Security Information And Event Management

Security Information And Event Management Engineer Jobs

146 jobs found

Today

Senior Security Engineer - Strategic Risk

Apple Seattle, WA

Seattle, WA

Today

$175k - $309k/yr Full time Senior Application Security Cyber Security

Apply Now

Job Description

Drive security strategy and execution for major Apple Services engineering initiatives with an onsite role in Seattle.

Responsibilities

Serve as the primary security point of contact for multiple large engineering efforts
Partner with engineering teams across the full development lifecycle
Perform security reviews and post-incident reviews, and translate findings into durable improvements
Develop threat models and use engagement insights to create scalable security methodologies
Define, automate, and advocate for application-level and platform-wide security improvements focused on risks to customer accounts and data
Maintain a hands-on role to ensure security programs are reviewed, tuned, implemented, and tested appropriately

Requirements

7+ years conducting security reviews, incident response, threat modeling, or security engineering
Proven ability to design, document, and implement new security processes
Working understanding of cloud-native architecture and managed platform services (compute, storage, networking, databases)
Expertise in threat modeling, operational threat intelligence, and common attack vectors and frameworks
Understanding of applied cryptography, access control, modern authentication frameworks, and other security mechanisms
Experience with enterprise log collection and analysis platforms (e.g., Splunk, OSQuery)

Preferred Qualifications

Experience with threat hunting, insider risk, and/or investigations
Experience working with data engineers to define metrics and interpret results from detection and risk models
Experience applying and experimenting with AI/ML to address security use cases

Technologies

Splunk
OSQuery

Benefits

Comprehensive medical and dental coverage
Retirement benefits
Discounted products and free services
Reimbursement for certain educational expenses, including tuition
Opportunity to become an Apple shareholder through Apple’s discretionary employee stock programs
Discretionary restricted stock unit awards, subject to eligibility requirements and plan or program terms
Ability to purchase Apple stock at a discount if voluntarily participating in the Apple Employee Stock Purchase Plan
May be eligible for discretionary bonuses or commission payments, and relocation (role dependent)

Job Details

Location: Seattle, WA (onsite)
Salary: USD 175,000 - 308,500 per year
Experience: 7+ years

View full job page →

1d ago

Cybersecurity Engineer RMF Specialist

SAIC Alexandria, VA

Alexandria, VA

1d ago

$140k - $180k/yr Full time Authorization To Operate Cloud Platforms Cloud Security

Apply Now

Job Description

SAIC is hiring an experienced Cybersecurity Engineer RMF Specialist to support cybersecurity compliance work for DoD and Federal systems. This onsite role is based at the Mark Center in Alexandria, Virginia, and focuses on RMF execution, ATO package development, security monitoring, and continuous monitoring activities.

The position supports authorization-related deliverables, including key documentation and evidence, while partnering with technical teams to integrate security into system design and ongoing operations.

Role Summary

Lead and support Risk Management Framework (RMF) activities across all steps, from categorization through continuous monitoring.
Develop, update, and maintain ATO packages, including System Security Plans (SSPs), Security Assessment Reports (SARs), and related artifacts.
Create, track, and manage Plan of Action and Milestones (POA&Ms) to support timely remediation of findings.
Configure, interpret, and monitor security alerts and dashboards using Azure security tools such as Microsoft Defender for Cloud and Sentinel, along with other monitoring solutions including SIEM, vulnerability scanners, and endpoint protection.
Analyze security events and vulnerabilities, provide recommendations, and coordinate mitigation with system owners and engineers.
Apply DoD/Federal cybersecurity policies, standards, and guidelines to operational environments and projects.
Support continuous monitoring activities and periodic security assessments.
Collaborate with cross-functional teams including network, cloud, applications, and operations to integrate security into both design and day-to-day operations.
Document processes, maintain evidence, and support internal and external audits and inspections.

Required Qualifications

Minimum 9 years of hands-on cybersecurity experience.
Strong practical knowledge of DoD/Federal cybersecurity policy and guidance.
Strong practical knowledge of RMF processes, documentation, and control implementation.
Strong practical knowledge of ATO package development and sustainment.
Strong practical knowledge of POA&M creation, management, and closure.
Experience with security monitoring tools including Azure security tools such as Microsoft Defender for Cloud and Sentinel (or similar).
Experience with security monitoring tools including at least one enterprise SIEM and at least one vulnerability management tool.
Understanding of cloud architectures (e.g., Azure, AWS, or similar) and willingness to deepen cloud security expertise.
Strong written and verbal communication skills, including the ability to clearly document security posture and present findings to stakeholders.
Ability and willingness to work onsite at the Mark Center in Alexandria, VA, Monday–Friday.
Active DoD Secret security clearance.

Technologies

Risk Management Framework (RMF)
ATO
System Security Plans (SSPs)
Security Assessment Reports (SARs)
Plan of Action and Milestones (POA&Ms)
Microsoft Defender for Cloud
Sentinel
SIEM
Vulnerability scanners
Endpoint protection
Azure
AWS

Job Details

Location: Alexandria, VA, US (onsite)
Schedule: Full-Time
Shift: Day Job
Travel: Yes - 10% of the time
Schedule Details: Monday–Friday onsite at the Mark Center
Clearance: Active DoD Secret security clearance
Salary Range: USD 140,001 - 180,000 per yearly
Minimum Clearance Required: Secret
Potential for Remote Work: ORA_ON_SITE
Date Posted: 2026-11-02
Category: Cyber
Subcategory: Cyber Engineer

View full job page →

1d ago

Cybersecurity Engineer

Piedmont HealthCare PA Statesville, NC

Statesville, NC

1d ago

Full time Cyber Security Cybersecurity Operations Cybersecurity Tools

Apply Now

Job Description

Piedmont HealthCare PA is focused on building a strategic, comprehensive enterprise cyber security program that protects sensitive information. This onsite role in Statesville, NC supports an environment where privacy and security of patient data matter, aligned with HIPAA expectations. The Cybersecurity Engineer helps strengthen incident response, monitoring, threat assessment, and cyber system design across the organization.

Responsibilities

Understand and support core security technology disciplines including endpoint security, data loss protection, firewalls, intrusion detection and intrusion prevention, application and system scanning tools, and log collection and monitoring.
Investigate and respond to all security alerts generated by configured alert systems.
Support multiple systems and applications of medium to high complexity with multiple concurrent users, maintaining control, integrity, security, and accessibility.
Participate in short- and long-term planning with stakeholders and IT groups, including attending business requirement meetings as needed.
Integrate security solutions with other applications and platforms based on engineering requirements.
Develop new alerts and monitoring techniques aligned to engineering requirements.
Coordinate changes across multiple systems.
Forecast utilization patterns and identify modifications and upgrades.
Review security reports and perform periodic system reviews with users and vendors.
Coordinate problem resolution across functional areas and provide subject matter expertise for diagnosing and resolving issues.
Report security issues when appropriate and gather required information to support investigations.
Recommend improvements to security and participate in investigations as needed, while ensuring adherence to security requirements.
Assist in developing documentation for new cybersecurity solutions and maintain existing documentation.
May communicate, consult, and coordinate across multiple stakeholder groups.
Respond to and manage tickets assigned in the trouble ticketing/request system.
Other duties/responsibilities as assigned.

Required Qualifications

Bachelor’s degree in Computer Science, Information Technology, Computer Business Systems, or a Healthcare related field with a significant technical component.
Significant and relevant work experience and/or technical certification may substitute for education on a year-for-year basis.
5+ years of relevant experience deploying and/or administering cybersecurity solutions, preferably in a clinical setting and preferably in a large ambulatory physician practice.
Relevant technical certifications are preferred.
Strong knowledge and experience with multiple enterprise security solutions including SIEM, E-mail Gateways, Firewall, Multi-Factor authentication, IDS, and IPS.
Commitment to handling sensitive data responsibly, including corporate financial and business data and patient protected health information (PHI).
Working knowledge of HIPAA Privacy and Security Rules (HIPAA of 1996).
Exemplary alignment with all PHC policies related to privacy and cybersecurity, and a willingness to support other team members with best-practice guidance.
Excellent customer service skills, ability to work independently and as part of a team, and strong written and verbal communication.
Good project management skills and ability to build relationships and trust with internal customers.

Technologies

SIEM
E-mail Gateways
Firewall
Multi-Factor authentication
IDS
IPS

Work Location and Conditions

Location: Statesville, NC (onsite)
Work setting: Office setting, computer facility, and clinical offices
Travel: Local travel required
Exposure: Minimal exposure to communicable diseases is possible

Physical and Mental Demands

Standing and sitting for long periods while doing computer input and responding to phone questions
Ability to bend, stoop, twist, and work with computer equipment
Occasional stress when working with tense users and handling multiple tasks

Supervision received: Reports to the Cybersecurity Manager
Supervision exercised: None

View full job page →

1d ago

Information Security Engineer

Tepa LLC Alexandria, VA

Alexandria, VA

1d ago

$110k - $150k/yr Full time Cloud Platforms Cloud Security Cmmc Controls

Apply Now

Job Description

Tepa LLC is seeking an Information Security Engineer to help safeguard Tepa’s information systems and digital assets. In this Alexandria, VA onsite role, you will support security operations across both commercial and regulated environments, including CMMC Level 2 enclaves, with a focus on incident response, vulnerability management, and security engineering.

The position covers the full lifecycle of security work, from alert triage and investigation through containment, remediation, recovery, and documentation, while also strengthening security platforms, controls, and processes to improve overall operational maturity.

Core Responsibilities

Perform day-to-day security monitoring and incident response activities, including alert triage, investigation, containment, remediation, recovery, and documentation.
Investigate security events and incidents using available telemetry across endpoint, identity, network, cloud, SIEM, and other security sources.
Coordinate with internal IT teams and third-party security providers during investigation and remediation of cybersecurity incidents.
Identify root causes and contributing factors after security incidents and recommend technical or procedural improvements to reduce recurrence.
Implement, configure, administer, and maintain security platforms and controls supporting endpoint, identity, cloud, network, vulnerability management, and security monitoring.
Carry out vulnerability management, including vulnerability review, validation, prioritization, remediation coordination, exception tracking, and verification of completed remediation.
Support security hardening and configuration management using established baselines and guidance, including CIS Benchmarks, STIGs, and vendor recommendations.
Support security engineering initiatives involving Microsoft 365, Azure, endpoint security, identity and access management, network security, and related enterprise technologies.
Develop and maintain security processes, standards, procedures, work instructions, diagrams, and other technical documentation.
Maintain documentation supporting the Commercial environment and a CMMC Level 2 enclave, including security controls, operational procedures, incident response activities, and technical standards.
Support implementation and ongoing operation of security requirements associated with CMMC, NIST SP 800-171, and other applicable compliance frameworks.
Collect and maintain technical evidence supporting security assessments, audits, control validation, and compliance activities.
Collaborate with Infrastructure, Cloud, End User Services, GRC, and other business stakeholders to incorporate security requirements into operational processes and technical solutions.
Assist with testing and validation of security controls and identify opportunities to improve security effectiveness, automation, and operational maturity.
Participate in incident response exercises, security assessments, and continuous improvement activities.
Communicate security findings, risks, remediation requirements, and technical recommendations to technical and non-technical stakeholders.
Be available for occasional off-hours work as required to support cybersecurity incidents, maintenance, or other critical security activities.

Required Qualifications

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related technical field (or equivalent combination of education, training, and relevant professional experience).
5+ years of experience in cybersecurity, information security, systems engineering, infrastructure security, or a related technical role.
Hands-on experience investigating and responding to cybersecurity alerts and incidents.
Experience administering or supporting enterprise security technologies such as EDR, SIEM, vulnerability management, identity security, firewalls, email security, or cloud security platforms.
Experience supporting vulnerability identification, remediation, and security hardening activities.
Experience creating and maintaining technical documentation, including procedures, standards, work instructions, diagrams, incident records, and security configuration documentation.
Working knowledge of enterprise technologies including endpoints, servers, networking, identity, cloud services, and enterprise applications.
Working knowledge of cybersecurity and compliance frameworks including CMMC, NIST SP 800-171, NIST Cybersecurity Framework, CIS Controls, or similar frameworks.
Strong working knowledge of incident response, security monitoring, vulnerability management, endpoint security, identity security, and enterprise security operations.
Strong technical troubleshooting and analytical skills, with the ability to independently investigate security events and determine appropriate remediation actions.
Working knowledge of cloud, endpoint, network, identity, and application security concepts.
Ability to implement and maintain security controls based on established architecture, standards, and organizational requirements.
Ability to translate technical security requirements into repeatable processes, standards, procedures, and work instructions.
Strong documentation skills with attention to accuracy, completeness, and auditability.
Ability to balance security requirements with operational and business needs, escalating risks or exceptions appropriately.
Strong written and oral communication skills across technical and non-technical audiences.
Strong collaboration skills, working effectively across Security, Infrastructure, Cloud, End User Services, GRC, and business teams.
Ability to prioritize multiple operational, incident response, engineering, and documentation responsibilities.

Technologies

Microsoft 365
Azure
Endpoint detection and response (EDR)
SIEM
Vulnerability management
Identity security
Firewalls
Email security
Cloud security platforms
CIS Benchmarks
STIGs
CMMC
NIST SP 800-171
NIST Cybersecurity Framework
CIS Controls
PowerShell
Python
APIs
Microsoft Defender
Microsoft Sentinel
Entra ID
Intune
CrowdStrike
Microsoft Government Community Cloud High (GCC High)
GCIH
Security+
CySA+
CISSP
Azure Security Engineer Associate

Compensation

Pay range: $110,000.00 - $150,000.00 (annual)

Benefits

Comprehensive medical, dental, vision
Generous paid time off and holidays
401(k) plan with company match
Life insurance
Flexible spending and health savings account
Mental health support and resources
Short and long-term disability
Tuition reimbursement

Preferred Experience (Not Required)

Experience securing Microsoft Azure and Microsoft 365 environments.
Experience working within regulated or controlled environments supporting CMMC, NIST SP 800-171, or similar requirements.
Experience with Microsoft Government Community Cloud High (GCC High) environments.
Experience with Microsoft Defender, Microsoft Sentinel, Entra ID, Intune, CrowdStrike, or comparable security platforms.
Experience with security automation, scripting, or workflow improvement using PowerShell, Python, APIs, or similar technologies.
Experience performing or supporting incident response exercises, tabletop exercises, security assessments, or audit activities.
Experience implementing CIS Benchmarks, DISA STIGs, or similar system-hardening standards.
GCIH, Security+, CySA+, CISSP, or similar security certifications.
Microsoft security certifications such as Azure Security Engineer Associate or other relevant Microsoft security credentials.
Other relevant incident response, cloud security, or cybersecurity engineering certifications.

View full job page →

1d ago

Security Engineer

Robotics Technologies Baltimore, MD

Baltimore, MD

1d ago

Full time Cyber Security Cybersecurity Operations Cybersecurity Tools

Apply Now

Job Description

Security Engineer role in Baltimore, MD focused on building and operating security controls for enterprise systems, networks, applications, and data on an onsite basis.

Responsibilities

Design, implement, and maintain security controls across enterprise IT environments.
Monitor security events, investigate alerts, and respond to cybersecurity incidents.
Conduct vulnerability assessments, security testing, and risk analysis.
Configure and manage firewalls, IDS/IPS (intrusion detection and prevention systems), and endpoint security solutions.
Implement IAM (identity and access management), MFA (multi-factor authentication), and privileged access controls.
Support SIEM (security information and event management) platforms and analyze security logs.
Perform security reviews across applications, infrastructure, networks, and cloud environments.
Identify security weaknesses and recommend remediation strategies.
Develop and maintain security policies, procedures, standards, and technical documentation.
Partner with IT, DevOps, infrastructure, and application development teams to implement security best practices.
Support incident response, perform root-cause analysis, and contribute to post-incident reporting.
Assist with compliance assessments and security audits.
Implement security controls aligned with frameworks including NIST, ISO 27001, and CIS Controls.
Evaluate emerging threats and recommend improvements to strengthen the organization’s security posture.

Requirements

Experience designing, implementing, and maintaining security controls for enterprise environments.
Ability to monitor security events, investigate alerts, and support incident response.
Knowledge of vulnerability assessment, security testing, and risk analysis.
Hands-on experience with firewalls, IDS/IPS, and endpoint security solutions.
Experience with IAM, MFA, and privileged access controls.
Familiarity with SIEM platforms and security log analysis.
Capability to conduct security reviews across applications, infrastructure, networks, and cloud.
Ability to develop security documentation, policies, procedures, and standards.
Experience supporting compliance assessments and security audits.
Understanding of security frameworks including NIST, ISO 27001, and CIS Controls.
Ability to collaborate with IT, DevOps, infrastructure, and application development teams.

View full job page →

1d ago

Senior Security Engineer - Identity & Endpoint

Relativity Round Lake, IL

Round Lake, IL

1d ago

$130k - $195k/yr Full time Senior Ai Security Analytics

Apply Now

Job Description

Relativity is hiring a Senior Security Engineer to strengthen identity and endpoint security engineering within a layered defense-in-depth program. This role helps lead technical initiatives across security detections, hardening, telemetry, threat hunting, and automated response, with an emphasis on turning findings into durable controls.

Based in Illinois in a hybrid setup, the position supports security engineering across workforce, privileged, service, and machine identities, while also owning endpoint and data security capabilities that feed central analytics and SIEM for cross-domain visibility.

Responsibilities

Deploy, integrate, optimize, and manage EDR/XDR platforms; define custom detections and automated response actions across security tooling.
Own the implementation and enforcement of endpoint and image hardening baselines, configuration standards, and application control baselines.
Integrate endpoint telemetry into the central analytics platform or SIEM to provide security context and cross-domain correlation; ensure SIEM coverage is adequate and effective.
Act as a technical escalation point for endpoint-based security events, exposures, vulnerabilities, and alerts; collaborate cross-functionally to drive remediation within appropriate SLAs.
Investigate complex endpoint alerts and incidents end-to-end, including triage, forensic artifact collection (memory, disk, logs), timeline reconstruction, and containment and eradication actions.
Design, deploy, integrate, and optimize identity security controls across workforce, privileged, service, and machine identities.
Engineer and maintain identity capabilities including identity governance and administration, single sign-on, multi-factor authentication, conditional access, privileged access management, just-in-time access, secrets management, and identity threat detection and response.
Design and enforce least-privilege access patterns with role-based and attribute-based access controls, segregation of duties, and lifecycle controls for joiner, mover, and leaver events.
Integrate identity, authentication, authorization, and privileged-access telemetry into central analytics and SIEM to enable cross-domain correlation, detection, investigation, and automated response.
Escalate and lead root-cause analysis for identity-based attacks, anomalous access, credential compromise, privilege misuse, and authorization failures, coordinating remediation.
Automate identity and access provisioning, certification, policy enforcement, control validation, and response through APIs, scripting, workflow orchestration, and policy-as-code practices.
Partner with IAM, IT, Security, Engineering, and application owners to embed secure identity patterns, remediate access risks, and improve adoption and usability of identity controls.
Define and monitor identity-security measures including authentication coverage, privileged-access reduction, access-review completion, policy compliance, identity-control health, detection efficacy, and remediation performance.
Lead security-control design, deployment, and optimization across perimeter, network, host, application, identity, and data layers, maintaining effectiveness across each layer.
Contribute to and enforce security control standards and design patterns aligned to industry-recognized frameworks, serving as a subject matter expert during implementation and review.
Validate that telemetry from each layer feeds central analytics and supports 360-degree visibility and appropriate attack surface coverage.
Continuously assess enterprise security control effectiveness as the ecosystem expands and the threat landscape evolves, proposing and implementing extended coverage.
Provide technical recommendations on security control design aligned to vulnerabilities, risks, issues, and events, supporting lead-level decisions with well-documented analysis.
Lead purple-team exercises and control-efficacy testing to verify depth and resilience under attack conditions.
Ensure redundant, complementary capabilities to prevent bypasses and maintain failure redundancy across security layers.
Lead structured threat hunting engagements and purple-team exercises in partnership with the Purple Team, analyzing telemetry to surface anomalous or malicious behavior and communicating findings.
Develop, execute, and document structured hunts mapped to MITRE ATT&CK and ATLAS techniques and current threat intelligence.
Perform exposure analysis for vulnerabilities, zero-day risks, alert telemetry, threat intelligence feeds, and partner or customer notifications to conclude on exploitability risk and exposure.
Maintain awareness of the evolving threat landscape, adversary TTPs, and emerging vulnerabilities relevant to Relativity’s ecosystem.
Standardize and document threat-hunting methodology, hypotheses, and outcomes to mature the program with the Purple Team.
Convert successful hunts, exposure analysis, purple-team findings, and alerts into durable, automated detections and containment logic to improve coverage.
Build and maintain SOAR workflows that automate enrichment, triage, containment, and routine response actions, contributing to a broader automation roadmap.
Measure and improve automation impact on time-based detection, containment, and response to reduce threat actor dwell time.
Identify, evaluate, and operationalize AI/ML capabilities for semantic anomaly detection, behavioral analytics, alert triage, and prioritization; recommend platform and tooling decisions.
Implement and manage data classification, discovery, and data security posture management across cloud and on-premises stores.
Deploy and tune data loss prevention controls across endpoints, network, email, cloud, and SaaS surfaces.
Investigate data key risk indicators tied to data access and exfiltration, and integrate data telemetry into central analytics (SIEM).
Serve as a technical mentor and day-to-day escalation point for junior and mid-level security engineers, guiding technical approach, tooling, and professional development.
Lead technical design and implementation efforts for assigned initiatives, producing clear documentation, runbooks, and knowledge artifacts.
Participate in hiring processes including technical interviews and candidate assessments.
Represent the security engineering team in cross-functional technical discussions, translating security requirements and findings clearly for both engineering peers and non-technical stakeholders.

Requirements

4-8 years of hands-on enterprise security engineering experience, with focus on endpoints and identity.
Hands-on experience with security tools such as EDR, XDR, SIEM, CNAPP, CSPM, CWP and strong knowledge of applicable security technologies across the OSI model.
Demonstrated experience in threat hunting, digital forensics, and/or detection engineering, including writing automation scripts and rules for security enforcement and observability.
Solid knowledge of industry standard benchmarks and frameworks (for example, MITRE and NIST).
Demonstrated expertise in at least one scripting or automation language such as Python, Bash, or PowerShell, applied to modern containerized services, CLI use, and/or security use cases.
Demonstrated experience owning and driving complex security initiatives end-to-end, including cross-functional coordination, stakeholder communication, and delivery of technical outcomes.
Ability to communicate technical findings clearly to both engineering peers and non-technical stakeholders.
Relevant certification such as SSCP, Security+ or equivalent.
Prior experience mentoring or providing technical guidance to junior engineers.

Technologies

EDR, XDR, SIEM, CNAPP, CSPM, CWP
OSI model
MITRE ATT&CK, ATLAS
SOAR, AI/ML, UEBA, ML-based alert prioritization
Python, Bash, PowerShell
AWS, Azure, GCP
SOC 2, ISO 27001, HIPAA
SSCP, Security+

Benefits

Competitive base salary
Annual performance bonus
Long-term incentives

Compensation: USD 130,000 - 195,000 per year. Location: Illinois (hybrid). Minimum experience: 4 years.

Preferred Qualifications

Bachelor’s in Computer Science, Information Security, or equivalent experience.
Experience with AI-enabled SecOps (for example: UEBA, ML-based alert prioritization, or AI-assisted threat hunting workflows).
Working knowledge of cloud environments such as AWS, Azure, or GCP.
Experience contributing endpoint or network security controls to CI/CD pipelines and infrastructure-as-code environments.
Experience supporting compliance and audit requirements (SOC 2, ISO 27001, HIPAA) from a technical control perspective.

Required Skills

Access Management
Application Security
Endpoint Security
Network Security
Penetration Testing
Security Architecture Design
Security Information
Security Information and Event Management (SIEM)
Security Operations
Vulnerability Management

View full job page →

2d ago

Military Systems Cybersecurity Software Engineer

Johns Hopkins Applied Physics Laboratory (APL) Laurel, MD

Laurel, MD

2d ago

$100k - $195k/yr Full time Backend Developer Cyber Security Cybersecurity Operations

Apply Now

Job Description

The Military Systems Cybersecurity Software Engineer will support research and engineering efforts aimed at strengthening the cyber resilience of military platforms and systems against cyber adversaries. The role emphasizes software design, development, testing, deployment, and technical analysis to improve detection and response capabilities.

Responsibilities

Design, develop, evaluate, and deploy robust and resilient software capabilities and solutions for air, afloat, land, and subsurface military and/or tactical platforms and systems to enhance cyber resilience.
Perform network analysis of logs and traffic to validate expected system behavior and identify threats and/or deviations.
Build tooling and conduct sophisticated attack scenarios to assess the effectiveness of security solutions for detection and response.
Participate in continuous learning and professional development to expand skills and knowledge.

Required Qualifications

Bachelor’s degree in Computer Science, Cybersecurity, Software Engineering, or a related field relevant to the duties described.
Proven experience in software development, testing, and deployment, preferably within a cybersecurity context.
Proficiency in one or more programming languages such as Python, Java, Golang, Rust, C, or C++.
3+ years of experience in software development using one or more of the preferred programming languages.
Knowledge of cybersecurity principles, threat detection methodologies, and/or incident response processes.
Experience with computer networks and network analysis tools, such as Wireshark and Suite.
Ability to contribute and/or lead in multi-disciplinary teams.
Demonstrated critical thinking skills to develop solutions for complex problems.
Excellent written and verbal communication skills.
Ability to occasionally travel up to 10% and work as required in classified areas.
Ability to obtain an Interim Secret security clearance by the start date and ultimately obtain TS/SCI+poly clearance; U.S. citizenship is required. If selected, participation in a government security clearance investigation is required to meet access requirements for classified information.

Preferred Skills (If You Go Above and Beyond Minimum Requirements)

Master’s degree in Computer Science, Cybersecurity, Software Engineering, or a related field.
3+ years of experience with military systems architecture, design, and cybersecurity solutions.
3+ years of experience conducting cybersecurity assessments against military networks and/or systems.
Detailed technical understanding and/or operational and maintenance experience with combat systems, weapons and stores, command and control, communications, computers, and intelligence (C4I) avionics hull, mechanical, and electrical (HM&E), and/or other related military operational technology, including embedded systems and supporting platform network and computing environments.
Knowledge of cyber issues involving real-time operating systems, software-intensive systems, autonomous military systems, and operational mission or domain-specific applications.
Experience using virtualization technologies, such as VMWare vSphere.
Familiarity with SIEM tools, such as Splunk and ELK Stack.
Experience conducting penetration testing, red teaming exercises, and threat simulations.
Demonstrated experience developing intrusion detection systems (IDS) and penetration and red team tooling.
Prior experience interacting with DoD and IC communities.