Security & Safety|Security,Security & Safety Jobs

Primary Responsibilities

Akamai & Edge Platform Implementation

1. Independently configure and manage Akamai platform services, including CDN onboarding, Property Manager configurations, WAF policies, security controls, and origin protection mechanisms.
2. Execute origin lockdown activities by implementing Akamai-based controls that restrict direct access to backend application infrastructure.
3. Configure, test, and validate Akamai security capabilities, including WAF, Bot Management, API Protection, Edge Security, TLS, and traffic-routing configurations.
4. Support application onboarding to the Akamai Edge platform and drive implementation through production deployment.
5. Troubleshoot Akamai, networking, DNS, TLS, and application connectivity issues during onboarding and cutover events.

SECURITY OPERATIONS CENTER OPERATOR

Contract Length: Through June 2027 with possible extension or contract to hire
Location: Baltimore, MD
Work Setup: On-site
Schedule: 24/7 operations

Constellation is seeking a SOC Operator to support its Security Operations Center (CSOC), protecting critical infrastructure, assets, and personnel. The SOC Operator will monitor physical security systems, respond to alarms and incidents, coordinate emergency response, and maintain accurate security documentation.

SOC Operator Responsibilities

• Monitor, assess, and remediate intrusion detection alarms and security events.
• Answer, prioritize, and respond to emergency and routine security incident calls.
• Dispatch law enforcement and first responders when required.
• Manage site entry/exit and intrusion-system disarm events.
• Prepare security incident reports, notifications, and shift activity logs.
• Perform system checks, video tours, and forensic reviews of video and access-control records.
• Create service requests for security-system repairs and validate corrective maintenance.
• Follow CSOC policies, regulatory procedures, and compliance requirements.

SOC Operator Qualifications

Critical Qualifications

• AA degree, or High School Diploma/GED with 2 years of Security Systems or IT experience.
• Ability to remain effective under high-stress conditions and rapidly respond to life-safety and security incidents.
• Strong written, verbal, and interpersonal communication skills.
• Proficiency with relevant CSOC technologies, including CCure 9000E, ExacqVision, Andover Continuum, Pelco Control Point, Compass, DMP, D3, JIRA, PassagePoint, Constellation Alert, and Microsoft Office Suite.

SOC Operator Preferred Knowledge

• Knowledge of Constellation business structure and CSOC Policies and Procedures.
• Familiarity with NERC CIP requirements, substation operations, and CISS policies and procedures.
• Experience with physical security, access control, intrusion detection, video surveillance, incident response, and security operations center environments.

The SOC Operator plays a critical role in maintaining 24/7 situational awareness and supporting the protection of Constellation facilities and personnel.

We look forward to reviewing your application!

We are seeking a highly skilled Data Security Engineer to design, implement, and manage enterprise data protection and security solutions. The ideal candidate will have strong expertise in
Cohesity ,
PKI (Public Key Infrastructure)
with tools like
Venafi , and
Azure Cloud Security , along with a broader understanding of data protection, encryption, identity security, and compliance frameworks. ResponsibilitiesCohesity Data Protection
Backup Security: Design, implement, and manage Cohesity backup and data management solutions.Ensure secure backup architecture including immutability, ransomware protection, and disaster recovery.Implement backup security controls, access governance, and disaster recovery capabilities.Develop data protection controls across on premises, hybrid, and cloud environments. PKI
Certificate Management (Venafi): Design and manage enterprise PKI infrastructure.Ensure compliance with certificate governance and cryptographic standards.Manage HSM integrations and key protection strategies. Azure Cloud Security: Implement and maintain Azure security controls across IaaS, PaaS, and SaaS.Configure and manage Azure Key Vault for key and secret management.Utilize Azure Defender / Microsoft Defender for Cloud.Enforce identity and access management via Azure AD, RBAC, and Conditional Access. Data Protection
Governance: Implement encryption controls for data at rest and in transit.Define and maintain data classification and retention policies.Support compliance requirements including GDPR, HIPAA, PCI DSS, ISO 27001, SOC2, NIST, and DORA. Mandatory Skills (Must Have) Expertise in
Cohesity
(Backup, recovery, data protection, ransomware protection).Strong understanding of
PKI
fundamentals and operations.Experience with
Venafi
(Certificate lifecycle management and automation).Proficient in
Azure Cloud Security , specifically Azure AD.Knowledge of
Compliance Management and Assessments
principles and practices Preferred Skills (Good to Have) Experience with additional cloud security tools and frameworks.Familiarity with data loss prevention (DLP) technologies.Knowledge of security compliance frameworks beyond those listed in mandatory skills.Certifications in relevant areas (e.g., CISSP, CISM, Azure Security Engineer).

Hybrid at HQ or Remote
6 month contract
HQ Max: ***/hr
Remote: ***/hr
Basic Description
The Fraud Systems team is seeking an experienced contractor to provide User Acceptance Testing (UAT) support for system enhancements, releases, issue resolution, and business initiatives. The contractor will ensure business requirements are met and system changes function as expected prior to implementation.
This role supports a blended UAT model consisting of both manual and automation-assisted testing. The tester will perform hands-on UAT when appropriate and review screenshots and other evidence generated through automated test execution. Automation may perform repeatable test steps and capture evidence; however, the UAT tester remains responsible for validating business outcomes and determining the final test result.
This role will also prepare and condition test accounts and test data, develop reusable and automation-ready test cases, document testing results, and support continuous improvement of Fraud Systems testing practices.
Responsibilities
Develop and maintain UAT plans, test cases, test scripts, and supporting documentation.
Review business requirements, user stories, and acceptance criteria to ensure adequate test coverage.
Develop comprehensive, repeatable test cases with clear preconditions, test data, account-conditioning requirements, expected results, and validation points.
Create, condition, maintain, and validate test accounts and test data required to execute UAT scenarios.
Troubleshoot test-account and test-data issues that prevent successful test execution.
Perform hands-on manual UAT, including functional, regression, integration, and end-to-end testing.
Execute testing for system changes, releases, defect resolutions, and business initiatives.
Develop reusable test cases and assets that support future automated execution.
Review screenshots and other evidence generated through automation-assisted testing and validate results against business requirements.
Determine test disposition, including Pass, Fail, Blocked, or Requires Additional Validation.
Perform additional manual validation when automated results or evidence are incomplete or inconclusive.
Identify, document, track, retest, and validate defects and issues.
Maintain traceability between requirements, test cases, test data, results, evidence, and defects.
Collaborate with business stakeholders, product owners, developers, automation resources, and project teams throughout the testing lifecycle.
Support release readiness, issue triage, and post-implementation validation activities.
Maintain testing evidence and documentation in accordance with applicable governance, compliance, and audit requirements.
Identify opportunities to improve test coverage, efficiency, repeatability, and automation readiness.
Communicate testing status, risks, issues, blockers, and recommendations to stakeholders.
Required Qualifications
Bachelor s degree or equivalent combination of education and professional experience.
5 10 years of UAT, quality assurance, business validation, or related testing experience.
Proven experience developing and executing high-quality UAT test plans, test cases, test scripts, and scenarios.
Strong hands-on experience with functional, regression, integration, and end-to-end testing.
Experience reviewing business requirements, user stories, and acceptance criteria and translating them into comprehensive test scenarios.
Experience creating and conditioning test accounts and test data, including establishing required account states, attributes, prerequisites, and business conditions.
Experience troubleshooting test-account and test-data issues.
Ability to create well-structured, repeatable, reusable, and automation-ready test cases.
Experience reviewing test results and evidence and independently determining whether expected business outcomes were achieved.
Experience documenting defects, testing risks, evidence, and test results.
Experience using test-management and defect-tracking tools.
Experience working in Agile and project-based environments supporting multiple concurrent initiatives.
Automation-Focused Skills
Understanding of automated testing concepts and blended manual/automation-assisted UAT.
Experience designing test cases with clear test data, repeatable steps, expected results, validation checkpoints, and evidence requirements.
Ability to maintain consistently conditioned test accounts and data for repeatable manual and automated testing.
Ability to review screenshots and other evidence produced through automated execution and validate expected business outcomes.
Ability to distinguish between successful automated execution and successful business validation.
Ability to identify scenarios appropriate for automation and scenarios requiring manual execution or human judgment.
Ability to recognize insufficient or inconclusive automated evidence and perform additional manual validation.
Ability to collaborate with automation resources to improve test execution, evidence capture, reliability, and coverage.
Required Soft Skills
Strong verbal and written communication skills.
Excellent attention to detail and commitment to quality.
Strong analytical, critical-thinking, and problem-solving skills.
Ability to work independently and manage multiple priorities.
Strong collaboration skills across business and technical teams.
Ability to communicate testing status, risks, defects, and recommendations clearly.
Ability to identify and challenge unclear requirements, insufficient test coverage, or inadequate test evidence.
Desired Skills
Experience supporting fraud prevention, fraud operations, risk management, or financial services.
Experience supporting complex system implementations, integrations, and production releases.
Experience with automation-assisted testing or automated testing tools/frameworks.
Experience developing reusable regression and automation-ready test assets.
Knowledge of risk-based testing and test-case design best practices.
Experience with compliance, governance, audit evidence, and testing documentation requirements.
Ability to mentor others on UAT best practices, test-case development, test-account conditioning, and testing quality.

TheCybersecurity Portfolio Lead is responsible for defining, driving, and delivering enterprise wide cybersecurity strategy, roadmaps, and transformation initiatives across Digital Identity, Privileged Access Management, Data Protection, Security Operations, Cyber Resilience, Compliance, and Security Governance. This role provides leadership for a broad portfolio of cybersecurity programs, ensuring alignment with business priorities, regulatory requirements, enterprise risk management objectives, and technology modernization initiatives.The role serves as the primary leader for cybersecurity program delivery, executive stakeholder engagement, vendor management, governance, and cross functional execution across security, infrastructure, cloud, data, and business teams. Cybersecurity Portfolio Strategy
Leadership Define and execute multi year cybersecurity portfolio strategies and roadmaps.Lead enterprise cybersecurity transformation programs from concept through implementation and operationalization.Align security initiatives with organizational objectives, risk reduction goals, and regulatory requirements.Provide executive level leadership, decision support, and strategic recommendations.Drive continuous improvement, innovation, and cybersecurity maturity advancement across the organization. Identity Governance
Administration (IGA) Lead enterprise identity governance programs including:SailPoint Identity Governance platform ownership and roadmap execution.Application onboarding into SailPoint.nboarding of high priority and business critical applications.Workflow modernization initiatives.Birthright Access Automation programs.Distribution List (DL) automation.File Share Access Automation.Identity lifecycle governance and compliance controls.Access certification and entitlement governance processes. Privileged Access Management (PAM) Provide leadership for enterprise privileged access security initiatives including:CyberArk platform governance and modernization.CyberArk Secrets Hub implementation.Service Account Governance.Privileged credential lifecycle management.Workforce Password Manager (WPM) rollout and adoption.PAM strategy development and roadmap execution. Authentication Modernization Drive enterprise authentication transformation initiatives including:Self Service Password Reset (SSPR) implementation.Duo decommission program.Microsoft native authentication controls adoption.Passwordless and modern authentication capabilities.Identity security enhancement and user experience improvements. Data Security
Data Security Posture Management (DSPM) Lead data security modernization and governance capabilities including:Varonis Atlas proof of concept and deployment strategy.Varonis Lumina and Databricks integration initiatives.tructured and unstructured data protection programs.Automated data discovery and classification.Data risk visibility and governance frameworks.AI governance and secure AI adoption initiatives.Security controls for enterprise data platforms. Cloud Security
SIEM Modernization Own strategic cloud security and security monitoring transformation initiatives including:Sentinel Data Lake migration (ADX to Sentinel).HVA (High Value Asset) integration into Microsoft Defender.CMDB and Sentinel integration.Security monitoring architecture modernization.Security telemetry optimization and visibility improvements.Cloud security governance and architecture oversight. Security Operations
Threat Visibility Lead cybersecurity operational effectiveness initiatives including:Microsoft Defender Secure Score improvement program.Security visibility enhancement initiatives.Sygnia Visibility Program execution.

Job Summary: We are seeking a highly skilled and experienced temporary contractor to assist in the creation and documentation of standard operating procedures (SOPs) for our Security Operations Center (SOC) related to physical security operations. This role will involve drafting, refining, and finalizing SOPs for a variety of physical security processes and systems. The ideal candidate will have previous experience in physical security management and, ideally, experience in a SOC environment. Responsibilities:

• Proven experience in physical security operations and processes.
• Experience in writing SOPs or other technical documentation.
• Previous experience working in a Security Operations Center (SOC) is highly preferred.
• Strong understanding of physical security systems and infrastructure.
• Excellent written and verbal communication skills.
• Ability to work independently and manage multiple tasks efficiently.
• Preferred - Familiarity with industry standards and best practices for physical security management.

Key Requirements: Write and Develop SOPs for Physical Security Operations:

• Draft and document standard operating procedures (SOPs) for core SOC physical security functions, including but not limited to:
• Camera monitoring (virtual patrols).
• Alarm response protocols.
• Security incident response procedures.
• ID badge processing.
• Physical security ticket processing.
• Other operational tasks as required.
• Develop Standards for Physical Security Infrastructure:

Create and document standards for physical security components, including:

• Surveillance cameras.
• Intrusion alarm systems.
• Card access systems.
• Perimeter fencing.
• Key control systems.
• Lighting and motorized gates.
• Bollards and clear zones.
• Additional security measures as needed.

Schedule: Part-time. Weekday daytime core hours, Monday through Friday, with federal holidays off. Shifts are at least 4 hours. Work outside core hours is occasional and approved in advance.

Status: This position is contingent on contract award.

About the role: Escort visitors who are not cleared through a secure government facility, keeping them within authorized areas and making sure security procedures are followed.

Responsibilities:

·        Brief escorted visitors on facility security, safety rules, and prohibited items

·        Escort visitors who are not cleared, including maintenance and construction workers, and keep them in authorized areas at all times

·        Follow and enforce facility security procedures

·        Report security concerns or incidents right away

·        Coordinate with Access Control Officers and the Site Supervisor

·        Complete required security and annual training (scheduled off post, with relief coverage)

Requirements

Minimum qualifications:

·        U.S. citizenship

·        Active TS/SCI clearance

·        At least 21 years of age (contract requirement)

·        High school diploma or equivalent

·        At least 2 years of qualifying experience: access control, physical security monitoring, escorting, static guard, law enforcement, or military service (combat arms, military police, or physical security duties), or related security oversight in a controlled government or defense facility

·        Current CPR, AED, and First Aid certification (or able to obtain before start)

·        Able to walk, stand, sit, and stoop for up to 12 hours

·        Fluent in English; able to understand and apply written rules and procedures

·        Eligible for a DoD Common Access Card (CAC)

·        Willing to sign a non-disclosure agreement and, if required, submit to a counterintelligence polygraph

Benefits

Benefits:

Hourly pay range: $21.50 - $26.50 per hour

Paid sick leave, vacation and leave benefits as applicable to part-time staff, and paid training. Uniforms provided.

VxL Enterprises is an Equal Opportunity Employer. All qualified applicants will receive consideration without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.

Keep the good vibes and good times flowing at Jack Brown's as a frontline ambassador of safety and hospitality. As a Bouncer, you'll manage crowd entry, check IDs with a sharp eye, and ensure every guest enjoys a safe, fun night. You'll be the calm in the chaos— monitoring the floor, de-escalating issues with confidence and respect, and partnering with team members to uphold our high standards of service. Ideal candidates are observant, composed, physically fit, and great with people.

Requirements

Key responsibilities

• Greet guests, verify age/legal ID, control access
• Maintain a secure, welcoming environment inside and outside
• Diffuse conflicts with professionalism and firmness
• Support staff with crowd flow during peak times

We are seeking a highly skilled Data Security Engineer to design, implement, and manage enterprise data protection and security solutions. The ideal candidate will have strong expertise in
Cohesity ,
PKI (Public Key Infrastructure)
with tools like
Venafi , and
Azure Cloud Security , along with a broader understanding of data protection, encryption, identity security, and compliance frameworks. ResponsibilitiesCohesity Data Protection
Backup Security: Design, implement, and manage Cohesity backup and data management solutions.Ensure secure backup architecture including immutability, ransomware protection, and disaster recovery.Implement backup security controls, access governance, and disaster recovery capabilities.Develop data protection controls across on premises, hybrid, and cloud environments. PKI
Certificate Management (Venafi): Design and manage enterprise PKI infrastructure.Ensure compliance with certificate governance and cryptographic standards.Manage HSM integrations and key protection strategies. Azure Cloud Security: Implement and maintain Azure security controls across IaaS, PaaS, and SaaS.Configure and manage Azure Key Vault for key and secret management.Utilize Azure Defender / Microsoft Defender for Cloud.Enforce identity and access management via Azure AD, RBAC, and Conditional Access. Data Protection
Governance: Implement encryption controls for data at rest and in transit.Define and maintain data classification and retention policies.Support compliance requirements including GDPR, HIPAA, PCI DSS, ISO 27001, SOC2, NIST, and DORA. Mandatory Skills (Must Have) Expertise in
Cohesity
(Backup, recovery, data protection, ransomware protection).Strong understanding of
PKI
fundamentals and operations.Experience with
Venafi
(Certificate lifecycle management and automation).Proficient in
Azure Cloud Security , specifically Azure AD.Knowledge of
Compliance Management and Assessments
principles and practices Preferred Skills (Good to Have) Experience with additional cloud security tools and frameworks.Familiarity with data loss prevention (DLP) technologies.Knowledge of security compliance frameworks beyond those listed in mandatory skills.Certifications in relevant areas (e.g., CISSP, CISM, Azure Security Engineer).

Role : Checkmarx SME (Security Scanning & Application Security)

Location : Charlotte, NC (Hybrid)

Rate: $60 to $65/hr

Work Experience: 8 to 12 Years

Job Summary

We are seeking a Checkmarx Subject Matter Expert (SME) with strong experience supporting and optimizing Checkmarx-based application security programs. This is not a Checkmarx implementation role. The ideal candidate will have hands-on experience using Checkmarx in enterprise environments, advising development and security teams, interpreting scan results, and driving remediation best practices.

Key Responsibilities

• Act as the Checkmarx SME for application security initiatives.
• Review and analyze Checkmarx scan results and recommend remediation strategies.
• Support vulnerability triage, prioritization, and risk assessment activities.
• Work closely with application development, DevSecOps, and security teams.
• Establish best practices for SAST usage and secure coding.
• Assist in policy tuning, rule optimization, and false positive reduction.
• Provide guidance on integrating Checkmarx into SDLC and CI/CD pipelines.
• Support audits, security assessments, and compliance initiatives.
• Create dashboards, reports, and vulnerability metrics for leadership.

Required Qualifications

• 8+ years of Application Security experience.
• 5+ years of hands-on experience with Checkmarx.
• Strong understanding of SAST methodologies.
• Experience supporting vulnerability management programs.
• Knowledge of secure coding practices across Java, .NET, Python, or similar technologies.
• Experience working with CI/CD tools and DevSecOps processes.
• Strong stakeholder communication skills.

Preferred Qualifications

• Experience with Checkmarx One or Checkmarx SAST platforms.
• Security certifications such as CSSLP, CISSP, Security+, or similar.
• Experience with additional security tools such as Veracode, Fortify, SonarQube, or Snyk.

Responsibilities
Support project strategy, planning, scheduling, and coordination activities across a small portfolio of cybersecurity risk assessment projects.
Maintain project plans, milestones, dependencies, risks, issues, and action items using Azure DevOps (ADO), SharePoint, and Excel.
Coordinate activities across multiple workstreams to support timely project execution and delivery.
Maintain and administer project, program, and team repositories.
Manage SharePoint sites, document libraries, records retention requirements, and project artifacts.
Ensure project documentation, evidence, and deliverables are organized, current, and readily available for reporting and audit purposes.
Coordinate and deliver project and program status reporting.
Prepare written and verbal updates for leadership, stakeholders, and PMO governance activities.
Track project performance metrics, milestones, risks, issues, and dependencies.
Develop, maintain, and update team processes, procedures, standards, and operating documentation.
Support technical writing, process improvement, and documentation standardization efforts.
Maintain process inventories and procedural repositories.
Design, develop, and maintain program dashboards and reporting solutions.
Utilize Power BI, SharePoint, Excel, and related tools to provide actionable management reporting.
Develop visualizations and metrics supporting program performance, governance, and decision-making.
Support team members with development of reports, presentations, and executive communications.
Prepare executive-ready materials utilizing Microsoft Word, PowerPoint, and Microsoft Copilot.
Assist with presentation formatting, branding compliance, and communication deliverables.
Perform data analysis, trend identification, and visualization activities.
Analyze project, risk, compliance, and operational data using Power BI, Excel, and Copilot-enabled capabilities.
Produce meaningful insights to support leadership decision making and program management.
Maintain awareness of Navy Federal branding standards and presentation requirements.
Ensure all reporting, dashboards, presentations, and communications align with current corporate and Security organization templates and standards.
Operate effectively within a technology, cybersecurity, governance, risk, and compliance environment.
Support initiatives involving information security, operational risk, technology risk, regulatory compliance, and governance activities.
Requirements
Experience supporting project management or program management functions.
Strong knowledge of Microsoft Office products, including Excel, PowerPoint, Word, SharePoint, and Teams.
Experience using Azure DevOps (ADO) for project coordination, backlog management, and reporting.
Experience developing dashboards and reporting solutions using Power BI.
Strong analytical, organizational, and problem-solving skills.
Experience performing data analysis and developing executive-level reporting and presentations.
Excellent written, verbal, and technical communication skills.
Demonstrated technical writing and documentation management experience.
Experience maintaining process documentation, procedures, and records repositories.
Ability to manage multiple priorities and coordinate activities across diverse stakeholder groups.
Experience within cybersecurity, information security, technology risk, governance, compliance, or related environments preferred.
Experience in the financial services industry preferred.
Bachelor's degree in Information Systems, Information Security, Computer Science, or related field.
5 10 years of experience in project management/coordination or business analysis and technical writing.
Experience with Microsoft Copilot and AI-enabled productivity tools desired.
Desired Skills
Power BI Dashboard Development
Azure DevOps (ADO)
SharePoint Administration & Governance
Project Planning & Coordination
PMO Reporting
Technical Writing
Executive Communications
Data Analysis
Cybersecurity & Technology Risk
Process Improvement
Data Visualization
Microsoft Copilot