Field Investigation

Field Investigation Engineer Jobs

302 jobs found

Today

AI Software Engineer

Booz Allen Hamilton Arlington, VA

Arlington, VA

Today

$87k - $198k/yr Full time Agentic Ai Ai Security Ai Software Development

Apply Now

Job Description

Booz Allen Hamilton seeks an AI Software Engineer to build and implement end-to-end AI and machine learning solutions that help modernize client systems in production environments.

Responsibilities

Create and implement end-to-end AI and machine learning solutions that modernize client systems
Deliver production-grade development while considering the broader ecosystem and operating environment
Account for future functionality and enhancements when designing solutions

Requirements

4+ years writing production-grade applications using a programming language such as Python, Javascript, Rust, or Go
2+ years experience with a frontend framework such as React or Angular
1+ years experience building or maintaining RESTful APIs or software interfaces
1+ years designing, configuring, and implementing software systems in production environments
Experience with CI/CD tools, including GitLab CI or Jenkins, and source control systems including Git
Experience working with Agentic AI solutions
Experience with Linux, networking, and containerization including Docker or Podman
Knowledge of federal cybersecurity best practices and standards, secure coding, and compliance requirements
Ability to obtain a Secret clearance
Bachelor’s degree in a CS or Engineering field and 4+ years of software engineering experience, or 6+ years of software engineering experience in lieu of a degree

Technologies

Python, Javascript, Rust, Go
React, Angular
RESTful APIs
GitLab CI, Jenkins, Git
Agentic AI
Linux, Docker, Podman
AWS, LocalStack
ESXi, SIEMs, firewalls, endpoint protection systems
Kubernetes, hypervisors
Secret clearance, TS/SCI clearance
Security+, Linux+, Kubernetes CKAD
AWS Solutions Architect

Benefits

Health, life, disability, financial, and retirement benefits
Paid leave
Professional development
Tuition assistance
Work-life programs
Dependent care
Recognition awards program acknowledging employees for exceptional performance and superior demonstration of values
Full-time and part-time employees working at least 20 hours a week on a regular basis may participate in Booz Allen benefit programs
Individuals not meeting thresholds are eligible for select offerings, not inclusive of health benefits

Nice If You Have

Experience with AWS services and emulation environments, including LocalStack
Experience with secure on-prem deployments leveraging hypervisors, including ESXi
Experience integrating with SIEMs, firewalls, or endpoint protection systems
Knowledge of orchestration tools such as Kubernetes, including on-prem or air-gapped environments
TS/SCI clearance
Certifications including Security+, Linux+, Kubernetes CKAD, AWS Solutions Architect, or a related certification

Clearance

Selected applicants will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.

Identity Verification

Hiring process includes identity verification using advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud
Applicants are expected to be on camera during interviews and assessments
Booz Allen may take a picture to verify identity and prevent fraud

Candidate AI Usage Policy

AI tools are part of daily work at Booz Allen and the company emphasizes responsible and ethical use
Using AI or other tools to assist with interview responses is prohibited unless permission is explicitly provided

Work Model

Onsite: Work will primarily be performed full-time at a customer facility, with collaboration with colleagues and customers as required

Location & Compensation

Location: Arlington, VA (onsite)
Salary: USD 86,800 - 198,000 per year

Commitment to Non-Discrimination

All qualified applicants receive consideration for employment without regard to disability, protected veteran status, or any other status protected by applicable federal, state, local, or international law.

View full job page →

Today

Cybersecurity Engineer – Cyber Defense Operations (ISSE)

Data Systems Analysts, Inc. Fort Meade, MD

Fort Meade, MD

Today

$140k - $170k/yr Full time Cybersecurity Operations Cybersecurity Tools Identity and Access Management

Apply Now

Job Description

Data Systems Analysts, Inc. is seeking a TS/SCI-cleared Cybersecurity Engineer to support cyber defense operations in a secure DoD environment at Fort Meade, MD. In this role, you will help strengthen enterprise security posture by supporting RMF activities, technical vulnerability assessment and remediation, and continuous authorization sustainment.

This position combines hands-on security engineering with technical advisory support across systems, applications, networks, and enterprise environments, including guidance for modernization and emerging security initiatives.

Responsibilities

Act as a hands-on cybersecurity technical authority, providing guidance and resolving complex security challenges across DoD systems, applications, networks, and enterprise environments.
Advise architects, system owners, engineers, administrators, and cybersecurity personnel on security requirements, system design, technical risk, and secure implementation.
Assess system architectures, configurations, technologies, and proposed solutions to identify vulnerabilities, security risks, and mitigation strategies.
Conduct vulnerability assessment and remediation using ACAS, Tenable/Nessus, SIEM, and other cybersecurity tools.
Apply, validate, and troubleshoot DISA STIGs, SCAP benchmarks, security controls, configuration baselines, and system-hardening requirements.
Support incident response, Continuous Monitoring (ConMon), vulnerability management, and ongoing assessment of system security posture.
Implement and validate cybersecurity controls across operating systems, applications, networks, endpoints, and enterprise infrastructure.
Identify opportunities to automate security assessments, vulnerability management, configuration validation, control testing, and other cybersecurity processes.
Evaluate emerging technologies, modernization efforts, and architectural changes to determine cybersecurity requirements, technical risks, and secure implementation approaches.
Provide cybersecurity engineering guidance for initiatives including Zero Trust, ICAM, cloud, DevSecOps, data-centric security, software supply chain security, security automation, and Artificial Intelligence (AI).
Support RMF, ATO, and continuous authorization, including SSPs, POA&Ms, eMASS, security controls, risk assessments, and technical evidence.
Communicate complex cybersecurity risks, technical findings, remediation strategies, and security posture to technical teams, system owners, mission stakeholders, and leadership.

Requirements

BS degree in Engineering, Computer Science, or related field (experience may be substituted for degree).
TS/SCI Clearance.
DoD 8140 (8570) IAT Level II Certification.
Minimum 4 years of hands-on cybersecurity engineering experience, preferably supporting DoD or Intelligence Community environments.
Strong knowledge of cybersecurity engineering principles and DoD cybersecurity requirements, with the ability to translate requirements into practical technical solutions.
Experience assessing system architectures and providing cybersecurity guidance to architects, engineers, administrators, and system owners.
Hands-on experience with vulnerability management, system hardening, DISA STIGs, SCAP, ACAS, Tenable/Nessus, and remediation of technical findings.
Strong working knowledge of Windows and Linux systems, networking, authentication, access controls, and enterprise security technologies.
Experience implementing, assessing, and validating security controls across systems, applications, networks, and enterprise environments.
Practical knowledge of RMF, Continuous Monitoring, NIST SP 800-53, eMASS, POA&Ms, SSPs, and ATO processes.
Ability to independently analyze complex cybersecurity problems, develop effective technical solutions, and clearly communicate risks and recommendations to technical teams and leadership.

Technologies

Microsoft Copilot, ACAS, Tenable/Nessus, SIEM
DISA STIGs, SCAP, SCAP benchmarks
Zero Trust, ICAM, DevSecOps, Artificial Intelligence (AI)
RMF, ATO, Continuous Monitoring (ConMon)
NIST SP 800-53, eMASS, POA&Ms, SSPs
Windows, Linux, PowerShell, Python, Ansible, APIs

Preferred Experience / Qualifications

CISSP, CGRC/CAP, CISM, CASP+/SecurityX, CySA+, CEH, or other relevant advanced cybersecurity certification.
Experience with SIEM, endpoint security, IDS/IPS, firewalls, incident response, or defensive cyber operations.
Experience with Zero Trust, ICAM, cloud security, DevSecOps, data-centric security, continuous authorization, or software supply chain security.
Experience evaluating AI/ML technologies and providing cybersecurity guidance for secure integration into enterprise environments.
Experience with PowerShell, Python, Ansible, APIs, or other scripting and security automation technologies.
Experience integrating cybersecurity requirements into system architecture, modernization, emerging technologies, and technology refresh efforts.

Onsite Location

Onsite at the National Ground Intelligence Center (NGIC) in Charlottesville, VA.
Candidates willing to relocate to the Charlottesville area are encouraged to apply.

Security Clearance / Eligibility

Many DSA positions require the ability to obtain a security clearance.
Security clearances may only be granted to U.S. citizens.
Applicants who accept a conditional offer may be subject to government security investigation(s) and must meet eligibility requirements for access to classified information.

Equal Opportunity Employer

DSA is an Equal Opportunity Employer and committed to maintaining a workplace free from unlawful discrimination.
All qualified applicants will receive consideration without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status.
DSA requires background checks where permitted by law.
DSA is an E-Verify Employer.

Compensation: USD 140,000 - 170,000 per year.

View full job page →

Today

Data & AI Engineer, Advanced

Naval Nuclear Laboratory West Mifflin, PA

West Mifflin, PA

Today

$96k - $150k/yr Full time Analytics Artificial Intelligence Automation Developer

Apply Now

Job Description

Naval Nuclear Laboratory is seeking a Data & AI Engineer to help modernize the data foundations that support the Naval Reactors Program. The role focuses on building secure, scalable data infrastructure and analytics capabilities while partnering across Financial Services, IT, Digital Transformation, and other mission-critical teams.

Key Responsibilities

Design, build, and maintain high-quality data pipelines and workflows that integrate data from multiple systems.
Develop and support data warehouses and data lakes to provide secure, efficient access to structured and unstructured data.
Implement ETL/ELT processes that produce clean, consistent, and well-governed datasets.
Collaborate with analysts, software developers, and business partners to create data models supporting reporting and advanced analytics.
Enhance data quality, performance, and reliability through monitoring, validation, and optimization.
Ensure adherence to data governance, security, and compliance requirements.
Evaluate new tools, cloud technologies, and automation capabilities to improve scalability and efficiency.

Required Qualifications

Bachelor’s degree from an accredited college or university in a related engineering or science field, plus a minimum of 4 years of relevant experience.
Master’s degree from an accredited college or university in a related engineering or science field, plus a minimum of 2 years of relevant experience.
Doctorate degree from an accredited college or university in a related engineering or science field.
Alternatively, current employment at the Company as an Advanced Reactor Training Engineer, Refueling Engineer, or Field (RPCO) Engineer.

Preferred Skills

Degrees in Computer Science, Data Science, or Computer Engineering are preferred, but not required.
Experience integrating and transforming enterprise data from ERP, TMS, or EPM systems into analytical platforms using ETL/ELT tools (Azure Data Factory, Synapse Pipelines, SSIS, Notebooks) and data engineering languages (Python, SQL).
Proficiency in designing and optimizing modern data architectures, including data lakehouse or cloud patterns, dimensional modeling (star/snowflake schemas), and Power BI analytics (datasets, dashboards, DAX, M).
Familiarity with the Software Development Lifecycle and DevOps practices (Git-based source control, CI/CD pipelines, automated testing), plus exposure to emerging AI/ML platforms (Azure ML, Microsoft Copilot, Azure Open AI) with attention to data privacy and responsible AI.
Strong collaboration abilities, effective communication, and analytical and problem-solving skills.

Technologies

Azure Data Factory
Synapse Pipelines
SSIS
Notebooks
Python
SQL
Power BI
DAX
M
Git-based source control
CI/CD pipelines
Azure ML
Microsoft Copilot
Azure Open AI

Location

West Mifflin, PA (onsite)

Compensation

USD 95,700 - 149,600 per year

Salary information is provided as a general guideline only. Annual salary is based upon candidate experience and qualifications, as well as market and business considerations.

Benefits

Health, Dental, Vision & Voluntary Benefits
Disability, Life & Accident Insurance
401(k) Savings program & Capital Accumulation Plan
Personal & Medical Time Off
Paid Parental Leave
Flexible Work Schedules
Tuition Assistance for Eligible Employees
Student Debt Benefit Personal Time Off Sell Program
Employee Assistance Program (EAP)
Wellness Program

Visit online to view all NNL benefits.

Eligibility and Workplace Information

All candidates must be U.S. citizens.
Selected applicants will be subject to a Federal background investigation and must meet eligibility requirements for access to classified matter.
FMP is a government contractor and maintains a drug free workplace and workforce.
All candidates must be able to pass a drug test in compliance with FMP company policy and 10 CFR 707.
Marijuana is a Federal Schedule I controlled substance and illegal under Federal Law. FMP is required to test for marijuana.
Fluor Marine Propulsion, LLC is an Equal Opportunity Employer, including disability and veterans.

View full job page →

Today

Information Security Engineer

Verticore Technolgy Milwaukee, WI

Milwaukee, WI

Today

$120k - $125k/yr Full time Cloud Platforms Cybersecurity Operations Cybersecurity Tools

Apply Now

Job Description

Verticore Technolgy is hiring an Information Security Engineer onsite in Milwaukee to strengthen business system protections through risk investigation, security control improvements, and incident and vulnerability support.

Responsibilities

Evaluate system, application, and network configurations to spot security weaknesses and propose corrective actions
Review security alerts and investigate unusual account activity or possible incidents using available logs and monitoring tools
Implement and maintain security controls for endpoints, user accounts, networks, and business applications
Review access permissions to support least-privilege access aligned to user responsibilities
Assess identified vulnerabilities, determine potential impact, and coordinate remediation with the appropriate technical teams
Support incident response by collecting evidence, documenting findings, and assisting containment and recovery efforts
Monitor security events and help improve detection of suspicious activity
Review proposed infrastructure changes and software deployments for security concerns prior to rollout
Maintain security procedures, incident records, vulnerability reports, and technical documentation
Support endpoint protection, security monitoring, and vulnerability management activities
Partner with IT and development teams to resolve security issues while accounting for operational requirements
Communicate security risks, investigation results, and outstanding remediation work to relevant stakeholders

Requirements

Experience in information security, cybersecurity engineering, security operations, or a related technical field
Strong understanding of security principles, access controls, and risk assessment
Knowledge of networking fundamentals, including TCP/IP, DNS, firewalls, and secure communications
Familiarity with Windows or Linux environments and common system administration tasks
Ability to review logs, investigate alerts, and troubleshoot technical problems
Understanding of identity and access management, authentication, and permission controls
Familiarity with vulnerability assessment and remediation processes
Analytical skills and attention to detail when working with security information
Clear written and verbal communication skills
Responsible handling of confidential information and adherence to security procedures

Technologies

TCP/IP
DNS
Firewalls
Windows
Linux
SIEM platforms
Endpoint detection and response tools
Vulnerability scanners
Cloud security services

Benefits

401(k)
Dental insurance
Health insurance
Paid time off
Professional development assistance
Vision insurance

Working Schedule

Days: Monday to Friday
Hours: 9:00 AM–5:00 PM
Work location: In person
Location: Milwaukee, Wisconsin

Pay

$120,000.00 - $125,000.00 per year

View full job page →

Today

Senior Information Security Engineer

Saab DeWitt, NY

DeWitt, NY

Today

$102k - $132k/yr Full time Senior Endpoint Security Identity and Access Management

Apply Now

Job Description

Saab is seeking a Senior Information Security Engineer to support the delivery of security solutions for customer environments. This onsite role in De Witt, NY centers on implementing and securing Windows-based infrastructure, with a focus on Active Directory, Group Policy, endpoint protection, RBAC, and system hardening through assessments and remediation.

Position Overview

This role supports Windows infrastructure security solution delivery, including the design, implementation, and ongoing management of security configurations. You will work across customer environments to ensure controls are documented, deployed, and aligned with security policies.

Responsibilities

Design, implement, and manage Group Policy Objects (GPOs) to enforce security configurations and organizational standards within customer environments.
Configure, administer, and harden Windows Server and Windows workstation systems as part of security solution deployments.
Implement and maintain Active Directory security configurations, including user and group management, OU structures, and policy enforcement.
Design and implement role-based access control (RBAC) and least-privilege access models.
Deploy, configure, and manage endpoint protection and antivirus solutions.
Apply system hardening practices aligned with industry security frameworks and best practices.
Perform security assessments of Windows environments and implement remediation actions.
Assist in creating secure configurations, patch processes, and compliance with security policies.
Document system configurations, security controls, and deployment procedures for customer environments.
Provide technical guidance and knowledge transfer to customer stakeholders when appropriate.

Requirements

Bachelor’s degree in Information Security, Computer Science, Information Technology, or related field (or equivalent experience).
8+ years of experience administering and securing Microsoft Windows environments.
Strong hands-on experience with Active Directory administration.
Proven experience creating and managing Group Policy Objects (GPOs).
Experience implementing role-based access control and identity management practices.
Hands-on experience deploying or managing endpoint protection / antivirus platforms.
Solid understanding of Windows security architecture and system hardening techniques.
Experience performing security assessments and remediation.

Technologies

Microsoft Windows
Active Directory
Group Policy Objects (GPOs) and Group Policy management
Role-based access control (RBAC)
Endpoint protection, antivirus
Microsoft Hyper-V Virtualization
Splunk
PDQ
RSA Authentication Manager
PowerShell
Ansible
SIEM
NIST
CIS Benchmarks
ISO 27001
JIRA
CompTIA Security+
CISSP
GIAC

Travel

Travel up to 30% may be required.

Desired Tool Experience

Experience with Microsoft Hyper-V Virtualization, Splunk, PDQ, and RSA Authentication Manager is highly desirable.

Preferred Qualifications

Experience with Ansible or PowerShell scripting and automation.
Familiarity with security monitoring tools and SIEM platforms.
Knowledge of security frameworks such as NIST, CIS Benchmarks, or ISO 27001.
Experience supporting enterprise or multi-tenant environments.
Experience with protecting data at rest.
Experience with stakeholder management.
Current DoD clearance preferred.
Experience with JIRA is preferred.
Relevant certifications such as CompTIA Security+, CISSP, Microsoft security or identity certifications, and GIAC certifications.

Benefits

Medical, vision, and dental insurance for employees and dependents
Generous paid time off, including 8 designated holidays
401(k) with employer contributions
Tuition assistance and student loan assistance
Wellness and employee assistance resources
Employee stock purchase opportunities
Short-term and long-term disability coverage

Location and Salary

Location: De Witt, NY (onsite)
Compensation: USD 101,600 - 132,000 per year
Additional location reference: Syracuse

Citizenship and Security

Must be a U.S. citizen.
Applicants selected may be subject to a government security investigation and must meet eligibility requirements for access to classified information.

Drug-Free Workplace

Saab is a federal government contractor and adheres to policies and programs necessary for sustaining drug-free workplaces.
As a condition of employment, candidates will be required to pass a pre-employment drug screen.

View full job page →

Today

Cybersecurity Engineer II

Cox Automotive Long Island, NY

Long Island, NY

Today

$89k - $134k/yr Full time Cloud Platforms Cloud Security Cybersecurity Operations

Apply Now

Job Description

Cox Automotive is looking for a Customer Security Analyst II to help identify and defend against existing and emerging threats affecting enterprise systems and customers. This onsite role in Long Island, NY focuses on reducing customer risk and strengthening the customer security program using advanced security capabilities and AI-driven tools, while partnering closely with business operations and product teams.

What you’ll do

Investigate and respond to security threats including account takeover, credential abuse, phishing, and fraud, including support for fraud investigations with forensic guidance.
Provide after-hours support as needed to support response activities.
Collaborate with business, Product, and Cybersecurity teams to reduce customer impact and improve threat response effectiveness.
Help implement technologies and controls to prevent and identify malicious behavior and fraud impacting customers.
Operate and leverage security tools such as SIEM and log analytics, SOAR, threat intelligence, EDR, email protection, cloud security, IDS/IPS, and Zero Trust technologies.
Perform threat analysis using industry-standard frameworks including MITRE ATT&CK, kill chain, and the diamond model.
Investigate account compromise by analyzing authentication, API, and application logs to reconstruct attacker activity and identify other affected customers.
Use AI-based tools to accelerate investigation, triage, and problem solving.
Use AI and automation to streamline SOC processes, improve threat detection, and refine detection logic and fraud signals.
Convert threat findings into detections and protections to enhance the customer security program.
Assist with security plans, policies, and customer protections, including proposing and reviewing documentation.
Maintain metrics, playbooks, and documentation for the customer security program, including fraud trends.
Produce threat intelligence and fraud reports for security, business, and product stakeholders.
Stay current on emerging threats, fraud schemes, and AI-driven attack techniques targeting customers, acting quickly to keep customers and the enterprise protected.
Assist with investigation and resolution of security events and incidents.

What you bring

Bachelor’s degree in a related discipline and 2+ years of experience in a related field. Alternate combinations may include a master’s degree with up to 2 years experience, or 14 years of related experience.
Hands-on experience in threat intelligence and incident response.
Hands-on experience with security technologies such as firewalls, VPN, IDS/IPS, SASE, secure web proxy, and EDR/XDR along with SIEM and SOAR.
Strong digital forensics and analytical problem-solving skills.
Working knowledge of major cloud platforms such as AWS, Azure, and GCP, including architecture and native security services.
Proficiency with query and scripting languages such as SPL, KQL, Python, and PowerShell for threat hunting, analysis, and automation.

Compensation

Base salary range: $89,400 to $134,000 per year.

The base salary may vary within the anticipated range based on factors such as the ultimate location of the position and the selected candidate’s knowledge, skills, and abilities. The position may also be eligible for additional compensation that may include an incentive program.

Benefits

Flexibility to take as much vacation with pay as consistent with duties, company needs, and obligations
Seven paid holidays throughout the calendar year
Up to 160 hours of paid wellness annually for your own wellness or that of family members
Bereavement leave (additional paid time off)
Time off to vote
Jury duty leave
Volunteer time off
Military leave
Parental leave

View full job page →

Today

Cybersecurity Engineer

Korra Technology Group San Diego, CA

San Diego, CA

Today

$115k+/yr Full time Cloud Platforms Cybersecurity Tools Endpoint Security

Apply Now

Job Description

Korra Technology Group is seeking a hands-on Cybersecurity Engineer to help safeguard systems, networks, and sensitive information in a San Diego, CA onsite environment. In this role, you will build and improve security protections through monitoring, vulnerability management, incident response, and risk-reduction work across IT, infrastructure, and development teams.

Key Responsibilities

Implement and maintain security controls across networks, endpoints, servers, cloud environments, and business applications.
Monitor SIEM alerts and system logs to detect suspicious activity, potential intrusions, and unusual access patterns.
Investigate security incidents, determine scope, preserve evidence, and coordinate containment, remediation, recovery, and root-cause analysis.
Perform vulnerability assessments, prioritize findings by risk, and partner with system owners to remediate weaknesses.
Configure and maintain firewalls, IDS/IPS, endpoint protection, email security, and other defensive technologies.
Review access permissions, authentication methods, SSO, and privileged accounts to enforce least-privilege access.
Review cloud platforms for permissions, configurations, network rules, logging, and encryption, and support security testing and remediation.
Collaborate with development teams on application security, secure coding, dependency management, and security checks in CI/CD pipelines.
Support audits and compliance activities, and maintain incident playbooks, procedures, and reports on vulnerabilities and remediation progress.
Contribute to security awareness efforts, including guidance on phishing, credential protection, and safe handling of data.

Requirements

Professional experience in cybersecurity, information security, security operations, or a related IT security role.
Understanding of network security, operating systems, access controls, authentication, and common attack methods.
Experience with security monitoring, log analysis, vulnerability assessment, or incident investigation.
Familiarity with security tools such as SIEM platforms (e.g., Splunk, Sentinel), EDR (e.g., CrowdStrike), firewalls, or vulnerability scanners (e.g., Nessus, Qualys, Tenable).
Knowledge of least privilege, defense in depth, encryption, and secure configuration.
Ability to interpret security findings and communicate risks and remediation steps clearly to both technical and non-technical teams.

Technologies

SIEM platforms (Splunk, Sentinel)
EDR (CrowdStrike)
Firewalls, IDS/IPS
Vulnerability scanners (Nessus, Qualys, Tenable)
SSO, CI/CD pipelines
Python, PowerShell, Bash
AWS, Microsoft Azure, Google Cloud

Benefits

Health, dental, and vision insurance
401(k) with company match
Paid time off
Paid holidays
Health savings account
Life insurance
Parental leave
Professional development assistance
Referral program
401(k)
401(k) matching
Dental insurance
Vision insurance

Preferred Qualifications

Cloud security experience on AWS, Microsoft Azure, or Google Cloud.
Scripting in Python, PowerShell, or Bash to automate security tasks.
Knowledge of NIST, CIS Controls, ISO 27001, SOC 2, or HIPAA.
Certifications such as CompTIA Security+, CySA+, CISSP, CEH, or a cloud security certification.
Experience with incident response exercises, penetration test remediation, threat modeling, or security audits.
A bachelor’s degree in Cybersecurity, Computer Science, IT, or a related field, or equivalent practical experience.