security operations engineer

Samsara

<div><div>Who we are

Samsara (NYSE: IOT) is the pioneer of the Connected Operations&trade; Cloud, which is a platform that enables organizations that depend on physical operations to harness Internet of Things (IoT) data to develop actionable insights and improve their operations. At Samsara, we are helping improve the safety, efficiency and sustainability of the physical operations that power our global economy. Representing more than 40% of global GDP, these industries are the infrastructure of our planet, including agriculture, construction, field services, transportation, and manufacturing &mdash; and we are excited to help digitally transform their operations at scale.

Working at Samsara means you'll help define the future of physical operations and be on a team that's shaping an exciting array of product solutions, including Video-Based Safety, Vehicle Telematics, Apps and Driver Workflows, and Equipment Monitoring. As part of a recently public company, you'll have the autonomy and support to make an impact as we build for the long term.</div>
About the role:

Samsara is looking for a Security Operations Engineer to join us. As a member of our Security Operations Team, you will collaborate with a global team of engineers to proactively identify and mitigate risks, monitor and respond to security events, respond to and assist in security incidents as a security incident responder, and protect Samsara Technologies India Private Limited's corporate infrastructure and operations.

You will also be responsible for creating and maintaining runbooks, assisting in creating automated workflows, and assisting in process refinement and implementation. You will collaborate with a diverse team of analysts, engineers and key stakeholders on security initiatives across the company. Above all, your focus is bringing Security expertise to the table in a collaborative, humble, and practical manner.

This would be a remote job based out of Bangalore. This role requires availability during 5 AM &ndash; 1 PM IST. Relocation assistance will not be provided.

You should apply if:
<ul>
<li>You want to impact the industries that run our world: Your efforts will result in real-world impact&mdash;helping to keep the lights on, get food into grocery stores, reduce emissions, and most importantly, ensure workers return home safely.</li>
<li>You are the architect of your own career: If you put in the work, this role won't be your last at Samsara. We set up our employees for success and have built a culture that encourages rapid career development, countless opportunities to experiment and master your craft in a hyper growth environment.</li>
<li>You're energized by our opportunity: The vision we have to digitize large sectors of the global economy requires your full focus and best efforts to bring forth creative, ambitious ideas for our customers.</li>
<li>You want to be with the best: At Samsara, we win together, celebrate together and support each other. You will be surrounded by a high-caliber team that will encourage you to do your best.</li>
</ul>
In this role, you will:

Monitor security events and provide technical analysis on alerts
<ul>
<li>Respond to cyber security incidents by executing the incident response strategy through incident closure, while providing incident updates as the incident commander throughout the incident</li>
<li>Protect Samsara while partnering across the organization to drive remediation and ensure Samsara infrastructure is sufficiently protected</li>
<li>Manage post-incident activity such as post mortems and Corrective Action assignments</li>
<li>Manage security event analysis</li>
<li>Assist with developing and maintaining security policies, processes and incident response procedures</li>
<li>Deliver security guidance clearly and concisely for cloud and enterprise infrastructure initiatives</li>
<li>Coordinate the building of services, capabilities, integrations, and implementations of technologies to support security operations and incident response</li>
<li>Champion, role model, and embed Samsara's cultural principles (Focus on Customer Success, Build for the Long Term, Adopt a Growth Mindset, Be Inclusive, Win as a Team) as we scale globally and across new offices</li>
</ul>
Minimum requirements for the role:
<ul>
<li>3+ years of relevant experience in security incident response</li>
<li>Programming experience in Python</li>
<li>Strong reasoning skills and the ability to accurately document procedures and findings during analysis</li>
<li>Practical experience assisting in security incident response, including triage, and coordinating across teams to drive incidents to closure</li>
<li>Concise verbal and written communication skills in english</li>
<li>Strong problem-solving skills, adaptable, proactive, and willing to take ownership</li>
<li>Understanding of analysis and forensics techniques on macOS, Windows, and Linux</li>
<li>Ability to work flexible hours and be on call for potential security incidents</li>
<li>Experience utilizing SIEM tools to perform log reviews</li>
</ul>
An ideal candidate also has:
<ul>
<li>Bachelor's degree in Information Technology, Risk Management, a related field or equivalent experience required.</li>
<li>Familiarity with common security frameworks and standards, including NIST Cybersecurity Framework, ISO 27001, FedRAMP</li>
<li>Experience in cloud architecture and security (AWS, GCP) and cloud-based services</li>
<li>Experience conducting security investigations across clouds, user endpoints, and servers</li>
<li>Familiarity with data privacy regulations and compliance</li>
<li>Technical knowledge of network fundamentals and common Internet protocols</li>
<li>Relevant information security certifications</li>
</ul>
#LI-Remote<div>
At Samsara, we welcome everyone regardless of their background. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, gender, gender identity, sexual orientation, protected veteran status, disability, age, and other characteristics protected by law. We depend on the unique approaches of our team members to help us solve complex problems and want to ensure that Samsara is a place where people from all backgrounds can make an impact.

Benefits

Full time employees receive a competitive total compensation package along with employee-led remote and flexible working, health benefits, and much, much more. Take a look at our Benefits site to learn more.

Accommodations

Samsara is an inclusive work environment, and we are committed to ensuring equal opportunity in employment for qualified persons with disabilities. Please email accessibleinterviewing@samsara.com or click here if you require any reasonable accommodations throughout the recruiting process.

Flexible Working

At Samsara, we embrace a flexible working model that caters to the diverse needs of our teams. Our offices are open for those who prefer to work in-person and we also support remote work where it aligns with our operational requirements. For certain positions, being close to one of our offices or within a specific geographic area is important to facilitate collaboration, access to resources, or alignment with our service regions. In these cases, the job description will clearly indicate any working location requirements. Our goal is to ensure that all members of our team can contribute effectively, whether they are working on-site, in a hybrid model, or fully remotely. All offers of employment are contingent upon an individual's ability to secure and maintain the legal right to work at the company and in the specified work location, if applicable.

Fraudulent Employment Offers

Samsara is aware of scams involving fake job interviews and offers. Please know we do not charge fees to applicants at any stage of the hiring process. Official communication about your application will only come from emails ending in '@samsara.com' or '@us-greenhouse-mail.io'. For more information regarding fraudulent employment offers, please visit our blog post here.</div></div>

Security Operations Engineer II

Nets-international Communication

Overview We are seeking a skilled Splunk Engineer with strong administration and operational experience to design, implement, and maintain Splunk infrastructure and analytics solutions. The ideal candidate will have hands-on expertise in Splunk Enterprise / Enterprise Security (ES), data onboarding, dashboard creation, alert tuning, and system administration. This role bridges engineering, operations, and security analytics, ensuring Splunk runs optimally while delivering actionable insights.Key Responsibilities<ul><li>Design, deploy, and maintain Splunk environments (indexers, search heads, forwarders, deployment servers, cluster masters).</li><li>Create and optimize SPL queries, dashboards, reports, and alerts for operational visibility and threat detection.</li><li>Develop and automate data onboarding pipelines from diverse sources (syslog, cloud, API, EDR tools).</li><li>Integrate Splunk with SIEM/SOAR platforms, cloud services (AWS, Azure, GCP), and endpoint security tools.</li><li>Support use case development for security monitoring and compliance (SOC, IT Ops, or DevOps).</li><li>Perform installation, configuration, and upgrade of Splunk components.</li><li>Manage user roles, authentication, and access control (RBAC).</li><li>Monitor system health, indexing performance, and data retention policies.</li><li>Handle license management, data optimization, and troubleshooting.</li><li>Conduct backup, recovery, and disaster recovery planning for Splunk infrastructure.</li></ul>Security &amp; Operations<ul><li>Collaborate with SOC Analysts to build and tune correlation searches.</li><li>Ensure data integrity, confidentiality, and compliance with security standards (SOC 2, ISO 27001, NIST).</li><li>Participate in incident response and threat analysis leveraging Splunk dashboards.</li><li>Automate repetitive tasks using scripts (Python, Bash, PowerShell) and APIs.</li></ul>Required Skills &amp; Qualifications<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Security, or related field.</li><li>3+ years of experience in Splunk engineering or administration.</li><li>Proficiency in Splunk Enterprise / ES, SPL scripting, and data onboarding.</li><li>Experience managing Splunk clusters, indexing, and search head configurations.</li><li>Strong understanding of log parsing, data normalization, and regex extractions.</li><li>Familiarity with Linux/Windows administration and network security concepts.</li><li>Experience with security frameworks (NIST, MITRE ATT&amp;CK, SOC2, PCI-DSS).</li><li>Scripting skills in Python, Shell, or PowerShell.</li><li>Excellent problem-solving and analytical skills.</li></ul>Preferred Qualifications<ul><li>Splunk Certifications:</li><li>Splunk Core Certified Power User</li><li>Splunk Enterprise Certified Admin</li><li>Splunk Enterprise Security Certified Admin</li><li>Knowledge of cloud-based Splunk (Splunk Cloud, AWS, Azure integrations).</li><li>Experience working in a Security Operations Center (SOC) environment.</li></ul>Job Type: Full-timeAbility to commute/relocate:<ul><li>Muscat: Reliably commute or planning to relocate before starting work (Required)</li></ul>Application Question(s):<ul><li>what is your monthly current salary?</li><li>what is your monthly expected salary?</li><li>what is your notice period?</li></ul>Education:<ul><li>Bachelor's (Required)</li></ul>Experience:<ul><li>Splunk Engineer: 4 years (Required)</li></ul>

Splunk Engineer

help AG

<div>Help AG is looking for a talented and experience Senior Security Engineer who will be responsible for the creation of procedures, implementation of process development, and maintenance of security systems across internal and client environments. The Security Engineer will work closely with Management, Senior Engineers, Threat Analysts, Solution Architects, other Security Engineers, and clients to complete high profile, critical services to existing Managed Security Service clients.
The Senior Security Engineer will be responsible for the administration, maintenance, and integration of Splunk, Cribl, Azure Sentinel, EDR platforms for security operations technical analysis, assessment, and recommendations in the areas of real-time security, operational network &amp; identity management system, and applications systems security monitoring. 
Responsibilities<ul><li>
Administering Splunk and Splunk Apps to include developing new or extending existing Apps to perform specialized functionality. Integrating Splunk with a wide variety of legacy data sources.</li><li>
Engaging application and infrastructure teams to establish best practices for utilizing Splunk data and visualizations.</li><li>
Design, implement, and support solutions with Microsoft security technologies such as Azure Cloud Access Security Broker, Office 365</li><li>
Advanced Threat Protection (O365 ATP), Microsoft Defender ATP, and their integrations used to deliver internet-scale intelligence and managed security products.</li><li>
Implement &amp; administer Microsoft Defender (ATP), Azure Cloud Access Security Broker &amp; Azure Threat Protection security products within customer environment Manage and oversee day-to-day activities of Azure IP platform and ensure adherence to enterprise standards in project execution methodology, requirements gathering, quality assurance, and continuous improvement.</li><li>
Handle the implementation/deployment/support of Nessus scan engines and Tenable Security Center and peripherals with Engineering, SOC, TIU, and IR.</li><li>
Maintain local and network credentials, Tenable Security Center, and provisions access to vulnerability scanning systems.</li><li>
Integrate Nessus/TSC with other security and IT systems management tools.</li><li>
Document vulnerabilities and work on vulnerability mitigation with agreed SLA.</li><li>
Managing CB sensors including deployment, operation, management, maintenance, update, upgrade, patching, and administration.</li><li>
Should be able to create watchlists to detect indicators of compromise (IOCs) and malicious behavior of new threats.</li><li>
Hands on in writing queries in CB to search the desired events.</li><li>
Assess customer needs and expectations, design solutions to meet those needs, and then implement the design.</li><li>
Quickly build and solve a problem using a new technology to determine viability.</li><li>
Serve as a primary responder for Managed Security customer systems, taking ownership of client configuration issues and tracking through resolution.</li></ul>
Qualifications &amp; Skills<ul><li>
College degree or equivalent training with experience working in a Security Operations Center, Managed Security, or client network environment.</li><li>
Minimum 7 years of professional experience supporting and maintaining SPLUNK SIEM System.</li><li>
5-6 years of experience with advanced tuning of Splunk SIEM content.</li><li>
Experience in Cribl.
</li><li>Professional experience working with networks and network architecture.</li><li>
Information security knowledge in one or more areas such as EDR &ndash; Enterprise end-point security products (e.g., McAfee e-Policy Orchestrator, Virus Scan, Anti-Spyware, Host Data Loss Protection, Endpoint Encryption, etc.)</li><li>
Practical hands-on experience in EDR (Carbon Black), Vectra, and Microsoft Azure.</li><li>
Splunk, Azure Log analytics, or equivalent big data engine experience.</li><li>
Experience with MS Azure Information Protection and technologies, including solution architecture, deployment, management, and support in a large global enterprise.</li><li>
General security knowledge, certificates on Splunk Admin, Splunk Architect, Splunk Consultant is a must. Also, good to have is Azure, Managed vulnerability (Nessus/Tenable), EDR (Carbon Black) and Firewall related security certifications.</li><li>
Knowledge of Linux and Windows Operating Systems.</li><li>
Experience with various other SIEM security products such as: Splunk, ArcSight, Nitro, or LogRhythm and infrastructure components such as proxies, firewalls, IDS/IPS, and DLP.</li><li>
Experience working with clients in a service delivery function.</li><li>
Shift flexibility, including the ability to provide after-hours support when needed.</li><li>
Experience working with internal and client ticketing and knowledge base systems for Incident and Problem tracking as well as procedures.</li></ul></div>

Senior Security Engineer - Splunk, Cribl & Azure Sentinel

HCA Healthcare

<div><h5 class="jobSectionHeader">Introduction</h5>
Experience the HCA Healthcare difference where colleagues are trusted, valued members of our healthcare team. Grow your career with an organization committed to delivering respectful, compassionate care, and where the unique and intrinsic worth of each individual is recognized. Submit your application for the opportunity below:Information Protection Field Security EngineerHCA Healthcare<h5 class="jobSectionHeader">
Benefits</h5>
HCA Healthcare offers a total rewards package that supports the health, life, career and retirement of our colleagues. The available plans and programs include:<ul><li>
Comprehensive medical coverage that covers many common services at no cost or for a low copay. Plans include prescription drug and behavioral health coverage as well as free telemedicine services and free AirMed medical transportation.</li><li>
Additional options for dental and vision benefits, life and disability coverage, flexible spending accounts, supplemental health protection plans (accident, critical illness, hospital indemnity), auto and home insurance, identity theft protection, legal counseling, long-term care coverage, moving assistance, pet insurance and more.</li><li>
Free counseling services and resources for emotional, physical and financial wellbeing 
</li><li>401(k) Plan with a 100% match on 3% to 9% of pay (based on years of service) 
</li><li>Employee Stock Purchase Plan with 10% off HCA Healthcare stock 
</li><li>Family support through fertility and family building benefits with Progyny and adoption assistance. 
</li><li>Referral services for child, elder and pet care, home and auto repair, event planning and more 
</li><li>Consumer discounts through Abenity and Consumer Discounts 
</li><li>Retirement readiness, rollover assistance services and preferred banking partnerships 
</li><li>Education assistance (tuition, student loan, certification support, dependent scholarships) 
</li><li>Colleague recognition program 
</li><li>Time Away From Work Program (paid time off, paid family leave, long- and short-term disability coverage and leaves of absence) 
</li><li>Employee Health Assistance Fund that offers free employee-only coverage to full-time and part-time colleagues based on income.</li></ul>
Learn more about Employee Benefits
Note: Eligibility for benefits may vary by location. 
We are seeking an Information Protection Field Security Engineer for our team to ensure that we continue to provide all patients with high quality, efficient care. Did you get into our industry for these reasons? We are an amazing team that works hard to support each other and are seeking a phenomenal addition like you who feels patient care is as meaningful as we do. We want you to apply!<h5 class="jobSectionHeader">
Job Summary and Qualifications</h5>
The IPS Field Security Engineer will support Division and Facility Network/System Engineers and Administrators by analyzing a wide range of applications, network configurations, and security architectures to ensure the security, integrity, and regulatory compliance of critical information transmitted or stored within the enterprise. Their role is to facilitate the discovery of information and IT-related risks, apply critical thinking to assumptions and develop the right security position/priorities that: first, attain compliance; second, address the material risks to the company while allowing the business to attain its objectives. This position blends cybersecurity engineering with system infrastructure expertise to support risk management, threat mitigation, infrastructure reliability, and compliance with IT and security standards.
The IPS Field Security Engineer will work across multiple domains of information security (i.e. Security and Risk Management, Asset Security, Security Architecture and Engineering, Network Security, Identity and Access Management, Security Assessment and Testing, and Security Operations), providing consultation, assessments, and security/technical guidance to business units and IT teams.
Major Responsibilities:
Risk Management and Security Consulting<ul><li>
Serves as an internal information security consultant to the enterprise while balancing the needs of the business.</li><li>
Research and recommend solutions that meet security standards while ensuring functionality for business continuity.</li><li>
Drive and manage execution of corrective actions to address deficiencies identified during risk assessments.</li><li>
Translate security standards and regulatory requirements into actionable technical and business requirements.</li><li>
Lead and support the IPS program by assessing new applications and technologies and ensuring they are implemented in accordance with company standards</li><li>
Partner with appropriate stakeholders on vulnerability remediation</li><li>
Engage in Architecture Review Committee discussions to identify and address Third Party solution variance from company standards</li><li>
Support, coordinate, and manage incident response and investigation activities</li><li>
Evaluate and recommend security solutions that balance risk mitigation with business functionality</li><li>
Drive ongoing compliance with IPS policies, standards, and operational procedures</li><li>
Serve as an internal security consultant across business units
</li><li>Manage operational processes that monitor and respond to potential security threats</li></ul>
Security Engineering &amp; Architecture<ul><li>
Evaluate new and proposed security technologies and assist in their integration</li><li>
Assist in the design and implementation of secure network, application, and system architectures.</li><li>
Partner with IT colleagues to assure ongoing maturity of IT operational security controls.</li><li>
Participate in the development and testing of disaster recovery and contingency plans</li></ul>
Security Operations and Threat Management<ul><li>
Partner with corporate and local departments as required to facilitate rapid response to cybersecurity events.</li><li>
Maintain awareness of emerging threats, vulnerabilities, and mitigation techniques.</li><li>
Oversee processes for review and approval of security exception requests.</li></ul>
Vendor Systems Security<ul><li>
Partner with appropriate business and IT leadership to help ensure systems, services, and devices receive appropriate assessments and remediation as part of local on-boarding processes.</li><li>
Partner with business and IT leadership to ensure proper controls are in place for existing vendor-maintained solutions.</li><li>
Performs other duties as assigned</li><li>
Practices and adheres to the &ldquo;Code of Conduct&rdquo; philosophy and &ldquo;Mission and Value Statement.&rdquo;</li></ul>
Education &amp; Experience:<ul><li>
Bachelor's degree required
</li><li>Master's degree preferred
</li><li>3+ years of experience in a relevant field required
</li><li>3+ years of experience in security risk management, information security domains, and/or hospital operations preferred, or equivalent combination of education and/or experience</li></ul>
Licenses, Certifications, &amp; Training:<ul><li>
CISSP, CISA, CISM, CCNA, MCSA or other relevant certifications in network administration or information security preferred
</li></ul>Required Knowledge, Skills, Abilities, Behaviors:<ul><li>
Knowledge of supported operating systems (Windows server and VMware ESX), utilities, vendor products, applicable programming languages and scripting, diagnostic techniques, applicable communications protocols, applicable hardware configurations
</li><li>Must have 1+ years of experience in deploying technically complex infrastructure computing solutions across platforms and components.
</li><li>Knowledge of virtual technology, such as, Citrix, VMWare ESX, IBM LPARs, VIO servers, and micro partitions.
</li><li>Knowledge of OS environment running one or more databases including SQL, Oracle, DB2.
</li><li>Experience in one or more of the following: NetBackup, Data Domain, or CommVault
</li><li>Applicable communication protocols and hardware configurations
</li><li>Statistical and analytical tools for systems monitoring
</li><li>Working knowledge of information security concepts, including risk management, engineering, networking, and cloud.</li><li>
Understanding of cloud fundamentals and concepts, as well as experience with a popular cloud provider, like Microsoft, Google, or Amazon.</li><li>
Excellent written and oral skills
</li><li>Demonstrates a high degree of initiative, dependability, and the ability to work with minimal supervision.</li><li>
Possesses a sense of responsibility and accountability &ndash; one who takes ownership and initiative.
</li><li>Creative thinker, always looking for a &ldquo;better way&rdquo; to deliver value; not stopped or discouraged by adversity.
</li><li>Maintains professional demeanor, appearance, and positive attitude.
</li><li>Adaptable and flexible, with the ability to handle ambiguity and sometimes changing priorities.
</li></ul>Travel Required
<ul><li>The job may require up to 50% travel. (Mostly within the Division)</li></ul>
HCA Healthcare has been recognized as one of the World's Most Ethical Companies&reg; by the Ethisphere Institute more than ten times. In recent years, HCA Healthcare spent an estimated $3.7 billion in cost for the delivery of charitable care, uninsured discounts, and other uncompensated expenses.
&quot;There is so much good to do in the world and so many different ways to do it.&quot;- Dr. Thomas Frist, Sr. 
HCA Healthcare Co-Founder 
If you find this opportunity compelling, we encourage you to apply for our Information Protection Field Security Engineer opening. We promptly review all applications. Highly qualified candidates will be directly contacted by a member of our team. We are interviewing - apply today!
We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.</div>

Information Protection Field Security Engineer

Job Overview The Cybersecurity Engineer (PAM / IAM / Cloud Security) is responsible for implementing, managing, and securing identity and access systems across on-premises and cloud environments. This role ensures that privileged accounts, user access, and cloud resources are properly secured, monitored, and compliant with organizational policies and regulatory standards.Key Responsibilities1. PAM (Privileged Access Management)<ul><li>Implement, configure, and manage PAM solutions (e.g., CyberArk, BeyondTrust, Thycotic, Delinea, Azure PIM).</li><li>Define and enforce least privilege principles and privileged session management.</li><li>Monitor and audit privileged account activity to detect and prevent misuse.</li><li>Automate password rotation, vaulting, and credential management processes.</li><li>Conduct periodic privileged access reviews and compliance audits.</li></ul>2. IAM (Identity and Access Management)<ul><li>Design and maintain IAM frameworks aligned with Zero Trust principles.</li><li>Manage user provisioning, de-provisioning, and access lifecycle using tools like Okta, Azure AD, Ping Identity, SailPoint, or One Identity.</li><li>Integrate IAM systems with cloud and enterprise applications (SSO, MFA, RBAC, SCIM).</li><li>Develop and enforce access control policies, authentication mechanisms, and identity governance.</li><li>Work with HR and IT to ensure access alignment during employee onboarding/offboarding.</li></ul>3. Cloud Security<ul><li>Secure cloud environments (AWS, Azure, GCP) by enforcing Identity &amp; Access controls (IAM roles, policies).</li><li>Implement cloud-native security tools (e.g., Azure Defender, AWS IAM, GuardDuty, Security Hub).</li><li>Perform configuration reviews, vulnerability assessments, and threat monitoring for cloud resources.</li><li>Support incident response, risk mitigation, and compliance within the cloud infrastructure.</li><li>Collaborate with DevOps teams to integrate security into CI/CD pipelines (DevSecOps).</li></ul>4. Security Operations &amp; Compliance<ul><li>Assist in incident investigation and response related to identity breaches or cloud threats.</li><li>Develop and maintain security documentation, policies, and runbooks.</li><li>Ensure compliance with frameworks such as ISO 27001, SOC 2, NIST, GDPR, or HIPAA.</li><li>Provide technical guidance and training to internal teams on PAM, IAM, and Cloud Security best practices.</li></ul>Required Skills and Experience Technical Skills<ul><li>Strong knowledge of Identity Governance, PAM, and MFA technologies.</li><li>Hands-on experience with tools such as CyberArk, BeyondTrust, Thycotic, Delinea, SailPoint, Okta, Azure AD.</li><li>Familiarity with Azure / AWS security models and Zero Trust architecture.</li><li>Understanding of Active Directory, LDAP, SSO, OAuth, SAML, SCIM, and OpenID Connect.</li><li>Experience with PowerShell, Python, or Bash scripting for automation.</li><li>Good grasp of network security, firewalls, and endpoint protection concepts</li></ul>Education &amp; Certifications<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Security, or related field.</li><li>Preferred Certifications:</li><li>CompTIA Security+, CySA+, or CASP+</li><li>Microsoft Certified: Azure Security Engineer Associate</li><li>AWS Certified Security &ndash; Specialty</li><li>Certified Identity and Access Manager (CIAM)</li><li>Certified Information Systems Security Professional (CISSP)</li><li>CyberArk / SailPoint / Okta certification (preferred)</li></ul>Job Type: Full-timeAbility to commute/relocate:<ul><li>Muscat: Reliably commute or planning to relocate before starting work (Required)</li></ul>Application Question(s):<ul><li>what is your monthly current salary?</li><li>what is your monthly expected salary?</li><li>what is your notice period?</li></ul>Education:<ul><li>Bachelor's (Required)</li></ul>Experience:<ul><li>Cyber Security Engineer PAM/IAM / Cloud Security: 3 years (Required)</li></ul>

Cyber Security Engineer PAM/IAM / Cloud Security

Security Engineer

<div>Overview:
<div>
Overview:</div><div> 
LMI is seeking an experienced DevSecOps Engineer to support the U.S. Army Training Information System (ATIS) program. ATIS is a major Army initiative to modernize and consolidate Army training systems into a single, cloud-native, enterprise-level capability. As part of an Agile Release Train (ART) operating under the Scaled Agile Framework (SAFe), the DevSecOps Engineer will focus on integrating security controls, automation, and compliance throughout the entire Software Development Lifecycle (SDLC). The incumbent will be responsible for implementing, managing, and continually optimizing security tools and processes within the CI/CD pipeline to ensure ATIS applications meet stringent Department of Defense (DoD) Risk Management Framework (RMF) and cybersecurity requirements.</div><div></div><div> 
LMI is a new breed of digital solutions provider dedicated to accelerating government impact with innovation and speed. Investing in technology and prototypes ahead of need, LMI brings commercial-grade platforms and mission-ready AI to federal agencies at commercial speed.</div><div> 
Leveraging our mission-ready technology and solutions, proven expertise in federal deployment, and strategic relationships, we enhance outcomes for the government, efficiently and effectively. With a focus on agility and collaboration, LMI serves the defense, space, healthcare, and energy sectors&mdash;helping agencies navigate complexity and outpace change. Headquartered in Tysons, Virginia, LMI is committed to delivering impactful results that strengthen missions and drive lasting value.</div>
Responsibilities:
<div>
Key Responsibilities:</div><ul><li>
Design, extend, integrate, and implement existing and new CI/CD pipelines using GitLab and IaC tools (e.g., Terraform, CloudFormation).</li><li>
Continuous modernization of CI/CD techniques and practices as industry best practices evolve.</li><li>
Design, implement, and maintain security testing tools (SAST, DAST, SCA, IAST) directly into the ATIS CI/CD pipeline (e.g., Jenkins, GitLab CI, Azure DevOps).</li><li>
Design and maintain AWS GovCloud environments following DevSecOps best practices.</li><li>
Ensure continuous integration of security testing tools (e.g., SAST, DAST, SCA, IAST) within the ATIS CI/CD pipeline.</li><li>
Provide guidance and training to development teams on secure coding practices and effective use of security tools.</li><li>
Participate in threat modeling and security architecture reviews for new features and system enhancements.</li><li>
Collaborate with Cybersecurity team to ensure continuous monitoring and reporting findings and assist with ATO Documentation.</li><li>
Develop and manage automated gates to enforce security policy checks, vulnerability scanning, and compliance requirements before deployment to testing and production environments.</li><li>
Facilitate and automate the action steps of DoD Security Technical Implementation Guides (STIGs) for operating systems, middleware, and application stacks in collaboration with the Cybersecurity team.</li><li>
Provide rapid response and surge support to additional ATIS systems as needed.</li><li>
Implementing, managing, and monitoring cloud-based security tools to ensure compliance, enhance security posture, and automate best practices for threat detection and incident prevention/response.</li></ul>
Qualifications:
<div>
Required Qualifications:</div><ul><li>
Active Secret security clearance.</li><li>
Bachelor&rsquo;s degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent professional experience).</li><li>
6+ years of experience in AWS cloud engineering and automation.</li><li>
Demonstrated expertise in the automation of software deployment infrastructure and of software deployment build systems (GitLab CI, CircleCI, Jenkins, CloudFormation, Terraform, etc...)</li><li>
Active DoDI 8140 certification/qualification.</li><li>
Demonstrated expertise in scripting languages (PowerShell, Python, Bash).</li><li>
Experience supporting secure DoD systems with CI/CD and containerization.</li><li>
Hands-on experience with DoD RMF, NIST SP 800-53, and STIG compliance in support of government ATO processes.</li></ul><div>
Preferred Qualifications:</div><ul><li>
Prior experience supporting U.S. Army cybersecurity.</li><li>
Experience with container orchestration technologies (e.g., Kubernetes, OpenShift) and securing containerized applications.</li><li>
Relevant professional certifications, such as AWS Certified Security &ndash; Specialty, Microsoft Certified: Azure Security Engineer Associate, or CISSP.</li><li>
Familiarity with logging and monitoring tools (e.g., ELK Stack, Splunk, Prometheus, Trellix/ESS) for security event analysis.</li><li>
Experience in secure software supply chain management and artifact validation.</li><li>
Knowledge of FedRAMP, FISMA, or DoD cloud accreditation.</li><li>
SAFe Agile certification (e.g., SAFe Practitioner, SAFe Architect, SAFe Scrum Master) or equivalent Agile training.</li><li>
Strong documentation, reporting, and presentation skills for technical and non-technical audiences.</li></ul><div>
Travel Requirements:</div><ul><li>
Occasional travel required (e.g., quarterly for PI Planning, user engagement sessions, and key program milestones).</li></ul><div>
Target salary range: $131,987 - 227,328</div><div></div><div> 
Disclaimer: The salary range displayed represents the typical salary range for this position and is not a guarantee of compensation. Individual salaries are determined by various factors including, but not limited to location, internal equity, business considerations, client contract requirements, and candidate qualifications, such as education, experience, skills, and security clearances.</div><div></div><div> 
#LI-SH1</div></div>

DevSecOps Engineer - Clearance Required

Search 10000+ Security operations engineer jobs near you this November. New roles added regularly across leading industries. Apply today.