April 9, 2026For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com.
April 9, 2026For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com.
February 27, 2026For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com.
p/>Additionally, the candidate will direct a team of engineers that regularly perform engineering analyses, PLS-CADD modeling, structure loading calculations, design structure framing and hardware assemblies, draft plans and specifications, and prepare bill of materials and procurement documents across project planning, engineering, environmental, permitting, and construction management phases. December 5, 2025
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.
p>Between our virtual environment where you can evaluate recent technologies and enhance your skills, and a generous annual professional development stipend, you will join a team that enjoys working on leading-edge technologies for world-class clients. The Network Security Engineer III will support the C2BMC program and will be responsible for planning, deploying, integrating, and testing upgrades to the C2BMC network to operational sites.
We provide industry-leading benefits, access to paid time off, resources and support to our employees so they can make a genuine impact and contribute to the sustainable growth of our business and the communities we serve Washington, DC pay and benefits information Washington, DC pay range: $98,400.00 - $160,000.00 annualized salary, offers to be determined based on experience, education and skill set. We provide industry-leading benefits, access to paid time off, resources and support to our employees so they can make a genuine impact and contribute to the sustainable growth of our business and the communities we serve Illinois pay and benefits information Illinois pay range: $98,400.00 - $160,000.00 annualized salary, offers to be determined based on experience, education and skill set.
Centennial, CO11 days ago
ul>Learn to design, build, and manage AI agents (using platforms such as Kindo.ai, n8n, and Claude/Anthropic APIs) that automate routine network security operations including policy reviews, firewall rule audits, segmentation gap analysis, and anomaly triage.
Requirements:
7+ years of progressive experience in network security engineering, with hands-on work in firewall management, network segmentation, VPN/ZTNA, and intrusion detection/prevention.
p>You will coordinate with senior leadership on development projects, share your knowledge and experience by mentoring junior engineers, and assist with monitoring and response functions so that those teams can practice and improve their capability to respond to a realistic threat actor. You will lead and participate in collaborative technical assessments that leverage a wide range of penetration testing techniques, reconnaissance, weaponization, delivery, exploitation, to identify and prove the concept of high-risk vulnerabilities across a variety of technologies.
p>Competencies: • Exceptional customer service skills • Excellent analytical, problem-solving, customer service, project management and communication skills • Goal-oriented • Excellent decision making, integrity and working with IT management, business users and staff • Excellent oral and written communication skills, including technical and user documentation • Strong organizational skills • Ability to work independently and under high pressure with tight schedules and deadlines • Ability to interact well with all levels of business professionals • Excellent active listening skills • Flexible and patient with process development/execution and adherence to instruct project management practices • Capable of grasping new concepts quickly and without prior experience • Detail-oriented • Ability to multi-task and work in fast-paced environment • Ability to interact and coordinate with several teams to achieve objectives • Ability to solve problems independently and simultaneously, effectively managing multiple tasks • Professional demeanor at all times.
Preferred:
• Bachelor's Degree in Information Technology or Computer Information Systems • CISSP or equivalent certifications and/or experience • Experience working with the following products: • Palo Alto Network's Firewalls and Prisma Access • Tenable Vulnerability Scanner • VMWare • Cyberhaven Data Loss Prevention • Proofpoint Email Gateway and Anti-Spam • Forensic Tools • S/MIME email encryption • Delina Secret Server • Crowdstrike • Google SecOps SIEM • Two factor authentication technologies • Penetration testing tools • Patch management systems.
Golden, Colorado19 days ago
div class="col col-xs-7 description" id="job-description">ICS/OT Cybersecurity Engineers and ICS/OT Network Security Engineers support clients in assessing, improving, and maintaining the cybersecurity posture of their ICS/OT environments to mitigate security risks (e.g., insider and external threats, intentional and accidental). ICS/OT Cybersecurity Engineers and ICS/OT Network Security Engineers assist in reviewing and developing Industrial Cybersecurity programs, security policies, and plans, and provide guidance to help clients improve their existing OT security programs.
This position, which reports to the Manager, Security Defense Engineering, involves architecting and building automated security tools and championing best practices to ensure our network remains resilient against evolving threats across our edge, backbone, and datacenter environments. Provide technical leadership and mentorship to security and network engineering teams, serving as a subject matter expert on network security-related matters.
Denver, Colorado29 days ago
Access Control (AC), AWS Devops, Building Architecture, Cloud Security, Customer Solutions, Disaster Recovery Planning, Information Security, Microsoft Azure Security, Network Security, Physical Security, Risk Assessments, Security TechnologiesCompetencies.
In addition, PNC generally provides the following paid time off, depending on your eligibility: maternity and/or parental leave; up to 11 paid holidays each year; 9 occasional absence days each year, unless otherwise required by law; between 15 to 25 vacation days each year, depending on career level; and years of service.
p>This role is ideal for a technically skilled engineer who is comfortable working in classified environments, has hands-on experience with NSA-approved cryptographic devices and network hardware, and takes pride in building reliable, secure infrastructure from the ground up - and keeping it running for the people who depend on it. As a Mission Security Engineer focused on Endpoint Infrastructure, you will be a hands-on technical contributor responsible for the physical deployment, configuration, and documentation of classified network and endpoint infrastructure in support of critical U.S. Government programs.
li>1+ years of experience designing, deploying, and managing Zscaler Cloud Connector, including deployment within cloud environments (AWS, Azure, and/or GCP), workload-to-internet and workload-to-workload traffic inspection, and integration with cloud-native networking constructs (e.g., VPCs, VNets, Transit Gateways). 5+ years of hands-on experience designing, deploying, and managing Zscaler Private Access (ZPA), including application segment configuration, access policies, connector deployment, and zero trust network access (ZTNA) architectures replacing legacy VPN infrastructure.
li>3+ years of experience with Cisco Identity Services Engine (ISE) 802.1X Network Access Control (NAC), guest lifecycle management, profiling policies, TrustSec segmentation, and Cisco Firepower capabilities including intrusion prevention system (IPS), malware protection, Uniform Resource Locator (URL) filtering, Domain Name System (DNS)-based security, Secure Sockets Layer/Transport Layer Security (SSL/TLS) decryption, and cloud firewall deployments in Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Platform (GCP). 5+ years of experience designing, deploying, and managing Cisco Firepower Threat Defense (FTD) and Firepower Management Center (FMC) in enterprise environments, including physical appliances, virtual instances, and cloud-delivered Firewall Management Center (cdFMC).
The ideal candidate will bring with them a thorough understanding of security architecture, risk management, US government contracting, controlled environments, and a readiness to work in a dynamic but pragmatic startup environment. Manage security and compliance documentation including SSPs, POA&Ms, Security Control Traceability Matrices (SCTM) and provide evidence of cybersecurity compliance/supporting authorization for operation.
p>In addition, PNC generally provides the following paid time off, depending on your eligibility: maternity and/or parental leave; up to 11 paid holidays each year; 9 occasional absence days each year, unless otherwise required by law; between 15 to 25 vacation days each year, depending on career level; and years of service. This position is subject to the requirements of Section 19 of the Federal Deposit Insurance Act (FDIA) and, for any registered role, the Secure and Fair Enforcement for Mortgage Licensing Act of 2008 (SAFE Act) and/or the Financial Industry Regulatory Authority (FINRA), which prohibit the hiring of individuals with certain criminal history.
Preferred Skills & Experience:** + Networking knowledge + Subnets/terminology + routers, switches, VLANs, VRFs, routing + Troubleshooting (following the packet) + Network Security + Firewalls such as Fortinet + Micro segmentation + Proxy (basic understanding/function) + VPN tunnels + Least privilege enforcement + Scripting knowledge (python is a great PLUS) + Server architecture knowledge (Web/app/db and communication layouts) + Understanding enterprise supporting infrastructure such as: + Load balancers + DNS + BGP + Provisioning and Orchestration + Containers/Kubernetes + Databases + User connectivity + Proxy + Remote access connectivity + Load testing + Web application firewall + Policy and procedure experience + Drafting/revising policy language + Enforcing + Reviewing policy exceptions as part of GRC functionality + Revising procedures and processes for improvement + Vulnerability management and remediation PNC Employees take pride in our reputation and to continue building upon that we expect our employees to be: + **Customer Focused** - Knowledgeable of the values and practices that align customer needs and satisfaction as primary considerations in all business decisions and able to leverage that information in creating customized customer solutions. In addition, PNC generally provides the following paid time off, depending on your eligibility: maternity and/or parental leave; up to 11 paid holidays each year; 9 occasional absence days each year, unless otherwise required by law; between 15 to 25 vacation days each year, depending on career level; and years of service.
The required minimum qualifications and/or education (if substituting for the proven experience, knowledge, and skills), are as follows: Minimum Qualifications:
A minimum of five (5) years of experience in a security engineering, secure code reviews, systems administration, or compliance advisory role in a variety of technical environments, including on-premise, cloud, and hybrid.
Some of the day to day opportunities:
Implement firewall solutions to properly secure State data and provide consultation on all new firewall implementations, firewall configuration changes, and projects requiring security operational support, and management action is not taken in this area without such consultation.
Denver, Colorado30+ days ago
li>Must have the ability to work effectively across the organization/collaborate effectively with both technical and non-technical team members, possess excellent oral & written communications skills, and demonstrate effective problem-solving skills.
Ibotta (NYSE: IBTA) is a leading performance marketing platform allowing brands to deliver digital promotions to over 200 million consumers through a network of publishers called the Ibotta Performance Network (IPN).
As a leading combination electricity and natural gas energy company, Xcel Energy offers a comprehensive portfolio of energy-related products and services to 3.4 million electricity and 1.9 million natural gas customers across eight Western and Midwestern states. The Security Engineer - Cloud Security (AWS) is responsible for building and running the AWS cloud security program with a focus on reducing risk through visibility, guardrails, and automation.
Pay Range: There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Prepare, Present, and Maintain all security related documentation for system including, but not limited to, system security plan, body of evidence, Plan of Action and Milestones (POAM), and Certification and Accreditation (C&A) documentation leveraging online record keeping systems.
Westminster, Colorado30+ days ago
Additionally, this position is incentive eligible with a target based on contribution, company performance, and/or individual results achieved; the specific incentive plan and target amount will be determined based on the role and breadth of contributions.The application window is three days from the date the job is posted and will remain posted until a qualified candidate has been identified for hire.
Experience automating, running and maintaining a variety of security tool types (some combination of i.e. monitoring, compliance, vulnerability detection, intrusion detection and prevention, change management and detection, code analysis, etc.).
In addition, PNC generally provides the following paid time off, depending on your eligibility: maternity and/or parental leave; up to 11 paid holidays each year; 9 occasional absence days each year, unless otherwise required by law; between 15 to 25 vacation days each year, depending on career level; and years of service. PNC Employees take pride in our reputation and to continue building upon that we expect our employees to be: Customer Focused - Knowledgeable of the values and practices that align customer needs and satisfaction as primary considerations in all business decisions and able to leverage that information in creating customized customer solutions.
Join the SNC-led SAOC team and be a part of exciting and meaningful work to modernize and deliver the next-generation SAOC aircraft trusted by the President, Secretary of Defense and Chairs of the Joint Chiefs of Staff to ensure continued critical command, control and communication during national emergencies. The ISR (Intelligence, Surveillance & Reconnaissance), Aviation, and Security (IAS) business area is a leader in ISR and aviation, it is a leading prime manned and unmanned aircraft systems integrator for innovative, high-performance ISR and aviation systems.
People who choose to build their careers by building with us at Meta help shape a future that will take us beyond what digital connection makes possible today-beyond the constraints of screens, the limits of distance, and even the rules of physics. In this role, you will drive the design, implementation, and continuous improvement of security controls across Meta's large-scale network fabric, including edge, core, and data center environments.
p>About Segra: Segra owns and operates a wide and dense fiber-optic infrastructure footprint that provides state-of-the-art connectivity, cybersecurity, voice, cloud and colocation solutions, all backed by industry-leading service and reliability.
This role requires collaboration with architects, senior-level engineers, management, and stakeholders inside and external to the organization, both to ensure awareness of security risks and to ensure appropriate mitigation steps are taken.
p>Seeking experienced offensive security professionals to conduct security assessments, red team operations, and network exploitation activities in support of client security requirements. Bachelor Degree in Computer Science or related field is required or 5 years of direct work experience.
This is what you can expect of your teammates at Candid (in no particular order): • We put our customers first • We take care of each other and ourselves • We anchor on outcomes and work relentlessly and creatively to achieve them • We collectively prioritize building a diverse and inclusive workspace • We believe humility is our greatest strength • We are candid, kind, and committed • We strive to be the most prepared person in the room • We are truth seekers. • Collaborate with Engineering Teams: Participate in design reviews and threat modeling sessions to identify potential security flaws early in the development process, and validate the security of new features and services during rollout ensuring security remains at the forefront of all initiatives.
Join the SNC-led SAOC team and be a part of exciting and meaningful work to modernize and deliver the next-generation SAOC aircraft trusted by the President, Secretary of Defense and Chairs of the Joint Chiefs of Staff to ensure continued critical command, control and communication during national emergencies. The ISR (Intelligence, Surveillance & Reconnaissance), Aviation, and Security (IAS) business area is a leader in ISR and aviation, it is a leading prime manned and unmanned aircraft systems integrator for innovative, high-performance ISR and aviation systems.
p>Preferred Qualifications: - Experience and understanding of various regulatory requirements and laws such as, but not limited to, Payment Card Industry (PCI), Federal Financial Institutions Examination Council (FFIEC), Sarbanes-Oxley (SOX), Health Information Portability and Accountability Act (HIPAA), General Data Protection Regulation (GDPR) and Gramm-Leach-Bliley Act (GLBA).
- Extensive knowledge of SSO, MFA, Active Directory (AD), public key infrastructure (PKI), privileged accounts and integration application program interface (API) capabilities.
li>Strong experience with cloud networking and troubleshooting across AWS and Azure: VPCs/VNets, subnets, NACLs/NSGs, Security Groups, Transit Gateways/Virtual WAN, VPC peering, route tables, and VPN/ExpressConnect-you can debug "why can't X talk to Y" across multi-account/multi-subscription network topologies. - Strong PKI knowledge with hands-on experience working with certificate infrastructure-including certificate lifecycle management, mTLS implementation, certificate-based authentication, and X.509/TLS troubleshooting.
li>This role combines active hands-on-keyboard technical security execution - vulnerability scanning, SIEM operations, STIG hardening, and system monitoring - with senior leadership accountability for ISSO team development, ATO lifecycle management, DCSA/DoW/IC compliance framework implementation, and direct representation of program security posture to government stakeholders and Authorizing Officials. Tenable Dashboard Creation ELK Stack (Elastic/Kibana), Splunk SIEM, DISA STIGs / SRGs, eMASS / XACTA, RHEL / Linux, vSphere/VMware, GitLab / GitHub, Bash Scripting, CPU / System Architecture, PKI / Certificate Mgmt, NIST 800-53 Rev 5, RMF / ATO Process, DCSA DAAPM, CMMC Level 2/3, TEMPEST Requirements, PPSM Creation.
Pay Range
$175,000—$250,000 USD
Why Choose GRVTY.
Pay Range: At GRVTY, we understand that compensation is influenced by many factors—such as geographic location, federal contract labor categories, wage rates, prior experience, skillsets, education, and certifications.
Pay Rate: The annual base salary range for this position in California, Massachusetts, and New York (excluding most major metropolitan areas), Colorado, Hawaii, Illinois, Maryland, Minnesota, New Jersey, Vermont, Washington or Washington DC is $82,900 - $146,165. Basic Qualifications: Bachelor's degree in Computer Science, Computer Engineering, or a related technical discipline, or an equivalent mix of education, training, and experience in a comparable technical field.
p>Pay Rate: The annual base salary range for this position in California, Massachusetts, and New York (excluding most major metropolitan areas), Colorado, Hawaii, Illinois, Maryland, Minnesota, New Jersey, Vermont, Washington or Washington DC is $101,000 - $178,135. As a Cyber Security Engineer supporting the NGG program, your responsibilities will include:
Provide hands on systems and architecture support for the NGG Ground development team to meet Cybersecurity mission execution on NGG development & operational assets.
Deep PKI knowledge with hands-on experience designing and operating certificate infrastructure-including private CA hierarchies, cert-manager deployment and operation, automated certificate rotation for service meshes (Istio/Linkerd), certificate lifecycle management, and X.509/TLS troubleshooting. Design, implement, and operate PKI infrastructure for Kubernetes-including private CA hierarchies, automated certificate lifecycle management (cert-manager), service mesh mTLS certificate rotation, and certificate issuance for workloads and control plane components.
ul>Coordinating the deployment, configuration, management, and retirement of security tools (e.g., firewalls, SIEM, PAM, ZTN, IdP, IAM, CSPM, DLP, Vulnerability/Exposure Management, CIEM, DevSecOps and SSDLC, etc.). Salary and Benefit Statement:
Any offered salary is determined based on internal equity, internal salary ranges, market data/ranges, applicant's skills and prior relevant experience.
p>Core Requirements and Responsibilities: Essential job functions included but are not limited to the following:
- Partner with product and engineering teams to perform application security reviews, secure architecture reviews, and threat modeling for new and existing applications, services, APIs, integrations, and cloud-native workloads.
- Experience with at least several of the following security tools or control areas: SAST, DAST, SCA, secrets scanning, container scanning, IaC scanning, API security testing, WAF, CNAPP/CSPM, CI/CD security controls, SIEM/logging, or runtime application security monitoring.
As a leading combination electricity and natural gas energy company, Xcel Energy offers a comprehensive portfolio of energy-related products and services to 3.4 million electricity and 1.9 million natural gas customers across eight Western and Midwestern states. The Security Engineer - Exposure Management is responsible for building and maturing the attack surface management capability with a focus on answering where the organization is most exposed and what the actual risk is.
p>You will design and implement application-level security controls including comprehensive audit logging, incident response capabilities, access controls, and security monitoring-all while working closely with product engineering teams to shift security to ensure optimal outcomes. To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.
p>About the Role: Were looking for a Security Engineer who is equally at home hardening a CI/CD pipeline, reviewing a change to the authentication system on the backend, and triaging a bug bounty submission before lunch. Youll own security operations end-to-end, embedded directly into the engineering team and working closely with infrastructure, protocol and platform.
p>• Design, implement, and work with other engineering teams to operate security tools and programs across the organization, including access control & workflows, vulnerability management, and detection/response systems. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/com-missioned roles) is expected to be the annual range listed below.
Hands-on experience with DSPM and/or data security capabilities, such as data discovery and classification, exposure analysis, data access governance, and remediation workflows; familiarity with data governance and privacy principles and how they apply to sensitive data handling and AI use cases. The position involves developing advanced detection and monitoring, tuning and optimizing SIEM rules, collaborating with the SOC team to enhance threat detection and incident response, and strengthening the security posture of sensitive data and AI-enabled applications.
li>Experience automating, running and maintaining a variety of security tool types (some combination of i.e. monitoring, compliance, vulnerability detection, intrusion detection and prevention, change management and detection, code analysis, etc.). In this role you will have ownership responsibility for the operation of several security applications/services, for integrating security requirements into the common infrastructure design and supporting common infrastructure service solutions for the enterprise.
Join the SNC-led SAOC team and be a part of exciting and meaningful work to modernize and deliver the next-generation SAOC aircraft trusted by the President, Secretary of Defense and Chairs of the Joint Chiefs of Staff to ensure continued critical command, control and communication during national emergencies. Its end-to-end Command, Control, Computers, Communications and Intelligence, Surveillance & Reconnaissance (C4ISR) capabilities encompass design, integration, test, certification, ground/flight training and complete logistics support.
Knowledgeable in secrets management, JITA, and modern identity patterns including SSO, SCIM, and privileged access workflows including SAML 2.0, SCIM, OAuth and OIDC - note this is not a dedicated IAM role; fluency in these areas supports broader enterprise security ownership, not identity program management. In addition to base salary, our total compensation package may include participation in the company's annual cash bonus plan, variable compensation (OTE) for sales and customer success roles, equity, sign-on payments, and a comprehensive range of health, welfare, and wellbeing benefits based on eligibility.