financial analyst

armed security officer

cyber security analyst

cyber systems administrator (active ts-sci clearance) Jobs in Tampa

experienced specialist, cyber security Jobs in Tampa

experienced specialist, cyber security

security analyst

Old Republic Specialty Insurance Group

<div>
 
 
 Title:
 
 Security Analyst
 
 
 
 Reports To:
 
 Threat &amp; Vulnerability Manager
 
 
 
 Department:
 
 Information Technology
 
 
 
 Location/Schedule:
 
 Tampa, FL/Hybrid, 2 days in-office
 
 
 
 Classification:
 
 Full-Time/Exempt
 
 
 
 
 
 
 
 Who We Are:
 
 
 
 
 Old Republic is a leading specialty insurer that operates diverse property &amp; casualty and title insurance companies. Founded in 1923 and a member of the Fortune 500, we are a leader in underwriting and risk management services for business partners across the United States and Canada. Our specialized operating companies are experts in their fields, enabling us to provide tailored solutions that set us apart.
 
 
 
 
 
 
 
 Position Overview:
 
 
 
 
 The Old Republic Security Analyst plays a key role in protecting the organization&rsquo;s information assets and ensuring the effective operation of security processes and technologies. This position is responsible for monitoring, analyzing, and improving the organization&rsquo;s security posture by handling security alerts and reports end-to-end, coordinating remediation with stakeholders, and contributing to the continuous improvement of core security programs.
 
 
 
 
 
 
 
 Essential Job Functions:
 
 
 
 <ul>
 <li>
 Monitor, investigate, and manage security alerts, events, and reports end‑to‑end, escalating and coordinating remediation as needed.
 </li>
 <li>
 Support the development, implementation, and continuous improvement of security policies, standards, and procedures aligned with industry frameworks.
 </li>
 <li>
 Perform and/or support risk assessments, control evaluations, compliance reviews, and reporting of identified risks to stakeholders.
 </li>
 <li>
 Operate, maintain, and document security tools and applications, ensuring configurations are effective.
 </li>
 <li>
 Collaborate with cross‑functional teams to ensure timely remediation and promote consistent execution of security requirements.
 </li>
 <li>
 Contribute to security awareness efforts and provide best‑practice guidance.
 </li>
 <li>
 Maintain proficiency in assigned security tools and emerging threats relevant to the organization&rsquo;s risk landscape.
 </li>
 </ul>
 
 
 
 
 
 
 Qualifications:
 
 
 
 <ul>
 <li>
 2&ndash;4 years of relevant cybersecurity/IT security experience, or college degree in a related field.
 </li>
 <li>
 Strong analytical and problem‑solving skills with the ability to evaluate complex security risks and recommend effective remediation strategies.
 </li>
 <li>
 Effective written and verbal communication skills, including the ability to prepare clear reports and documentation.
 </li>
 <li>
 Familiarity with security operations disciplines such as monitoring, incident response, logging, and vulnerability or threat analysis.
 </li>
 <li>
 Working knowledge of regulatory or control frameworks applicable to security programs.
 </li>
 <li>
 Ability to work independently and collaboratively, managing multiple priorities.
 </li>
 <li>
 Experience using vulnerability scanning tools such as Tenable, Qualys, or Rapid7.
 </li>
 <li>
 Understanding of CVSS scoring, attack vectors, and prioritizing remediation based on risk.
 </li>
 <li>
 Ability to analyze vulnerability data, identify systemic risks, and drive remediation.
 </li>
 <li>
 Experience preparing vulnerability dashboards, trend reports, and remediation summaries.
 </li>
 <li>
 Familiarity with threat intelligence concepts and integrating emerging threat information.
 </li>
 <li>
 Understanding of configuration baseline tools and secure configuration practices.
 </li>
 </ul>
 
 
 
 
 
 
 
 ORI is an Equal Opportunity Employer. ORI provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
 
 
 
 
 
 This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.
 
</div>

Security Analyst

Covius

<div>
 It's fun to work in a company where people truly BELIEVE in what they're doing!
 
 
 
 We're committed to bringing passion and customer focus to the business.
 
 
 
 The Cyber Security Analyst is responsible for contributing to, and strengthening, the Information Security function and role throughout the organization. The Analyst will update, document and maintain security standards and policies for the organization. The Analyst will help in the identification, analysis and reporting of cyber threats in addition to ensuring business operations are conducted in accordance with established guidelines and regulatory requirements.
 
 
 
 Essential Functions
 
 
 
 <ul>
 <li>
 Monitor, triage, investigate, and resolve security alerts, support tickets, and incidents, including containment, root cause analysis, chain of custody, and preventive actions
 </li>
 <li>
 Identify security risks, recommend remediation or mitigating controls, and support ongoing risk assessments and system testing
 </li>
 <li>
 Apply and enforce information security policies, standards, and procedures, aligning with industry best practices and regulatory requirements (e.g., PCI, GLBA)
 </li>
 <li>
 Support integration of regulatory and audit requirements into the security roadmap and ensure the Company&rsquo;s computer systems meet compliance obligations
 </li>
 <li>
 Collaborate with IT Operations to ensure servers, network devices, and security controls meet established security standards and are working as designed
 </li>
 <li>
 Evaluate, implement, and perform compliance assessments on application, system, and security-related changes and solutions, adhering to established change control processes
 </li>
 <li>
 Perform periodic internal security audit functions on IT operational controls, to include system access, DLP controls, firewall policies, etc.
 </li>
 <li>
 Stay current with evolving security technologies and maintain relevant certifications
 </li>
 <li>
 Participate in on-call rotation
 </li>
 <li>
 Perform other related duties as assigned
 
 
 </li>
 </ul>
 
 Essential Knowledge, Skills, And Abilities
 
 
 
 <ul>
 <li>
 Familiarity with various cyber threats and mitigating controls
 </li>
 <li>
 Familiarity with various endpoints security solutions, email security solutions, security monitoring tools and appliances
 </li>
 <li>
 Solid understanding of the OSI network model and network protocols such as TCP/IP, firewalls, proxies, IDPS concepts
 </li>
 <li>
 Knowledge of security-oriented regulatory requirements and compliance a plus
 </li>
 <li>
 Knowledge of the mortgage industry is helpful, but not required
 </li>
 <li>
 Ability to work effectively, independently and with others in a collaborative, deadline-sensitive environment
 </li>
 <li>
 Able to effectively communicate both verbally and in writing to accurately convey messages with both technical and non-technical users
 </li>
 <li>
 Commitment and ability to cultivate a diverse and inclusive work environment.
 
 
 </li>
 </ul>
 
 Education
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in computer science, Engineering or Information Systems Security is preferred
 </li>
 <li>
 Security training certifications strongly preferred (Security+, Azure Fundamentals, Network+)
 
 
 </li>
 </ul>
 
 Experience
 
 
 
 <ul>
 <li>
 Previous experience as an IT security specialist (1-3 years)
 </li>
 <li>
 Experience working in IT (5+ years)
 </li>
 <li>
 Experience as a security specialist in a regulated IT environment including some combination of SOX, HIPAA, GLBA, PCI (1+ years)
 
 
 </li>
 </ul>
 
 Compensation And Benefits
 
 
 
 <ul>
 <li>
 Covius offers an extensive benefits package for all employees, including medical, dental, vision and 401(k)!
 </li>
 <li>
 Compensation $70,000 - $87,500 annualized with a 5% AIP opportunity
 
 
 </li>
 </ul>
 
 Application Guidelines
 
 
 
 For best consideration, please submit your resume and application materials as soon as possible. Review of applications will begin immediately.
 
 
 
 Working Conditions
 
 
 
 This position follows a hybrid work model, combining remote work with in-office presence. Employees are expected to maintain a professional home office environment and be available to work on-site as scheduled or as business needs require. Work is performed both remotely and in a standard office setting. Flexible work hours may be available, with expectations to attend meetings and collaborate during core business hours. Reliable internet access is required for remote work, along with the ability to be on camera to participate in virtual meetings and communications. During in-office days, work is performed in a climate-controlled office with standard lighting and noise levels. Employees must comply with company policies regarding data security, time tracking, and collaboration tools across both work environments.
 
 
 
 Physical Demands and Activities
 
 
 
 While performing the duties of this job, the employee is frequently required to communicate. The employee is regularly required to stand, walk, sit, and constantly operate a computer and other office equipment using hands and fingers for fine manipulation, including keyboarding and mouse use. The employee must occasionally lift, carry, push, pull, or otherwise move objects, such as files and small parcels and/or move boxes weighing up to 15 lbs. Prolonged periods of sitting or standing may be required depending on the nature of the work. Specific vision abilities required by this job include close vision, distance vision, and the ability to observe objects at close range in presence of glare or bright lighting (e.g. computer screen).
 
 
 
 Covius is committed to equal opportunity in all employment practices to all qualified applicants and employees without regard to race, color, religion, gender, gender identity, age, national origin, pregnancy, disability, genetics, marital status, military or veteran status or any other protected category as established by local, state, and federal law. This policy applies to all aspects of the employment relationship including recruitment and hiring, placement, promotion, transfer, compensation, disciplinary action, layoff, leaves of absence, training, and termination. All such employment decisions will be made without unlawful discrimination based on any prohibited basis.
 
 
 
 
 The essential functions, working conditions and physical demands described above are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this position.
 
 
 
 
 Please note that all job descriptions are not intended to be all-inclusive. This job description is not designed to cover all activities, duties or responsibilities that are required of the employee for this job. Employees may be required to perform other duties at any time with or without notice to meet the ongoing needs of the organization.
 
 
 
 
 If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!
 
</div>

Cyber Security Analyst

Digital Hands

<div>
 
 #GetThereFirst
 
 
 
 Digital Hands is an innovative Managed Security Service Provider (MSSP) with a mission to protect customer data and make technology available, productive and secure with the strongest talent in the cyber industry. Members of the Digital Hands Team work with leading technologies and protect a dynamic set of enterprise-class customers including best-known brands in the hospitality, financial, manufacturing and communications industries. Digital Hands employees enjoy competitive compensation and benefits, training opportunities, personal skills development, and opportunities for professional advancement across the organization.
 
 
 Digital Hands is comprised of innovators leading from the front, fueled by a desire to achieve, test new boundaries, and a determination to do whatever it takes to get there first every time. Ideal candidates believe in the mission and vision of the company and have a genuine love for what they do. At Digital Hands, we take ownership, obsess over our promises, anticipate our customers' needs. and get ahead of every threat so that our customers can focus on their business with the peace of mind that only comes from knowing their cyberworld is secure.
 
 
 <ul>
 <li>
 This is a full-time onsite role located in Tampa, FL.
 </li>
 <li>
 The shift for this position is Friday - Monday, 12 pm - 11pm est.
 
 
 </li>
 </ul>
 
 POSITION SUMMARY:
 
 
 
 Working within the Digital Hands Operations Center, the IT Security Analyst (Tier 1) acts as the initial point of contact for customer calls and performing Level 1 triage within a Network Operations (NOC) and Security Operations Center (SOC) environment. Daily tasks include monitoring alarms and responding to alerts coming from a wide variety of IT and networking systems, including security and network infrastructure, servers, and appliances. First responders are also responsible for initial response to alerts from firewalls, IPS/IDS, SIEM, and Host-Based Security tools. The applicant must possess a sound understanding of desktops, servers, networking, and security concepts. This role reports to the Director of Cyber Security Response.
 
 
 
 DUTIES AND RESPONSIBILITIES:
 
 
 
 <ul>
 <li>
 Work in a shift-based call center environment, handling in-bound support calls, creating and remediating incident tickets through the service management platform.
 </li>
 <li>
 Respond to health and availability alerts generated by monitoring and management platforms, customer email requests and queries, remediating or escalating as required.
 </li>
 <li>
 Respond to Security Alert based on severity and risk.
 </li>
 <li>
 Run analytical queries within SIEM (multiple platforms) and endpoint security solutions.
 </li>
 <li>
 Reference open source resource and Threat Intel in identification malicious activity.
 </li>
 <li>
 Implement Firewall Blocks.
 </li>
 <li>
 Perform Scheduled checks of network infrastructure and security appliances (SEOG/NEOG).
 </li>
 <li>
 Communicate with customer via email and telephone.
 </li>
 <li>
 Embrace opportunities to enhance and improve process workflows and the customer experience.
 </li>
 <li>
 Other duties as assigned.
 
 
 </li>
 </ul>
 
 EDUCATION AND WORK EXPERIENCE:
 
 
 
 <ul>
 <li>
 Bachelor's Degree and/or 1-3 years of experience in an information technology role.
 </li>
 <li>
 Understanding of network security attacks, vectors and network protocols including TCP, UDP, ICMP, SNMP, HTTP, and FTP.
 </li>
 <li>
 Skills and training to support security and networking equipment such as firewalls, routers, switches, and other related infrastructure.
 </li>
 <li>
 Experience managing Microsoft Windows desktop and server Anti-Virus and Advanced End Point Protection solutions.
 </li>
 <li>
 Professional certifications such as A+, Security+ and Network+, SANS/GIAC (GSEC), and/or equivalent are preferred.
 
 
 </li>
 </ul>
 
 KNOWLEDGE, SKILLS AND CHARACTERISTICS REQUIRED:
 
 
 
 <ul>
 <li>
 A keen interest in security and the need for the confidentiality, integrity and availability of information and information systems to be maintained.
 </li>
 <li>
 Skills and training to support security and networking equipment such as firewalls, routers, switches, and other related infrastructure.
 </li>
 <li>
 Working knowledge of networking concepts and remote access protocols such as LANs/WANS, VPNs, TCP/IP, UDP, ICMP, SNMP, HTTP, and FTP.
 </li>
 <li>
 Knowledge of Basic IT Security concepts.
 </li>
 <li>
 Excellent organizational and time-management skills and the ability to multi-task and prioritize.
 </li>
 <li>
 Excellent communication, presentation and listening skills.
 </li>
 <li>
 Capability of learning and performing all the activities that everyone on the shift does.
 
 
 </li>
 </ul>
 Digital Hands is dedicated to a diverse and inclusive workplace and culture, and proud to be an Equal Employment Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics.
 
 
 Digital Hands is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please contact us at
 
 talentmanagement@digitalhands.com
 
 
 .
 
 
 
 Digital Hands participates in the U.S. Government&rsquo;s E-Verify program to determine employment eligibility. In compliance with the federal government, all hired applicants will be required to verify identity and employment eligibility upon hire. To learn more about E-Verify, please visit
 
 dhs.gov/e-verify
 
 .
 
 
 
 This link leads to the machine readable files that are made available in response to the federal Transparency in Coverage Rule and includes negotiated service rates and out-of-network allowed amounts between health plans and healthcare providers. The machine-readable files are formatted to allow researchers, regulators, and application developers to more easily access and analyze data.
 
 
 
 By submitting your application, you agree that Digital Hands may collect, use, and process your information, which may include personal information and sensitive personal information, in connection with Digital Hands&rsquo; recruitment activities. You may delete your application and/or unsubscribe from receiving notifications of career opportunities at Digital Hands at any time. For additional details on how Digital Hands uses and protects your personal information in the application process, including your rights under the California Privacy Rights Act (&ldquo;CPRA&rdquo;), click here to view our Privacy Notice.
</div>

IT Security Analyst (Tier 1)

General Dynamics Information Technology

<div><div><div>Your Impact
Own your opportunity to support our nation's defense. Make an impact by connecting and securing critical operations across the globe, keeping our country safe and secure.
Job Description<div>
Advance your career while impacting our national security in cyber as an Insider Threat Analyst at GDIT. Here, technologists have many paths to grow a meaningful career supporting cyber missions and operations across the federal government. 
 
MEANINGFUL WORK AND PERSONAL IMPACT 
As an Insider Threat Analyst the work you&rsquo;ll do at GDIT will be impactful to the mission of USCENTCOM. You will play a crucial role in performing Tier 1-3 level review of insider case events; use data mining tools to collect and analyze large amounts of information to triage potential insider indicators and respond to confirmed incidents.<ul><li>
Triage and analyze UAM alerts</li><li>
Document and report findings to impacted stakeholders</li><li>
Provide information to the UAM Lead for customer trending and reporting</li><li>
When needed, provide on call response as required by government lead</li><li>
Participate and provide support to the Command Insider Threat Working Group Stakeholders and other relevant meetings where Insider Threat Analyst representation is needed</li><li>
Provide recommendations on ways to improve the Insider Threat UAM detection platform</li><li>
Use advanced behavior analytics to detect compromised users and their activities and assess risk</li></ul> 
WHAT YOU&rsquo;LL NEED TO SUCCEED 
Bring your cyber expertise and drive for innovation to GDIT. The Information Security Analyst Senior must have:<ul><li>
Education: Bachelor's degree</li><li>
Certification: Current DoD-8570 IAT Level II and DoD-8140</li><li>
Experience: 3+ years of related experience</li><li>
Technical skills:<ul><li>
At least 1 year of incident response / analysis experience / Special Security Office or OPSEC background</li><li>
At least 6 months of UAM or insider threat detection experience</li><li>
Demonstrated experience with Insider Threat detection capabilities.</li><li>
Demonstrated knowledge of network traffic and communications, including known ports and services.</li><li>
Demonstrated experience with MS Office Suite of Applications (Word, PowerPoint, Excel, Access, etc.)</li><li>
Demonstrated experience in coordinating with internal and external stakeholders, especially Law Enforcement and Counterintelligence</li><li>
Knowledge of incident handling procedures.</li></ul></li><li>
Desired skills:<ul><li>
Completion of Center for Development of Security Excellence (CDSE) core Insider Threat training competencies</li><li>
Counter Insider Threat Professional Certification (Fundamentals or Analysis)</li><li>
Completion of the 40-hour Insider Threat Detection and Analysis or the Defense Insider Threat Management Analysis HUB Course</li><li>
Completion of vendor provided UAM Basic or Advanced Course.</li><li>
Understanding of core current cybersecurity technologies as well as emerging capabilities.</li><li>
Demonstrated understanding of the life cycle of cybersecurity threats (internal and external), attacks, attack vectors and methods of exploitation with an understanding of intrusion set tactics, techniques and procedures (TTPs).</li><li>
Knowledge of computer security principles and DoD security protocols</li><li>
Motivated self-starter with strong written and verbal communication skills, and the ability to create complex technical reports on analytic findings.</li><li>
Comfortable with briefing senior government military and civilian leaders</li></ul></li><li>
Security clearance level: TS/SCI</li><li>
US citizenship required 
 
GDIT IS YOUR PLACE 
At GDIT, the mission is our purpose, and our people are at the center of everything we do.</li></ul><ul><li>
Growth: AI-powered career tool that identifies career steps and learning opportunities</li><li>
Support: An internal mobility team focused on helping you achieve your career goals</li><li>
Rewards: Comprehensive benefits and wellness packages, 401K with company match, competitive pay and paid time off</li><li>
Community: Award-winning culture of innovation and a military-friendly workplace</li></ul> 
OWN YOUR OPPORTUNITY 
Explore a career in cyber at GDIT and you&rsquo;ll find endless opportunities to grow alongside colleagues who share your focus on defending and protecting what matters.
</div></div><div><div><div>Work Requirements</div></div><div></div><div><div>
Years of Experience<div>
3 + years of related experience</div><ul><li>may vary based on technical training, certification(s), or degree</li></ul></div><div></div><div>
Certification
CompTIA Security+ CE | CompTIA - CompTIA</div><div></div><div>
Travel Required<div>
Less than 10%</div></div><div></div><div>
Citizenship<div>
U.S. Citizenship Required</div></div></div></div></div><div>
Salary and Benefit Information<div>
The likely salary range for this position is $96,050 - $129,950. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range. 
View information about benefits and our total rewards program.</div>
About Our Work<div>
We are GDIT. A global technology and professional services company that delivers technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across over 50 countries worldwide, offering leading capabilities in digital modernization, AI/ML, cloud, cyber and application development. Together with our customers, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.</div><div>
Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.</div><div>
Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans</div></div></div>

Insider Threat Analyst

Sherpa 6, Inc.

<div>
 Security Clearance: Active Secret clearance required (Interim ok) Travel Requirement: Up to 10% Citizenship: US Citizenship required Sherpa 6 is seeking a highly motivated and skilled Vulnerability Management Analyst to join our team. We build mission critical systems for the Department of Defense (DoD) and other commercial customers. You'll be responsible for identifying, assessing, prioritizing, and tracking remediation of security vulnerabilities across our technology environment. You will partner with infrastructure, application, and security teams to ensure risks are properly understood, addressed, and reported. Responsibilities: * Perform regular vulnerability scans across cloud, on-prem, application, and endpoint environments.
 
 
 <ul>
 <li>
 Analyze scan results, validate findings, and assign severity based on industry standards (e.g., CVSS), business context, and exploitability.
 </li>
 <li>
 Work collaboratively with engineering and operations teams to drive timely remediation of vulnerabilities.
 </li>
 <li>
 Monitor external threat intelligence and evaluate emerging vulnerabilities (e.g., zero-days, trending exploits).
 </li>
 <li>
 Maintain the vulnerability management platform and improve scanning coverage and accuracy.
 </li>
 <li>
 Support patch management processes and ensure alignment with remediation SLAs.
 </li>
 <li>
 Assist in developing and refining policies, procedures, and best practices for vulnerability management.
 </li>
 <li>
 Participate in incident response efforts when vulnerabilities contribute to active threats. Requirements * 7+ years of experience in cybersecurity, vulnerability management, or related fields.
 </li>
 <li>
 Hands-on experience with tools such as Tenable, Qualys, Rapid7, OpenVAS, or similar.
 </li>
 <li>
 Strong understanding of CVE, CVSS, NIST, CIS benchmarks, and vulnerability classification frameworks.
 </li>
 <li>
 Familiarity with cloud platforms (AWS, Azure, GCP)
 </li>
 <li>
 Ability to interpret vulnerability findings, identify actual risk, and communicate clearly with technical and non-technical stakeholders.
 </li>
 <li>
 Knowledge of patch management practices and change management workflows.
 </li>
 <li>
 Understanding of network architecture, security controls, and common attack vectors.
 </li>
 <li>
 Excellent analytical and problem-solving skills, with a keen attention to detail.
 </li>
 <li>
 Strong communication and interpersonal skills, with the ability to effectively collaborate with cross-functional teams
 </li>
 <li>
 Must be a US citizen
 
 
 </li>
 </ul>
 Qualities of Exceptional Candidates: * Relevant certifications (Security+, CySA+, CEH, GSEC, or similar).
 
 
 <ul>
 <li>
 Experience with automation or scripting (Python, PowerShell, Bash).
 </li>
 <li>
 Background in secure configuration management, container security, or DevSecOps tooling.
 </li>
 <li>
 Knowledge of SIEM or threat detection platforms.
 
 
 </li>
 </ul>
 About Sherpa 6: At Sherpa 6 we love to solve problems and provide the best solutions for our customers. Our approach to a problem is to find a user-focused and design-driven solution that is simple yet functional and effective. We are a group of enthusiastic forward-thinkers who are excited to build amazing solutions with bleeding-edge technology. We hire people who are forward thinkers, passionate about what they do, love to collaborate and want to constantly learn. We enjoy what we do and we're not afraid to put the extra effort in to accomplish the mission; call us Sherpas. As a Service-Disabled Veteran Owned Small Business, we know what it means to serve. We have made it our mission to be the leaders in solutions that protect and give our Warfighters the edge they need when put into harm's way. Background Screening/Check/Investigation: Successful completion of a background screening/check/investigation will/may be required as a condition of hire. ADA: Sherpa 6 will make reasonable accommodations in compliance with the Americans with Disabilities Act 1990. EEO/AA: Sherpa 6 does not discriminate based on race, color, national origin, sex, religion age, disability, sexual orientation, gender identity, veteran status, height, weight, or marital status in employment or the provision of services and is an equal access/opportunity/affirmative action employer. Benefits: We offer a competitive benefits package, covering the cost of medical for you and your family; we also offer dental, vision, health and wellness benefits and a generous retirement savings plan. We believe that our employees can manage their workload and their personal life, therefore we extend a generous PTO policy. This allows our employees to balance their lives as they see fit. Salary Range The proposed salary range is reflective across all Sherpa 6 locations, years of experience, and skill levels. Salary negotiations will be based on a host of factors including but not limited to your geographic location, prior experience, relevant skills, education, and certifications. Salary Description $75,000-$110,000
</div>

Vulnerability Management Analyst- Secret Clearance Required with Security Clearance

Gerdau North America

<div>
 
 At Gerdau, we empower our people to grow, thrive, and make a difference&mdash;together. With a culture built on trust and teamwork, we offer meaningful work, continuous development, and opportunities to shape your future. We invite you to come work with us, where your contributions are valued, your voice is heard, and your career is forged with purpose
 
 
 
 
 Program Description
 
 
 
 Gerdau is seeking college students to participate in our, G.Start program. G.Start is a paid internship program with the goal of developing students for future technical and managerial positions G.Start internships are project-focused and mutually-beneficial. G.Start is a program that values the diversity and inclusion of our business and society.
 
 
 Gerdau is looking for G.Start candidates who have an eagerness to grow personally and professionally, being a part of a global company with more than 120 years of entrepreneurship and achievements in the steel industry. This program is for individuals with high learning agility and willingness to adapt and develop continuously, who aim at consistently outperforming in a variety of settings and circumstances.
 
 
 
 Who We Are
 
 
 
 Gerdau is a major steel manufacturing company, operating in 10 countries, and employing over 30,000 individuals. The North American business divisions (Gerdau Long Steel North America and Gerdau Specialty Steel North America) produce long and special steel products for the agriculture, energy, industrial, automotive, and manufacturing markets. We stimulate the economy through our network of recycling operations and mills, operating ten mills in the U.S. and three in Canada. Our mills utilize efficient and clean production practices, including the use of electric arc furnace (EAF) technology. The use of this technology and its process makes our steel one of the greenest choices available.
 
 
 
 Opportunities to Learn
 
 
 
 In the role as Information Security G-Start you will have the opportunity to:
 
 
 <ul>
 <li>
 Work with a talented group of Information Security Professionals that can give you keen insights into the field of Information Security, IAM and GRC and how Human Risk Management (HRM) is used to reduce security risk through behavior-based programs.
 </li>
 <li>
 Gain hands-on experience supporting continuous security awareness and phishing simulation programs.
 </li>
 <li>
 Understand how data, metrics, and trends are used to measure human-related security risk
 </li>
 <li>
 Gain exposure to information security audit activities, learning how evidence is collected and validated
 </li>
 <li>
 Develop practical skills using tools such as KnowBe4, Microsoft SharePoint, Power Automate, and Power BI. Learn how automation and process optimization reduces manual work in security operations
 
 
 </li>
 </ul>
 
 Job Responsibilities And The Individual
 
 
 
 This position will support the Information Security team, with a focus on Human Risk Management / Security Awareness, Audit Support and IAM. The responsibilities may include, but are not limited to:
 
 
 Human Risk Management (HRM) &amp; Security Awareness
 
 
 <ul>
 <li>
 Assist with maintaining security awareness communications
 </li>
 <li>
 Help track, organize, and validate phishing and training data to support trend analysis
 </li>
 <li>
 Support information security training activities
 </li>
 <li>
 Help maintain simple recognition initiatives that reinforce positive security behavior
 
 
 </li>
 </ul>
 Audit &amp; Compliance Support
 
 
 <ul>
 <li>
 Support information security audit activities (internal and external)
 </li>
 <li>
 Assist with audit evidence collection, organization, and validation
 </li>
 <li>
 Help track audit requests, deadlines, and follow-ups
 </li>
 <li>
 Support preparation of documentation used during audits
 
 
 </li>
 </ul>
 IAM (Identity and Access Management)
 
 
 <ul>
 <li>
 IAM process review (policies, guidelines and procedures)
 </li>
 <li>
 Application group access review
 </li>
 <li>
 Ticket escalation and support in the approval process
 </li>
 <li>
 Develop practical skills using tools such as AD (Active Directory), Service Now, Azure, Change Auditor and Active Roles.
 
 
 </li>
 </ul>
 
 Start shaping the future with us!
 
 
 
 Equal Opportunity Statement: Gerdau believes in equal employment opportunities for all and the importance of each employee and applicant as an individual. It is the policy of Gerdau that there will be no discrimination against any employee or applicant for employment on the basis of race, religion, creed, color, national origin, citizenship, marital status, sex, age, sexual orientation, genetic information, gender identity, veteran status, political ideology, ancestry, the presence of any physical, sensory, or mental disabilities, or other legally protected status. All applicants must be legally eligible to work in the country of hire without current or future sponsorship.
 
 
 
 Gerdau believes in equal employment opportunity related to all employees and applicants for employment. It is the policy of Gerdau that there will be no discrimination against any employee or applicant for employment on the basis of race, religion, color, national origin, citizenship, marital status, sex, age, sexual orientation, genetic information, gender identity, veteran status, disability, or other legally protected status. All external applicants must be legally eligible to immediately work in the country of hire without current or future sponsorship.
 
 
 
 
 If you are vision-impaired or have some other disability under the Americans with Disabilities Act / Accessible Canada Act or a similar law, and you wish to discuss potential accommodations related to applying for employment at Gerdau, please contact our Talent Acquisition Team at (866)-788-2798 or recruiting@gerdau.com
 
 
 
</div>

Information Security Intern

Deloitte

Experienced Specialist, Cyber SecurityReference Code 4317
 
Country: 
US Locations: USA - Tampa; USA - Hermitage; USA - Nashville
 
Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization.
 
Work you'll do
 
Work You'll Do: You will act as the primary gatekeeper for Deloitte's Azure/M365 API access, reviewing and approving Microsoft Graph and Azure service API permission requests against least privilege and business need. Day-to-day you'll assess identity and access API risks, enforce SSDLC checkpoints, coordinate cross-functional escalations for high‑privilege or tenant‑wide requests, and produce audit‑ready evidence packages. You'll monitor remediation and compensating controls, help drive automation and process improvements to scale governance for a large enterprise environment and advise product and engineering teams with prescriptive, reusable guidance to reduce permission scope and improve secure design patterns.
 
Key Responsibilities
 
Permission Review: Review Azure and Microsoft Graph permission requests; approve, deny, or require redesigns based on least‑privilege, business need, and risk impact.
 
Advisory + Validation: Advise engineering and product teams on secure Azure API and identity designs (least privilege, reusable patterns, safer token models); validate control implementation via documented checks, automation, or periodic sampling.
 
Automation & Tooling: Identify and implement automation to streamline intake, triage, decisioning, and KPI reporting; maintain templates and lightweight dashboards to speed consistent decisions.
 
Audit Evidence: Produce and retain decision records, evidence packages, and change logs to satisfy audits and regulatory reviews; ensure traceability from request to implementation.
 
Remediation & Controls: Monitor remediation progress, and define compensating controls where necessary; escalate persistent or high‑risk gaps to owners.
 
Cross‑Functional Alignment: Work closely with Global IAM, A&E Cloud Security, SSDLC, Privacy, OGC, GRC, service owners, and member‑firm security contacts to align decisions.
 
Decision Frameworks & Templates: Maintain documented decision frameworks, templates, and FAQs to ensure fast, consistent, and defensible outcomes.
 
Continuous Learning: Stay current on Microsoft Graph changes, Defender/Defender for Cloud advisories, and relevant security guidance.
 
The team
 
Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in "what is" but rather "what can be" to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.
 
Qualifications
 
Required Qualifications: 
Comfortable learning technical material quickly and applying decision frameworks; able to coordinate cross‑functional sign‑offs and explain trade‑offs to technical and non‑technical audiences.
 
Evaluate access requests and scenarios, recommend actions based on least privilege and business need, and record defensible outcomes.
 
Experience working within a service management framework (e.g., ITSM/ServiceNow) or supporting ticketed operational queues.
 
Clear written and verbal English; strong customer service orientation.
 
Motivated self‑starter, able to work independently and escalate appropriately
 
Technology‑related degree or suitable industry experience.
 
Preferred Qualifications
 
Relevant experience supporting security platforms or identity/access management.
 
Experience or coursework with Microsoft Entra/Azure AD, Microsoft Graph API, OAuth/OIDC, or app registrations.
 
Experience with ServiceNow, PowerShell/Graph scripting, or other automation tools.
 
Practical use of KQL in Microsoft Defender/Defender for Cloud
 
Certifications: Security certifications (e.g., Security+, Microsoft identity/azure certs)
 
Experience working in or supporting a large global organization
 
SSDLC participation: Involvement in design reviews or secure development lifecycle checkpoints
 
Our culture
 
At Deloitte Global people are valued and respected for who they are - with opportunities to bring their unique perspectives, talents and passions to business challenges. Our global workspace creates room for individuality and collaboration. Ours is an inclusive, supportive, connected culture with a focus on development, flexibility, and well-being. This culture makes Deloitte Global one of the most rewarding places to work, and to transform your career.
 
Professional development
 
From entry-level employees to senior leaders, we believe in investing in you, helping you identify and hone your unique strengths at every step of your career. We offer opportunities to build new skills, take on leadership opportunities, and connect and grow through mentorship. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career.
 
Benefits
 
At Deloitte, we value our people and offer employees a broad range of benefits. Our Total Rewards program reflects our continued commitment to lead from the front in everything we do-that's why we take pride in offering a comprehensive variety of programs and resources to support your health and well-being.
 
Recruiting for this role ends on .

Experienced Specialist, Cyber Security

Explore 71+ Security analyst in Tampa this April. Find roles across top companies and apply now to boost your career.