Security Engineer

• Advise on and assess the security posture of AI/ML systems, including LLMs, GenAI pipelines, and model serving infrastructure
• Lead threat modeling exercises specific to AI workloads
• Advise internal teams on securely integrating SaaS AI services and APIs
• Evaluate and recommend controls for data ingestion pipelines, RAG architectures, and vector databases
• Serve as a trusted security advisor bridging business stakeholders, AI/ML engineers, IT operations, and information security teams
• Continuously track emerging AI security research, adversarial techniques, regulatory developments, and vendor security advisories
• Produce and maintain security architecture documentation, risk assessments, control frameworks, and guidelines tailored to the organization's AI environment
• Contribute to the development of a long-term AI security strategy
• Develop and deliver training and awareness content for technical and non-technical stakeholders on AI-specific risks

AI Security Engineer

• Design, implement, and maintain cloud security controls supporting AWS and Databricks-based enterprise platforms.
• Support security architecture, risk management, compliance monitoring, and governance activities across cloud environments.
• Implement and manage Identity and Access Management (IAM) controls, role-based access controls (RBAC), least-privilege access models, and authentication mechanisms.
• Conduct security assessments, vulnerability analyses, risk evaluations, and remediation planning activities.
• Support continuous monitoring initiatives, security event analysis, incident response, and audit readiness efforts.
• Maintain compliance with FedRAMP High, FISMA, NIST 800-53, and other federal cybersecurity standards.

Senior Cloud Cybersecurity Specialist – AWS/FedRAMP

• Gather and handle forensic evidence in accordance with Rules of Evidence and perform forensic analysis of digital information
• Monitor, detect and report indicators of misuse, abuse, data spillage, insider threat, and security violations
• Identify acceptable use policy infractions
• Review event logs to determine events of interest
• Monitor for fraud, waste and abuse, including inappropriate content, Illegal Activity, Productivity Loss and Non-Compliant Activity, as well as Identity Leakage (PII)
• Prepare case evidence and incident reports
• Work on special projects as assigned

Cyber Security, Insider Threat Analyst

• Administer and support Blue Energy’s Microsoft 365 ecosystem, including Entra ID, Intune, Exchange Online, SharePoint, Teams, and associated enterprise platforms.
• Support and maintain secure digital infrastructure environments across Blue Energy operations.
• Assist with Azure infrastructure administration, cloud environments, and virtual infrastructure management.
• Build virtual machines, virtual desktop environments, and secure remote access solutions.
• Maintain endpoint compliance, device lifecycle management, and identity/access governance across the organisation.
• Support infrastructure documentation, asset management, technical standards, and operational procedures.
• Support implementation and continuous improvement of Blue Energy’s cyber security posture and operational security standards.
• Maintain and improve Conditional Access policies, MFA enforcement, access segmentation, and identity security controls.
• Support and administer endpoint protection, Microsoft Defender tooling, and security monitoring platforms.
• Assist with vulnerability remediation, incident response coordination, and cyber security best practices.
• Support secure collaboration and governance within Microsoft 365 environments.
• Assist with Azure backup management, disaster recovery processes, and operational resilience planning.
• Maintain technical documentation, configuration records, and infrastructure standards.

Corporate Infrastructure & Security Engineer

• Implement and validate security controls across applications and environments
• Ensure alignment with CMS, FISMA, FedRAMP, and federal security standards
• Support secure configuration practices across systems and infrastructure
• Identify, track, and support remediation of security vulnerabilities
• Participate in vulnerability assessments and security reviews
• Support risk reduction efforts through timely remediation coordination
• Integrate security practices into DevSecOps pipelines and delivery workflows
• Support continuous monitoring and compliance readiness activities
• Collaborate with engineering teams to embed security into development processes
• Work closely with the ISSO and security stakeholders on compliance activities.

• Designing, implementing, and maintaining security controls across the Salesforce-based MESH platform and AWS cloud environment in accordance with CMS Acceptable Risk Safeguards (ARS) 5.1, FedRAMP Moderate, and NIST SP 800-53 Rev 5
• Embedding security into the DevSecOps CI/CD pipeline by integrating SAST, DAST, IAST, and software composition analysis tools (e.g., Snyk, AppOmni, Tenable, AWS Security Hub) into GitHub Actions and Copado workflows
• Operating the end-to-end vulnerability management lifecycle including detection, triage, prioritization, remediation tracking, and reporting; ensuring critical and high findings are remediated within CMS/HHS-defined timeframes
• Performing and documenting Security Impact Analyses (SIAs) for proposed changes to the MESH platform and integrations such as T-MSIS, MBES/MacFin, Microsoft 365, and CMS DataConnect
• Authoring, maintaining, and updating Authority to Operate (ATO) artifacts in CFACTS, including System Security Plans (SSPs), POA&Ms, Privacy Impact Assessments, Contingency Plans, and Incident Response Plans
• Hardening Salesforce GovCloud configurations by enforcing role-based access, permission sets, OAuth/MFA, and Salesforce Shield controls; reviewing third-party AppExchange packages for security risk prior to installation
• Configuring and tuning continuous monitoring and detection tooling (Splunk, AWS GuardDuty, CloudTrail, Security Hub) and leading incident response from detection through post-mortem review
• Leading least-privilege access reviews and identity lifecycle workflows across CMS IDM/Okta, EUA, AWS IAM, Salesforce, and CI/CD pipelines; automating recurring access reviews and onboarding/offboarding tasks
• Building dashboards and reports in Splunk, Power BI, or Jira that give CMS leadership and product teams visibility into vulnerabilities, compliance posture, access reviews, and audit readiness
• Translating CMS, HHS, and federal AI governance requirements into actionable secure design patterns for AI/ML capabilities embedded in MESH (e.g., AI-assisted submission analysis, NLP search, predictive analytics)
• Participating in Agile ceremonies as a security subject matter expert, ensuring user stories include clear security acceptance criteria and that security enablers are represented in the team Definition of Done
• Mentoring developers, QA, and DevOps engineers on secure coding practices (OWASP ASVS), threat modeling, and continuous compliance
• Cooperating with CMS-directed audits, penetration tests, and 3PAO assessments; coordinating responses to agency security data calls within required timeframes

Senior Security Engineer

• Design, implement, and maintain secure infrastructure, systems, and solutions to support enterprise cybersecurity operations.
• Monitor security alerts and events, perform initial triage and analysis, and escalate incidents as needed.
• Investigate potential security incidents using SIEM, endpoint, network, and other security tools to determine scope, impact, and remediation steps.
• Support incident response activities, including containment, eradication, recovery, and post-incident documentation.
• Develop, tune, and improve security detections, rules, playbooks, and operational procedures to enhance SOC effectiveness.
• Collaborate with internal teams to identify vulnerabilities, strengthen controls, and protect systems, applications, and data.
• Document findings, actions taken, and incident details clearly and accurately in accordance with procedures and reporting requirements.
• Stay current on emerging threats, vulnerabilities, attacker tactics, techniques, and procedures (TTPs), and apply that knowledge to defensive operations.

Senior Cyber Security Engineer

• Identify the necessary tools, security systems, devices, and applications required to assess vulnerabilities and recommend optimal solutions and security strategies
• Develop and implement security solutions that protect our military and infrastructure
• Perform ongoing system analyst activities for programs and perform risk assessments of systems and equipment
• Assist engineers with identifying solutions for vulnerabilities
• Create and map Security Technical Implementation Guides (STIGs)
• Submit change requests for system components
• Develop a Plan of Action and Milestones (POA&M)
• Create documentation supporting Risk Management Framework (RMF) accreditations
• Perform vulnerability management using automated systems and create and submit RMF packages
• Brief the technical security posture to client leadership and prepare brief slides and summaries of vulnerabilities
• Advise on how to prevent and mitigate future security threats

Satellite Communications System Security Engineer, Mid

• Identify necessary tools, security systems, devices, and applications to assess vulnerabilities
• Develop and implement security solutions for military and infrastructure
• Perform ongoing system analyst activities, risk assessments, and create documentation
• Brief client leadership on technical security posture
• Collaborate with other teams and create STIG checklists

Satellite Communications Systems Security Engineer – Mid

• Supports the U.S. Census Bureau by designing, implementing, operating, troubleshooting, and improving enterprise network security services across on-premises, hybrid-cloud, and cloud-connected environments.
• Focuses on firewall engineering, VPN and remote access services, RSA SecurID or equivalent MFA/token services, content filtering, network access control, edge security services, monitoring and logging integration, vulnerability remediation, security documentation, and policy compliance for TCO-managed systems.
• Serves as a senior technical resource for secure network architecture, operations support, incident response coordination, and compliance support.
• Designs, configures, administers, maintains, and troubleshoots enterprise firewall solutions, including Cisco and Palo Alto platforms.
• Administers VPN services including remote access VPN, site-to-site VPN, client/clientless access, partner connectivity, mobile device access, and cloud connectivity.
• Supports network access control services, including NAC policy administration, endpoint posture or 802.1X controls, identity-aware access policies, and integrations with firewalls, wireless, LAN, and identity management systems.
• Implements and manages network security controls across AWS, Azure, and hybrid environments.
• Reviews logs, alerts, vulnerability notices, and vendor advisories; recommends and implements improvements to reduce risk.

Senior Network Security Engineer

• Lead all facility-related responsibilities and security operations across the organization
• Oversee facility management, leasing, and compliance
• Manage personnel clearances, secure facilities, and physical security programs
• Ensure compliance with all government security requirements and regulations
• Conduct regular security assessments and implement improvements

Facility Security Officer

• Support client cloud migration efforts and IT modernization initiatives from an information security governance perspective, ensuring alignment with existing cloud architectures (AWS, Azure) and EPLC requirements.
• Assist in cloud security operations including FedRAMP-related SA&A support, continuous monitoring, and maintaining security authorizations for cloud-hosted and FedRAMP-aligned systems.
• Conduct vulnerability and compliance reporting: analyze scan results, identify critical/high vulnerabilities, and provide actionable remediation recommendations; submit monthly reports to the COR.
• Support POA&M development, tracking, and monthly updates for cloud-hosted and contractor-hosted systems; ensure all findings are tracked and reflect current remediation status.
• Assist with Security Assessment and Authorization (SA&A) package development and coordination including SSPs, RARs, POA&Ms, Contingency Plans, and E-Authentication assessments.
• Support compliance with FedRAMP security control baselines, NIST SP 800-53, FISMA, OMB Circular A-130, and applicable agency cloud security policies.
• Assist in reviewing and validating ISSO intranet content and security resources; prepare intranet content review reports.
• Develop and maintain the Security Authorization Boundary Inventory & Strategy Report, assessing system inventory and recommending optimized authorization boundaries.
• Participate in EPLC security reviews and IT acquisition security reviews related to cloud-based solutions and modernization efforts.
• Prepare ad hoc technical support deliverables for cloud migration support, acquisition security reviews, and other RMF-related activities as requested.
• Support development and maintenance of security training materials for client staff and stakeholders; assist with training delivery as needed.
• Ensure HSPD-12/PIV requirements, FIPS 140-2 encryption standards, and CUI handling requirements are met across cloud-operated systems.
• Maintain compliance with all agency security training requirements including annual Security Awareness Training (SAT) and role-based training (RBT).

Cloud Security, Compliance Specialist

• The Principal Consultant, acting as a technical advisor, is tasked with developing, mentoring, and training the Professional Services team, including overseeing their onboarding and maintaining up to date expertise on service offerings.
• This role supports Delivery Management and Resource Management in achieving delivery Theatre objectives and revenue targets, while also handling client escalations by liaising between the delivery team and other Tenable functions.
• Additionally, the Principal Consultant focuses on advancing Tenable Subk partners through training and certification onboarding and seeks opportunities to enhance the Professional Services structure through training tutorials and the creation of new methodologies.
• This role also includes some client billable work, shared with the responsibilities outlined.

Principal Security Consultant

• Secures AI/ML, Generative AI, and agentic systems across the enterprise
• Designs, tests, and operates controls to protect systems at scale
• Advises engineering and security leadership on emerging AI threats
• Develops security controls for AI/ML, GenAI, and agentic systems
• Engineers guardrails to mitigate data leakage and insecure workflows
• Analyzes agent logic and identifies systemic security weaknesses
• Builds monitoring, logging, and alerting for AI systems
• Partners with AI platform and data engineering teams for security integration

Senior AI Security Engineer

• Implement, configure, and maintain enterprise-grade WAF and DDoS protections across a large portfolio of properties
• Develop and fine-tune custom firewall rules, bot mitigation controls, and DDoS mitigation security policies
• Perform log analysis to identify malicious traffic patterns, false positives, and opportunities for tuning
• Contribute to automation efforts (infrastructure as code, CI/CD integrations, scripts) to deploy and maintain security configurations
• Identify security vulnerabilities and guide developers and engineers in addressing these issues
• Participate in on-call rotation as a subject matter expert for WAF/DDoS incident response
• Partner with product, engineering, and operations teams to integrate WAF/Edge security controls into applications and services
• Research and stay current on the latest attack vectors, vulnerabilities, and exploits affecting web and API applications
• Recommend and implement improvements to strengthen defenses across the edge/perimeter layer

Perimeter Security Engineer

• Conducting security requirements gathering and analysis across application, infrastructure, and cloud components to identify threats, vulnerabilities, and control gaps aligned to NIST 800-53 and IRS Pub 1075
• Performing vulnerability scanning and triage using tools such as Tenable/Nessus, Veracode, and Microsoft Defender, validating findings, prioritizing remediation, and tracking issues through closure
• Partnering with product, engineering, and operations teams to embed security into the SDLC, evaluate emerging threats, and provide risk-based feedback that informs design and release decisions

• Serve as a hands-on Information System Security Officer (ISSO) supporting the modernization and accreditation of applications across the Agency's evolving cloud and on-prem ecosystem.
• Drive SSP creation, automated ATO workflows, continuous monitoring integration, secure baseline enforcement for the Landing Zone Architecture (LZA), and the adoption of an OTEL-first monitoring and logging platform.
• Create full Security System Plans (SSPs) for new applications, including system boundaries, control implementation statements, architecture mapping, and inheritance models.
• Support, update, and maintain SSPs for existing applications through the full ATO lifecycle.
• Develop and implement automated ATO pipelines, including evidence generation, validation tasks, and CI/CD gating aligned to RMF requirements.
• Integrate continuous monitoring strategies, telemetry sources, alerting thresholds, and control-health scoring.
• Automate evidence collection through scripts, scheduling logic, secure repositories, and structured control mappings.
• Define, maintain, and enforce secure baselines for the Landing Zone Architecture (LZA) across cloud and on-prem environments.
• Implement and scale compliance-as-code, translating NIST and agency controls into machine-testable rules and automated evaluations.
• Establish and manage an OTEL-first platform for organization-wide logging, metrics, tracing, APM, and compliance telemetry.
• Enable OTEL-driven continuous compliance through real-time signals tied to control effectiveness and evidence requirements.
• Collaborate with engineering, cloud, security, and application teams to provide hands-on control remediation, configuration updates, and automation support.
• Partner with assessors and AOs to ensure high-quality artifacts, timely responses, and successful accreditation reviews.

Information System Security Officer, ISSO

• Serve as the ICS/OT/IoT SME across internal teams, vendors, and stakeholders.
• Translate OT operational needs into IT/security requirements and support coordinated implementation.
• Perform vulnerability assessments and risk evaluations for OT/ICS/IoT hardware and software.
• Identify obsolescence, configuration gaps, and security weaknesses.
• Review and recommend improvements to administrative, technical, and cybersecurity controls.
• Review OT network architectures for segmentation, zoning, conduits, and DMZ design.
• Recommend improvements aligned with recognized cybersecurity frameworks.
• Coordinate with vendors and internal teams on OT system changes.
• Support PLCs, RTUs, HMIs, SCADA, BMS/BAS, and other control systems.
• Assist with upgrades, migrations, and modernization of OT environments.
• Maintain system documentation, diagrams, and inventories.
• Apply security controls and best practices for OT/ICS environments.
• Evaluate, design, and implement security solutions aligned with: NIST SP 800-82, ISA-99 / IEC 62443, Federal cybersecurity frameworks.
• Support vulnerability assessments and remediation for OT assets.
• Implement network segmentation and secure remote access.
• Support firewall rules, VLANs, and segmentation for OT networks.
• Monitor OT network traffic for anomalies or unauthorized activity.
• Maintain IP addressing, device inventories, and configuration records.
• Participate in incident investigations involving OT systems.
• Support troubleshooting, root cause analysis, and recovery efforts.
• Ensure minimal disruption to critical operational systems.

OT/ICS Cybersecurity, Network Security Engineer

• Lead day-to-day Cyber Defense & Response (CDR) functions, ensuring operational readiness, execution rigor, and alignment with NVIDIA’s cybersecurity strategy.
• Responsible for the incident response lifecycle from start to finish.
• Act as the point person for critical incidents and lead efforts to investigate, contain, recover, and review the incident afterward.
• Increase detection and response efficiency by continuously broadening coverage across on-premises and multi-cloud environments, targeting GPU-accelerated and AI/ML workloads.
• Set detection expectations and standards aligned to NVIDIA’s threat landscape, defining monitoring requirements, coverage goals, and compliance requirements.
• Own operational performance and outcomes, including MTTD, MTTC, MTTR, detection coverage, alert quality, and false-positive reduction—focused on root-cause improvement.
• Run CDR improvements following agile methods, keeping a risk-prioritized backlog and guiding delivery via planning, reviews, and retrospectives.
• Drive agentic transformation of manual SOC work — identify repetitive analyst tasks and convert them into automated, event-based AI pipelines.
• Partner with Security Engineering to operationalize tooling, automation, playbooks, and post-incident improvements that measurably improve response efficiency.

Manager, Cybersecurity

• Drive growth and expand market opportunities for the Aerojet Rocketdyne (AR) Missile Solutions (MS) sector.
• Conduct significant customer and stakeholder engagements.
• Conduct market research and analysis to identify opportunities for business or program expansion.
• Establish win strategies and partner with MS Center of Excellence representatives.
• Maintain understanding of customer (U.S. Government and missile Prime contractor) requirements, plans, strategies.
• Support leadership in meetings with U.S. Government and Industry customers.
• Develop, execute, and maintain capture strategies/plans.
• Build and maintain accurate customer relations, pursuit, and program status entries.
• Directly represent MS with L3Harris Service and International Executive leadership.
• Identify propulsion material solutions and develop requirements that support pursuit plans.
• Actively manage internal discretionary resources and funding.
• Process and manage Non-Disclosure Agreements / Proprietary Information Agreements.

See all jobs on JobTailor

AI Security Engineer

Senior Cloud Cybersecurity Specialist – AWS/FedRAMP

Cyber Security, Insider Threat Analyst

Corporate Infrastructure & Security Engineer

Security Engineer

Senior Security Engineer

Senior Cyber Security Engineer

Satellite Communications System Security Engineer, Mid

Satellite Communications Systems Security Engineer – Mid

Senior Network Security Engineer

Facility Security Officer

Cloud Security, Compliance Specialist

Principal Security Consultant

Senior AI Security Engineer

Perimeter Security Engineer

Security Engineer

Information System Security Officer, ISSO

OT/ICS Cybersecurity, Network Security Engineer

Manager, Cybersecurity

Principal, Navy Programs, Advanced Programs, Secret Security Clearance