Find Your Dream Career

Penetration Tester – MSSP, New York Role at a glance Job title: Penetration Tester Company: Growing Managed Security Services Provider (MSSP), name withheld Location: New York, NY (Manhattan office) Work pattern: Hybrid, 2 days on-site, with occasional client site visits Employment type: Full-time, permanent Experience: 4+ years of hands-on penetration testing Salary: $150,000 – $180,000 base + bonus (DOE) Reports to: Head of Offensive Security About the company Our client is an established Managed Security Services Provider headquartered in New York. They protect mid-market and enterprise organisations across financial services, healthcare, legal and technology. Their services span 24/7 SOC monitoring, MDR, vulnerability management and a fast-growing offensive security practice. Continued client demand means they are expanding the penetration testing team. The role You will deliver hands-on penetration tests across a varied client base, from scoping through to the final report. Each engagement is different, covering networks, web applications, cloud and Active Directory. You will work directly with client stakeholders and turn technical findings into clear, prioritised remediation advice. You will also help shape the methodology and tooling of a growing team. Key responsibilities Perform internal and external network penetration tests, including Active Directory attack paths Test web applications and APIs against OWASP Top 10 and beyond, with manual testing, not just scanning Assess cloud environments (AWS, Azure, GCP) for misconfiguration and privilege escalation Carry out wireless, social engineering and phishing assessments as engagements require Scope engagements with clients and the account team, and agree rules of engagement Write clear technical and executive reports with risk ratings and practical remediation steps Present findings on client debrief calls and support retesting Build scripts and tooling to automate repeatable testing tasks Keep up with new vulnerabilities and attack techniques, and share knowledge with the team Required experience and skills 3+ years of hands-on penetration testing, ideally in a consultancy or MSSP setting Strong grasp of network and web application testing methods (OWASP, PTES, NIST SP 800-115) Practical Active Directory exploitation experience (Kerberoasting, relay attacks, privilege escalation) Confident with Burp Suite Pro, Nmap, Metasploit, BloodHound, Impacket and similar tools Scripting in Python, Bash or PowerShell Solid knowledge of Windows and Linux internals, networking, and common protocols Excellent written English, with a strong report-writing portfolio Comfortable working directly with clients at technical and executive level Authorised to work in the US without sponsorship Nice to have Certifications such as OSCP, PNPT, CRTO, GPEN, GWAPT or OSWE (OSCP strongly preferred) Cloud penetration testing experience, plus container and Kubernetes security Mobile application testing (iOS and Android) Red team or adversary simulation exposure, including C2 frameworks Experience with compliance-driven testing (PCI DSS, SOC 2, HIPAA, NYDFS 500) CVEs, published research, bug bounty or CTF achievements What's on offer Base salary of $150,000 – $180,000 plus annual performance bonus Fully funded certifications and training budget, plus dedicated lab time Medical, dental and vision insurance, and a 401(k) with company match Generous PTO plus paid holidays Clear progression to Senior Penetration Tester and Red Team roles A varied client base, so no two engagements are the same

Our Mission At Palo Alto Networks®, we're united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you're ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you're in the right place. Who We Are In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! We believe collaboration thrives in person. That's why most of our teams work from the office full time, with flexibility when it's needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes. Job Summary The Team Information Security - We're not your ordinary Information Security team. We're a diverse group of security professionals who challenge the status quo in order to protect Palo Alto Networks and our customers. Driving innovation on the Information Security team of the fastest-growing high-tech cybersecurity company is a once-in-a-lifetime opportunity. You'll be joined by the brightest minds in technology, and our global teams are on the front line of defense against cyberattacks. Job Summary As a Senior Staff Penetration Testing Engineer, you will conduct comprehensive penetration tests and lead assumed-breach red team operations across cloud-native applications and large-scale infrastructure. You will leverage AI-assisted testing frameworks to accelerate threat discovery and provide expert security guidance to engineering teams, ensuring robust defense against emerging cyber threats. Key Responsibilities Conduct comprehensive penetration tests across cloud-native applications, large-scale infrastructure, and complex network architectures. Execute multi-tenant isolation testing and segmentation validation. Identify, exploit, and document vulnerabilities in cloud services, container orchestration platforms, and automated deployment pipelines. Plan and lead assumed-breach, objective-based red team operations against systems to test the effectiveness of defensive controls. Integrate AI-assisted testing frameworks and LLM-driven automation into penetration testing workflows. Provide expert-level security guidance to SRE and Engineering teams during remediation planning and secure architectural design. Lead the security assessment of internal tooling, identity management systems, and third-party integrations. Research and develop custom tooling or scripts to automate testing and improve the efficiency of offensive engagements. Translate complex technical findings into high-impact reports and presentations for both technical stakeholders and executive leadership. Mentor junior team members and act as a subject matter expert on emerging threats and exploitation trends. Qualifications Required Qualifications Bachelor's degree with 5+ years of experience, or Master's degree with 3+ years of experience in penetration testing, offensive security, or a related field. Proven experience conducting comprehensive penetration tests across cloud-native applications and large-scale infrastructure. Demonstrated ability to plan and lead assumed-breach, objective-based red team operations including lateral movement and privilege escalation. Strong proficiency in identifying and exploiting vulnerabilities in cloud services and container orchestration platforms. Experience researching and developing custom tooling or scripts to automate security testing and improve efficiency. Preferred Qualifications Experience integrating AI-assisted testing frameworks and LLM-driven automation into penetration testing workflows. Deep understanding of FedRAMP-mandated attack vectors and compliance testing. Strong background in providing security guidance to SRE and Engineering teams during secure architectural design. Excellent communication skills with the proven ability to translate complex technical findings for executive leadership. Demonstrated track record of mentoring junior team members and acting as a subject matter expert on emerging threats. Compensation Disclosure The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/com-missioned roles) is expected to be the annual range listed below. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here . $152,300.00 - $246,400.00/yr Our Commitment We're trailblazers that dream big, take risks, and challenge cybersecurity's status quo. It's simple: we can't accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at accommodations@paloaltonetworks.com . Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.

For our client, we are seeking a Senior Penetration Tester to join the team of a leader in the Finance & Insurance space. This role will focus on uncovering vulnerabilities across core systems, web applications, APIs, cloud environments, and AI-enabled workflows. You will partner closely with engineering teams to translate security findings into clear priorities, while also helping strengthen testing coverage through smarter tooling and secure code review practices. The position offers the opportunity to influence both offensive security execution and the broader security posture of a modern technology organization. Location: Remote Compensation: $143,000 – $183,000 annually Responsibilities Conduct manual penetration tests on core systems and AI applications Develop AI-assisted tools to improve penetration testing coverage Triage and address findings from SAST tools, refining rules to reduce false positives Perform secure code reviews across web applications, APIs, and AWS environments Create security tools and services within the application stack Support security reviews for AI-generated code before production deployment Communicate risks effectively to engineering teams for prioritization Qualifications 5+ years in application security, offensive security, or product security Hands-on experience with pentesting and code review for web applications, APIs, and AWS Curiosity and a hacker mentality to explore system vulnerabilities Interest in leveraging AI for security testing and workflow improvements Understanding of AI/LLM attack surfaces and vulnerabilities in AI-generated code Proficiency in modern programming languages like Ruby, Python, TypeScript, or Go Strong communication skills to convey risk and priorities to engineers Benefits Flexible work environment with options for remote or hybrid work Comprehensive medical, dental, and vision coverage Flexible time-off policy and paid parental leave 401k matching for US employees Wellness reimbursement and volunteering days Annual professional development budget and charitable donation matching Our client is an equal opportunity employer. We encourage you to apply even if you don't meet every qualification—your background could be exactly what this team needs.

Description Salary range: $75,000 - $87,000/year The Penetration Tester supports security assessments by planning and executing tests on web applications, infrastructure, cloud environments, and other technologies connected to the client network. Responsibilities include developing test plans, performing vulnerability and risk analyses, automating testing processes, and mapping findings to NIST SP 800-53 controls to ensure compliance and improve security posture. Conduct security testing of IT assets, web applications, infrastructure assets and technologies, mobile applications, custom developed software implementations, virtual technologies, COTS products, cloud implementations, common application platforms, and other technologies connecting to or interacting with the Judiciary network. Develop and maintain a repeatable methodology for performing security testing. Security test planning should include, but is not limited to: threat modeling, map business requirements to the applicable security requirements, determine appropriate security controls, test scenarios and test cases. Develop the Security Test Plans. Perform security testing, vulnerability analysis, and risk analysis in accordance with an industry-proven, repeatable methodology. Evaluate the effectiveness of security controls as they relate to the applicable security controls of the system tested. Relate test results to controls in NIST SP 800-53, as reflected in the JISF. Develop, maintain and use customized testing scripts (testing automation) for individual and team use. Develop and deliver reports as required. Requirements 4+ years of hands-on cybersecurity assessment experience, including manual penetration testing, web application security testing, and host vulnerability assessments. Demonstrated ability to independently execute security assessments from planning and preparation through testing, findings validation, reporting, and remediation verification. Current penetration testing or ethical hacking certification, such as CEH, CompTIA PenTest+, OSCP, or an equivalent credential. Strong hands-on proficiency with Burp Suite for manual web application testing. Must be able to investigate and validate vulnerabilities beyond automated scanner results. Experience identifying and validating web application vulnerabilities, including SQL injection, cross-site scripting, cross-site request forgery, authentication and authorization weaknesses, and privilege escalation, using OWASP testing guidance. Hands-on experience with Tenable Nessus and Tenable Security Center/VSS, including configuring assessments, interpreting results, validating findings, and distinguishing actionable vulnerabilities from false positives. Experience performing manual host configuration and security compliance assessments against CIS Benchmarks, including validating settings and documenting deviations. Experience assessing databases and commercial off-the-shelf applications for vulnerabilities and insecure configurations, using tools such as AppDetective, DbVisualizer, Scuba, or comparable products. Working knowledge of networking concepts, protocols, and operating system security sufficient to investigate findings and explain their technical impact. Experience applying NIST security guidance, including NIST SP 800-53, and using CVE, NVD, and CVSS information to evaluate vulnerability severity and prioritize remediation. Ability to develop security test plans and produce clear, technically accurate reports documenting affected assets, reproducible findings, supporting evidence, risk, and actionable remediation recommendations. Experience briefing technical findings to application owners, system administrators, developers, and customer stakeholders, and conducting follow-up testing to verify corrective actions. Ability to manage concurrent assessments, meet reporting deadlines, maintain assessment records, and perform peer reviews of findings and deliverables. Preferred Qualifications HCL AppScan experience. Qualys experience. PlexTrac experience, particularly assessment reporting, findings management, and reporting workflow improvement. Federal security assessment experience, particularly with the Judiciary Information Security Framework, NIST Risk Management Framework, or CSAM. Experience with Acunetix, Kali Linux, SQLmap, or comparable application security testing tools. Experience mentoring junior testers and improving assessment procedures, reporting templates, or testing workflows. Bachelor's degree in cybersecurity, computer science, information technology, or a related technical field. Clearance : Ability to obtain and maintain a Public Trust required. The salary range for this position depends upon multiple factors including location, the individual's knowledge, skills, competencies, and experience, and contract-specific budget constraints and organizational requirements. Benefits Gunnison Consulting Group's total compensation package also includes bonus and profit-sharing opportunities, depending on company and employee performance. Available employee benefits include: 3 weeks of Personal Leave your first year 11 paid Holidays each year 5 days of Flexible Time Off each year 401(k) company match at 50% up to 10% of your salary Medical, Dental and Vision Insurance Life and Disability Insurance Public Transportation Subsidies Certifications and Training Allowance - $2,500/year! Why Join Gunnison? Gunnison takes on ambitious projects. We target fun, challenging work that requires creative thinking and innovation. Quality is our top priority. Gunnison employee benefits meet or exceed what other companies in the Washington, D.C. metropolitan area offer. There is a great sense of camaraderie at Gunnison. This is an atmosphere we will maintain as we continue to grow. We are growing rapidly and the opportunity for individual professional growth with Gunnison is outstanding. We hire for careers at Gunnison, not to fill a position. Equal Opportunity Employer. Must be eligible for employment in the United States. We are unable to sponsor candidates at this time. In 1994 Gunnison began serving the greater Washington, D.C. metro area, focused on tackling our customers' most ambitious technology projects . By creating a culture dedicated to enabling our customers and employees to achieve more than they ever thought they could , the company has thrived for over 25 years.

Job Description Position Summary The Security Operations Analyst supports the detection, investigation, response, and continuous improvement of cybersecurity capabilities across enterprise environments. The role monitors security events, conducts initial investigations, supports incident response, contributes to detection and security engineering, and helps develop operational efficiencies through automation and AI-assisted processes. The ideal candidate is analytical, technically curious, process-oriented, and eager to develop practical cybersecurity and AI-enabled operations expertise. This individual uses approved AI tools as an analyst accelerator, validates generated outputs, documents assumptions, and escalates decisions or risks that require senior review. Ideal Candidate Profile The ideal candidate demonstrates sound judgment, attention to detail, a learning mindset, and ownership of assigned work. They can follow established procedures, communicate findings clearly, experiment responsibly with automation and AI, and contribute to tuning AI agents and advancing AI SOC initiatives under the guidance of senior analysts and engineering teams. Responsibilities Security Monitoring, Detection & Incident Response Monitor security platforms, dashboards, alerts, and operational reporting channels for potential cybersecurity threats and operational incidents. Review, triage, investigate, and validate alerts generated by SIEM, EDR, DLP, IAM, network, email, cloud, and other monitoring technologies. Use approved AI-assisted capabilities to summarize alerts, enrich cases, correlate evidence, develop investigative leads, and improve response speed while validating outputs against source data. Execute established incident response playbooks, operational procedures, escalation paths, and human-review requirements. Support evidence collection, documentation, containment activities, case tracking, remediation coordination, and incident closure. Escalate incidents, uncertain AI outputs, access concerns, or decisions requiring advanced analysis to senior analysts and response teams. Maintain situational awareness of active incidents, emerging threats, and operational risks during assigned shifts. Threat Analysis, Hunting & AI-Augmented Detection Engineering Correlate endpoint, network, identity, cloud, application, and security telemetry to identify indicators of compromise and suspicious activity. Assist in identifying attacker tactics, techniques, and procedures through investigative analysis, threat intelligence, and behavioral context. Use OSINT, threat intelligence feeds, approved AI tools, and operational reporting to support investigations and improve threat visibility. Support hypothesis-driven threat hunting to identify emerging risks and previously undetected malicious behavior. Assist in developing, tuning, testing, and maintaining detection content, alert logic, analytics rules, dashboards, and use cases. Use AI as a supervised aid for query development, alert clustering, detection documentation, false-positive review, and coverage-gap analysis. Identify recurring attack patterns, false positives, telemetry gaps, and opportunities to improve detection effectiveness. Develop working knowledge of MITRE ATT&CK, threat modeling, NIST incident response concepts, and modern detection methodologies. Security Engineering, Automation & AI Agent Operations Support deployment, configuration, maintenance, and optimization of security operations technologies and integrations. Support SOAR, workflow automation, orchestration, and AI-assisted security operations initiatives. Use scripting, query languages, APIs, and automation tools to improve investigation workflows, reporting, enrichment, and repeatable operational tasks. Assist senior analysts and engineers with configuring, testing, and tuning AI agents for defined SecOps use cases such as triage, enrichment, knowledge retrieval, reporting, threat hunting, and detection support. Help refine agent instructions, retrieval content, context, tool access, guardrails, escalation logic, and evaluation of test cases within approved boundaries. Record agent errors, unsupported claims, inconsistent results, access issues, and workflow failures; provide structured feedback for tuning and improvement. Validate AI-agent outputs against authoritative telemetry and case evidence before they are used in investigations or operational decisions. Collaborate with engineering and security teams to improve visibility, strengthen controls, and evaluate emerging AI-driven security capabilities. AI SOC Innovation & Continuous Improvement Contribute to AI SOC initiatives by helping identify repeatable analyst pain points, candidate use cases, automation opportunities, and measurable success criteria. Participate in proofs of concept, controlled pilots, user acceptance testing, agent evaluations, and post-deployment feedback activities. Help document AI-enabled workflows, expected outputs, known limitations, human-review steps, escalation paths, and fallback procedures. Provide analyst feedback on usability, trust, accuracy, efficiency, and operational risk to improve AI SOC capabilities. Demonstrate responsible experimentation, professional accountability, and willingness to learn from testing and operational outcomes. Documentation, Communication & Collaboration Produce incident summaries, investigation reports, shift handoffs, operational updates, and concise AI evaluation findings. Communicate technical findings, confidence, limitations, and recommended next steps to technical and non-technical stakeholders. Support metrics for detection quality, investigation speed, automation reliability, agent accuracy, analyst adoption, and program effectiveness. Partner with security, infrastructure, engineering, risk, privacy, legal, and business teams as appropriate to support cybersecurity and AI SOC initiatives. Qualifications 1-3 years of experience in Security Operations, Incident Response, IT Operations, Security Engineering, or a related cybersecurity environment. Experience monitoring, triaging, investigating, and escalating security events using established operational processes. Experience supporting incident response and documenting investigations through closure. Ability to work independently on assigned tasks while collaborating effectively within a team and escalating when appropriate. Foundational understanding of security operations, threat detection, incident response, security engineering, and responsible use of automation or AI. Working knowledge of networking, authentication, operating systems, cloud technologies, and enterprise security controls. Familiarity with Windows, Linux/Unix, macOS, and cloud computing platforms. Experience with technologies such as SIEM, EDR, IDS/IPS, DLP, SOAR, email security, IAM, vulnerability management, and log analysis platforms. Understanding of indicators of compromise, attack methodologies, detection logic, and basic malware concepts. Strong analytical, problem-solving, communication, collaboration, prioritization, and documentation skills. Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline, or equivalent practical experience. About Us onsemi (Nasdaq: ON) is driving disruptive innovations to help build a better future. With a focus on automotive and industrial end-markets, the company is accelerating change in megatrends such as vehicle electrification and safety, sustainable energy grids, industrial automation, and 5G and cloud infrastructure. With a highly differentiated and innovative product portfolio, onsemi creates intelligent power and sensing technologies that solve the world's most complex challenges and leads the way in creating a safer, cleaner, and smarter world. More details about our company benefits can be found here: https://www.onsemi.com/careers/career-benefits About The Team We are committed to sourcing, attracting, and hiring high-performance innovators, while providing all candidates a positive recruitment experience that builds our brand as a great place to work. onsemi is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, ancestry, national origin, age, marital status, pregnancy, sex, sexual orientation, physical or mental disability, medical condition, genetic information, military or veteran status, gender identity, gender expression, or any other protected category under applicable federal, state, or local laws. If you are an individual with a disability and require a reasonable accommodation to complete any part of the application process, or are limited in the ability or unable to access or use this online application process and need an alternative method for applying, you may contact Talent.acquisition@onsemi.com for assistance.

Job Description: Type of Requisition: Regular Clearance Level Must Currently Possess: Top Secret/SCI Clearance Level Must Be Able To Obtain: Top Secret SCI + Polygraph Public Trust/Other Required: None Job Family: Cyber and IT Risk Management Skills: Job Qualifications: Cybersecurity, Information Security, System Security Certifications: Cisco Certified Network Associate (CCNA) Security - Cisco - Cisco, GICSP: Global Industrial Cyber Security Professional - Global Information Assurance Certification (GIAC), GSEC: GIAC Security Essentials Certification - Global Information Assurance Certification (GIAC) - Global Information Assurance Certification (GIAC) Experience: 5 + years of related experience US Citizenship Required: Yes Job Description: The SOC Analyst's primary function is to provide comprehensive Computer Network Defense and Response support through 24×7×365 monitoring and analysis of potential threat activity targeting the enterprise. This position will conduct security event monitoring, advanced analytics and response activities in support of the government's mission. This position requires a solid understanding of cyber threats and information security in the domains of TTP's, Threat Actors, Campaigns, and Observables. Additionally, this candidate must be familiar with intrusion detection systems, intrusion analysis, security information event management platforms, endpoint threat detection tools, and security operations ticket management. This position will support activities within Special Access Programs (SAPs). The position will provide "day-to-day" support for Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities. Performance Shall Include : Must have strong analytical and technical skills in computer network defense operations, ability to lead efforts in Incident Handling (Detection, Analysis, Triage), Hunting (anomalous pattern detection and content management) and Malware Analysis Experience and ability to with analyzing information technology security events to discern events that qualify as legitimate security incidents as opposed to non-incidents. This includes security event triage, incident investigation, implementing countermeasures, and conducting incident response. Must be knowledgeable and have hands-on experience with a Security Information and Event. Monitoring (SIEM) platforms and/or log management systems that perform log collection, analysis, correlation, and alerting. Strong logical/critical thinking abilities, especially analyzing security events (windows event logs, network traffic, IDS events for malicious intent). Excellent organizational and attention to details in tracking activities within various Security Operation workflows. A working knowledge of the various operating systems (e.g. Windows, OS X, Linux, etc.) commonly deployed in enterprise networks, a conceptual understanding of Windows Active Directory is also required, and a working knowledge of network communications and routing protocols (e.g. TCP, UDP, ICMP, BGP, MPLS, etc.) and common internet applications and standards (e.g. SMTP, DNS, DHCP, SQL, HTTP, HTTPS, etc.). Experience with the identification and implementation of counter-measures or mitigating controls for deployment and implementation in the enterprise network environment. Experience with one or more of the following technologies Network Threat Hunting, Big Data Analytics, Endpoint Threat Detection and Response, SIEM, workflow and ticketing, and Intrusion Detection System. Experience: 5+ years related experience Prior performance in roles such as ISSO or ISSM. SAP experience required Education: Bachelor's degree in a related area OR Associate's degree in a related area + 2 years' experience OR equivalent experience (4 years) Certifications: CSSP Analyst or Incident Responder - within 6 months of hire (CEH, CFR, CCNA Cyber Ops, CySA+**, GCIA, GCIH, GICSP, SCYBER) Clearance Required To Start: TS/SCI required Must be able to Attain – TS/SCI with CI Polygraph The likely salary range for this position is $112,840 - $137,310. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range. Scheduled Weekly Hours: 40 Travel Required: 10-25% Telecommuting Options: Onsite Work Location: USA CO Colorado Springs Additional Work Locations: Total Rewards At GDIT: Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most. Our Identity Verification Process: As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes. About Our Work: We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development. Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc. Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans

About Rocket Lab Rocket Lab is the end-to-end space company building rockets, spacecraft, and critical subsystems that keep the world connected, protected, expand humanity's reach to the Moon, Mars, and beyond. We move fast, build real hardware for meaningful missions, and make the impossible routine. Come shape the future with us. SPACE SYSTEMS At Rocket Lab, we're not just launching rockets — we're building the future of space. Our Space Systems team builds everything from complete spacecraft, precision payloads to the components and subsystems that allow them to thrive in space, like solar panels, flight software, star trackers, optical systems, separation systems, radios, and more. Our Space Systems team has enabled more than 1,700 missions, ranging from interplanetary exploration, in-space manufacturing to national security and defense initiatives. The team has built spacecraft, payloads, and components for missions to the Moon and Mars, working with partners including NASA, the Space Development Agency, and the U.S. Space Force. Whether it's a single high-performance spacecraft, constellation, or the vertically integrated components that help them get to space — our world class Space Systems team is empowering some of the boldest and most ambitious space missions. SENIOR CYBERSECURITY ENGINEER I - SECRET CLEARANCE Based out of Long Beach, CA, the Senior Cybersecurity Engineer I - Secret Clearance will be responsible for designing, implementing, and maintaining the security infrastructure of SDA programs. This role requires a deep understanding of security principles, advanced technical skills, and the ability to stay ahead of emerging threats. The ideal candidate will have extensive experience in software security engineering, a proactive approach to problem-solving, and a passion for protecting sensitive information. What You'll Get To Do Design, implement, and manage security solutions to protect the programs IT infrastructure, including networks, servers, and applications. Conduct regular security assessments, vulnerability scans, and penetration tests to identify and mitigate security risks. Develop and enforce security policies, procedures, and standards to ensure compliance with industry regulations and best practices. Monitor security systems and respond to security incidents, providing detailed analysis and remediation. Collaborate with IT and development teams to integrate security best practices into the software development lifecycle. Stay current with the latest security trends, technologies, and threats, and recommend enhancements to improve the organization's security posture. Mentor and provide guidance to junior security engineers and other IT staff. You'll Bring These Qualifications Bachelor's degree in Computer Science, Information Security, or a related field. Active Secret security clearance required upon hire 5+ years of experience in system security engineering or a related role. 8140 Intermediate or Advanced certification (e.g. Security+, Cloud+, CISSP, CISM, CEH, or equivalent) Strong knowledge of security frameworks and standards (e.g., NIST 800, ISO 27001, CIS Controls). Proficiency in security tools and technologies (e.g., firewalls, IDS/IPS, SIEM, endpoint protection). Experience with cloud security (AWS, Azure, GCP) and securing hybrid environments. U.S. citizenship is required, due to program requirements. These Qualifications Would Be Nice To Have Master's degree In Computer Science, Information Security, or related field. Excellent understanding of network protocols, operating systems, and application security. Experience with DevSecOps practices and tools. Experience with incident response and digital forensics. Familiarity with scripting and automation (e.g., Python, PowerShell) Strong analytical and problem-solving skills, with the ability to think critically and act decisively under pressure. Excellent communication and interpersonal skills, with the ability to work effectively with cross-functional teams. This position may require prolonged periods of sitting, standing, walking, computer work, and occasional exposure to moderate levels of noise, dust, and fumes in production areas. Join one of the world's fastest-growing space companies and own a piece of it. In addition to competitive base pay, you'll receive company stock as part of your total compensation package, giving you a direct stake in our success. As we expand to new launch sites, groundbreaking missions, and global markets, your ownership has the opportunity to grow alongside the company.Our comprehensive benefits package includes our industry-leading Employee Stock Purchase Program (with a 15% discount on company stock), top-tier medical plans (HMO, PPO, and a zero cost HDHP option with a significant HSA company contribution), dental and vision coverage, paid vacation and sick time, 11 paid holidays, flexible spending and dependent care accounts, paid parental leave, disability and life insurance, and a 401(k) retirement plan with company match.Additional perks include subsidized EV charging, onsite fitness centers (where available), discounted gym memberships, complimentary snacks and beverages, 50% employee discount on our popular merch store, and a variety of other employee discounts.Level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, and experience. Base Pay Range (CA Only): $132,000 USD - $198,000 USD What To Expect We're on a mission to unlock the potential of space to improve life on Earth, but that's not an easy task. It takes hard work, determination, relentless innovation, teamwork, grit, and an unwavering commitment to achieving what others often deem impossible. Our people out-think, out-work, and out-pace. We pride ourselves on having each other's backs, checking our egos at the door, and rolling up our sleeves on all tasks big and small. We thrive under pressure, work to tight deadlines, and our focus is always on how we can deliver, rather than dwelling on the challenges that stand in the way. Important Information FOR CANDIDATES SEEKING TO WORK IN US OFFICES ONLY: To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR), Rocket Lab Employees must be a U.S. citizen, lawful U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum, or be eligible to obtain the required authorizations from the U.S. Department of State and/or the U.S. Department of Commerce, as applicable. Learn more about ITAR here. Rocket Lab provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. This policy applies to all terms and conditions of employment at Rocket Lab, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. Applicants requiring a reasonable accommodation for the application/interview process for a job in the United States should contact Giulia Johnson at g.biow@rocketlabusa.com.This dedicated resource is intended solely to assist job seekers with disabilities whose disability prevents them from being able to apply/interview. Only messages left for this purpose will be considered. A response to your request may take up to two business days. FOR CANDIDATES SEEKING TO WORK IN NEW ZEALAND OFFICES ONLY: For security reasons, background checks will be undertaken prior to any employment offers being made to an applicant. These checks will include nationality checks as it is a requirement of this position that you be eligible to access equipment and data regulated by the United States' International Traffic in Arms Regulations. Under these Regulations, you may be ineligible for this role if you do not hold citizenship of Australia, Japan, New Zealand, Switzerland, the European Union, or a country that is part of NATO, or if you hold ineligible dual citizenship or nationality. For more information on these Regulations, click here ITAR Regulations.

Standard Job Description What We're Doing At Lockheed Martin, we are pushing the boundaries of innovation to solve some of the world's most complex challenges. In our Rotary and Mission Systems (RMS) division, we are focused on advancing security and resilience for critical defense systems, with a particular emphasis on F-35 Training & Logistics. Our team is dedicated to applying cutting-edge cybersecurity solutions that safeguard the integrity of systems throughout their lifecycle. We are passionate about ensuring that these systems remain resilient to evolving cyber threats, supporting both the F-35 and other essential training and logistics operations. The Work Responsibilities As a Cyber Systems Security Engineer, you will play a vital role in securing the backbone of mission-critical systems. Your responsibilities will include: Designing and developing cybersecurity solutions that span the entire system lifecycle, from initial planning to final validation. Conducting risk assessments, including threat modeling and vulnerability analysis, to evaluate and address potential security gaps. Collaborating with engineers and system architects to analyze and resolve cybersecurity trade-offs and system design constraints. Performing cybersecurity testing to validate that hardware and software designs meet security requirements. Employing proven cybersecurity methodologies, processes, and tools, ensuring consistent application across projects. Supporting assessment and authorization activities to ensure compliance with required cybersecurity standards. Who We Are Lockheed Martin's RMS division is home to some of the brightest minds in the cybersecurity field. Our team is driven by innovation and a commitment to excellence, focused on ensuring the safety and success of our customers' most complex missions. We thrive in a collaborative environment where cutting-edge technology is used to solve real-world challenges. At Lockheed Martin, we place high value on the skills, education, and training that each employee brings to the table, empowering everyone to make meaningful contributions. Who You Are You are a Cyber Security Engineer with a passion for tackling the most complex problems in the cyber domain. You thrive in a collaborative environment, working with cross-functional teams to design, test, and implement innovative solutions. Your technical expertise is complemented by a deep understanding of the full system lifecycle and how to integrate security seamlessly into every phase. You have experience in: Conducting cyber risk assessments and implementing mitigation strategies. Responsible for securing and hardening hardware and software systems. Collaborating with engineers, architects, and developers to ensure robust security solutions. Performing cybersecurity testing and ensuring compliance with industry standards and regulations. Basic Qualifications Bachelor's degree from an accredited college/university in a related discipline (e.g., Cyber Security, Information Technology, Computer Science, or a comparable field) and at least 2 years of relevant professional experience, or Master's degree in a related discipline with no required professional experience. Experience with Cybersecurity Tools (e.g. Splunk, Trellix) Experience in vulnerability scanning tools and report generation (e.g. Nessus, OpenVAS) Knowledge of Linux or Windows Operating Systems. Knowledge of NIST SP 800‑37 Risk Management Framwork. Basic understanding of Cyber Supply Chain Risk Management (CSCRM) principles Strong written and verbal communication skills; capable of presenting technical information to both technical and non‑technical audiences. Must be a US Citizen; this position will require a government security clearance. This position is located at a facility that requires special access. Possession of CompTIA Security+, or equivalent DoD 8570 type certification Desired Skills Experience with troubleshooting computer hardware and networks. Scripting experience (e.g. Python, Bash, Perl, PowerShell) Knowledge of NIST SP 800‑53 security control families. Familiarity with DoD/IC Security Technical Implementation Guides (STIGs) and how to apply them Understanding of CI/CD pipelines and how security integrates (DevSecOps) Pay Information Full-Time Salary Range: $81100.00 - $150500.00 At Lockheed Martin, we know mission success starts with taking care of our people. Our Total Rewards program is designed to attract top talent, support your well-being, and help you grow—both professionally and personally. The salary range for this position is as listed on the requisition. Please note that the salary information listed is a general guideline only. Lockheed Martin considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/ training, key skills as well as market(work location) and business considerations when extending an offer. Benefits offered: Medical, Dental, Vision, Flexible work arrangements and schedules (e.g., 4x10), 401(k) match, Paid time off, Holidays, Parental Leave, EAP, Flexible Spending Accounts, Education Assistance, Life Insurance, Short-Term Disability, and Long-Term Disability. Annual short-term and/or long-term incentive compensation programs may be offered depending on the position. Payments under these annual programs are not guaranteed and can vary from year to year and are tied to a range of performance metrics. For (Washington state applicants only) Non-represented full-time employees: accrue at least 10 hours per month of Paid Time Off (PTO) to be used for incidental absences and other reasons; receive at least 90 hours for holidays. Represented full time employees accrue 6.67 hours of Vacation per month; accrue up to 52 hours of sick leave annually; receive at least 96 hours for holidays. PTO, Vacation, sick leave, and holiday hours are prorated based on start date during the calendar year.

Join us in building the future of finance. Our mission is to democratize finance for all. An estimated $124 trillion of assets will be inherited by younger generations in the next two decades. The largest transfer of wealth in human history. If you're ready to be at the epicenter of this historic cultural and financial shift, keep reading. About the team + role We are building an elite team, applying frontier technologies to the world's biggest financial problems. We're looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn't a place for complacency, it's where ambitious people do the best work of their careers. We're a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. The Cloud Security team is focused on protecting Robinhood's AWS cloud and providing engineers with foundational security capabilities. It is a major contributor to the company's least privilege objective to manage network traffic and reduce the level of access that employees have or could obtain through escalation. A Senior Security Engineer on the Cloud Security team is a well-rounded technologist and a deep subject matter expert in cloud security and building security controls on Amazon Web Services (AWS). The ideal candidate for this role will embody and exemplify our Safety First value. This role is based in our Bellevue, WA and Menlo Park, CA offices, with in-person attendance expected at least 3 days per week. At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams. What You'll Do As a Security Engineer you will be part of a team which owns the security posture for cloud infrastructure on which all Robinhood products are built You will build and operate solutions that protect foundational infrastructure and make it easier for Robinhood developers to protect their applications Protect Robinhood's AWS cloud environment and provide engineers with foundational security capabilities Build, configure and set up systems with a safety first approach What You Bring Securing enterprise applications on AWS by building software, services, and automation that provide safe defaults, paved roads, and intuitive capabilities to other developers Proficiency with Golang (preferred) or Python and Infrastructure-as-Code (IaC) using Terraform Strong command of industry best practices like the AWS Well-Architected framework and CIS Benchmarks and have expert level knowledge of AWS security services like Identity & Access Management (IAM), Service Control Policies (SCPs), AWS WAF, and AWS Network Firewall What We Offer Challenging, high-impact work to grow your career Performance driven compensation with multipliers for outsized impact, bonus programs, equity ownership, and 401(k) matching Best in class benefits to fuel your work, including 100% paid health insurance for employees with 90% coverage for dependents Lifestyle wallet - a highly flexible benefits spending account for wellness, learning, and more Employer-paid life & disability insurance, fertility benefits, and mental health benefits Time off to recharge including company holidays, paid time off, sick time, parental leave, and more! Exceptional office experience with catered meals, events, and comfortable workspaces. In addition to the base pay range listed below, this role is also eligible for bonus opportunities + equity + benefits. Base pay for the successful applicant will depend on a variety of job-related factors, which may include education, training, experience, location, business needs, or market demands. The expected base pay range for this role is based on the location where the work will be performed and is aligned to one of 3 compensation zones. For other locations not listed, compensation can be discussed with your recruiter during the interview process. Base Pay Range Zone 1 (Menlo Park, CA; New York, NY; Bellevue, WA; Washington, DC) $187,000—$220,000 USD Zone 2 (Denver, CO; Westlake, TX; Chicago, IL) $165,000—$194,000 USD Zone 3 (Lake Mary, FL; Clearwater, FL; Gainesville, FL) $146,000—$172,000 USD Click here to learn more about our Total Rewards, which vary by region and entity. If our mission energizes you and you're ready to build the future of finance, we look forward to seeing your application. AI Usage Disclosure: Robinhood uses artificial intelligence (AI) tools to support parts of our recruiting process. These tools enhance the efficiency and consistency of our hiring process; however, all hiring decisions are made by our hiring teams. Robinhood provides equal opportunity for all applicants, offers reasonable accommodations upon request, and complies with applicable equal employment and privacy laws. Inclusion is built into how we hire and work—welcoming different backgrounds, perspectives, and experiences so everyone can do their best. Please review the Privacy Policy for your country of application.

At Space Coast Credit Union (SCCU) , our members are at the heart of everything we do. Since 1951, we've been committed to delivering financial services founded on integrity and a people-first philosophy. As a Cybersecurity Engineer, you will be responsible for protecting the credit union's digital assets, sensitive customer information, and internal systems from cyber threats. This role involves designing, implementing, and managing security measures to ensure the confidentiality, integrity, and availability of data and systems. Responsibilities and expectations will scale according to the candidate's experience level Why Join SCCU? Member-Focused Mission: Be part of a not-for-profit organization that reinvests in its members. Flexible Schedule Options Career Growth: We prioritize internal promotions and offer on-the-job training. Cybersecurity Engineer I Key Responsibilities Monitor security systems (SIEM/Endpoint Protection (AV, EDR, Zero Day, APT), DLP, IPS/IDS, NAC and rogue device detection) for suspicious activities and anomalies. Respond to security incidents, conducting root cause analysis and coordinating remediation efforts. Identify, analyze, and respond to security threats and vulnerabilities. Perform threat hunting and advanced detection activities to protect systems and data. Lead the planning, testing, and scheduling of system patches across all endpoints, mobile devices, servers, and network infrastructure. Develop and maintain a patch management schedule and ensure timely application of security patches and updates. Coordinate with various teams to minimize disruption and ensure compatibility of patches with organizational systems. Conduct vulnerability assessments and penetration testing. Identify and prioritize risks, working with IT teams to remediate vulnerabilities and implement patches. Design, implement, and manage security solutions, including firewalls, encryption protocols, access control systems, and data protection technologies. Ensure compliance with regulations such as NCUA, PCI-DSS, and other applicable industry standards. Assist in audits, both internal and external, and provide reports and documentation as required. Develop, document, and maintain security policies, standards, and procedures. Contribute to the continuous improvement of the organization's cybersecurity posture. Work closely with network, systems, and application teams to ensure security is integrated into the infrastructure. Support secure system and application development practices. Assist in delivering cybersecurity training programs to staff, promoting awareness of security policies, phishing attacks, and safe computing practices. Lead complex incident response efforts, coordinating with internal teams and external partners. Serve as the primary point of contact during high-impact security incidents. Cybersecurity Engineer I Requirements Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field. Relevant certifications and experience may substitute for a degree. 3-5 years of experience in cybersecurity. Cybersecurity Engineer I Compensation $99,000.00 - $139,734.00 SCCU Benefits Health & Wellness: Medical, dental, and vision insurance, plus an Employee Assistance Program. Financial Perks: 401(k) match (5%), HSA match, and SCCU-paid insurance (short/long-term disability, life insurance). Education Support: Tuition reimbursement after one year of service. Generous Time Off: 20+ days of PTO, birthday PTO, and 11 federal holidays. Exclusive Discounts: Lower rates on loans, credit cards, and no fee SCCU accounts! Work Schedule Monday – Friday: 8:00 a.m. - 5:00 p.m. About SCCU Since 1951, Space Coast Credit Union (SCCU) has proudly served our community, growing to over 685,000 members and managing $9 billion in assets. With 67 branches spanning Florida's east coast, we are the third-largest credit union in the state. In 2025, we expanded into Orange County to better serve the growing East Orlando market. As a not-for-profit financial institution, SCCU is dedicated to putting our members first. Unlike traditional banks, we return profits to our members through better rates, lower fees, and enhanced services. While we offer the same financial products—like checking, savings, and loans—our focus remains on empowering our members and supporting their financial well-being. With local decision-making and a commitment to exceptional service, we strive to make a meaningful difference in the lives of those we serve. At SCCU, we also prioritize our team members by fostering a supportive and collaborative environment that encourages career growth and development. As we continue to grow, we are seeking talented, member-focused professionals to join our team and help deliver innovative financial solutions and outstanding service. I UNDERSTAND this application is a legal document for purposes of employment. Upon acceptance of an offer with SCCU, I understand that I will be required to complete background screening, employment and education verifications, and drug screening. If I am a member of Space Coast Credit Union, my SCCU membership accounts will be reviewed as part of the employment screening process to determine whether they are in good standing, as defined by SCCU policy. Failure to meet these standards may affect employment eligibility, including the possible withdrawal of a conditional offer of employment. I further understand that any misstatements or omissions in this application or during the pre-employment process may be considered falsification and could result in a decision not to hire me, or termination of employment if discovered after hire. I UNDERSTAND that the information requested regarding date of birth, race, and sex is for the sole purpose of gathering the above information accurately and will not be used to discriminate against me in violation of any law. In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and complete the required employment eligibility verification documentation upon hire. SCCU is a drug-free workplace. I understand that as a condition of employment, I will be required to submit to drug testing and any procedures necessary to assess my qualifications for employment. If hired, I further understand that my employment is for no definite period and may be terminated at any time without prior notice.

At Space Coast Credit Union (SCCU) , our members are at the heart of everything we do. Since 1951, we've been committed to delivering financial services founded on integrity and a people-first philosophy. As a Cybersecurity Engineer, you will be responsible for protecting the credit union's digital assets, sensitive customer information, and internal systems from cyber threats. This role involves designing, implementing, and managing security measures to ensure the confidentiality, integrity, and availability of data and systems. Responsibilities and expectations will scale according to the candidate's experience level Why Join SCCU? Member-Focused Mission: Be part of a not-for-profit organization that reinvests in its members. Flexible Schedule Options Career Growth: We prioritize internal promotions and offer on-the-job training. Cybersecurity Engineer I Key Responsibilities Monitor security systems (SIEM/Endpoint Protection (AV, EDR, Zero Day, APT), DLP, IPS/IDS, NAC and rogue device detection) for suspicious activities and anomalies. Respond to security incidents, conducting root cause analysis and coordinating remediation efforts. Identify, analyze, and respond to security threats and vulnerabilities. Perform threat hunting and advanced detection activities to protect systems and data. Lead the planning, testing, and scheduling of system patches across all endpoints, mobile devices, servers, and network infrastructure. Develop and maintain a patch management schedule and ensure timely application of security patches and updates. Coordinate with various teams to minimize disruption and ensure compatibility of patches with organizational systems. Conduct vulnerability assessments and penetration testing. Identify and prioritize risks, working with IT teams to remediate vulnerabilities and implement patches. Design, implement, and manage security solutions, including firewalls, encryption protocols, access control systems, and data protection technologies. Ensure compliance with regulations such as NCUA, PCI-DSS, and other applicable industry standards. Assist in audits, both internal and external, and provide reports and documentation as required. Develop, document, and maintain security policies, standards, and procedures. Contribute to the continuous improvement of the organization's cybersecurity posture. Work closely with network, systems, and application teams to ensure security is integrated into the infrastructure. Support secure system and application development practices. Assist in delivering cybersecurity training programs to staff, promoting awareness of security policies, phishing attacks, and safe computing practices. Lead complex incident response efforts, coordinating with internal teams and external partners. Serve as the primary point of contact during high-impact security incidents. Cybersecurity Engineer I Requirements Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field. Relevant certifications and experience may substitute for a degree. 3-5 years of experience in cybersecurity. Cybersecurity Engineer I Compensation $99,000.00 - $139,734.00 SCCU Benefits Health & Wellness: Medical, dental, and vision insurance, plus an Employee Assistance Program. Financial Perks: 401(k) match (5%), HSA match, and SCCU-paid insurance (short/long-term disability, life insurance). Education Support: Tuition reimbursement after one year of service. Generous Time Off: 20+ days of PTO, birthday PTO, and 11 federal holidays. Exclusive Discounts: Lower rates on loans, credit cards, and no fee SCCU accounts! Work Schedule Monday – Friday: 8:00 a.m. - 5:00 p.m. About SCCU Since 1951, Space Coast Credit Union (SCCU) has proudly served our community, growing to over 685,000 members and managing $9 billion in assets. With 67 branches spanning Florida's east coast, we are the third-largest credit union in the state. In 2025, we expanded into Orange County to better serve the growing East Orlando market. As a not-for-profit financial institution, SCCU is dedicated to putting our members first. Unlike traditional banks, we return profits to our members through better rates, lower fees, and enhanced services. While we offer the same financial products—like checking, savings, and loans—our focus remains on empowering our members and supporting their financial well-being. With local decision-making and a commitment to exceptional service, we strive to make a meaningful difference in the lives of those we serve. At SCCU, we also prioritize our team members by fostering a supportive and collaborative environment that encourages career growth and development. As we continue to grow, we are seeking talented, member-focused professionals to join our team and help deliver innovative financial solutions and outstanding service. I UNDERSTAND this application is a legal document for purposes of employment. Upon acceptance of an offer with SCCU, I understand that I will be required to complete background screening, employment and education verifications, and drug screening. If I am a member of Space Coast Credit Union, my SCCU membership accounts will be reviewed as part of the employment screening process to determine whether they are in good standing, as defined by SCCU policy. Failure to meet these standards may affect employment eligibility, including the possible withdrawal of a conditional offer of employment. I further understand that any misstatements or omissions in this application or during the pre-employment process may be considered falsification and could result in a decision not to hire me, or termination of employment if discovered after hire. I UNDERSTAND that the information requested regarding date of birth, race, and sex is for the sole purpose of gathering the above information accurately and will not be used to discriminate against me in violation of any law. In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and complete the required employment eligibility verification documentation upon hire. SCCU is a drug-free workplace. I understand that as a condition of employment, I will be required to submit to drug testing and any procedures necessary to assess my qualifications for employment. If hired, I further understand that my employment is for no definite period and may be terminated at any time without prior notice.

Direct Supply is building the future of healthcare technology with industry-leading products, solutions and platforms to help improve the lives of millions of seniors and those who care for them. The Senior Cyber Security Engineer plays a critical role in identifying, assessing and reducing cybersecurity risks across Direct Supply's technology environments. This role provides hands-on technical expertise and operational ownership of vulnerability management and penetration testing to strengthen security controls, reduce exposure and protect business systems and information. Reporting to the Director of Information Security, you'll work independently and collaborate with engineering, operations and security teams to drive effective remediation, improve security processes and deliver measurable improvements in Direct Supply's security posture. What You'll Do And Impact Own vulnerability management operations by establishing effective processes, maintaining security scanning tools and ensuring reliable coverage across infrastructure, cloud and application environments to identify and reduce security exposure. Analyze and prioritize security vulnerabilities by validating findings and assessing exploitability, asset criticality and business impact to focus remediation efforts on the highest risks. Drive vulnerability remediation by partnering with engineering and operations teams to coordinate corrective actions, monitor progress, verify fixes and escalate unresolved risks. Improve security processes by automating scanning, ticketing and reporting workflows to increase efficiency, strengthen consistency and reduce manual effort. Monitor and report security performance through metrics on scanning coverage, remediation progress, overdue vulnerabilities and recurring risks to improve visibility and support informed decisions. Plan and execute internal and external penetration testing by defining assessment scope, conducting security testing and identifying exploitable weaknesses to strengthen security defenses. Validate security weaknesses and potential attack paths through automated discovery, manual testing and controlled exploitation to assess business impact and deliver actionable findings. Coordinate external penetration testing services by managing testing scope, schedules, access and deliverables while monitoring provider performance to ensure effective testing coverage and quality. Drive resolution of penetration testing findings by validating results, providing remediation guidance, coordinating corrective actions and retesting fixes to confirm vulnerabilities have been addressed. Strengthen security practices by analyzing root causes, recommending improvements to system designs and configurations, and sharing technical knowledge to prevent recurring vulnerabilities. What You'll Bring Bachelor's degree in Computer Science, Engineering, Information Security or a related field. 6+ years of progressive experience in information security or security engineering, including hands-on experience in vulnerability management and penetration testing. Demonstrated expertise in vulnerability assessment, security scanning platforms, asset coverage, finding validation and risk-based prioritization to identify and reduce security exposure. Hands-on experience conducting internal and external penetration testing, including manual validation, controlled exploitation, security risk assessment and technical reporting. Experience operating, configuring and troubleshooting security platforms and automating security workflows to improve operational efficiency and testing effectiveness. Experience assessing vulnerabilities and security risks across infrastructure, cloud and application environments, including complex cloud environments. Ability to independently investigate complex security issues, identify root causes and recommend practical corrective actions that reduce recurring risks. Experience coordinating external security testing providers and communicating technical findings, remediation priorities and security risks to technical stakeholders and leadership. OSCP, GPEN, GWAPT or relevant vulnerability management certifications; scripting and API integration experience; and experience testing web applications, APIs and cloud environments preferred. Job to be performed in the location listed. Generous benefit package available. © 2013 to 2026 Direct Supply, Inc. All rights reserved.