InfoSec

InfoSec Engineer Jobs

258 jobs found

Today

Cybersecurity Engineer

Progress Rail Albertville, AL

Albertville, AL

Today

$89k - $161k/yr Full time Control Systems Cyber Physical Systems Cybersecurity Tools

Apply Now

Job Description

Progress Rail is seeking a Cybersecurity Engineer to design, implement, and support OT cybersecurity controls across manufacturing, SCADA, and ICS environments. This role partners with operations, engineering, IT, and EHS to securely integrate OT with enterprise networks and to support incident response. The position is onsite in Albertville, Alabama.

Responsibilities

Develop and maintain cybersecurity controls for OT ecosystems across manufacturing facilities, connected products, and ICS settings, including PLCs, HMIs, SCADA, and supporting infrastructure.
Collaborate with factory operations, engineering, IT, and EHS to securely connect OT systems to enterprise IT networks while preserving availability, safety, and reliability requirements.
Perform OT risk assessments and vulnerability analyses, identify security gaps, devise compensating controls, and outline remediation strategies suitable for industrial environments.
Lead or support OT incident response activities, including investigation, containment, root cause analysis, and lessons learned in coordination with enterprise CSIRT teams.
Define and maintain OT security architectures, standards, and technical requirements aligned with corporate cybersecurity policies and industry frameworks (IEC 62443, NIST).
Assess OT security tools, technologies, and monitoring capabilities (such as passive network monitoring, asset discovery, and segmentation solutions) and recommend enhancements based on risk and operational impact.
Support secure system integration efforts, including factory expansions, modernization projects, and new equipment deployments, ensuring cybersecurity requirements are incorporated early in design.
Develop and maintain documentation related to OT cybersecurity controls, architectures, risk assessments, and procedures with strong operational discipline.
Provide consultation and technical guidance to manufacturing sites on OT cybersecurity best practices, risk management, and compliance expectations.
Engage in continuous improvement activities to mature OT cybersecurity governance, standards, and monitoring capabilities across the enterprise.

Requirements

Extensive experience operating in industrial, manufacturing, or OT environments, supporting cybersecurity for ICS, factory systems, or plant networks within a large enterprise.
Proficient knowledge of OT architectures, including PLCs, SCADA, DCS, HMIs, industrial networks, and common manufacturing protocols (Ethernet/IP, Modbus, Profinet).
Proven experience performing cybersecurity risk assessments, vulnerability analyses, and security design for OT systems while balancing operational availability and safety.
Experience supporting or leading OT security incident response and remediation efforts in coordination with IT security and plant operations teams.
Strong understanding of cybersecurity standards, policies, and procedures and how to apply them in industrial environments.
Experience with system and technology integration, enabling secure connectivity between OT systems, enterprise IT, and cloud or remote access solutions.
Ability to document technical solutions, risks, and recommendations clearly for both technical and non-technical stakeholders.
Primary locations: Ft Worth, TX; La Grange, IL; Winston Salem, NC; Muncie, IN; Albertville, AL; Independence, MO.
On-site requirement: 5 days on site is mandatory; regular presence in manufacturing and factory environments.
Physical requirements: ability to lift approximately 50 lbs; majority of work performed at a computer with some onsite equipment handling; ability to climb ladders or steps onto locomotives.
Vision and hearing: ability to operate a vehicle for travel and use a laptop/desktop computer.
Work environment: majority of time in an office; occasional outdoor work.
Emotional demands: ability to work under pressure with a team and speak up about security or safety issues.
Safety: ability to work safely around hardware and electrical equipment and to maneuver in production facilities with moving machinery.

Technologies

PLC, SCADA, DCS, HMIs
Ethernet/IP, Modbus, Profinet
IEC 62443, NIST

Benefits

Competitive Salary
401(k) plan with up to 6% company match (immediate vesting)
Medical, Dental, Vision, Life, and Disability Insurance
Supplemental Accident, Critical Care, and Hospital Insurance with HDHP and HSA options
Flexible Spending Accounts
Paid Vacation
Paid Holidays
PTO
Employee Assistance Plan
Education Assistance Program
Employee Recognition Programs
Site-specific Production and Incentive Plans
Site-specific Step and Skill Level Wage Adjustment Plans
Site Specific Relocation and Sign-on Bonus Programs

View full job page →

Today

Cybersecurity Engineer - AI Trainer

DataAnnotation Warren, NJ 🇺🇸 Remote

Warren, NJ

Today

$50 - $100/hr Contract Ai Enabled Security Ai Security Ai Trainer

Apply Now

Job Description

DataAnnotation offers a remote contract Cybersecurity Engineer - AI Trainer role that emphasizes flexibility, autonomy, and real-world impact. You will evaluate AI-generated cybersecurity content, design security-focused problems to train AI models, and contribute to shaping the next generation of AI systems used in cybersecurity. This position supports a flexible schedule and can fit alongside another role or serve as the core focus of your work.

Benefits

Fully remote: work from anywhere in the US, Canada, the UK, Ireland, Australia, and New Zealand.
Flexible schedule: choose projects and determine when you work, using your own computer from home.
Competitive pay: hourly pay ranging from $50 to $100 USD, with opportunities for higher bonus rates on select projects.
Impact: directly help shape AI technologies built for cybersecurity and threat defense.

Responsibilities

Assess AI-generated cybersecurity content for real-world accuracy, covering threat analysis, vulnerability assessments, and offensive security techniques.
Design and solve security-centric technical problems used to train AI systems.
Compose clear technical explanations and produce security-relevant code as part of training data.
Provide actionable feedback that informs the next generation of AI security models.

Requirements

2+ years of hands-on cybersecurity experience in roles such as penetration testing, red teaming, incident response, detection engineering, DFIR, malware analysis, threat intelligence, or related fields — including government or military cyber operations.
Some coding experience and comfort navigating and patching a codebase.
Fluency in English with strong writing skills.
A bachelor's degree is preferred.
Cybersecurity certifications are a plus (for example OSCP, CRTO, GREM, GCFA, CEH, and similar).

Note: Payment is issued via PayPal. This job is available only to candidates in the United States, Canada, the United Kingdom, Ireland, Australia, and New Zealand.

View full job page →

Today

Zero Trust Cyber Security Engineer

Leidos Remote 🌍 Remote

Remote

Today

$108k - $195k/yr Full time Cybersecurity Tools Identity and Access Management Information Security

Apply Now

Job Description

This remote position focuses on assessing, implementing, maintaining, and reporting on the VA's Zero Trust architecture to secure VA digital assets, in partnership with cross-functional teams. Compensation is USD 107,900 to 195,050 per year.

Responsibilities

Evaluate infrastructure alignment with the Department of Defense Zero Trust Maturity Model.
Generate a Monthly Maturity Scorecard report using customer-driven parameters.
Develop a dashboard to present the Monthly Maturity Scorecard data.
Calculate and report the percentage compliance for each Zero Trust Pillar capability group.
Assess each Zero Trust Pillar and identify targeted improvement opportunities.
Refresh dashboard data from the Monthly Maturity Scorecard and underlying sources.
Incorporate the assessment approach based on CISA and DoD Zero Trust Maturity Models.
Expand VA specific reference architecture target capabilities.
Document how VA should implement ZTA across conceptual, logical, and implementation layers within the target architecture.
Collaborate with ZTA Pillar Leads to determine the use of existing toolsets or the need for additional tools.
Assist in assembling ZTA Engineering and Implementation plans, outlining processes to roll out ZTA Use Cases across VA information systems, considering all system variations.
Update plans in response to new cases, deployments, stakeholder input, and system owner feedback.
Support the completion of 100 information system implementations within each period of performance.
Coordinate with the VA Office of Information Security to onboard systems into an Operations and Maintenance Risk Management Framework process.

Requirements

Bachelor's degree and at least 10 years of cybersecurity engineering experience, or 18+ years of established industry experience.
Eligibility to obtain and maintain a Public Trust clearance.
Experience in dashboard creation.
Proven track record as a Cyber Security Engineer with a focus on implementing and maintaining Zero Trust architectures.
Deep knowledge of Zero Trust principles, Identity and Access Management, micro-segmentation, network security, and encryption techniques.
Experience with security tools such as firewall solutions, intrusion detection/prevention systems, and SIEM tools.
Familiarity with industry regulations and compliance requirements, including NIST 800-207, OMB M-22-09, CISA Zero Trust Security Model, and Executive Order 14028.
Strong problem-solving skills and the ability to work in a fast-paced, collaborative environment.
Excellent communication skills to convey complex security concepts to both technical and non-technical stakeholders.

Technologies

Department of Defense Zero Trust Maturity Model
CISA/DoD Zero Trust Maturity Models
NIST 800-207
OMB M-22-09
CISA Zero Trust Security Model
Executive Order 14028 – Improving the Nation's Cybersecurity
eMASS
ServiceNow CAM
Software-defined perimeter (SDP) tools
Identity and Access Management (IAM) solutions
Micro-segmentation technologies
Firewall solutions
Intrusion Detection Systems (IDS)
Intrusion Prevention Systems (IPS)
SIEM tools
PIV (VA certificate)

Benefits

Competitive compensation
Health and Wellness programs
Income Protection
Paid Leave
Retirement

View full job page →

Today

Operational Technology Systems Engineer- Cybersecurity

Korn Ferry for SABIC (Saudi Aramco) SMB-RPO Mount Vernon, IN

Mount Vernon, IN

Today

Full time Cybersecurity Tools Data Security Incident Response

Apply Now

Job Description

This onsite role in Mount Vernon, Indiana supports SABIC's Operational Technology security program through Korn Ferry for SABIC SMB-RPO. The position focuses on maintaining cybersecurity controls, applying new policy requirements, and producing cybersecurity reporting and periodic reviews for SABIC's OT systems.

Responsibilities

Configure, maintain, monitor, and troubleshoot the control and automation system infrastructure, including cybersecurity controls, backups, networks, and routine system maintenance.
Ensure site compliance with applicable cyber security and systems infrastructure requirements and standards such as SABIC Engineering Standards (SES), SABIC Operating Management System (OMS), Manufacturing Standards, and cyber security policies.
Create and maintain technical documents related to cyber security and systems infrastructure, including architecture diagrams, network IP schemas, and procedures and guidelines.
Assess vulnerabilities in the site infrastructure, verify the effectiveness of available tools and countermeasures, and remediate detected weaknesses.
Investigate and report damages to data and system infrastructure resulting from cybersecurity incidents or other failures.
Maintain and validate the effectiveness of disaster recovery plans.

Requirements

BS degree in Computing Engineering, Computer Science, Control Systems, or another engineering discipline.
Preferred certifications in Cyber Security and Industrial Automation & Control Systems or equivalent experience.
Minimum of 3 years’ experience in Industrial Automation and Control Systems, computer networks, and communications.
Solid knowledge of operating systems, server maintenance, and database administration.
Applications must be submitted online; use the Apply Now option to submit your resume.
Must be 18 years or older.
Must be authorized to work in the United States for SABIC on a full-time basis.
Must have worked in your current position for at least 18 months and meet the prerequisites of the position you are applying for.
Manager notification is required prior to applying for internal opportunities.
Manufacturing employees in certification, journeyman, or similar programs require prior manager approval to post.
If you do not notify your manager before applying, consult with the applicable HR Partner.
Must have unrestricted authorization to work in the United States.

Work Availability

Regular, predictable attendance is essential. Applicants must be regularly available and willing to work Monday through Friday during the assigned hours of operation, as well as additional hours as the company determines are necessary to meet business needs.

View full job page →

Today

Lead AI Security Engineer

FM Johnston, RI

Johnston, RI

Today

$121k - $173k/yr Full time Agent Agentic Ai Ai Security

Apply Now

Job Description

The Lead AI Security Engineer is a senior technical role focused on enabling secure AI adoption across FM. The position defines security requirements and implements controls for AI capabilities, partnering with platform, engineering, and product teams to operationalize AI security.

Responsibilities

Lead the definition, design, and implementation of security capabilities that enable secure enterprise AI adoption across platforms such as Microsoft Copilot, Claude, and agentic AI frameworks.
Define security and risk requirements for enterprise AI platforms and agent-based systems.
Translate security, risk, and regulatory expectations, including emerging AI risks, into clear technical controls, guardrails, and implementation patterns aligned to relevant industry frameworks and enterprise requirements.
Partner with AI platform, engineering, and product teams to embed security requirements and controls into architecture, design, delivery, and operations.
Conduct security reviews and threat modeling for AI use cases, agent workflows, integrations, and platform capabilities to identify required controls before production deployment.
Define and guide implementation of controls related to AI agent identity, tool and API access, data usage constraints, auditability, and agent behavior in enterprise environments.
Lead evaluation, proof-of-concept, and selection of activities for native and third-party capabilities that support AI security, governance, and control objectives.
Assess integration requirements across enterprise identity, logging, monitoring, data protection, and security tooling.
Drive cross-functional implementation efforts involving security, platform, engineering, and product teams to operationalize AI security capabilities and supporting processes.
Maintain practical standards, guidance, and best practices for secure AI deployment, configuration, and ongoing platform administration.
Provide consultation and technical direction where security is not the system owner, ensuring effective security requirements are defined and applied.

Requirements

7+ years of experience in information technology or cybersecurity, including at least five years in security engineering or a related technical area such as cloud security, identity and access management, data protection, application security, security operations, vulnerability management, incident response, or platform security.
Hands-on experience designing and implementing security controls in modern environments, including cloud platforms, APIs, identity systems, data protection, and monitoring.
Experience defining security requirements, standards, guardrails, or control frameworks in complex enterprise environments.
Practical experience or strong working knowledge of AI or LLM-based systems, including their behavior, risks, and security implications.
Experience partnering with engineering and platform teams to integrate security into architecture, design, delivery pipelines, and operations.
Demonstrated ability to evaluate technologies and guide technical decision-making.
Experience operating in complex, cross-functional environments and driving initiatives from concept through implementation.
Familiarity with Azure-based platforms and services, including Azure AI Foundry or related capabilities, preferred.
Exposure to enterprise AI platforms such as Microsoft Copilot, Claude, or similar platforms, preferred.
Strong technical knowledge of cybersecurity principles, including identity and access management, data protection, monitoring, secure architecture design, and security operations.
Strong understanding of AI and LLM-related risks, including data exposure, prompt manipulation, unsafe tool use, misuse of agent capabilities, and auditability challenges.
Ability to develop security and risk requirements from ambiguous or emerging technology risks.
Ability to translate security requirements into practical engineering solutions, configurations, and implementation patterns.
Familiarity with industry frameworks and guidance such as NIST Risk Management Framework, MITRE ATLAS, OWASP Top 10, and OWASP guidance for large language model applications.
Strong analytical, problem-solving, and communication skills; ability to work independently and collaboratively across teams.

Technologies

Microsoft Copilot
Claude
Azure AI Foundry

Benefits

Incentive plan
Medical, dental and vision insurance
Life and disability insurance
Well-being programs
401(k) and pension plan
Career development opportunities
Tuition reimbursement
Flexible work
Time off (vacation and sick time)

Schedule & Location

This is an onsite position based at our corporate headquarters in Johnston, RI, with the flexibility to work from home two days per week, depending on business needs.

Relocation

Relocation is not offered for this position

Education and Certifications

Bachelor’s degree in information security, Computer Science, Information Technology, or related field (Equivalent experience may be considered)
Relevant certifications, such as CISSP, CISM, Security+, GIAC, or cloud security certifications, preferred

View full job page →

Today

Senior System Security Engineer (SSE)

General Dynamics Mission Systems, Inc Boise, ID

Boise, ID

Today

$142k - $150k/yr Full time Senior Fpga Security Information Security

Apply Now

Job Description

General Dynamics Mission Systems is seeking a Senior System Security Engineer to safeguard subsystems and components used in U.S. weapon systems. This on site role in Boise, Idaho focuses on vulnerability analysis and countermeasure design across hardware and software, with DoD clearance requirements shaping project work. The position offers a competitive salary and a path for long term advancement within a mission focused engineering environment.

Responsibilities

Evaluate proposed or existing system architectures for reverse engineering and cyber exploitation vulnerabilities
Document vulnerabilities in white papers and attack countermeasure analysis
Architect system level security design and requirements to address the vulnerabilities enumerated within U.S. weapon systems
Prepare for, attend, and brief and customer and government design review meetings
Participate in all aspects of the product design life cycle including system architecture, design, development, and verification
Distill complex technical concepts into clear and concise writing to support proposals for new opportunities
Contribute to new product ideas and proposals
Participate in industry working groups and provide security recommendations to relevant government and commercial standards, policies, and procedures

Requirements

Education: Bachelor's degree in Systems Engineering, or a related Science, Engineering or Mathematics field, plus a minimum of 8 years of relevant experience; or Master's degree, plus a minimum of 6 years of relevant experience
Security: Ability to obtain a Department of Defense Secret security clearance is required at time of hire. Applicants selected will be subject to a U.S. Government security investigation and must meet eligibility requirements for access to classified information. U.S. citizenship is required
Work location: Onsite in Boise, ID

Technologies

FPGA
JTAG

Benefits

An exciting career path with opportunities for continuous learning and development
Research oriented work, alongside award winning teams developing practical solutions for our nation’s security
Flexible schedules with every other Friday off work, if desired (9/80 schedule)
Competitive benefits, including 401k matching, flex time off, paid parental leave, healthcare benefits, health and wellness programs, employee resource and social groups, and more

What Sets You Apart

More than five (5) years of proven past performance in embedded systems security design; preference given to candidates who have experience with DoD embedded systems security
Advanced knowledge of crypto algorithms, when and how to use each algorithm, vulnerabilities of each algorithm and vulnerabilities inherent to an implementation of each algorithm
Advanced knowledge of attacks and vulnerabilities against hardware and software, as well as an understanding of balancing solutions with acceptable residual vulnerabilities
Advanced understanding of computer hardware and software architectures, including how a CPU works, how a FPGA works, how Operating Systems work and how user space application runtime environments work
Ability to clearly capture complex technical concepts in writing for both technical and general audiences
Strong analytical and problem-solving skills
Highly creative with experience interfacing directly with external customers negotiate and meet challenging customer requirements with win-win solutions
Commitment to ongoing professional development for yourself and others
Identifies opportunities to apply AI for continuous improvement and innovation

Our Commitment to You

An exciting career path with opportunities for continuous learning and development
Research oriented work, alongside award winning teams developing practical solutions for our nation’s security
Flexible schedules with every other Friday off work, if desired (9/80 schedule)
Competitive benefits, including 401k matching, flex time off, paid parental leave, healthcare benefits, health & wellness programs, employee resource and social groups, and more
See more at gdmissionsystems.com/careers/why-work-for-us/benefits

Workplace Options

This position is expected to be in the Salt Lake City, Utah or Boise, Idaho office.

Salary Note

This salary estimate reflects the typical range for this role based on experience and location. Combined Salary Range: USD 142,407.00 - USD 150,195.00 per year.

View full job page →

Today

Staff Product Security Engineer, Reviews

Okta San Francisco, CA

San Francisco, CA

Today

$180k - $248k/yr Full time Ai Security Api Security Application Security

Apply Now

Job Description

The Staff Product Security Engineer will conduct security reviews, guide secure development practices, and handle externally reported vulnerabilities across Okta's products, including code reviews, penetration testing, and architectural security assessments.

Responsibilities

Conduct security reviews including design reviews, threat modeling, and penetration testing for new features and major changes.
Perform manual secure code reviews across multiple programming languages.
Identify and mitigate security vulnerabilities, providing clear guidance to engineering teams.
Lead product security incidents, assess risks, and drive remediation efforts.
Develop security tools and automation to improve vulnerability detection and assessment.
Mentor junior engineers and provide guidance to non-security staff on secure development practices.
Represent Okta externally through security research, conference talks, and publications.

Requirements

Expertise in identifying OWASP Top 10 and CWE Top 25 vulnerabilities through manual code review.
Strong experience in penetration testing and secure development practices.
Deep technical background in assessing Large Language Models and securing AI integrated software architectures.
Proficiency in multiple programming languages, including Java, Go, Python, and C/C++.
Deep understanding of authentication and authorization protocols (OIDC, SAML, OAuth).
Strong communication skills to explain risks and remediation to developers and leadership.
Ability to automate security testing using large language models and scripting (Python, Bash, etc.).
Experience leading security incidents and risk assessments.