Security-Engineer, Cybersecurity-Engineer, Information-Security-Engineer Jobs

Polsinelli does not accept unsolicited resumes from search firms or agencies. Please, no phone calls or emails.

At Polsinelli, What a Law Firm Should Be is not just our tagline, it is what we live every day. We strive to create an environment where our team members are encouraged to bring their creativity and professional passions into the workplace so that they can thrive. Are you a people person who has a keen eye for detail, thrives in a professional environment and wants to be part of a dynamic team? We have the perfect role for an engaging professional like you!

Polsinelli is hiring a Security Engineer for any of our offices, with the option to work remotely.

ROLE OVERVIEW

Security Engineers are responsible for the secure operations of infrastructure, platforms, and software, including the installation, maintenance, and improvement of hybrid (on-premise and cloud) computing environments. They also help develop new designs and security strategies across all applications, including infrastructure, platform, and SaaS.

CORE RESPONSIBILITIES

• Configure business operating environments securely using CIS best practices.
• Perform penetration testing and threat hunting to identify potential risks.
• Monitor for and respond to incidents in the Firm’s hybrid environment.
• Keep infrastructure current, making recommendations and continually improving security technologies.
• Analyze, design, and develop programs, shell scripts, tests, and infrastructure automation capabilities.
• Work with analysts and engineers across the organization to continually improve cyber resilience
• Provide support to understand and develop system requirements and technical solutions for cybersecurity engineering based on system architectures (CIS Controls, MITRE ATT&CK Framework, and NIST Cyber Security Framework).
• Support the maturation of the enterprise architecture to align with the Firm’s information security and risks to the organizational operations, organizational assets, and individuals.
• Develop alternatives of system designs and/or architecture, which consider trade-offs between security requirements, functional/operational requirements, and cost.
• Identify and define the requirements of the overall security of the network.
• Plan, engineer, and monitor overall security implementation of network systems.
• Support in configuring and implementing network security tools.
• Test and provide solutions for system weaknesses, threats, and security issues.
• Research and identify latest suitable technologies and processes that will improve the overall security of the system.
• Regularly audit the existing network configuration and provide improvement recommendations.
• Other duties as assigned.

Employees approved for flexible work arrangements are expected to be available and maintain a practice of reliable, consistent attendance at all times during the employees scheduled work shift including, but not limited to, Teams/instant message, Zoom, email and voicemail, and by phone. Installation of Zoom on a personal cell phone is a requirement of the information security team. The Firm is nationwide but operates in the Central Time Zone.

REQUIREMENTS

• 2-4 years of experience in on-premises environments focused on security.
• 2-4 years of experience in security engineering.
• 2-4 years of experience with Metrics, Events, Logging, in an environment similar to Splunk.
• Bachelor’s degree in Computer Science, Computer Engineering, Information Systems or equivalent experience. 
• Microsoft Active Directory with Azure experience.
• Ability to perform detection engineering to interrogate computer logs to identity anomalous behavior.
• Develop workflows within a SIEM to automate detections and actions taken.
• Demonstrative knowledge/experience with scripting languages like Python and PowerShell.
• Demonstrative knowledge and expertise with common enterprise-grade security solutions.
• Excellent verbal and written communication.

The budgeted salary range for this position is $100,000 - $150,000.

As part of full-time employment associated with this position, Polsinelli PC offers the following benefits: Paid time off, sick time off, a referral program, medical insurance and benefits, dental insurance, vision insurance, life insurance, AD&D insurance, ID Theft insurance, long-term disability benefits, short-term disability benefits, Parking/Transit reimbursement (varies depending on location), 401(k) benefits, and employee assistance benefits.

Polsinelli PC is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, or any other characteristic protected by law.

Originally posted on Himalayas

Important Notice for Applicants:
At Bixal, we want to ensure a transparent and secure application process for all candidates. Official communication will come from an email address ending in @bixal.com or from @bixal.na.teamtailor-mail.com. Messages from other sources may be fraudulent, and you should exercise care to avoid any links or attachments included.

Bixal will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment.

Need Assistance or a Reasonable Accommodation?If you need assistance or a reasonable accommodation to complete your application, we're here to help. Please reach out to us at and let us know how we can support you. You do not need to share personal details or disclose the nature of your request. You can expect a response from a team member within 24 hours during the regular work week and on the next operating day during the weekend or holidays.

Why Bixal?

Bixal is a consulting company headquartered in Fairfax, VA, working alongside governments and organizations to help them deliver better services and experiences to the communities they serve. Using evidence-based knowledge and technology, Bixal empowers clients to deliver on their missions more effectively by fostering a culture of learning and continuous improvement.

Our values:

• People-First: Emphasizing the importance of people in all aspects of work.

• Collaboration and Transparency: Valuing teamwork and open communication.

• Growth Mindset: Encouraging innovation and continuous improvement.

• Creating Lasting Impact: Focusing on meaningful outcomes and positive change.

About the role:

Bixal is seeking a Security Engineer to serve as security lead for a FIPS 199 Moderate federal platform that supports governmentwide regulatory planning and review. Federal agencies, oversight offices, and the public rely on these systems, which must stay available 24/7/365 while a modern replacement is built alongside them.

You will protect both. On the legacy side, you will keep a Java, Oracle, and Red Hat environment hardened, patched, and compliant. On the modernization side, you will build security into a new cloud-based platform from day one so it is ready for an Authority to Operate (ATO) when it reaches production. Because work can shift between the two, we're looking for someone comfortable moving between sustaining an existing system and securing a new one.

This is a client-facing role. You will be the program's named security lead, working with the client's technical leads, our Project Manager, and the engineering team, and translating security requirements into practical decisions that keep delivery moving.

This is a full-time position on an awarded contract with a 12-month base period and two 12-month option periods. This role offers you a unique opportunity to make a meaningful impact on a project that aligns with Bixal’s mission of delivering innovative, human-centered solutions. While the role has a fixed duration, we are committed to transparency and collaboration, keeping you informed about contract updates and new opportunities. At Bixal, we support your professional journey, ensuring your experience reflects our inclusive, purpose-driven culture and prepares you for future success.

Location

This role can work remotely from anywhere in the USA. You must be legally authorized to work in the US.  Bixal does not provide visa sponsorship.

Compensation:

The salary range for this role is $130,000 – $140,000. In the spirit of transparency, most offers tend to land near the midpoint of the range. We make compensation decisions thoughtfully, considering your experience, the skills you bring, and our commitment to internal equity. Fairness and transparency are core to how we operate.

Responsibilities:

Vulnerability Management & Security Operations

• Run automated vulnerability scans of operating systems, databases, and web applications, and lead remediation and patching across Red Hat Enterprise Linux, Oracle, Apache/Tomcat, and Java application components.

• Meet contractual remediation timelines for scan and penetration test findings (15 days for critical, 30 for high, 60 for medium, 120 for low), and document Plans of Action and Milestones (POA&Ms) when a timeline cannot be met.

• Harden systems against GSA security benchmarks and CIS Level 1 guidelines.

• Track end-of-life software, unsupported libraries, and known vulnerabilities, and raise risks early with a recommended path forward.

• Support continuous monitoring, log review, and incident response in line with NIST SP 800-61.

• Support continuity of operations (COOP) and disaster recovery planning and testing.

Compliance, Assessment & Authorization

• Maintain the system's assessment and authorization (A&A) package under NIST SP 800-37 and SP 800-53 Rev. 5, including the System Security and Privacy Plan, contingency plan, business impact analysis, incident response plan, and contingency plan test report.

• Maintain POA&Ms and support Government-led security assessments, control reviews, and penetration testing.

• Support privacy compliance artifacts such as Privacy Threshold Assessments and Privacy Impact Assessments.

• Keep security documentation current as legacy capabilities are replaced and retired.

Secure Development & Modernization

• Perform threat modeling for new features, integrations, and architecture decisions.

• Embed static and dynamic security testing (such as Snyk and OWASP ZAP) in CI/CD pipelines so every release meets OWASP ASVS with no unresolved medium or high findings.

• Review releases for security impact before production, protecting availability.

• Advise on secure architecture for the modernized platform, including federated identity, FIPS 140-validated encryption, Zero Trust principles, and software supply chain security.

• Prepare security packages for prototype testing and position the new platform to receive an ATO at production deployment.

Advisory & Client Partnership

• Provide guidance on public key infrastructure, firewall and network security, internet protocols, and configuration management.

• Serve as the client's security point of contact, briefing technical leads and the Project Manager on risks, findings, and remediation progress.

• Coordinate with client IT teams on infrastructure changes and validate system security after those changes.

• Other relevant duties as assigned and qualified/trained to perform.

Qualifications:

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field.

• At least 5 years of hands-on information security experience, including securing federal information systems under FISMA.

• Hands-on experience with the NIST Risk Management Framework, including implementing and assessing NIST SP 800-53 Rev. 5 controls at the Moderate baseline.

• Experience writing and maintaining A&A documentation, including System Security Plans, contingency plans, incident response plans, and POA&Ms, and supporting a system through ATO.

• Experience running vulnerability scanning tools (such as Tenable/Nessus or Qualys) and driving remediation across operating system, database, and web application layers.

• Experience hardening Linux (preferably Red Hat Enterprise Linux) servers and relational databases (preferably Oracle) against CIS or agency benchmarks.

• Working knowledge of application security, including the OWASP Top 10 and ASVS, static and dynamic testing tools, and securing CI/CD pipelines.

• Familiarity with public key infrastructure, TLS certificate management, firewall configuration, and network protocols.

• Clear, confident communication skills, with the ability to explain risk and trade-offs to technical and non-technical stakeholders, including client leadership.

• This position requires the ability to obtain and maintain a favorable Public Trust determination in support of a federal government contract.

Nice to Have Skills and Experience:

• Security certifications such as CISSP, CISM, CompTIA Security+, or equivalent.

• Experience with GSA IT security policies, procedural guides, or the GSA ATO process.

• Experience securing cloud-hosted or containerized platforms (AWS, , Docker, Kubernetes).

• Familiarity with Zero Trust architecture (OMB M-22-09) and secure software development practices (NIST SSDF, OMB M-22-18).

• Experience with identity federation and single sign-on, including .

• Experience with monitoring and logging tools such as Grafana, Prometheus, Loki, or Splunk.

• Experience supporting systems through a legacy-to-modern platform migration.

How We Support Our Team:

• Flex hours

• 401K with matching incentive

• Parental Leave

• Medical/dental/vision benefits

• Flex Spending Account

• Company provided short-term disability and life insurance

• Commuter benefits

• Paid Time Off (PTO)

• 11 Paid holidays

Our company is committed to providing equal employment opportunities for all individuals and complies with all applicable federal, state, and local anti-discrimination laws. Employment decisions are based on merit, qualifications, and business needs.

Originally posted on Himalayas

What you will be doing:

As a Security Engineer I, you will play a crucial role in maintaining and enhancing our cyber security infrastructure. You will work with various technologies to ensure compliance with our Information Security Policies and help protect our organization from cyber threats.

Key Responsibilities

Security Administration – 60%

Administer Premier’s cyber security services across laptops, servers, email, network, and cloud platforms.

Tools and Testing – 20%

Using approved tools; perform security tests and audits, analyze results, and provide recommendations to ensure applicable systems are operating in accordance with Premier Information Security Policies, Standards, and Procedures.

Work closely with the vulnerability management tools and triage vulnerabilities in accordance with Premier’s vulnerability policies and procedures.

Work closely with the SOC analysts and the SIEM, focus on reporting and alerting to provide Premier a more proactive and optimized Cybersecurity posture

Corrective Action – 10%

Perform investigation and reporting of security violations of the Corporate Information Security Policies and Standards.

Participate with in-depth inquiries, assessing potential damage, and implementing corrective action.

Perform Incident handling and response of security violations based on predefined criteria and triggers

Compliance – 5%

Assist in eDiscovery and other forensic investigations based on legal or regulatory needs

Privacy – 5%

Assist in auditing, testing, and preventing Data Leak of sensitive or regulated data using appropriate tools. Assist Privacy team, when necessary, to assist with the generation of reports and generating watch lists.

​Required Qualifications

Work Experience:

Education:

Preferred Qualifications

Skills:

• Ability to communicate effectively with diverse audiences, both internally and externally.

• A strong grasp of network protocols, topologies, and security concepts is crucial for understanding how data flows and where potential vulnerabilities might exist within a network.

• Proficiency in working with a SIEM and triaging incidents.

• Understanding the steps involved in responding to a security incident, including containment, eradication, and recovery, is vital for mitigating damage from cyberattacks.

Experience:

• On the job work experience or internship in a relatable field such as cyber security, network administration, disaster recovery or digital forensics.

• 0-12 months years of experience in cyber security

Education:

• Bachelor’s degree preferred

Additional Job Requirements:

• Remain in a stationary position for prolonged periods of time

• Be adaptive and change priorities quickly; meet deadlines

• Attention to detail

• Operate computer programs and software

• Ability to communicate effectively with audiences in person and in electronic formats.

• Day-to-day contact with others (co-workers and/or the public)

• Making independent decisions

• Ability to work in a collaborative business environment in close quarters with peers and varying interruptions

Qualified full-time and part-time employees also receive access to the following benefits:

• Health, dental, vision, life and disability insurance

• 401k retirement program

• Paid time off

• Participation in Premier’s employee incentive plans

• Tuition reimbursement and professional development opportunities

Premier at a glance:

• Granted World's Most Ethical Companies, Ethisphere, 2008-2026

• Named U.S. News & World Report, Best Companies to Work For (2023, 2024, 2025)

• Accredited by Forbes: America’s Best Management Consulting Firms 2024-2025

• Given Modern Healthcare Best in Business Awards: Consultants- Healthcare Management

• Awarded Cigna Workforce Designation Gold Level Recipient (2016,2017,2019,2020,2021,2022,2023,2025)

For a listing of all of our awards, please visit the Awards and Recognition section on our company website.

Employees receive:

• Perks and discounts

• Access to on-site and online exercise classes

Premier is looking for smart, agile individuals like you to help us transform the healthcare industry. Here you will find critical thinkers who have the freedom to make an impact. Colleagues who share your thirst to learn more and do things better. Teammates committed to improving the health of a nation. See why incredible challenges require incredible people.

Premier is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to unlawful discrimination because of their age, race, color, religion, national origin, ancestry, citizenship status, sex, sexual orientation, gender identity, gender expression, marital status, familial status, pregnancy status, genetic information, status as a victim of domestic violence, covered military or protected veteran status (e.g., status as a Vietnam Era veteran, disabled veteran, special disabled veteran, Armed Forces Serviced Medal veteran, recently separated veteran, or other protected veteran) disability, or any other applicable federal, state or local protected class, trait or status or that of persons with whom an applicant associates. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. In addition, as a federal contractor, Premier complies with government regulations, including affirmative action responsibilities, where they apply. EEO / AA / Disabled / Protected Veteran Employer.

Premier also provides reasonable accommodations to qualified individuals with a disability or those who have a sincerely held religious belief. If you need assistance in the application process, please reply to or contact Premier Recruiting at 704.357.0022.

Personal Information submitted will be processed in accordance with Premier's Employee and Job Applicant Privacy Notice, which includes additional information about your privacy rights.

Originally posted on Himalayas

Originally posted on Himalayas

Position Summary

We are seeking a mid-level engineer with strong cybersecurity leadership skills to join our dynamic team. As a Cyber Security Engineer at Clarity Innovations, you will play a pivotal role in the success of our products.

The candidate must be familiar with DoD network and cyber security standards – guiding the development of Cybersecurity policy, requirements, engineering and certification, and accreditation. The candidate must be familiar with Risk Management Framework (RMF) requirements, DISA STIGs. The candidate must understand application of FIPS 140-2 compliance and NIST framework principles, and how these requirements translate to cyber security solutions, processes, configuration implementation, and application requirements.

Primary Responsibilities (included but not limited to):

• Advises application teams on the security implications of both proposed and actual software modifications, ensuring awareness of risks and the integration of appropriate security measures.
• Identifies and documents application teams’ proposed and actual changes, and recommended mitigation plans and security measures
• Conducts comprehensive security engineering analyses, including vulnerability and risk assessments to inform risk decisions and mitigation strategies.
• Assesses the effectiveness of implemented security controls, ensuring compliance with U.S. Air Force and DoD security standards and objectives.
• Evaluates applications for potential security risks. Identifies and proposes improvements to security policies, standards and procedures, and risk mitigations / remediation activities.
• Reviews and analyzes application architectures, data flows, and related processes or documentation to identify security deficiencies, recommending necessary adjustments and validating the implementation of such changes
• Participates in customer meetings, discussions and decisions. Identifies and proposes improvements to security policies, standards and procedures, and risk mitigation/remediation activities.
• Supports product development discovery efforts, security architecture design and control evaluation
• Shares best practices and technical knowledge among multiple teams/portfolios.

Required:

• Minimum 3 years’ experience with DoD network engineering/management
• Minimum 3 years specified work in Cyber Security
• MUST hold at a minimum DoD 8140/8570 certification level: IAT II or IAT III
• MUST hold at least ONE of the following certifications: CASP+, AWS Security, CCSP, CSSLP (or Associate of ISC2), or equivalent technical security certification or demonstrated experience directly related to the problem domain
• Specific knowledge that may include, but is not limited to: Unix, DevSecOps, web application security, web application modernization, AWS cloud security, DoD/U.S. Air Force Risk Management Framework and related security policies and practices
• MUST be eligible to obtain a Common Access Card (CAC)

Non-Technical Competencies:

• SHALL be comfortable effectively leading a team and setting priorities
• SHALL be able to provide technical guidance and constructive feedback for development teams to reach compliance
• Required: Strong communication/general soft skills
• SHALL conduct themselves at all times in a professional and respectful manner
• SHALL give and receive feedback in a respectful and professional manner
• SHALL be a “team player” and contribute to “can-do” culture

Salary Range: $116,000 - $286,000

Originally posted on Himalayas

The Security Engineer III is a role designed for individuals with experience in cybersecurity and IT systems. They support vulnerability management program processes and procedures, using enterprise security tools to facilitate vulnerability identification and reporting. As a Security Engineer, you will frequently interact with members of all our brand's Security and IT teams, as well as third-party platform providers. In this dynamic, global environment, you will be responsible for facilitating vulnerability scanning and penetration testing, communicating vulnerability findings, and tracking vulnerability remediation efforts.

Originally posted on Himalayas

Security Engineer IV

Owns complex, cross-cutting security initiatives — including AI/LLM security posture — setting technical direction for the area, mentoring engineers, and leading investigations for high-impact incidents.

Required Education & Experience

• Bachelor's degree in Computer Science, Management Information Systems, or related technical field, or equivalent experience.

• 6–9 years of experience in security, with significant project ownership.

• 4–6 years hands-on architecting security controls and leading risk assessments.

• 1+ year informally mentoring engineers or leading design reviews.

Preferred

• Advanced security certification (CISSP, CISM, or similar).

• Deep experience securing AI vendor tools/APIs (Gemini, Vertex AI) in a regulated environment.

Knowledge, Skills, and Abilities

• Advanced expertise in compliance regulations, IT risk management, and GRC; independently designs security controls and audit processes for new domains.

• Deep understanding of cloud security architecture; independently investigates complex incidents (intrusion, fraud, leaks).

• Deep understanding of AI security threat models; independently designs security review processes for AI vendor tools/APIs and governs access controls for agentic AI tools.

• Mentors mid-level and junior security engineers on investigative and AI-security practices.

• Occasionally presents technical work to cross-functional groups of 5–10 people.

Job Functions

• Architect and own end-to-end delivery of complex security initiatives, including AI/LLM security programs, spanning multiple domains.

• Lead design reviews and set technical direction for own area; mentor junior/mid security engineers.

• Lead investigations into complex incidents and root-cause analysis within own domain.

• Own security review processes for AI vendor tools and APIs (e.g., Gemini, Vertex AI) within assigned scope.

• Contribute to and help enforce compliance-audit and risk-assessment standards for the team.

• Participate in the on-call/escalation rotation for security incidents.

About Rackspace Technology

Rackspace Technology is the trusted operator of the full enterprise AI stack, from governed private cloud to AI inference and agents in production. From edge to core to cloud, we operate the infrastructure, data layer, and software integration to deliver business outcomes with the predictable cost, reliability, security, and compliance that regulated and mission-critical environments demand. We support customers in more than 120 countries with AI capabilities spanning private cloud, public cloud, applications, data and cyber resilience.

More on Rackspace Technology

Though we’re all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. We welcome you to apply today and want you to know that we are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know.

Originally posted on Himalayas

Job Title: Cyber Security Engineer
Location: USA (Remote)
FLSA Status: FTE
Reports To: Manager, Security Engineering – Cyber Threat Team

Job Summary:

We are seeking a Security Engineer with a solid programming foundation to help automate and strengthen our global cybersecurity operations. Working alongside senior engineers, this role will focus on building scripts, automations, and reporting that streamline incident response, vulnerability management, and security monitoring. This is a growth-oriented position: you will develop hands-on expertise in enterprise security platforms and automation engineering while contributing to the organization's overall security posture. The ideal candidate’s background includes programming or scripting experience and an interest in cybersecurity.

Key Responsibilities:

• Develop and maintain scripts and automations that improve security processes within security-oriented platforms and other IT platforms, with guidance from senior engineers.
• Assist senior engineers in building and maintaining integrations between security tools and platforms.
• Develop dashboards, reports, and technical documentation for stakeholders to track security operations deliverables, trends, and progress on security posture.
• Support incident response and other security operations tasks through automation.
• Learn and apply DevOps and agile practices as part of the security engineering team.

Qualifications:

• Bachelor’s degree in computer science or related field, and 5 years of relevant work experience.
• Ability to write and debug Python code; academic projects, internships, or personal projects all count.
• Familiarity with version control (e.g. Git).
• General cybersecurity knowledge from coursework, labs, or certifications is preferred.
• Excellent analytical, troubleshooting, and communication skills.
• Eagerness to learn and the ability to collaborate across global teams and time zones.

Nice to Have:

• Internship, co-op, or project experience in security, IT, or software development.
• Exposure to SIEM/SOAR platforms (e.g. Palo Alto Cortex XSIAM) or ITSM tools (e.g., ServiceNow).
• Familiarity with security concepts such as MITRE ATT&CK, threat intelligence, or vulnerability management.
• Exposure to DevOps tools and practices.

Preferred Certifications:

• CompTIA Security+
• CompTIA CySA+
• Other relevant security or cloud certifications (e.g. AWS Security Specialty, Azure Security Engineer)

Pay Transparency Laws in some locations require disclosure of compensation and/or benefits-related information. For this position, actual salaries will vary and may be above or below the range based on various factors including but not limited to location, experience, and performance. In addition to base pay, this position, based on business need, may be eligible for a bonus or incentive. In addition, Conduent provides a variety of benefits to employees including health insurance coverage, voluntary dental and vision programs, life and disability insurance, a retirement savings plan, paid holidays, and paid time off (PTO) or vacation and/or sick time. The estimated salary range for this role is $76,076- $98,800.

Originally posted on Himalayas