Strategy and other accreditation documentation</li><li>Captured and agreed technical requirements in accordance with company and programme processes.</li><li>Compliant technical solutions against contractual requirements and regulations.</li><li>Technical input and appropriate consideration of product security activities and issues for LCM deliverables and Design Reviews, including Sub-Contract Design Reviews.</li><li>Captured and agreed input to appropriate Verification and Qualification Plans.</li><li>Specialist advice and contribution to other project documentation, such as Training Needs Analysis (TNA), Technical Publications, Cyber Incident Plans and Operating Instructions (list is not exhaustive).</li></ul><p> </p><p><strong>What are BAE Systems looking for from you?</strong></p><ul><li>The PSA Principal Engineer will have a good understanding of the applicable regulations, standards, policies and guidance on information risk management, to be able to identify, analyse and evaluate information risks.</li><li>They will be able to document and present risk management options to the business and participate in discussions.</li><li>Good understanding of information security principles and is able to advise on the potential impact to Product Systems.</li><li>Proven experience of applying Product Security/Information Security concepts to applicable technologies within the environment (or similar).</li></ul><ul><li>Degree (or equivalent experience) in a relevant STEM subject or Information Security related.</li><li>Holds NCSC CCP SIRA status (or able to achieve)</li><li>Is a member of a professional institute</li></ul><p> </p><p> </p><p><strong>Security Requirements: </strong><em>SC, ITAR & UK EYES ONLY</em></p><p>This role will require the person to hold full Security Clearance (SC) prior to working onsite. You will need to obtain a BPSS check as part of this process. You must currently hold or be eligible and willing to obtain SC. In addition, this role involves direct and/or indirect access to ITAR Material which means there are restriction. If you are unsure as to whether you are eligible, please contact me to discuss.</p><p>This role requires you to obtain a basic disclosure along with employment reference checks before starting.</p>

Principal Engineer - Product Security

Search 6832+ Principal cyber engineer jobs near you this January. New roles added regularly across leading industries. Apply today.

6832 principal cyber engineer jobs NEAR_ME

Senior Principal Cyber Software Engineer

Advanced Cyber Sec Archt/Engr

Principal Cybersecurity Engineer

Principal Cybersecurity Engineer

Principal Consultant

Principal Consultant

Principal Engineer - Product Security