Find Your Dream Career

Title: QA Engineer III Location : Orlando, FL Reports To: QA Manager FLS Status : Exempt About The Role ANDOR Health is seeking an experienced QA Engineer III to help ensure the quality, reliability, and performance of our healthcare technology solutions. This role leads quality assurance across web applications, APIs, databases, and healthcare integrations, combining hands-on testing, automation, healthcare interoperability expertise, and mentorship. You will work with Engineering, Product, Implementation, and Support to deliver software supporting critical clinical workflows. Key Responsibilities Lead QA strategy, test planning, and execution for complex features, integrations, and releases. Perform functional, regression, integration, end-to-end, and cross-browser testing. Validate HL7 v2.x messages, interface mappings, and EHR integration workflows. Test REST APIs using Postman or similar tools; use SQL to validate data and investigate defects. Build and maintain automated UI and API tests using Selenium, Playwright, or similar frameworks; contribute to CI/CD integration. Document and track defects in Azure DevOps or comparable tools; assess quality risks and release readiness. Mentor junior engineers and strengthen QA processes, security practices, and HIPAA-aligned handling of patient data. Required Qualifications 8+ years of hands-on software QA experience, including 3+ years in healthcare technology. Experience with HL7 v2.x interfaces, web application testing, REST APIs, and SQL. Hands-on API testing with Postman and test automation with Selenium, Playwright, or similar tools. Scripting or programming in C#, JavaScript/TypeScript, or Python. Knowledge of Agile, SDLC/STLC, and defect management tools such as Azure DevOps. Strong troubleshooting, communication, and cross-functional collaboration skills. Bachelor's degree in a related technical field or equivalent practical experience. Preferred Qualifications FHIR APIs; Mirth Connect or other healthcare interface engines. Integration experience with Epic, Oracle Health/Cerner, Meditech, or similar EHR systems. CI/CD automation, virtual care or telehealth testing, mobile testing, or AI-enabled healthcare solutions. Experience mentoring engineers and improving testing practices. What We're Looking For A quality-focused engineer who takes ownership, thinks critically, and balances technical testing with collaboration, mentorship, and continuous improvement. Occasional evening or weekend support may be needed for releases, deployments, and critical issues. The preceding functions may not be comprehensive in scope regarding work performed by an employee assigned to this position classification. Management reserves the right to add, modify, change, or rescind the work assignments of this position. Management also reserves the right to make reasonable accommodations so that a qualified employee(s) can perform the essential functions of the position. At Andor Health, our greatest strength comes from bringing together talented people with diverse perspectives to support the technological needs of physicians, hospitals, and post-acute organizations across the globe. Andor Health offers a comprehensive compensation and benefits package, including holidays, vacation, medical, dental, and vision insurance, company paid life insurance and retirement savings. Andor Health's policy is to provide equal employment opportunity and affirmative action in all of its employment practices without regard to race, color, religion, sex, national origin, ancestry, marital status, protected veteran status, age, individuals with disabilities, sexual orientation, or gender identity or expression or any other legally protected category. Applicants for North American based positions with Andor Health must be legally authorized to work in the United States or Canada. Verification of employment eligibility will be required as a condition of hire. EOE Minorities/Females/Individuals with Disabilities/Protected Veterans Drug Free Workplace Powered by ExactHire: 210616

The Cybersecurity Engineer Principal is the senior penetration tester and red team lead for a boutique security assessment practice delivering red, blue, and purple team engagements to commercial and government clients. This is a hands-on technical lead seat that owns engagements end to end, from scoping and rules of engagement through testing, reporting, client briefings, and remediation validation. You start as an individual contributor reporting to the CEO, then recruit, develop, and lead the assessment team as it grows. Most of the work supports the commercial practice, with periodic surge support on cleared government engagements. Target Compensation: $160,000 to $175,000 base Logistics: Remote with onsite work in Orlando, FL, up to five business days per month - must be driving distance of Orlando Clearance Required: Top Secret with SCI eligibility Here's what you'll be doing: Lead penetration tests and red team operations across networks, web applications, APIs, cloud platforms, identity systems, and wireless Scope engagements, set rules of engagement, and estimate level of effort, staffing, and delivery timelines Build realistic attack scenarios, validate vulnerabilities, and demonstrate attack paths and business impact within approved boundaries Run blue and purple team assessments alongside client and internal defenders to measure control effectiveness, detection coverage, and response, then drive practical improvements Build and maintain red team infrastructure, custom tooling, scripts, and testing methodology Write and review evidence-backed reports, escalate critical findings in real time, and brief both technical teams and executives Validate client remediation after fixes land Mentor operators, support hiring, and grow into managing the assessment team Provide periodic surge support on government engagements requiring TS/SCI And what you need to have: 10+ years in cybersecurity, including substantial hands-on penetration testing and demonstrated red team leadership Top Secret clearance with SCI eligibility (no polygraph required) Bachelor's degree in cybersecurity, computer science, IT, or a related field, or equivalent experience Hands-on testing across network, web application, API, cloud, identity, and wireless Deep knowledge of Windows, Linux, Active Directory, networking protocols, authentication, and access controls Cloud and hybrid environment assessments Scripting and tool development in Python, PowerShell, and Bash Building and maintaining red team infrastructure and assessment tooling Working knowledge of the OWASP Testing Guide, MITRE ATT&CK, and established penetration testing methodologies Partnering with defensive teams to test detection and response capabilities Strong technical writing, client communication, and executive presentation skills Ability to scope effort, manage competing engagement priorities, and deliver independently Bonus points: OSCP, OSEP, OSWE, CRTO, CISSP, or CEH; master's degree in a related field; consulting or boutique firm experience across concurrent clients; mixed commercial and government delivery; experience building an assessment practice or managing pentesters and red team operators Bonus points: advanced depth in adversary emulation, application security, cloud exploitation, exploit development, or detection engineering

Job Description: Type of Requisition: Regular Clearance Level Must Currently Possess: Top Secret SCI + Polygraph Clearance Level Must Be Able To Obtain: None Public Trust/Other Required: None Job Family: Cyber and IT Risk Management Skills: Job Qualifications: Cloud Security, Cybersecurity Risk Management, Information Security Certifications: None Experience: 8 + years of related experience US Citizenship Required: Yes Job Description: Seize your opportunity to make a personal impact as a Penetration Tester supporting customer activities. GDIT is your place to make meaningful contributions to challenging projects and grow a rewarding career. At GDIT, people are our differentiator. As a Penetration Tester, you will help ensure today is safe and tomorrow is smarter. Our work depends on a Penetration Tester joining our highly skilled team to be a premier provider of cyber security services to the customer. We provide consummate cyber security risk management "as a service" platform across multiple fabrics and centers. We have responsibility to ensure operational IT capabilities provide the client with necessary timeliness, accuracy and security of information demanded from all our highly professional roles. Be the change, lead our change – join us! HOW A PENETRATION TESTER WILL MAKE AN IMPACT Conduct internal and external penetration testing of networks, web applications, databases, and cloud services Manually exploit and compromise networks, web applications, databases, and cloud services to include privilege escalation and lateral movement Examine results of web/OS scanners, scans and static source code analysis Identify vulnerabilities, misconfigurations, and compliance issues Write final reports, defend all findings to include the risk or vulnerability, mitigation strategies, and references Ability to meet and coordinate with various audiences to include developers, system administrators, project managers, and senior government stakeholders Provide security recommendations for developers, system administrators, project managers, and senior government stakeholders Report vulnerabilities identified during security assessments Write penetration testing Rules of Engagements (RoE), Test Plans, and Standard Operating Procedures (SOP) Produce actionable, threat-based reports on security testing results Conduct security reviews, technical research, and provide reporting to increase security defense mechanisms WHAT YOU'LL NEED TO SUCCEED: Education: Bachelor's Degree (Computer Engineering, Computer Science, Electrical Engineering, Information Systems, Information Technology, Cybersecurity, or a closely related discipline) Required Experience: 8+ yrs Clearance: TS/SCI with Polygraph Required Technical Skills: Experience with NIST 800-53 and Risk Management Framework Desired Certifications: CEH - Certified Ethical Hacker Certification, CPT - Certified Penetration Tester Desired Skills: Strong writing skills Experience with AWS and Azure Cloud Security Location: McLean, VA - On Customer Site GDIT IS YOUR PLACE: 401K with company match Comprehensive health and wellness packages Internal mobility team dedicated to helping you own your career Professional growth opportunities including paid education and certifications Cutting-edge technology you can learn from Rest and recharge with paid vacation and holidays #OpportunityOwned #GDITCareers #WeAreGDIT #JET #VA_2026Alumni The likely salary range for this position is $168,141 - $227,485. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range. Scheduled Weekly Hours: 40 Travel Required: Less than 10% Telecommuting Options: Onsite Work Location: USA VA McLean Additional Work Locations: Total Rewards At GDIT: Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most. Our Identity Verification Process: As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes. About Our Work: We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development. Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc. Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans

Purple Jay is a veteran-owned IT and InfoSec company that guides government agencies and private organizations into the right balance of business productivity and implements security measures to help maximize their outcomes and achieve their mission. We believe that effective cybersecurity solutions must go beyond simply protecting data and systems – they must align with the mission to enable and empower progress. Our teams are built to provide cross-domain services with highly skilled and trained personnel supported by cross-matrix, agile teams and our proprietary digital solutions that have a track record of success. Our positively charged approach intends to exceed client's minimum requirements, reduce client and organizational risk, and maximize the return on investment. OUR COMPANY CULTURE IS BUILT WITH TEAM MEMBERS THAT… Have a curious and intellectual mind who are inclined to ask "why". Use creative thinking and adaptive decision-making to solve problems. Value their contribution and the contribution of others on the team. Are passionate about learning and developing skills to overcome challenges. Look to leverage their knowledge or experience to advance within the InfoSec Industry. Can connect with people of diverse backgrounds and communication styles, through empathy and clear verbal, visual, and written communication. ROLE OVERVIEW: Our Threat Resilience team answers specific security questions for federal programs with hands-on evidence, inside a fixed window . When a system's risk can't be settled by documentation and vendor attestation alone, we test it directly from an attacker's point of view. We then put what we find in the context of real threats and give the decision maker a defensible answer with practical fixes. Engagements range from a bounded technical check, to a focused assessment across several components, to a deep evaluation spanning multiple trust boundaries. As a mid-level Penetration Tester, you'll be a core operator on these engagements. You'll test under a senior engagement lead and build the proof-of-concept tooling that confirms or rules out an attack path. Then you'll turn your findings into evidence and recommendations that a government Authorizing Official can act on . This position is based in Ashburn, VA, and requires travel for on-site assessments at customer facilities. Applicants must hold the Offensive Security Certified Professional (OSCP) certification or have 3 to 5 years of hands-on professional penetration testing experience. Applicants must be able to obtain and maintain a federal background investigation (Public Trust or higher). Applicants must be a US Citizen. RESPONSIBILITIES: Purple Jay teams are cross-functional and cross-matrixed to aid in the effective delivery of services and digital solutions. The role responsibilities include but are not limited to: Plan and execute hands-on security assessments, including: Internal and external network penetration tests, including Active Directory enumeration and attack-path analysis, privilege escalation, credential attacks, and lateral movement Web application and API testing for flaws in authentication, authorization, session management, and business logic Adversary emulation using realistic tactics, techniques, and procedures (TTPs) mapped to MITRE ATT&CK, with commercial and open-source offensive tooling Assessments of cloud and SaaS environments, wireless and RF systems, and specialized environments such as industrial control systems, robotic automation, and medical devices, using safe, non-disruptive methods suited to production conditions Physical security assessments and authorized social engineering engagements when they are in scope Hunt, detect, and validate: threats in endpoint, network, and log telemetry, starting from a hypothesis, to find evidence of compromise and check whether defenders can see attacker activity detection and response capabilities alongside defensive teams in purple team exercises Model, develop, and recommend: threat models that tie each finding to the system's architecture, trust boundaries, likely adversaries, and mission impact, so real exploitable risk stands apart from theoretical noise proof-of-concept exploits and custom tooling in Python to confirm attack paths and chained weaknesses practical fixes and mitigations, including compensating controls the customer already owns, confirmed through regression testing Document, report, and communicate: reproducible evidence, maintaining chain of custody and protecting credentials, PII, and sensitive data throughout every engagement clear findings with CVSS 4.0 severity, CWE and OWASP classification, reproduction steps, and prioritized remediation, plus plain-language summaries for non-technical readers results within defined Rules of Engagement, supporting coordinated disclosure with vendors and system owners Use AI-assisted tooling throughout the work, with a human in the loop and personal ownership of every result. Help build and refine the team's playbooks, test plans, and reporting templates. PROFESSIONAL SKILLS Clear written communication for both engineering and executive audiences. Sound judgment in production environments, including knowing when to stop, escalate, or ask. The ability to quickly build working proficiency in unfamiliar technologies. Our assessment targets range from enterprise networks and cloud services to industrial automation, medical devices, and physical facilities, and each engagement can bring a new domain. Strong sense of personal accountability regarding decision-making and coordinating across different project and department teams Experience working in a high-level collaborative environment and promoting a teamwork mentality. Proven ability to build and maintain effective relationships with stakeholders at all levels, including technical teams, management, and clients. TECHNICAL SKILLS Hands-on network penetration testing experience across Linux and Windows environments, including Active Directory attacks, privilege escalation, lateral movement, and pivoting. Web application and API testing experience covering the OWASP Top 10, authentication and authorization flaws, and business logic issues. Practiced with offensive security tooling such as Burp Suite Professional, Nessus, Nmap, Metasploit, Cobalt Strike, BloodHound, Impacket, and NetExec. Threat hunting experience, or a solid working knowledge of how attacker activity shows up in EDR, SIEM, and network telemetry. A strong understanding of threat modeling. You don't stop at finding vulnerabilities. You explain what they mean for the specific system and mission, how an adversary would chain them together, and which fixes or mitigations matter most. Proficiency in Python or a similar language for exploit development, automation, and tooling. Proven skill using AI tooling for human-in-the-loop security testing. You use AI to speed up reconnaissance, analysis, scripting, and reporting, and you independently verify everything it produces. Every finding you deliver is one you can explain and defend yourself. PREFERRED QUALIFICATIONS Advanced certifications such as OSEP, OSWE, CRTO, GPEN, GXPN, GCTH, or Burp Suite Certified Practitioner. Physical penetration testing experience. Social engineering experience, including phishing, pretexting, and help desk or account recovery testing. Red team or purple team experience. Mobile application testing on Android and iOS. Testing of identity and federation protocols such as OAuth 2.0, OIDC, SAML, and WebAuthn. Cloud security testing in AWS, Azure, or GCP. OT/ICS security experience with PLCs, industrial protocols, or robotics (GICSP or GRID a plus). Wireless and RF assessment experience, including software-defined radio tools. Medical device or IoT security experience. Familiarity with NIST SP 800-53A, NIST SP 800-115, and the Risk Management Framework, or experience supporting federal authorization decisions. An active security clearance. TRAVEL REQUIREMENTS Travel within the continental U.S. is required to support on-site assessments at customer facilities (up to 10% of the time). Travel greater than 50 miles from the primary work location will be reimbursed in accordance with federal and local policies. ABOUT THE BENEFITS PURPLE JAY IS ALL ABOUT THE BENEFITS! WE OFFER… Medical, Dental & Vision benefits as well as company-paid Life & Disability Insurance policies. Optional 401k, additional Disability, Life, and Voluntary AD&D plans available. Paid Federal holidays and up to two weeks of accrued PTO (Paid Time Off). An opportunity for career growth with training and boot camps. The required technical equipment will be provided by Purple Jay. An empowering culture that values your voice while challenging you to get better every day. Purple Jay, LLC is an Equal Opportunity Employer. All applicants are considered without regard to race, color, ancestry, national origin, gender/gender identity, sexual orientation, marital and family status, religion and religious belief, age, disability, results of genetic information, and service in the military.

Penetration Tester – MSSP, New York Role at a glance Job title: Penetration Tester Company: Growing Managed Security Services Provider (MSSP), name withheld Location: New York, NY (Manhattan office) Work pattern: Hybrid, 2 days on-site, with occasional client site visits Employment type: Full-time, permanent Experience: 4+ years of hands-on penetration testing Salary: $150,000 – $180,000 base + bonus (DOE) Reports to: Head of Offensive Security About the company Our client is an established Managed Security Services Provider headquartered in New York. They protect mid-market and enterprise organisations across financial services, healthcare, legal and technology. Their services span 24/7 SOC monitoring, MDR, vulnerability management and a fast-growing offensive security practice. Continued client demand means they are expanding the penetration testing team. The role You will deliver hands-on penetration tests across a varied client base, from scoping through to the final report. Each engagement is different, covering networks, web applications, cloud and Active Directory. You will work directly with client stakeholders and turn technical findings into clear, prioritised remediation advice. You will also help shape the methodology and tooling of a growing team. Key responsibilities Perform internal and external network penetration tests, including Active Directory attack paths Test web applications and APIs against OWASP Top 10 and beyond, with manual testing, not just scanning Assess cloud environments (AWS, Azure, GCP) for misconfiguration and privilege escalation Carry out wireless, social engineering and phishing assessments as engagements require Scope engagements with clients and the account team, and agree rules of engagement Write clear technical and executive reports with risk ratings and practical remediation steps Present findings on client debrief calls and support retesting Build scripts and tooling to automate repeatable testing tasks Keep up with new vulnerabilities and attack techniques, and share knowledge with the team Required experience and skills 3+ years of hands-on penetration testing, ideally in a consultancy or MSSP setting Strong grasp of network and web application testing methods (OWASP, PTES, NIST SP 800-115) Practical Active Directory exploitation experience (Kerberoasting, relay attacks, privilege escalation) Confident with Burp Suite Pro, Nmap, Metasploit, BloodHound, Impacket and similar tools Scripting in Python, Bash or PowerShell Solid knowledge of Windows and Linux internals, networking, and common protocols Excellent written English, with a strong report-writing portfolio Comfortable working directly with clients at technical and executive level Authorised to work in the US without sponsorship Nice to have Certifications such as OSCP, PNPT, CRTO, GPEN, GWAPT or OSWE (OSCP strongly preferred) Cloud penetration testing experience, plus container and Kubernetes security Mobile application testing (iOS and Android) Red team or adversary simulation exposure, including C2 frameworks Experience with compliance-driven testing (PCI DSS, SOC 2, HIPAA, NYDFS 500) CVEs, published research, bug bounty or CTF achievements What's on offer Base salary of $150,000 – $180,000 plus annual performance bonus Fully funded certifications and training budget, plus dedicated lab time Medical, dental and vision insurance, and a 401(k) with company match Generous PTO plus paid holidays Clear progression to Senior Penetration Tester and Red Team roles A varied client base, so no two engagements are the same

Our Mission At Palo Alto Networks®, we're united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you're ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you're in the right place. Who We Are In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! We believe collaboration thrives in person. That's why most of our teams work from the office full time, with flexibility when it's needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes. Job Summary The Team Information Security - We're not your ordinary Information Security team. We're a diverse group of security professionals who challenge the status quo in order to protect Palo Alto Networks and our customers. Driving innovation on the Information Security team of the fastest-growing high-tech cybersecurity company is a once-in-a-lifetime opportunity. You'll be joined by the brightest minds in technology, and our global teams are on the front line of defense against cyberattacks. Job Summary As a Senior Staff Penetration Testing Engineer, you will conduct comprehensive penetration tests and lead assumed-breach red team operations across cloud-native applications and large-scale infrastructure. You will leverage AI-assisted testing frameworks to accelerate threat discovery and provide expert security guidance to engineering teams, ensuring robust defense against emerging cyber threats. Key Responsibilities Conduct comprehensive penetration tests across cloud-native applications, large-scale infrastructure, and complex network architectures. Execute multi-tenant isolation testing and segmentation validation. Identify, exploit, and document vulnerabilities in cloud services, container orchestration platforms, and automated deployment pipelines. Plan and lead assumed-breach, objective-based red team operations against systems to test the effectiveness of defensive controls. Integrate AI-assisted testing frameworks and LLM-driven automation into penetration testing workflows. Provide expert-level security guidance to SRE and Engineering teams during remediation planning and secure architectural design. Lead the security assessment of internal tooling, identity management systems, and third-party integrations. Research and develop custom tooling or scripts to automate testing and improve the efficiency of offensive engagements. Translate complex technical findings into high-impact reports and presentations for both technical stakeholders and executive leadership. Mentor junior team members and act as a subject matter expert on emerging threats and exploitation trends. Qualifications Required Qualifications Bachelor's degree with 5+ years of experience, or Master's degree with 3+ years of experience in penetration testing, offensive security, or a related field. Proven experience conducting comprehensive penetration tests across cloud-native applications and large-scale infrastructure. Demonstrated ability to plan and lead assumed-breach, objective-based red team operations including lateral movement and privilege escalation. Strong proficiency in identifying and exploiting vulnerabilities in cloud services and container orchestration platforms. Experience researching and developing custom tooling or scripts to automate security testing and improve efficiency. Preferred Qualifications Experience integrating AI-assisted testing frameworks and LLM-driven automation into penetration testing workflows. Deep understanding of FedRAMP-mandated attack vectors and compliance testing. Strong background in providing security guidance to SRE and Engineering teams during secure architectural design. Excellent communication skills with the proven ability to translate complex technical findings for executive leadership. Demonstrated track record of mentoring junior team members and acting as a subject matter expert on emerging threats. Compensation Disclosure The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/com-missioned roles) is expected to be the annual range listed below. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here . $152,300.00 - $246,400.00/yr Our Commitment We're trailblazers that dream big, take risks, and challenge cybersecurity's status quo. It's simple: we can't accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at accommodations@paloaltonetworks.com . Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.

For our client, we are seeking a Senior Penetration Tester to join the team of a leader in the Finance & Insurance space. This role will focus on uncovering vulnerabilities across core systems, web applications, APIs, cloud environments, and AI-enabled workflows. You will partner closely with engineering teams to translate security findings into clear priorities, while also helping strengthen testing coverage through smarter tooling and secure code review practices. The position offers the opportunity to influence both offensive security execution and the broader security posture of a modern technology organization. Location: Remote Compensation: $143,000 – $183,000 annually Responsibilities Conduct manual penetration tests on core systems and AI applications Develop AI-assisted tools to improve penetration testing coverage Triage and address findings from SAST tools, refining rules to reduce false positives Perform secure code reviews across web applications, APIs, and AWS environments Create security tools and services within the application stack Support security reviews for AI-generated code before production deployment Communicate risks effectively to engineering teams for prioritization Qualifications 5+ years in application security, offensive security, or product security Hands-on experience with pentesting and code review for web applications, APIs, and AWS Curiosity and a hacker mentality to explore system vulnerabilities Interest in leveraging AI for security testing and workflow improvements Understanding of AI/LLM attack surfaces and vulnerabilities in AI-generated code Proficiency in modern programming languages like Ruby, Python, TypeScript, or Go Strong communication skills to convey risk and priorities to engineers Benefits Flexible work environment with options for remote or hybrid work Comprehensive medical, dental, and vision coverage Flexible time-off policy and paid parental leave 401k matching for US employees Wellness reimbursement and volunteering days Annual professional development budget and charitable donation matching Our client is an equal opportunity employer. We encourage you to apply even if you don't meet every qualification—your background could be exactly what this team needs.

Description Salary range: $75,000 - $87,000/year The Penetration Tester supports security assessments by planning and executing tests on web applications, infrastructure, cloud environments, and other technologies connected to the client network. Responsibilities include developing test plans, performing vulnerability and risk analyses, automating testing processes, and mapping findings to NIST SP 800-53 controls to ensure compliance and improve security posture. Conduct security testing of IT assets, web applications, infrastructure assets and technologies, mobile applications, custom developed software implementations, virtual technologies, COTS products, cloud implementations, common application platforms, and other technologies connecting to or interacting with the Judiciary network. Develop and maintain a repeatable methodology for performing security testing. Security test planning should include, but is not limited to: threat modeling, map business requirements to the applicable security requirements, determine appropriate security controls, test scenarios and test cases. Develop the Security Test Plans. Perform security testing, vulnerability analysis, and risk analysis in accordance with an industry-proven, repeatable methodology. Evaluate the effectiveness of security controls as they relate to the applicable security controls of the system tested. Relate test results to controls in NIST SP 800-53, as reflected in the JISF. Develop, maintain and use customized testing scripts (testing automation) for individual and team use. Develop and deliver reports as required. Requirements 4+ years of hands-on cybersecurity assessment experience, including manual penetration testing, web application security testing, and host vulnerability assessments. Demonstrated ability to independently execute security assessments from planning and preparation through testing, findings validation, reporting, and remediation verification. Current penetration testing or ethical hacking certification, such as CEH, CompTIA PenTest+, OSCP, or an equivalent credential. Strong hands-on proficiency with Burp Suite for manual web application testing. Must be able to investigate and validate vulnerabilities beyond automated scanner results. Experience identifying and validating web application vulnerabilities, including SQL injection, cross-site scripting, cross-site request forgery, authentication and authorization weaknesses, and privilege escalation, using OWASP testing guidance. Hands-on experience with Tenable Nessus and Tenable Security Center/VSS, including configuring assessments, interpreting results, validating findings, and distinguishing actionable vulnerabilities from false positives. Experience performing manual host configuration and security compliance assessments against CIS Benchmarks, including validating settings and documenting deviations. Experience assessing databases and commercial off-the-shelf applications for vulnerabilities and insecure configurations, using tools such as AppDetective, DbVisualizer, Scuba, or comparable products. Working knowledge of networking concepts, protocols, and operating system security sufficient to investigate findings and explain their technical impact. Experience applying NIST security guidance, including NIST SP 800-53, and using CVE, NVD, and CVSS information to evaluate vulnerability severity and prioritize remediation. Ability to develop security test plans and produce clear, technically accurate reports documenting affected assets, reproducible findings, supporting evidence, risk, and actionable remediation recommendations. Experience briefing technical findings to application owners, system administrators, developers, and customer stakeholders, and conducting follow-up testing to verify corrective actions. Ability to manage concurrent assessments, meet reporting deadlines, maintain assessment records, and perform peer reviews of findings and deliverables. Preferred Qualifications HCL AppScan experience. Qualys experience. PlexTrac experience, particularly assessment reporting, findings management, and reporting workflow improvement. Federal security assessment experience, particularly with the Judiciary Information Security Framework, NIST Risk Management Framework, or CSAM. Experience with Acunetix, Kali Linux, SQLmap, or comparable application security testing tools. Experience mentoring junior testers and improving assessment procedures, reporting templates, or testing workflows. Bachelor's degree in cybersecurity, computer science, information technology, or a related technical field. Clearance : Ability to obtain and maintain a Public Trust required. The salary range for this position depends upon multiple factors including location, the individual's knowledge, skills, competencies, and experience, and contract-specific budget constraints and organizational requirements. Benefits Gunnison Consulting Group's total compensation package also includes bonus and profit-sharing opportunities, depending on company and employee performance. Available employee benefits include: 3 weeks of Personal Leave your first year 11 paid Holidays each year 5 days of Flexible Time Off each year 401(k) company match at 50% up to 10% of your salary Medical, Dental and Vision Insurance Life and Disability Insurance Public Transportation Subsidies Certifications and Training Allowance - $2,500/year! Why Join Gunnison? Gunnison takes on ambitious projects. We target fun, challenging work that requires creative thinking and innovation. Quality is our top priority. Gunnison employee benefits meet or exceed what other companies in the Washington, D.C. metropolitan area offer. There is a great sense of camaraderie at Gunnison. This is an atmosphere we will maintain as we continue to grow. We are growing rapidly and the opportunity for individual professional growth with Gunnison is outstanding. We hire for careers at Gunnison, not to fill a position. Equal Opportunity Employer. Must be eligible for employment in the United States. We are unable to sponsor candidates at this time. In 1994 Gunnison began serving the greater Washington, D.C. metro area, focused on tackling our customers' most ambitious technology projects . By creating a culture dedicated to enabling our customers and employees to achieve more than they ever thought they could , the company has thrived for over 25 years.

Job Description Position Summary The Security Operations Analyst supports the detection, investigation, response, and continuous improvement of cybersecurity capabilities across enterprise environments. The role monitors security events, conducts initial investigations, supports incident response, contributes to detection and security engineering, and helps develop operational efficiencies through automation and AI-assisted processes. The ideal candidate is analytical, technically curious, process-oriented, and eager to develop practical cybersecurity and AI-enabled operations expertise. This individual uses approved AI tools as an analyst accelerator, validates generated outputs, documents assumptions, and escalates decisions or risks that require senior review. Ideal Candidate Profile The ideal candidate demonstrates sound judgment, attention to detail, a learning mindset, and ownership of assigned work. They can follow established procedures, communicate findings clearly, experiment responsibly with automation and AI, and contribute to tuning AI agents and advancing AI SOC initiatives under the guidance of senior analysts and engineering teams. Responsibilities Security Monitoring, Detection & Incident Response Monitor security platforms, dashboards, alerts, and operational reporting channels for potential cybersecurity threats and operational incidents. Review, triage, investigate, and validate alerts generated by SIEM, EDR, DLP, IAM, network, email, cloud, and other monitoring technologies. Use approved AI-assisted capabilities to summarize alerts, enrich cases, correlate evidence, develop investigative leads, and improve response speed while validating outputs against source data. Execute established incident response playbooks, operational procedures, escalation paths, and human-review requirements. Support evidence collection, documentation, containment activities, case tracking, remediation coordination, and incident closure. Escalate incidents, uncertain AI outputs, access concerns, or decisions requiring advanced analysis to senior analysts and response teams. Maintain situational awareness of active incidents, emerging threats, and operational risks during assigned shifts. Threat Analysis, Hunting & AI-Augmented Detection Engineering Correlate endpoint, network, identity, cloud, application, and security telemetry to identify indicators of compromise and suspicious activity. Assist in identifying attacker tactics, techniques, and procedures through investigative analysis, threat intelligence, and behavioral context. Use OSINT, threat intelligence feeds, approved AI tools, and operational reporting to support investigations and improve threat visibility. Support hypothesis-driven threat hunting to identify emerging risks and previously undetected malicious behavior. Assist in developing, tuning, testing, and maintaining detection content, alert logic, analytics rules, dashboards, and use cases. Use AI as a supervised aid for query development, alert clustering, detection documentation, false-positive review, and coverage-gap analysis. Identify recurring attack patterns, false positives, telemetry gaps, and opportunities to improve detection effectiveness. Develop working knowledge of MITRE ATT&CK, threat modeling, NIST incident response concepts, and modern detection methodologies. Security Engineering, Automation & AI Agent Operations Support deployment, configuration, maintenance, and optimization of security operations technologies and integrations. Support SOAR, workflow automation, orchestration, and AI-assisted security operations initiatives. Use scripting, query languages, APIs, and automation tools to improve investigation workflows, reporting, enrichment, and repeatable operational tasks. Assist senior analysts and engineers with configuring, testing, and tuning AI agents for defined SecOps use cases such as triage, enrichment, knowledge retrieval, reporting, threat hunting, and detection support. Help refine agent instructions, retrieval content, context, tool access, guardrails, escalation logic, and evaluation of test cases within approved boundaries. Record agent errors, unsupported claims, inconsistent results, access issues, and workflow failures; provide structured feedback for tuning and improvement. Validate AI-agent outputs against authoritative telemetry and case evidence before they are used in investigations or operational decisions. Collaborate with engineering and security teams to improve visibility, strengthen controls, and evaluate emerging AI-driven security capabilities. AI SOC Innovation & Continuous Improvement Contribute to AI SOC initiatives by helping identify repeatable analyst pain points, candidate use cases, automation opportunities, and measurable success criteria. Participate in proofs of concept, controlled pilots, user acceptance testing, agent evaluations, and post-deployment feedback activities. Help document AI-enabled workflows, expected outputs, known limitations, human-review steps, escalation paths, and fallback procedures. Provide analyst feedback on usability, trust, accuracy, efficiency, and operational risk to improve AI SOC capabilities. Demonstrate responsible experimentation, professional accountability, and willingness to learn from testing and operational outcomes. Documentation, Communication & Collaboration Produce incident summaries, investigation reports, shift handoffs, operational updates, and concise AI evaluation findings. Communicate technical findings, confidence, limitations, and recommended next steps to technical and non-technical stakeholders. Support metrics for detection quality, investigation speed, automation reliability, agent accuracy, analyst adoption, and program effectiveness. Partner with security, infrastructure, engineering, risk, privacy, legal, and business teams as appropriate to support cybersecurity and AI SOC initiatives. Qualifications 1-3 years of experience in Security Operations, Incident Response, IT Operations, Security Engineering, or a related cybersecurity environment. Experience monitoring, triaging, investigating, and escalating security events using established operational processes. Experience supporting incident response and documenting investigations through closure. Ability to work independently on assigned tasks while collaborating effectively within a team and escalating when appropriate. Foundational understanding of security operations, threat detection, incident response, security engineering, and responsible use of automation or AI. Working knowledge of networking, authentication, operating systems, cloud technologies, and enterprise security controls. Familiarity with Windows, Linux/Unix, macOS, and cloud computing platforms. Experience with technologies such as SIEM, EDR, IDS/IPS, DLP, SOAR, email security, IAM, vulnerability management, and log analysis platforms. Understanding of indicators of compromise, attack methodologies, detection logic, and basic malware concepts. Strong analytical, problem-solving, communication, collaboration, prioritization, and documentation skills. Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline, or equivalent practical experience. About Us onsemi (Nasdaq: ON) is driving disruptive innovations to help build a better future. With a focus on automotive and industrial end-markets, the company is accelerating change in megatrends such as vehicle electrification and safety, sustainable energy grids, industrial automation, and 5G and cloud infrastructure. With a highly differentiated and innovative product portfolio, onsemi creates intelligent power and sensing technologies that solve the world's most complex challenges and leads the way in creating a safer, cleaner, and smarter world. More details about our company benefits can be found here: https://www.onsemi.com/careers/career-benefits About The Team We are committed to sourcing, attracting, and hiring high-performance innovators, while providing all candidates a positive recruitment experience that builds our brand as a great place to work. onsemi is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, ancestry, national origin, age, marital status, pregnancy, sex, sexual orientation, physical or mental disability, medical condition, genetic information, military or veteran status, gender identity, gender expression, or any other protected category under applicable federal, state, or local laws. If you are an individual with a disability and require a reasonable accommodation to complete any part of the application process, or are limited in the ability or unable to access or use this online application process and need an alternative method for applying, you may contact Talent.acquisition@onsemi.com for assistance.

Job Description: Type of Requisition: Regular Clearance Level Must Currently Possess: Top Secret/SCI Clearance Level Must Be Able To Obtain: Top Secret SCI + Polygraph Public Trust/Other Required: None Job Family: Cyber and IT Risk Management Skills: Job Qualifications: Cybersecurity, Information Security, System Security Certifications: Cisco Certified Network Associate (CCNA) Security - Cisco - Cisco, GICSP: Global Industrial Cyber Security Professional - Global Information Assurance Certification (GIAC), GSEC: GIAC Security Essentials Certification - Global Information Assurance Certification (GIAC) - Global Information Assurance Certification (GIAC) Experience: 5 + years of related experience US Citizenship Required: Yes Job Description: The SOC Analyst's primary function is to provide comprehensive Computer Network Defense and Response support through 24×7×365 monitoring and analysis of potential threat activity targeting the enterprise. This position will conduct security event monitoring, advanced analytics and response activities in support of the government's mission. This position requires a solid understanding of cyber threats and information security in the domains of TTP's, Threat Actors, Campaigns, and Observables. Additionally, this candidate must be familiar with intrusion detection systems, intrusion analysis, security information event management platforms, endpoint threat detection tools, and security operations ticket management. This position will support activities within Special Access Programs (SAPs). The position will provide "day-to-day" support for Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities. Performance Shall Include : Must have strong analytical and technical skills in computer network defense operations, ability to lead efforts in Incident Handling (Detection, Analysis, Triage), Hunting (anomalous pattern detection and content management) and Malware Analysis Experience and ability to with analyzing information technology security events to discern events that qualify as legitimate security incidents as opposed to non-incidents. This includes security event triage, incident investigation, implementing countermeasures, and conducting incident response. Must be knowledgeable and have hands-on experience with a Security Information and Event. Monitoring (SIEM) platforms and/or log management systems that perform log collection, analysis, correlation, and alerting. Strong logical/critical thinking abilities, especially analyzing security events (windows event logs, network traffic, IDS events for malicious intent). Excellent organizational and attention to details in tracking activities within various Security Operation workflows. A working knowledge of the various operating systems (e.g. Windows, OS X, Linux, etc.) commonly deployed in enterprise networks, a conceptual understanding of Windows Active Directory is also required, and a working knowledge of network communications and routing protocols (e.g. TCP, UDP, ICMP, BGP, MPLS, etc.) and common internet applications and standards (e.g. SMTP, DNS, DHCP, SQL, HTTP, HTTPS, etc.). Experience with the identification and implementation of counter-measures or mitigating controls for deployment and implementation in the enterprise network environment. Experience with one or more of the following technologies Network Threat Hunting, Big Data Analytics, Endpoint Threat Detection and Response, SIEM, workflow and ticketing, and Intrusion Detection System. Experience: 5+ years related experience Prior performance in roles such as ISSO or ISSM. SAP experience required Education: Bachelor's degree in a related area OR Associate's degree in a related area + 2 years' experience OR equivalent experience (4 years) Certifications: CSSP Analyst or Incident Responder - within 6 months of hire (CEH, CFR, CCNA Cyber Ops, CySA+**, GCIA, GCIH, GICSP, SCYBER) Clearance Required To Start: TS/SCI required Must be able to Attain – TS/SCI with CI Polygraph The likely salary range for this position is $112,840 - $137,310. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range. Scheduled Weekly Hours: 40 Travel Required: 10-25% Telecommuting Options: Onsite Work Location: USA CO Colorado Springs Additional Work Locations: Total Rewards At GDIT: Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most. Our Identity Verification Process: As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes. About Our Work: We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development. Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc. Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans

About Rocket Lab Rocket Lab is the end-to-end space company building rockets, spacecraft, and critical subsystems that keep the world connected, protected, expand humanity's reach to the Moon, Mars, and beyond. We move fast, build real hardware for meaningful missions, and make the impossible routine. Come shape the future with us. SPACE SYSTEMS At Rocket Lab, we're not just launching rockets — we're building the future of space. Our Space Systems team builds everything from complete spacecraft, precision payloads to the components and subsystems that allow them to thrive in space, like solar panels, flight software, star trackers, optical systems, separation systems, radios, and more. Our Space Systems team has enabled more than 1,700 missions, ranging from interplanetary exploration, in-space manufacturing to national security and defense initiatives. The team has built spacecraft, payloads, and components for missions to the Moon and Mars, working with partners including NASA, the Space Development Agency, and the U.S. Space Force. Whether it's a single high-performance spacecraft, constellation, or the vertically integrated components that help them get to space — our world class Space Systems team is empowering some of the boldest and most ambitious space missions. SENIOR CYBERSECURITY ENGINEER I - SECRET CLEARANCE Based out of Long Beach, CA, the Senior Cybersecurity Engineer I - Secret Clearance will be responsible for designing, implementing, and maintaining the security infrastructure of SDA programs. This role requires a deep understanding of security principles, advanced technical skills, and the ability to stay ahead of emerging threats. The ideal candidate will have extensive experience in software security engineering, a proactive approach to problem-solving, and a passion for protecting sensitive information. What You'll Get To Do Design, implement, and manage security solutions to protect the programs IT infrastructure, including networks, servers, and applications. Conduct regular security assessments, vulnerability scans, and penetration tests to identify and mitigate security risks. Develop and enforce security policies, procedures, and standards to ensure compliance with industry regulations and best practices. Monitor security systems and respond to security incidents, providing detailed analysis and remediation. Collaborate with IT and development teams to integrate security best practices into the software development lifecycle. Stay current with the latest security trends, technologies, and threats, and recommend enhancements to improve the organization's security posture. Mentor and provide guidance to junior security engineers and other IT staff. You'll Bring These Qualifications Bachelor's degree in Computer Science, Information Security, or a related field. Active Secret security clearance required upon hire 5+ years of experience in system security engineering or a related role. 8140 Intermediate or Advanced certification (e.g. Security+, Cloud+, CISSP, CISM, CEH, or equivalent) Strong knowledge of security frameworks and standards (e.g., NIST 800, ISO 27001, CIS Controls). Proficiency in security tools and technologies (e.g., firewalls, IDS/IPS, SIEM, endpoint protection). Experience with cloud security (AWS, Azure, GCP) and securing hybrid environments. U.S. citizenship is required, due to program requirements. These Qualifications Would Be Nice To Have Master's degree In Computer Science, Information Security, or related field. Excellent understanding of network protocols, operating systems, and application security. Experience with DevSecOps practices and tools. Experience with incident response and digital forensics. Familiarity with scripting and automation (e.g., Python, PowerShell) Strong analytical and problem-solving skills, with the ability to think critically and act decisively under pressure. Excellent communication and interpersonal skills, with the ability to work effectively with cross-functional teams. This position may require prolonged periods of sitting, standing, walking, computer work, and occasional exposure to moderate levels of noise, dust, and fumes in production areas. Join one of the world's fastest-growing space companies and own a piece of it. In addition to competitive base pay, you'll receive company stock as part of your total compensation package, giving you a direct stake in our success. As we expand to new launch sites, groundbreaking missions, and global markets, your ownership has the opportunity to grow alongside the company.Our comprehensive benefits package includes our industry-leading Employee Stock Purchase Program (with a 15% discount on company stock), top-tier medical plans (HMO, PPO, and a zero cost HDHP option with a significant HSA company contribution), dental and vision coverage, paid vacation and sick time, 11 paid holidays, flexible spending and dependent care accounts, paid parental leave, disability and life insurance, and a 401(k) retirement plan with company match.Additional perks include subsidized EV charging, onsite fitness centers (where available), discounted gym memberships, complimentary snacks and beverages, 50% employee discount on our popular merch store, and a variety of other employee discounts.Level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, and experience. Base Pay Range (CA Only): $132,000 USD - $198,000 USD What To Expect We're on a mission to unlock the potential of space to improve life on Earth, but that's not an easy task. It takes hard work, determination, relentless innovation, teamwork, grit, and an unwavering commitment to achieving what others often deem impossible. Our people out-think, out-work, and out-pace. We pride ourselves on having each other's backs, checking our egos at the door, and rolling up our sleeves on all tasks big and small. We thrive under pressure, work to tight deadlines, and our focus is always on how we can deliver, rather than dwelling on the challenges that stand in the way. Important Information FOR CANDIDATES SEEKING TO WORK IN US OFFICES ONLY: To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR), Rocket Lab Employees must be a U.S. citizen, lawful U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum, or be eligible to obtain the required authorizations from the U.S. Department of State and/or the U.S. Department of Commerce, as applicable. Learn more about ITAR here. Rocket Lab provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. This policy applies to all terms and conditions of employment at Rocket Lab, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. Applicants requiring a reasonable accommodation for the application/interview process for a job in the United States should contact Giulia Johnson at g.biow@rocketlabusa.com.This dedicated resource is intended solely to assist job seekers with disabilities whose disability prevents them from being able to apply/interview. Only messages left for this purpose will be considered. A response to your request may take up to two business days. FOR CANDIDATES SEEKING TO WORK IN NEW ZEALAND OFFICES ONLY: For security reasons, background checks will be undertaken prior to any employment offers being made to an applicant. These checks will include nationality checks as it is a requirement of this position that you be eligible to access equipment and data regulated by the United States' International Traffic in Arms Regulations. Under these Regulations, you may be ineligible for this role if you do not hold citizenship of Australia, Japan, New Zealand, Switzerland, the European Union, or a country that is part of NATO, or if you hold ineligible dual citizenship or nationality. For more information on these Regulations, click here ITAR Regulations.

Standard Job Description What We're Doing At Lockheed Martin, we are pushing the boundaries of innovation to solve some of the world's most complex challenges. In our Rotary and Mission Systems (RMS) division, we are focused on advancing security and resilience for critical defense systems, with a particular emphasis on F-35 Training & Logistics. Our team is dedicated to applying cutting-edge cybersecurity solutions that safeguard the integrity of systems throughout their lifecycle. We are passionate about ensuring that these systems remain resilient to evolving cyber threats, supporting both the F-35 and other essential training and logistics operations. The Work Responsibilities As a Cyber Systems Security Engineer, you will play a vital role in securing the backbone of mission-critical systems. Your responsibilities will include: Designing and developing cybersecurity solutions that span the entire system lifecycle, from initial planning to final validation. Conducting risk assessments, including threat modeling and vulnerability analysis, to evaluate and address potential security gaps. Collaborating with engineers and system architects to analyze and resolve cybersecurity trade-offs and system design constraints. Performing cybersecurity testing to validate that hardware and software designs meet security requirements. Employing proven cybersecurity methodologies, processes, and tools, ensuring consistent application across projects. Supporting assessment and authorization activities to ensure compliance with required cybersecurity standards. Who We Are Lockheed Martin's RMS division is home to some of the brightest minds in the cybersecurity field. Our team is driven by innovation and a commitment to excellence, focused on ensuring the safety and success of our customers' most complex missions. We thrive in a collaborative environment where cutting-edge technology is used to solve real-world challenges. At Lockheed Martin, we place high value on the skills, education, and training that each employee brings to the table, empowering everyone to make meaningful contributions. Who You Are You are a Cyber Security Engineer with a passion for tackling the most complex problems in the cyber domain. You thrive in a collaborative environment, working with cross-functional teams to design, test, and implement innovative solutions. Your technical expertise is complemented by a deep understanding of the full system lifecycle and how to integrate security seamlessly into every phase. You have experience in: Conducting cyber risk assessments and implementing mitigation strategies. Responsible for securing and hardening hardware and software systems. Collaborating with engineers, architects, and developers to ensure robust security solutions. Performing cybersecurity testing and ensuring compliance with industry standards and regulations. Basic Qualifications Bachelor's degree from an accredited college/university in a related discipline (e.g., Cyber Security, Information Technology, Computer Science, or a comparable field) and at least 2 years of relevant professional experience, or Master's degree in a related discipline with no required professional experience. Experience with Cybersecurity Tools (e.g. Splunk, Trellix) Experience in vulnerability scanning tools and report generation (e.g. Nessus, OpenVAS) Knowledge of Linux or Windows Operating Systems. Knowledge of NIST SP 800‑37 Risk Management Framwork. Basic understanding of Cyber Supply Chain Risk Management (CSCRM) principles Strong written and verbal communication skills; capable of presenting technical information to both technical and non‑technical audiences. Must be a US Citizen; this position will require a government security clearance. This position is located at a facility that requires special access. Possession of CompTIA Security+, or equivalent DoD 8570 type certification Desired Skills Experience with troubleshooting computer hardware and networks. Scripting experience (e.g. Python, Bash, Perl, PowerShell) Knowledge of NIST SP 800‑53 security control families. Familiarity with DoD/IC Security Technical Implementation Guides (STIGs) and how to apply them Understanding of CI/CD pipelines and how security integrates (DevSecOps) Pay Information Full-Time Salary Range: $81100.00 - $150500.00 At Lockheed Martin, we know mission success starts with taking care of our people. Our Total Rewards program is designed to attract top talent, support your well-being, and help you grow—both professionally and personally. The salary range for this position is as listed on the requisition. Please note that the salary information listed is a general guideline only. Lockheed Martin considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/ training, key skills as well as market(work location) and business considerations when extending an offer. Benefits offered: Medical, Dental, Vision, Flexible work arrangements and schedules (e.g., 4x10), 401(k) match, Paid time off, Holidays, Parental Leave, EAP, Flexible Spending Accounts, Education Assistance, Life Insurance, Short-Term Disability, and Long-Term Disability. Annual short-term and/or long-term incentive compensation programs may be offered depending on the position. Payments under these annual programs are not guaranteed and can vary from year to year and are tied to a range of performance metrics. For (Washington state applicants only) Non-represented full-time employees: accrue at least 10 hours per month of Paid Time Off (PTO) to be used for incidental absences and other reasons; receive at least 90 hours for holidays. Represented full time employees accrue 6.67 hours of Vacation per month; accrue up to 52 hours of sick leave annually; receive at least 96 hours for holidays. PTO, Vacation, sick leave, and holiday hours are prorated based on start date during the calendar year.