Defensive Cyber Operations

Defensive Cyber Operations Engineer Jobs

3 jobs found

1mo ago

Cybersecurity Engineer (Software Assurance / ISSO Support)

Astrion Boulder, CO

Boulder, CO

1mo ago Closed

$125k+/yr Full time Application Security Defensive Cyber Operations Information Security

This position is no longer accepting applications (closed Sep 12, 2026).

Job Description

Astrion is hiring an onsite Cybersecurity Engineer to support the U.S. Space Force Space Sensing Directorate at BGIF, with a primary focus on Software Assurance in classified environments and supplemental ISSO support.

Responsibilities

Evaluate software architecture and design to confirm systems are functional and resilient against cyber-attacks.
Integrate security tooling and vulnerability checks into CI/CD pipelines for continuous delivery security.
Review results from code scanning and vulnerability assessments and coordinate with development teams to remediate software issues.
Apply Secure Technical Implementation Guide (STIG) best practices for software, applications, and databases.
Assist in developing and maintaining Defensive Cyberspace Operations tactics for application-level security monitoring.
Support ISSM and senior ISSOs with Assessment and Authorization (A&A) documentation updates, including:
- System Security Plan (SSP)
- Security Controls Traceability Matrices (SCTMs)
Assist in tracking and updating Plan of Action and Milestones (POA&M) for software and system vulnerabilities.
Support periodic reviews and evaluations of Information System (IS) policies and procedures.
Assist in preparation for and execution of IS Security Inspections, tests, and reviews.
Contribute to vulnerability and risk assessment analysis to support authorization and accreditation activities.

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or a related technical field (Required).
1 to 3 years of experience in cybersecurity, software engineering, or IT security. Internships and academic project experience in secure coding or cyber compliance will be considered (Required).
Valid Security+ CE certification. Must meet the position and certification requirements in DoD Directive 8570.01-M for Information Assurance Technical (IAT) Level II (Required).
Familiarity with secure coding, DevSecOps pipelines, and application security testing tools (e.g., SAST, DAST, SCA) (Highly Desired).
Basic understanding of Risk Management Framework (RMF) and Authorization to Operate (ATO) (Desired).
Familiarity with DISA STIGs and applying them to applications and operating systems (Desired).
Basic understanding of cloud-based systems, Linux/Windows operating systems, and networking fundamentals (Desired).
Ability to obtain and maintain the required security clearance for access to classified systems.

Technologies

DevSecOps
CI/CD
SAST
DAST
SCA
STIGs
RMF
ATO
Linux
Windows

Clearance

Active Secret / SCI Eligible

Location

Boulder Ground Innovation Facility (BGIF), Boulder, CO
Onsite

Salary

Estimated $125,000 + annually *
Depending on experience, certifications, and qualifications

*Salary range shown as provided: estimated $125,000 + annually.

View full job page →

1mo ago

Senior Security Engineer & Workday

Hudson Manpower Harrisburg, PA

Harrisburg, PA

1mo ago Closed

Full time Senior Cloud Platforms Cybersecurity Tools

This position is no longer accepting applications (closed Aug 28, 2026).

Job Description

Join a mission driven security team safeguarding critical infrastructure. This onsite Senior Security Engineer role in Harrisburg, PA centers on red team offensive security, leading red and purple team exercises, building attack infrastructure, and delivering risk based findings across hybrid environments. You will guide offensive engagements, help improve detection with intelligence driven purple team testing, and collaborate with cyber defense, technology, and business stakeholders to elevate resilience. In this position you will become a key member of a team of highly skilled cybersecurity professionals responsible for protecting national critical infrastructure. You will contribute to Red and Purple Team activities, participate in internal presentations and conferences, and share knowledge to strengthen remediation across the organization.

Responsibilities

Execute red team cyber exercises across internal and internet facing systems to uncover misconfigurations and vulnerabilities adversaries could exploit to gain access to data and systems.
Participate in purple team activities to help blue teams enhance their detections and response capabilities.
Lead red team operations against hybrid environments using threat intelligence and the MITRE ATT&CK framework.
Engage in intelligence driven purple team tests to validate detections and tooling.
Build and maintain red and purple team infrastructure, pursuing automation where possible.
Continuously research offensive security tactics and share findings with the team to elevate collective skills.
Conduct ad hoc offensive security testing using industry standard tools or internally developed tools.
Lead the creation of reports featuring compromise narratives, detailed technical findings, risk severity ratings, and practical remediation recommendations, including peer review of deliverables.
Assist cyber defense teams during incident investigations with attacker tradecraft and mindset expertise.
Collaborate with information security, technology, and business stakeholders to raise security awareness and drive remediation efforts.
Actively contribute to Red and Purple Team activities for internal presentations and conferences.

Requirements

Experience with industry standard Red Team tools (Cobalt Strike, Mythic C2, Rubeus, Bloodhound, Covenant, etc.) or demonstrated equivalent knowledge.
Expert understanding of how an advanced persistent threat could compromise a financial institution without phishing.
Extensive knowledge of Red Team concepts, tools, and automation strategies.
Strong grasp of the MITRE ATT&CK framework tactics, techniques, and procedures.
Expert ability to measure and rate vulnerabilities based on core characteristics.
Deep understanding of Windows and Linux system hardening concepts and techniques.
Proficiency in modifying payloads to bypass detections like EDR.
Expert knowledge of compromising environments without using phishing.
Strong scripting capabilities in at least one language (Python, Ruby, PowerShell, Bash, etc.).
Experience with at least one cloud environment (AWS, GCP, Azure).
Proven track record of attacking cloud, on premise, and/or hybrid environments from initial access through objective completion.
Experience delivering Red Team projects including creation and execution of statements of work, risk mitigation strategies, and remediation with stakeholders.
Experience using multi operating system command and control tools.
Experience developing custom attack tradecraft or modifying existing tools.
Experience using automated configuration management such as Chef.
Experience discovering and exploiting vulnerabilities in AI systems.
Experience conducting Offensive Security or Red Team exercises against macOS, iOS, or ChromeOS.
Recognized industry certifications such as GPEN, GXPN, GREM, eCPTX, eCPPT, OSCP, OSWE, CISSP, CPSA, CRT, etc.
Knowledge of industry security standards such as TIBER EU, CBEST, NIST Cyber Security Framework, ISO 27002, etc.
Knowledge of Agile project management.

Technologies

Cobalt Strike
Mythic C2
Rubeus
Bloodhound
Covenant
MITRE ATT&CK
Windows
Linux
Python
Ruby
PowerShell
Bash
AWS
GCP
Azure
Chef
macOS
iOS
ChromeOS

View full job page →

1mo ago

Cybersecurity Engineer

Progress Rail Albertville, AL

Albertville, AL

1mo ago Closed

$89k - $161k/yr Full time Control Systems Cyber Physical Systems Cybersecurity Tools

This position is no longer accepting applications (closed Aug 25, 2026).

Job Description

Progress Rail is seeking a Cybersecurity Engineer to design, implement, and support OT cybersecurity controls across manufacturing, SCADA, and ICS environments. This role partners with operations, engineering, IT, and EHS to securely integrate OT with enterprise networks and to support incident response. The position is onsite in Albertville, Alabama.

Responsibilities

Develop and maintain cybersecurity controls for OT ecosystems across manufacturing facilities, connected products, and ICS settings, including PLCs, HMIs, SCADA, and supporting infrastructure.
Collaborate with factory operations, engineering, IT, and EHS to securely connect OT systems to enterprise IT networks while preserving availability, safety, and reliability requirements.
Perform OT risk assessments and vulnerability analyses, identify security gaps, devise compensating controls, and outline remediation strategies suitable for industrial environments.
Lead or support OT incident response activities, including investigation, containment, root cause analysis, and lessons learned in coordination with enterprise CSIRT teams.
Define and maintain OT security architectures, standards, and technical requirements aligned with corporate cybersecurity policies and industry frameworks (IEC 62443, NIST).
Assess OT security tools, technologies, and monitoring capabilities (such as passive network monitoring, asset discovery, and segmentation solutions) and recommend enhancements based on risk and operational impact.
Support secure system integration efforts, including factory expansions, modernization projects, and new equipment deployments, ensuring cybersecurity requirements are incorporated early in design.
Develop and maintain documentation related to OT cybersecurity controls, architectures, risk assessments, and procedures with strong operational discipline.
Provide consultation and technical guidance to manufacturing sites on OT cybersecurity best practices, risk management, and compliance expectations.
Engage in continuous improvement activities to mature OT cybersecurity governance, standards, and monitoring capabilities across the enterprise.

Requirements

Extensive experience operating in industrial, manufacturing, or OT environments, supporting cybersecurity for ICS, factory systems, or plant networks within a large enterprise.
Proficient knowledge of OT architectures, including PLCs, SCADA, DCS, HMIs, industrial networks, and common manufacturing protocols (Ethernet/IP, Modbus, Profinet).
Proven experience performing cybersecurity risk assessments, vulnerability analyses, and security design for OT systems while balancing operational availability and safety.
Experience supporting or leading OT security incident response and remediation efforts in coordination with IT security and plant operations teams.
Strong understanding of cybersecurity standards, policies, and procedures and how to apply them in industrial environments.
Experience with system and technology integration, enabling secure connectivity between OT systems, enterprise IT, and cloud or remote access solutions.
Ability to document technical solutions, risks, and recommendations clearly for both technical and non-technical stakeholders.
Primary locations: Ft Worth, TX; La Grange, IL; Winston Salem, NC; Muncie, IN; Albertville, AL; Independence, MO.
On-site requirement: 5 days on site is mandatory; regular presence in manufacturing and factory environments.
Physical requirements: ability to lift approximately 50 lbs; majority of work performed at a computer with some onsite equipment handling; ability to climb ladders or steps onto locomotives.
Vision and hearing: ability to operate a vehicle for travel and use a laptop/desktop computer.
Work environment: majority of time in an office; occasional outdoor work.
Emotional demands: ability to work under pressure with a team and speak up about security or safety issues.
Safety: ability to work safely around hardware and electrical equipment and to maneuver in production facilities with moving machinery.

Technologies

PLC, SCADA, DCS, HMIs
Ethernet/IP, Modbus, Profinet
IEC 62443, NIST

Benefits

Competitive Salary
401(k) plan with up to 6% company match (immediate vesting)
Medical, Dental, Vision, Life, and Disability Insurance
Supplemental Accident, Critical Care, and Hospital Insurance with HDHP and HSA options
Flexible Spending Accounts
Paid Vacation
Paid Holidays
PTO
Employee Assistance Plan
Education Assistance Program
Employee Recognition Programs
Site-specific Production and Incentive Plans
Site-specific Step and Skill Level Wage Adjustment Plans
Site Specific Relocation and Sign-on Bonus Programs

View full job page →

Defensive Cyber Operations Engineer Jobs

Cybersecurity Engineer (Software Assurance / ISSO Support)

Senior Security Engineer & Workday

Cybersecurity Engineer

Get Defensive Cyber Operations Engineer Jobs alerts