vulnerability management engineer

Creative Information Technology India

<div></div><div><div><div><div><div><div><b>About us<br>
</b></div></div><div><div>Creative Information Technology Inc (CITI) is an esteemed IT enterprise renowned for its exceptional customer service and innovation. We serve both government and commercial sectors, offering a range of solutions such as Healthcare IT, Human Services, Identity Credentialing, Cloud Computing, and Big Data Analytics. With clients in the US and abroad, we hold key contract vehicles including GSA IT Schedule 70, NIH CIO-SP3, GSA Alliant, and DHS-Eagle II.<br>
</div><div></div><br>
<div>Join us in driving growth and seizing new business opportunities.<br>
</div></div></div><br>
<div><div><div><b>Role and Responsibilities<br>
</b></div></div><div></div><br>
<div><div><b>Vulnerability SE I: </b>This role performs the function of a system engineer level I that will support the city&rsquo;s cybersecurity, end user computing, and core engineering teams. This role will directly work with the city&rsquo;s cybersecurity team to review, prioritize and remediate identified vulnerabilities related to Microsoft Windows, Microsoft Office, and related ancillary software. The SE I role will primarily be responsible for working with the vulnerability management system to identify specific vulnerabilities to be remediated, research the correct remediation configuration and develop or update dashboards within the vulnerability management system to track remediation. The position may also assist a system engineer level II and the cybersecurity team in developing, deploying, and validating specific deployment scripts, automations, and/or installer packages to remediate specific vulnerabilities.
</div><ul><li>Work with the City&rsquo;s vulnerability management system to identify, review and track vulnerabilities and associated remediations.
</li><li>Research and identify specific configurations to remediate identified vulnerabilities.
</li><li>Work with the System Engineer II to develop automations, scripts, deployment packages, and/or customized installers to remediate vulnerabilities.
</li><li>Perform other job duties requiring skills, knowledge and physical requirements as demanded by those duties described or less. Individual assignments will be determined by the supervisor based on then current workloads and department needs.
</li><li>Knowledge of principles of cybersecurity best practices and concepts.
</li><li>Familiar with database, network, virtualization and OT operations, concepts, and design.
</li><li>Experience with evaluating vulnerability and threat information to assess, measure, and prioritize mitigations based on risk.
</li><li>Experience working with client management platforms e.g. Microsoft Endpoint Configuration Manager (MECM), Microsoft Intune, PatchMyPC, Workspace One, etc.
</li><li>Knowledge of PowerShell, VBScript, and/or batch scripting.
</li>Knowledge of security architecture and security best practices for AWS, Azure, Google Cloud, and/or other public platforms.<br>
<li>
</li></ul><div></div><br>
<div><b>Vulnerability SE II: </b>This role performs the function of a system engineer level II that will support the city&rsquo;s cybersecurity, end user computing, and core engineering teams. This role will directly work with the city&rsquo;s cybersecurity team to review, prioritize and remediate identified vulnerabilities related to Microsoft Windows, Microsoft Office, and related ancillary software. The SE II role will primarily be responsible for working with the vulnerability management system and system engineer I to remediate identified vulnerabilities, develop deployment objects, deploy remediations and correct any existing vulnerability deployment objects. The role will work with the city&rsquo;s cybersecurity team to develop communications and follow city requirements with regards to change management.
</div><ul><li>Work with the City&rsquo;s vulnerability management system to identify, review and track vulnerabilities and associated remediations.
</li><li>Develop Active Directory group policies, automations, scripts, deployment packages and/or customized installers to remediate vulnerabilities.
</li><li>Assist in the identification and research of remediation configurations for identified vulnerabilities.
</li><li>Perform other job duties requiring skills, knowledge and physical requirements as demanded by those duties described or less. Individual assignments will be determined by the supervisor based on then current workloads and department needs.
</li><li>Knowledge of principles of cybersecurity best practices and concepts.
</li><li>Experience with database, network, virtualization and OT operations, concepts, and design.
</li><li>Experience with evaluating vulnerability and threat information to assess, measure, and prioritize mitigations based on risk.
</li><li>Experience with client management platforms i.e. Microsoft Endpoint Configuration Manager (MECM), Microsoft Intune, PatchMyPC, Workspace One, etc.
</li><li>Experience with PowerShell, VBScript, and/batch scripting.
</li><li>Experience working with Microsoft Active Directory and Active Directory Group Policies
</li><li>Experience working with Microsoft Entra.
</li>Experience with security architecture and security best practices for AWS, Azure, Google Cloud, and/or other public cloud platforms.<br>
<li>
</li></ul></div></div><br>
<div><div><div><b>Minimum Qualification<br>
</b></div></div><div><div><b>Minimum/Special/Additional Requirements Vulnerability SE I:
</b></div><ul><li>Requires a Bachelor&rsquo;s Degree in an Information Technology related field plus two (2) years of professional IT experience; OR any combination of education (above the high school level) and/or professional progressive IT experience equivalent to six (6) years in fields utilizing the knowledge, skills and abilities in technology systems, systems 3 functions and systems capabilities; and associated with such positions as Systems Engineer, Network Engineer, Database Administrator or Programmer Analyst.
</li>May be required to have a current and valid driver&rsquo;s license.<br>
<li>
</li></ul><div></div><div><b>Vulnerability SE II:
</b></div><ul><li>Requires a Bachelor&rsquo;s Degree in an Information Technology related field plus four (4) years of professional IT experience; OR any combination of education (above the high school level) and/or professional progressive IT experience equivalent to eight (8) years in fields utilizing the knowledge, skills, and abilities in technology systems, systems 3 functions, and systems capabilities; and associated with such positions as Systems Engineer, Network Engineer, Database Administrator, or Programmer Analyst.
</li><li>May be required to have a current and valid driver&rsquo;s license.</li></ul></div></div></div></div></div>

Senior Vulnerability Systems Engineer – Virginia Beach, VA

Instabug

<div><p><b>Job Purpose<br>
</b><br>
<br>
</p><p>As an Application Security Engineer at Luciq, you will help shape and build our application security program alongside the wider team. This is a hands-on, high-ownership role where you will work closely with product and development teams across the full software development lifecycle &mdash; reviewing designs before code is written, identifying risks as features take shape, and ensuring security is embedded into how we build and ship software, not bolted on after the fact. Our stack runs on Ruby on Rails, Go, and Python, deployed on AWS with Terraform managing infrastructure as code and Jenkins powering CI/CD. You will read and review code in these languages &mdash; not just rely on scanner output &mdash; and work with AWS security services (SecurityHub, Inspector, GuardDuty, CloudTrail, CloudFront) to provide visibility and protection across our infrastructure. The role spans web applications, APIs, our mobile SDK (iOS and Android), cloud, and CI/CD &mdash; partnering with engineers, PMs, Platform, and the Security team to make the secure path the default path. This role can be filled at mid-level with a clear growth path to senior-level as you grow into shaping our application security program, or at senior-level if you're already operating at that scope.
</p><p>You will join a lean Security team, which entails stepping beyond core AppSec for incident triage, addressing customer security questionnaires, or supporting cross-functional cloud and compliance reviews. We value this variety as a core facet of the role; if you are seeking hyper-specialized work restricted strictly to application security, this may not be the right fit.<br>
</p><p></p><br>
<br>
<p>Job Responsibilities
</p><ul><li><b>Secure Design &amp; Code Review
</b></li></ul><ul><li><div><ul><li>Run and lead threat modeling sessions with product and engineering teams during feature design. This is a hands-on role with expectations to deliver fixes in the product as needed while enabling other engineers.
</li><li>Conduct security code reviews and architecture reviews across web applications, APIs, and services in Ruby, Go, and Python
</li><li>Leverage AI and make sure that we enable engineers to adhere to security acceptance criteria. Provide guidance to engineers on secure design as we iterate and build the product.
</li></ul></div></li></ul><ul><li><b>Vulnerability Management
</b></li></ul><ul><li><div><ul><li>Validate, triage, and drive remediation of vulnerabilities &mdash; partner with engineering teams across the full lifecycle from discovery through SLA support
</li><li>Coordinate with engineering teams on fix verification and root-cause prevention
</li></ul></div></li></ul><ul><li><b>Security Automation in CI/CD
</b></li></ul><ul><li><div><ul><li>Build and maintain automated security testing in CI/CD &mdash; SAST, SCA, secret scanning
</li><li>Tune tooling for signal over noise; integrate findings into developer workflows
</li><li>Operate secret-scanning and leaked-credential response workflows
</li></ul></div></li></ul><ul><li><b>Cloud &amp; Infrastructure Security
</b></li></ul><ul><li><div><ul><li>Support cloud security reviews &mdash; IAM policies, network segmentation, container/Kubernetes configurations, and Terraform policy-as-code
</li><li>Work with AWS security services (SecurityHub, Inspector, GuardDuty, CloudTrail, CloudFront) to maintain visibility and detection across our infrastructure
</li></ul></div></li></ul><ul><li><b>Supply Chain &amp; Build Security
</b></li></ul><ul><li><div><ul><li>Own dependency risk via SCA, lockfiles, and pinning
</li><li>Drive CI/CD pipeline hardening &mdash; build runners, OIDC-to-cloud, artifact signing, SBOM standards
</li></ul></div></li></ul><ul><li><b>Cross-functional Security Enablement
</b></li></ul><ul><li><div><ul><li>Develop secure coding guidelines and reusable patterns that make the secure path the default
</li><li>Drive S-SDLC adoption across engineering teams
</li><li>Review security posture of our mobile SDK across iOS and Android &mdash; data handling, transport security, local storage, IPC, encryption, third-party dependency risk, and SDK consumer-facing security defaults
</li><li>Assess security risks in AI/LLM integrations &mdash; prompt injection, insecure output handling, trust boundaries in agentic architectures
</li><li>Support compliance initiatives (SOC 2, ISO 27001) &mdash; translate control requirements into engineering practices and assist with audit evidence collection
</li>Use AI tooling actively in your own workflow AI-assisted code review, threat modeling drafts, vulnerability research, and security artifact generation and help shape how the rest of engineering uses AI safely<br>
<li>
</li></ul></div></li></ul><p></p><br>
<br>
<p><b>Job Requirements<br>
</b></p><p></p><br>
<p><b>Must-Haves
</b></p><ul><li><b>Experience </b>: 3-6 years in application security, or security engineering
</li><li><b>Education </b>: Bachelor's degree in Computer Science, Information Security, or equivalent practical experience
</li><li><b>Secure code review </b>in at least one of: Python, Ruby, Go &mdash; can read code and reason about vulnerabilities, not rely on scanner output
</li><li><b>OWASP Top 10 (Web and API) </b>as root-cause patterns, not a memorized checklist &mdash; including SSRF, insecure deserialization, injection classes, and access-control flaws
</li><li><b>Threat modeling </b>: practical experience with STRIDE and data flow diagrams; can lead a session with a product team and produce actionable output
</li><li><b>Auth and identity </b>: working depth in session management, RBAC/ABAC models
</li><li><b>CI/CD security automation </b>: hands-on experience integrating SAST, SCA, and secret scanning into pipelines and tuning for actionable signal
</li><li><b>Proactive and ownership-driven </b>&mdash; does not wait to be told what to secure
</li><li>Comfortable working <b>cross-functionally </b>with product engineers, platform engineers, and the wider team
</li><li>Strong <b>analytical and problem-solving </b>abilities
</li><li>Fluent in <b>English </b>, with strong written and verbal communication
<br>
</li><li><b>Communication </b>: clear written and verbal communication can explain a vulnerability to an engineer, a PM, or a VP<br>
<br>
<br>
</li></ul><p><b>Strong Plus
</b></p><p>We expect strong candidates to have <i>some </i>of these not all. The more, the better.
</p><ul><li><b>Mobile SDK security </b>: OWASP Mobile Top 10 and MASVS/MASTG; Android (Kotlin) or iOS (Swift); experience with Frida, objection, or MobSF
</li><li><b>AWS security service depth </b>: SecurityHub, Inspector, GuardDuty, CloudTrail, CloudFront beyond IAM
</li><li><b>Container and Kubernetes </b>security fundamentals
</li><li><b>Supply chain depth </b>: SLSA framework, SBOM <b>AI/LLM security </b>: prompt injection mitigations, OWASP LLM Top 10, securing agentic architectures and tool-use boundaries
</li><li>Familiarity with <b>ISO 27001 or SOC 2 </b>.<br>
<br>
<br>
</li></ul><p><b>Nice to Have
</b></p><ul><li>Terraform and policy-as-code: tfsec, Checkov, OPA/Conftest
</li><li>Experience building or bootstrapping a security program
</li><li>Bug bounty participation, published CVEs, or documented security research
</li><li>Hands-on certifications: OSCP, OSWE, eMAPT
</li><li>Incident response experience &mdash; triage, containment, root-cause analysis
</li><li>Red teaming or purple teaming experience</li></ul></div>

Application Security Engineer

Ashlar Global

<p><b>Job Overview;</b><br/>We are seeking a skilled DevOps Engineer with 3&ndash;4 years of hands-on experience to support our development and infrastructure operations on a part-time contractual basis. The ideal candidate should have strong experience in CI/CD pipelines, cloud infrastructure, automation, and a solid understanding of cybersecurity best practices to ensure secure and reliable deployment environments.</p><p><b>Key Responsibilities;</b></p><ul><li>Design, implement, and maintain CI/CD pipelines for automated build, testing, and deployment processes.</li><li>Manage and monitor cloud infrastructure (Azure).</li><li>Implement Infrastructure as Code (IaC) using tools such as Terraform, ARM templates, or similar.</li><li>Ensure system security, compliance, and vulnerability management across infrastructure and applications.</li><li>Implement and maintain containerization and orchestration solutions (Docker, Kubernetes).</li><li>Monitor system performance and ensure high availability and scalability of applications.</li><li>Apply cybersecurity best practices, including secure configurations, access control, and data protection.</li><li>Conduct security audits, patch management, and vulnerability assessments.</li><li>Collaborate with development teams to streamline deployment and operational processes.</li><li>Troubleshoot infrastructure and deployment issues.</li></ul><p><b>Required Skills &amp; Qualifications;</b></p><ul><li>3&ndash;4 years of experience in DevOps or Cloud Engineering.</li><li>Strong experience with CI/CD tools (Jenkins, GitHub Actions, GitLab CI/CD, Azure DevOps).</li><li>Experience with cloud platforms Azure.</li><li>Knowledge of container technologies such as Docker and Kubernetes.</li><li>Experience with scripting and automation (Bash, Python, PowerShell).</li><li>Understanding of network security, firewalls, SSL, IAM policies, and secure architecture.</li><li>Familiarity with monitoring tools (Prometheus, Grafana, ELK Stack, or similar).</li><li>Knowledge of cybersecurity frameworks, vulnerability management, and incident response.</li><li>Strong problem-solving and communication skills.</li></ul><p>Job Type: Contract<br/>Contract length: 12 months</p><p>Work Location: Remote</p>

Azure DevOps Engineer / Cyber Security

cFocus Software Incorporated

<div><h1 class="jobSectionHeader"><b>Cybersecurity Engineer - Sr. Job Description</b></h1><b>
Position Title: </b>Cybersecurity Engineer Sr<br>
<b>Program: </b>SBA Enterprise Cybersecurity Services (ECS)<h2 class="jobSectionHeader"><b>
Position Summary</b></h2>
The Cybersecurity Engineer - Sr. supports the Small Business Administration (SBA) Enterprise Cybersecurity Services (ECS) program by delivering advanced cybersecurity engineering, security operations, systems hardening, cloud security, zero trust architecture, and enterprise cyber defense support services.<br>
The Cybersecurity Engineer - Sr. serves as a senior technical leader responsible for designing, implementing, integrating, securing, and optimizing enterprise security architectures across on-premises, cloud, hybrid, and SaaS environments. The position supports 24x7x365 Security Operations Center (SOC) activities and works closely with federal stakeholders, engineers, SOC analysts, architects, incident responders, and program leadership to enhance the cybersecurity posture of SBA enterprise systems and critical assets.<h2 class="jobSectionHeader"><b>
Essential Duties and Responsibilities</b></h2><ul><li>
Provide senior-level cybersecurity engineering support for SBA ECS enterprise cybersecurity operations.</li><li>
Support Task Areas 3.5.3 and 3.5.3.9 by designing, implementing, and maintaining secure enterprise security architectures and cybersecurity engineering solutions.</li><li>
Develop and maintain cybersecurity engineering standards, architecture diagrams, implementation strategies, and technical security documentation.</li><li>
Engineer and implement security controls aligned with NIST, FISMA, Zero Trust Architecture (ZTA), and federal cybersecurity requirements.</li><li>
Design, integrate, configure, and support security technologies including SIEM, SOAR, IDS/IPS, EDR, DLP, MFA, PKI, NAC, firewalls, secure web gateways, and cloud-native security solutions.</li><li>
Provide advanced engineering support for Microsoft Azure, Microsoft 365, AWS, hybrid cloud, and enterprise network environments.</li><li>
Support cybersecurity monitoring, detection, containment, remediation, and recovery activities within the SOC environment.</li><li>
Perform enterprise systems hardening, vulnerability remediation, security baseline implementation, and secure configuration management.</li><li>
Conduct cybersecurity architecture assessments, threat modeling, security engineering reviews, and technical risk analysis activities.</li><li>
Support implementation and optimization of Zero Trust security capabilities including identity security, micro-segmentation, continuous monitoring, and least privilege access models.</li><li>
Design and implement cybersecurity solutions supporting cloud migration, DevSecOps, container security, and automation initiatives.</li><li>
Support incident response investigations by providing engineering expertise, log analysis, root cause analysis, and remediation recommendations.</li><li>
Collaborate with cybersecurity operations teams to develop detection logic, security use cases, automated workflows, and threat response procedures.</li><li>
Perform system security engineering activities throughout the system development lifecycle (SDLC) and support Authority to Operate (ATO) initiatives.</li><li>
Develop and maintain security architecture roadmaps, engineering plans, and technology modernization strategies.</li><li>
Perform security engineering analysis of enterprise applications, APIs, databases, cloud services, and network infrastructures.</li><li>
Support cybersecurity compliance efforts related to NIST SP 800-53, NIST SP 800-171, FedRAMP, CISA guidance, and federal cybersecurity mandates.</li><li>
Provide technical leadership and mentoring to junior cybersecurity engineers, SOC personnel, and technical staff.</li><li>
Prepare technical reports, engineering documentation, executive briefings, and operational recommendations.</li><li>
Research emerging cyber threats, adversary tactics, and evolving security technologies to improve enterprise defense capabilities.</li></ul><h2 class="jobSectionHeader"><b>
Minimum Qualifications</b></h2><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Technology, Information Assurance, Systems Engineering, or related discipline. Relevant experience may substitute for degree requirements.</li><li>
Minimum of 10 years of experience supporting cybersecurity engineering, cybersecurity operations, enterprise security architecture, or SOC environments.</li><li>
Demonstrated experience designing and implementing enterprise cybersecurity architectures and engineering solutions.</li><li>
Hands-on experience with SIEM, SOAR, EDR, IDS/IPS, firewalls, vulnerability management, IAM, cloud security, and security automation technologies.</li><li>
Strong knowledge of NIST cybersecurity frameworks, federal security standards, and Zero Trust Architecture principles.</li><li>
Experience supporting Microsoft Azure, Microsoft 365, AWS, hybrid cloud, and enterprise network infrastructures.</li><li>
Experience performing system hardening, secure configuration management, and vulnerability remediation.</li><li>
Knowledge of incident response methodologies, MITRE ATT&amp;CK framework, cyber kill chain concepts, and adversary TTP analysis.</li><li>
Experience supporting RMF, ATO, continuous monitoring, and federal cybersecurity compliance activities.</li><li>
Strong analytical, troubleshooting, technical writing, and communication skills.</li><li>
Ability to present technical findings and cybersecurity recommendations to executive leadership and technical stakeholders.</li></ul><h2 class="jobSectionHeader"><b>
Preferred Certifications</b></h2><ul><li>
Certified Information Systems Security Professional (CISSP)</li><li>
Certified Cloud Security Professional (CCSP)</li><li>
GIAC Certified Enterprise Defender (GCED)</li><li>
GIAC Security Expert (GSE)</li><li>
Certified Ethical Hacker (CEH)</li><li>
CompTIA Security+</li><li>
CompTIA CySA+</li><li>
AWS Certified Security &ndash; Specialty</li><li>
Microsoft Certified: Cybersecurity Architect Expert</li><li>
Cisco Certified CyberOps Professional</li></ul><p>
</p><p>Q92uPhlSIK</p></div>

SBA - Cybersecurity Engineer - Sr

CareCloud

<div></div><div><div>Department: INFORMATION TECHNOLOGY Experience: 3 YearsDeadline: May 30, 2026Location: Rawalpindi, Pakistan</div><div><h4 class="jobSectionHeader"><b>
Job Profile</b></h4><p></p><div><p><b>
Job Summary:</b></p>
<p>We are seeking an experienced DevOps Engineer to design, build, and maintain scalable infrastructure and automated deployment pipelines. The role requires strong expertise in containerization, cloud platforms, and secure software delivery practices.</p>
<p>_________________________________________________________________________________________________________________________________________________</p>
<p><b>Responsibilities:</b></p>
<ul><li>Design, deploy, and manage containerized applications using Docker and orchestrate them with Kubernetes (EKS / AKS / GKE).</li>
<li>Build, maintain, and optimize CI/CD pipelines using Azure DevOps, Jenkins, GitLab CI, or GitHub Actions for fast and reliable software delivery.</li>
<li>Manage and automate multi-cloud infrastructure on AWS, Microsoft Azure, and Google Cloud Platform (GCP) using Infrastructure-as-Code tools (Terraform, ARM templates, CloudFormation).</li>
<li>Administer and maintain IIS (Internet Information Services) for hosting and managing .NET/web-based applications, including configuration, SSL, application pools, and performance tuning.</li>
<li>Configure, monitor, and fine-tune Web Application Firewalls (WAF) &mdash; AWS WAF, Azure WAF, Cloudflare, or F5 &mdash; to protect applications from OWASP Top 10 threats.</li>
<li>Implement secure coding and DevSecOps practices, including vulnerability scanning (SAST/DAST), secrets management, container image scanning, and policy-as-code.</li>
<li>Write and maintain Shell / Bash / PowerShell scripts for automation, deployments, and system administration.</li>
<li>Administer and troubleshoot Linux (RHEL, CentOS, Ubuntu) and Windows Server environments in production.</li>
<li>Monitor system health using tools such as Prometheus, Grafana, ELK, Azure Monitor, and CloudWatch; lead incident response and root cause analysis.</li>
<li>Collaborate with development, QA, and security teams to streamline release cycles and enforce compliance standards.</li>
</ul>
</div><p></p><div><h4 class="jobSectionHeader"><b>Tools / Skills</b></h4><p></p><div><p><b>
Required Skills:</b></p>
<ul><li><ul><li>Strong proficiency in Docker, Kubernetes, and container orchestration.</li></ul></li>
<li><ul><li>Proven experience building CI/CD pipelines, particularly with Azure DevOps.</li></ul></li>
<li><ul><li>Solid working knowledge of AWS, Azure, and GCP services and architectures.</li></ul></li>
<li><ul><li>Experience with IIS administration and hosting web applications.</li></ul></li>
<li><ul><li>Hands-on experience configuring and managing WAF solutions and application-layer security.</li></ul></li>
<li><ul><li>Expertise in Linux administration and Shell / PowerShell scripting.</li></ul></li>
<li><ul><li>Strong understanding of secure code practices, DevSecOps principles, and common vulnerability frameworks (OWASP, CIS Benchmarks).</li></ul></li>
<li><ul><li>Familiarity with monitoring/logging tools (Prometheus, Grafana, ELK, Azure Monitor, CloudWatch).</li></ul></li>
<li><ul><li>Proficiency with Git and version control workflows.</li></ul></li>
</ul>
<p><b>Preferred Skills:</b></p>
<ul><li>Cloud certifications such as AWS Certified DevOps Engineer, Microsoft Certified: DevOps Engineer Expert, or Google Professional Cloud DevOps Engineer.</li>
<li>Kubernetes certifications (CKA / CKAD).</li>
<li>Experience with configuration management tools (Ansible, Chef, Puppet).</li>
<li>Exposure to Agile/Scrum environments and ITIL practices.</li>
</ul>
<p><b>Required Qualification:</b></p>
<ul><li>3&ndash;5 years of hands-on DevOps / SRE / Cloud Engineering experience.</li>
<li>Bachelor's degree in Computer Science, Software Engineering, or a related field.</li></ul></div></div></div></div><p></p>
<br><div><h5 class="jobSectionHeader"><b>Additional Information</b></h5><div><div><p><b>
Total Position(s)
</b></p><p>3 Positions</p></div><div><p><b>
Gender</b></p><p>
Does not matter</p></div><div><p><b>
Minimum Education</b></p><p>
Bachelors Degree</p></div><div><p><b>
Degree Title</b></p><p>
Bachelors Degree</p></div><div><p><b>
Shift</b></p><p>
Evening</p></div><div><p><b>
Nature of Job</b></p><p>
Work From Office</p></div></div></div>

Devops Engineer

Openkyber

<div><p>Greetings from OpenKyber! We reaching out about an exciting Direct client opportunity with one of our clients. Please review the requirements and let me know if you are interested in this position? Direct client Req:: Need Sr Application Security Architect &amp; Engineer Hybrid , VA PLEASE SEND THE RESUMES TO hirings@openkyber.com ! Job Description: Description: ABOUT THE ROLE Virginia Tax is seeking an Application Security Engineer (ASE) with 5+ years of experience to join the Office of Technology under Joint Security Operations. In this role, the ASE serves as a dedicated security partner to application teams, providing guidance on secure design, vulnerability management, and secure development practices. The ASE works collaboratively across the SDLC to ensure security is embedded into application design, development, testing, and deployment. This includes supporting compliance requirements, delivering training and education, and assisting teams with vulnerability remediation efforts. The successful candidate will identify and recommend improvements to improve the security of all Virginia Tax applications, promote secure coding and development practices, and contribute to ongoing initiatives that reduce risk and strengthen the agency s overall security posture. Responsibilities include but not limited to: Provide security guidance, training, and best practices for development and operations teams. Support secure software development by applying knowledge of SDLC, Agile, and Scrum methodologies. Evaluate software architecture and design for security risks and alignment with DevSecOps principles. Promote and enforce secure coding standards and guidelines. Review source code to identify vulnerabilities and recommend remediation strategies. Assess security risks across multiple programming languages (e.g., JavaScript, C#, Java, Ruby, SQL). Analyze and secure modern web application architectures, including cloud, APIs, microservices, and client server models. Identify and address common vulnerabilities, including those outlined in the OWASP Top 10. Support vulnerability remediation, patch management, and continuous improvement efforts. Utilize application security testing tools such as SAST, DAST, IAST, and platforms like Accunetix, Veracode, Jenkins, Splunk, Rapid7, and Tenable. Interpret and act on findings from SIEM systems, including Splunk. Apply knowledge of common security controls and frameworks. Ensure compliance with relevant security regulations and standards (e.g., NIST 80053, IRS Pub 1075, PCIDSS). Implement and evaluate AWS cloud security controls and best practices. Create, maintain, and review System Security Plans (SSPs). Troubleshoot and resolve complex technical and security-related issues. Stay current with evolving threats, technologies, and industry trends. Develop detailed plans and communicate risks, impacts, and recommendations effectively. Collaborate with application teams, QA engineers, and operations teams to integrate security into workflows. Provide constructive, actionable feedback to application teams. Communicate technical concepts clearly to both technical and nontechnical audiences. Work closely with other security analysts and technology teams to support agency and enterprise security initiatives. Manage multiple tasks, prioritize effectively, and meet deadlines. Apply critical thinking to evaluate and mitigate security risks and vulnerabilities. Required Skills/Experience: Five or more years experience in application security. Two or more years network or firewall/AWS Security Groups. Experience with log collection, vulnerability scans and remediation, or privileged access management. Strong understanding of security concepts, network protocols, and threat vectors. Proficiency in SIEM,IDS/IPS, EDR,and other relevant security tools. Excellent analytical and problem-solving skills. Strong communication, collaboration, and documentation skills. Ability to work independently and as part of a team in a fast-paced environment. Have experience and a strong knowledge of the following: Splunk, InsightVM Rapid7, Tenable, CyberArk, Jenkins, Veracode Linux and Windows Operating Systems, Baseline hardening of operating systems IIS and Apache, Scripting Languages and SQL, PowerShell, Firewall At least one of these certs below is REQUIRED: CompTIA Security+ ISC2 CC (Certified in Cybersecurity) Offensive Security Certified Professional (OSCP) CCSP (Certified Cloud Security Professional) CSSLP (Certified Secure Software Lifecycle Professional) At least one of these certs below is highly DESIRED (Independently and or with one of the above) AWS Solutions Architect (Associate/Professional) AWS Security Specialty At least one of the any is DESIRED CompTIA PenTest+ Certified Ethical Hacker (CEH), GIAC Certified Intrusion Analyst (GCIA Fill the above skills in the below box and have consultant to complete SKILLS MATRIX Skill Required Amount of Experience Experience Application Security Required 5 Years Network or Firewall/AWS security Groups Required 2 Years Infrastructure as Code (IaC): Advanced proficiency in Terraform for multi-account landing zones and automated provisioning. Required 2 Years Experience with log collection, vulnerability scans and remediation, or privileged access management Required 4 Years Proficiency in SIEM, IDS/IPS, EDR, and other relevant security tools. Required 4 Years Networking &amp; Hybrid Connectivity: Solid understanding of routing, firewalls, AWS Direct Connect, and VPNs in a hybrid cloud environment. Required 4 Years One REQUIRED: CompTIA Security+, ISC2 CC (Certified in Cybersecurity), Offensive Security Certified Professional (OSCP), CCSP, or CCLP. UPLOAD COPY!! Required CI/CD &amp; DevOps: Experience with GitLab CI/CD, Jenkins, or AWS CodePipeline for automated, secure deployments. Highly desired 5 Years Splunk, InsightVM Rapid7, Tenable, CyberArk, Jenkins, Veracode Highly desired 2 Years Linux and Windows Operating Systems, Baseline hardening of operating systems Highly desired 2 Years IIS and Apache, Scripting Languages and SQL, PowerShell, Firewall Highly desired 2 Years One highly DESIRED (Independently and or with one of the above): AWS Solutions Architect (Associate/Professional) or AWS Security Specialty Highly desired One of these is DESIRED: CompTIA PenTest+, Certified Ethical Hacker (CEH), or GIAC Certified Intrusion Analyst (GCIA) Highly desired OpenKyber Austin, TX 78727| Direct: OpenKyber is an Affirmative Action/Equal Opportunity Employer that supports workplace diversity. All employment decisions are made without regard to race, color, religion, sex, national origin, age, disability, veteran status, marital or family status, sexual orientation, gender identity, or genetic information. All OpenKyber staff must be able to demonstrate the legal right to work in the United States. OpenKyber is an E-Verify employer</p>
<p><b>For applications and inquiries, contact:</b> hirings@openkyber.com</p></div>

OCI Cloud Security Engineer

Starlink Qatar

<div>
 <p>
  We are seeking a
  <strong>
   Cybersecurity Architect
  </strong>
  to define and govern the end-to-end security architecture for platform capabilities and vendor-delivered solutions. The role ensures
  <strong>
   secure-by-design implementation
  </strong>
  across cloud-agnostic deployments.
 </p>
 <p>
  You will establish security standards, reference architectures, and assurance processes covering
  <strong>
   identity, network segmentation, application security, data protection, and operational security monitoring
  </strong>
  . Working with stakeholders, vendors, and operations teams, the architect drives
  <strong>
   threat modeling, security controls validation, and compliance evidence readiness
  </strong>
  , including SIEM/SOAR integration, vulnerability management, and incident response procedures. The role ensures consistent security posture across multi-tenant environments and multiple cloud platforms.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Key Responsibilities
  </strong>
 </p>
 <ul>
  <li>
   Define
   <strong>
    security reference architecture and baseline controls
   </strong>
   for cloud, Kubernetes, applications, and data services.
  </li>
  <li>
   Lead
   <strong>
    security governance
   </strong>
   : design reviews, threat modeling, security exceptions, and risk acceptance processes.
  </li>
  <li>
   Define
   <strong>
    identity and access controls
   </strong>
   (Entra ID, RBAC, PIM/JIT, conditional access, service principals, secrets management).
  </li>
  <li>
   Design
   <strong>
    network security architecture
   </strong>
   (segmentation/trust zones, private endpoints, WAF, egress controls, firewall policies).
  </li>
  <li>
   Establish
   <strong>
    application security standards
   </strong>
   (OWASP, secure SDLC, SAST/DAST, dependency/SBOM, container image signing).
  </li>
  <li>
   Define
   <strong>
    data security controls
   </strong>
   (classification, encryption/CMK/HSM, DLP, key management, retention, secure deletion).
  </li>
  <li>
   Own
   <strong>
    security monitoring requirements and integrations
   </strong>
   : Defender for Cloud (CSPM/CWPP), Sentinel (SIEM), SOAR playbooks, alert tuning.
  </li>
  <li>
   Define
   <strong>
    vulnerability management and patching processes
   </strong>
   for OS/Kubernetes/runtime components, including SLA targets and reporting.
  </li>
  <li>
   Support
   <strong>
    incident response readiness
   </strong>
   : runbooks, tabletop exercises, forensic logging, evidence handling, and post-incident improvements.
  </li>
  <li>
   Provide
   <strong>
    assurance of vendor deliverables and go-live readiness
   </strong>
   (pen test coordination, remediation validation, compliance evidence packs).
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Skills &amp; Abilities
  </strong>
 </p>
 <ul>
  <li>
   Deep understanding of
   <strong>
    cloud security architecture, zero-trust networking, and Kubernetes/container security
   </strong>
   .
  </li>
  <li>
   Strong capability in
   <strong>
    IAM design and privileged access governance
   </strong>
   in regulated environments.
  </li>
  <li>
   Ability to translate
   <strong>
    risk and compliance requirements into practical technical controls and acceptance criteria
   </strong>
   .
  </li>
  <li>
   Experience implementing
   <strong>
    security monitoring, detection engineering, and incident response processes
   </strong>
   .
  </li>
  <li>
   Strong
   <strong>
    stakeholder influence
   </strong>
   and ability to enforce standards across multiple vendors and teams.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Education &amp; Experience
  </strong>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s degree in
   <strong>
    Computer Science, Information Technology, Cybersecurity
   </strong>
   ; Master&rsquo;s degree highly preferred.
  </li>
  <li>
   <strong>
    8+ years
   </strong>
   in cybersecurity architecture or security engineering roles in government, telco, finance, or critical infrastructure.
  </li>
  <li>
   Hands-on experience securing
   <strong>
    Azure and at least one other cloud
   </strong>
   (GCP/AWS), including hybrid connectivity and shared responsibility.
  </li>
  <li>
   Proven experience with
   <strong>
    SIEM
   </strong>
   (Microsoft Sentinel preferred) and
   <strong>
    CSPM/CWPP
   </strong>
   (Defender for Cloud preferred).
  </li>
  <li>
   Experience with
   <strong>
    secure SDLC, vulnerability management, penetration testing coordination, and remediation programs
   </strong>
   .
  </li>
  <li>
   Relevant certifications preferred:
   <strong>
    CISSP/CCSP, CISM, Azure Security Engineer, CKA/CKS, ISO 27001 awareness
   </strong>
   .
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Preferred Tools
  </strong>
 </p>
 <ul>
  <li>
   <strong>
    Security posture &amp; SIEM:
   </strong>
   Microsoft Defender for Cloud, Microsoft Sentinel, SOAR playbooks
  </li>
  <li>
   <strong>
    Container/Kubernetes security:
   </strong>
   image scanning (Trivy/Anchore), policy-as-code (OPA/Gatekeeper), cosign/Sigstore, Kubernetes audit tools
  </li>
  <li>
   <strong>
    Identity &amp; secrets:
   </strong>
   Azure Entra ID, PIM, Key Vault/KMS/HSM, PAM tooling
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Soft Skills
  </strong>
 </p>
 <ul>
  <li>
   Risk-based
   <strong>
    decision-making
   </strong>
   and ability to articulate trade-offs clearly
  </li>
  <li>
   Strong facilitation of
   <strong>
    threat modeling and security design reviews
   </strong>
  </li>
  <li>
   Clear, structured
   <strong>
    documentation and compliance evidence mindset
   </strong>
  </li>
  <li>
   Calm, decisive leadership during
   <strong>
    incidents and high-pressure situations
   </strong>
  </li>
  <li>
   <strong>
    Collaborative approach
   </strong>
   that enables delivery while maintaining security standards
  </li>
 </ul>
</div>


Cybersecurity Architect

Search 10000+ Vulnerability management engineer jobs near you this May. New roles added regularly across leading industries. Apply today.