Application Security Engineer
Security architect job in Orlando, FL
We are seeking a Senior Software Engineer with strong expertise in application security to join a forward-thinking technology team focused on enhancing secure software development practices. This role combines deep technical knowledge with the ability to collaborate across engineering and security teams to ensure robust, secure applications.
Role Overview
The ideal candidate will have a software development background (Java and JavaScript preferred) and hands-on experience in application security, including vulnerability analysis, remediation strategies, and secure coding principles. This position requires strong communication skills to act as a bridge between development and security teams, driving best practices and influencing architecture decisions.
Key Responsibilities
Implement and manage software security testing techniques aligned with enterprise standards.
Analyze and assess open-source vulnerabilities, including zero-day threats, and determine impact on applications.
Develop and execute remediation plans for identified risks, including code refactoring and dependency updates.
Champion secure coding practices and lead security reviews across engineering teams.
Provide technical designs and recommendations to reduce vulnerabilities and improve security posture.
Collaborate with development, architecture, and security teams to integrate security into the software delivery lifecycle.
Stay current on emerging threats, tools, and best practices in application and cloud security.
Desired Skills & Competencies
Strong experience in application security testing and software composition analysis.
Knowledge of web application security, cloud security, and container security.
Familiarity with OWASP, CWE, CVE standards and vulnerability mitigation techniques.
Hands-on experience with tools such as Sonatype, Qualys, SonarQube, and AWS Inspector.
Proficiency in Java, JavaScript, and Python.
Working knowledge of AWS services, Docker, Terraform, and DevSecOps practices.
Excellent communication skills and ability to influence technical and non-technical stakeholders.
Preferred Qualifications
Bachelor's degree in Computer Science or related field (AWS and security certifications a plus).
Experience collaborating with cross-functional teams and driving secure development initiatives.
Familiarity with industry-standard tools for code quality, repository management, and CI/CD pipelines.
Manager - Security Architect
Security architect job in Orlando, FL
At EY, we're all in to shape your future with confidence. We'll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.
**Manager - Security Architect**
**The opportunity**
We're hiring an experienced Security Architect that is an expert in the modern security threat and mitigation environment. Knowledge of the use of security in the development of applications (threat model development) best practices for security in the design architecture of applications. The use of AI in SEIM/MDR/MXDR and/or the analysis of behavioral threats. The successful candidate should have experience in the emerging area of AI based attack vectors and be able to devise successful mitigation. The candidate should thrive in fast-paced environments and are passionate about enabling scalable AI solutions.
**Your key responsibilities**
+ Develop effective security designs for implementation into enterprise applications and internal EY platforms.
+ Support security tool selection and verification.
+ Develop best practices for security design patterns in AI native applications.
+ Execute security assessments based on experience and select AI and conventional code analysis tools.
+ Assess new proposed projects to insure they are leveraging best security practices architecture design and implementation.
+ Collaborate with other architectural experts in AI, Data and Infrastructure to insure balanced and practical outcomes.
+ Support strategic business development activities for emerging technology.
**Skills and attributes for success**
+ Strong analytical and troubleshooting skills.
+ Ability to lead security architectural product functions and mentor junior engineers.
+ Comfortable working across cross-functional teams and managing competing priorities.
+ Build and manage strong internal and external partnerships by fostering trust, empathy, and mutual value.
+ Leverage emotional agility and hybrid collaboration to navigate diverse stakeholder needs and drive long-term engagement.
+ Use critical thinking and creative reasoning to address complex problems and exceed expectations.
+ Align cross-functional teams around shared goals, ensuring accountability and progress. Use emotional intelligence and hybrid collaboration to motivate others and deliver high-impact results.
**T** **o qualify you must have**
+ 5-10+ years of experience in security engineering and architecture for products.
+ Understand security and safety in an AI environment (Guardrails, Adversarial attacks, output validation etc..)
+ Use of security tooling for application verification in Github Advance Security, Checkmarx JFrog, DAST, etc..
+ Understand threat model development and verified implementation.
+ Familiarity with security certifications and appropriate use for best practices development OWASP etc....
+ Expertise in the assessment of security best practices of agile development process
+ Expertise in the development and adoption of security first best practices.
**Ideally, you'll also have**
+ Experience with large-scale cross functional software development projects.
+ Excellent communication and leadership abilities.
**What we offer you**
At EY, we'll develop you with future-focused skills and equip you with world-class experiences. We'll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more .
+ We offer a comprehensive compensation and benefits package where you'll be rewarded based on your performance and recognized for the value you bring to the business. The base salary range for this job in all geographic locations in the US is $125,500 to $230,200. The base salary range for New York City Metro Area, Washington State and California (excluding Sacramento) is $150,700 to $261,600. Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.
+ Join us in our team-led and leader-enabled hybrid model. Our expectation is for most people in external, client serving roles to work together in person 40-60% of the time over the course of an engagement, project or year.
+ Under our flexible vacation policy, you'll decide how much vacation time you need based on your own personal circumstances. You'll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
**Are you ready to shape your future with confidence? Apply today.**
EY accepts applications for this position on an on-going basis.
For those living in California, please click here for additional information.
EY focuses on high-ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities.
**EY | Building a better working world**
EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.
Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.
EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.
EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.
EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY's Talent Shared Services Team (TSS) or email the TSS at ************************** .
Cyber Security Architect
Security architect job in Orlando, FL
Seeking an experienced Cybersecurity Risk Architect to lead the development and governance of our enterprise cybersecurity risk architecture. You'll play a key role in protecting critical infrastructure by shaping strategy, advancing compliance, and driving continuous security improvements across IT and OT environments.
Key Responsibilities:
Lead the design, maintenance, and governance of company enterprise cybersecurity risk architecture.
Align cybersecurity initiatives with business strategy and regulatory requirements (e.g., NIST, NERC CIP).
Conduct security risk assessments, threat detection, incident response, and vulnerability management.
Develop and manage the Cybersecurity Risk Register and audit documentation.
Build automated compliance monitoring routines and security dashboards.
Partner across IT, operations, and leadership to drive security risk mitigation.
Stay current on evolving cybersecurity regulations, frameworks, and technologies.
Mentor and coach team members on cybersecurity and risk management best practices.
Qualifications:
5+ years of cybersecurity risk management experience, preferably in utilities or critical infrastructure.
CISSP certification required; CISA certification preferred.
Strong expertise in cybersecurity frameworks (NIST, NERC CIP), risk architecture, and governance.
Hands-on experience with SIEM platforms (Splunk preferred) and data analytics tools (Python, R, SQL).
Deep knowledge of IT/OT environments, security controls, and enterprise architecture (TOGAF).
Strong communication skills with the ability to simplify technical concepts for business audiences.
Utility/energy sector cybersecurity experience highly preferred.
Education:
Degree not required with significant relevant experience and CISSP certification.
Kavaliro provides Equal Employment Opportunities to all employees and applicants. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. Kavaliro is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Kavaliro will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please respond to this posting to connect with a company representative.
Director, Client Security Engineering Architect
Security architect job in Orlando, FL
Known for being a great place to work and build a career, KPMG provides audit, tax and advisory services for organizations in today's most important industries. Our growth is driven by delivering real results for our clients. It's also enabled by our culture, which encourages individual development, embraces an inclusive environment, rewards innovative excellence and supports our communities. With qualities like those, it's no wonder we're consistently ranked among the best companies to work for by Fortune Magazine, Consulting Magazine, Seramount, Fair360 and others. If you're as passionate about your future as we are, join our team.
KPMG is currently seeking a Director, Tech Engineering to join our Tax Ignition Group.
Responsibilities:
* Lead the function of responding to clients' security inquires
* Meet with clients to answer their security questions and negotiate compensating controls when there are gaps between client requirements and our product offerings
* Drive innovation and improvement in the client security inquiry process such incorporating Artificial Intelligence into the process, creating additional collateral such as whitepapers, managing metrics, and improving the tooling and interactions with requestors
* Partner with various groups within Tax's technology function and business teams to incorporate trends into product roadmaps; collaborate with other compliance teams, and raise awareness around client security requirements
* Review and respond to client security questionnaires and assessments
* Build and maintain a knowledge base of common client questions
Qualifications:
* Minimum ten years of recent experience in Information Technology (IT) security compliance, risk management or related IT security within a large IT organization, preferably within a professional services firm, software product, or other highly regulated environment
* Bachelor's degree from an accredited college or university is preferred
* Deep understanding of cloud architecture, modern software development, and technical security controls is required; Azure experience is preferred
* Strong executive presence, negotiation, presentation, and communication skills are required; excellent analytical and problem-solving skills to assess complex security issues and develop effective solutions; capability to work effectively in a global environment, understanding diverse cultural perspectives and international client needs
* Proven experience in client-facing roles, particularly in handling security inquiries, negotiations, and managing client relationships; demonstrated ability to drive innovation and continuous process improvement, particularly in integrating new technologies and methodologies into existing processes
* Demonstrated knowledge of industry authoritative sources such as COBIT, NIST, ISO standards; CISM, CISA, ISO 27001 Auditor, LSS Green Belt, CRISC, CIPP, CGEIT or ITIL preferred
* Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa
KPMG LLP and its affiliates and subsidiaries ("KPMG") complies with all local/state regulations regarding displaying salary ranges. If required, the ranges displayed below or via the URL below are specifically for those potential hires who will work in the location(s) listed. Any offered salary is determined based on relevant factors such as applicant's skills, job responsibilities, prior relevant experience, certain degrees and certifications and market considerations. In addition, KPMG is proud to offer a comprehensive, competitive benefits package, with options designed to help you make the best decisions for yourself, your family, and your lifestyle. Available benefits are based on eligibility. Our Total Rewards package includes a variety of medical and dental plans, vision coverage, disability and life insurance, 401(k) plans, and a robust suite of personal well-being benefits to support your mental health. Depending on job classification, standard work hours, and years of service, KPMG provides Personal Time Off per fiscal year. Additionally, each year KPMG publishes a calendar of holidays to be observed during the year and provides eligible employees two breaks each year where employees will not be required to use Personal Time Off; one is at year end and the other is around the July 4th holiday. Additional details about our benefits can be found towards the bottom of our KPMG US Careers site at Benefits & How We Work.
Follow this link to obtain salary ranges by city outside of CA:
**********************************************************************
KPMG offers a comprehensive compensation and benefits package. KPMG is an equal opportunity employer. KPMG complies with all applicable federal, state and local laws regarding recruitment and hiring. All qualified applicants are considered for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, citizenship status, disability, protected veteran status, or any other category protected by applicable federal, state or local laws. The attached link contains further information regarding KPMG's compliance with federal, state and local recruitment and hiring laws. No phone calls or agencies please.
KPMG recruits on a rolling basis. Candidates are considered as they apply, until the opportunity is filled. Candidates are encouraged to apply expeditiously to any role(s) for which they are qualified that is also of interest to them.
Los Angeles County applicants: Material job duties for this position are listed above. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness, and safeguard business operations and company reputation. Pursuant to the California Fair Chance Act, Los Angeles County Fair Chance Ordinance for Employers, Fair Chance Initiative for Hiring Ordinance, and San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
Sr. Principal Industrial Security Analyst
Security architect job in Melbourne, FL
RELOCATION ASSISTANCE: Relocation assistance may be available CLEARANCE TYPE: SecretTRAVEL: Yes, 25% of the TimeDescriptionAt Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work - and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history.
Northrop Grumman Aeronautics Sector (NGAS) is seeking a Sr. Principal Industrial Security Analyst (ISA4) to join our team of qualified, diverse individuals in Melbourne, Florida.
The selected candidate will have the responsibility of developing and administering security programs and procedures for classified or proprietary materials, documents, and equipment in a fast-paced, high-profile portfolio of programs. In this role, the selected candidate will:
Study and implement federal security regulations that apply to company operations
Obtain rulings, interpretations, and acceptable deviations for compliance with regulations from government agencies
Manage program security compliance and operations across multiple functions including PHYSEC, COMSEC, PERSEC, Contract Security, Investigations, and Document Control Management
Prepare manuals outlining regulations, and establishes procedures for handling, storing, and keeping records, and for granting personnel and visitors access to restricted records and materials
Conduct security education classes and security audits
Investigate security violations and prepares reports specifying preventive action to be taken
This position will be 1st shift, 9/80 work schedule with every other Friday off, phenomenal learning opportunities, exposure to a wide variety of projects and customers, and a very friendly team environment. We are looking for self-motivated, proactive, and goal-oriented people to help us grow our services and become even better at what we do.
Our Leaders at Northrop Grumman live our values daily and encourage our teams to do the same. We do the right thing: upholding the highest ethical standards and facilitating a safe and respectful environment that attracts, retains, and inspires a diverse and engaged team. We do what we promise: holding yourself and others accountable to meet predictable and balanced results. We commit to shared success: operating as OneNG and removing barriers for our teams. Finally, We pioneer setting a vision that shapes the future and inspires others.
Basic Qualifications:
8 years of Industrial Security experience with a Bachelors Degree; 6 years with Masters; 4 year with PhD OR an additional 4 years of Industrial Security or related experience will be considered in lieu of a degree
Candidate must be a US Citizen
In-scope investigation (T5, T5R, SSBI, SBPR, PR) completed within the last 6 years or current enrollment in Continuous Evaluation (CE) program
Candidate must have an active U.S. Government DoD Secret security clearance with the ability to obtain and maintain Top Secret clearance
Ability to meet enhanced security requirements and obtain/maintain SAP eligibility and access
Proficient knowledge of the Department of Defense Manual 5205.07; 32 CFR Part 17 National Industrial Security Program Operating Manual (NISPOM)
Preferred Qualifications:
Bachelor's Degree
Active Top-Secret clearance
Strong leadership skills to include: Self-starter with minimal supervision, high ethical standards, organized and efficient at time management
Strong interpersonal skills to communicate effectively, ability to manage multiple tasks simultaneously, make decisions in the midst of ambiguity and meet deadlines
Experience with Supply Chain Security process and procedures
Highly organized with ability to manage multiple priorities and time sensitive deliverables
Primary Level Salary Range: $101,400.00 - $152,200.00The above salary range represents a general guideline; however, Northrop Grumman considers a number of factors when determining base salary offers such as the scope and responsibilities of the position and the candidate's experience, education, skills and current market conditions.Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results. Employees in Vice President or Director positions may be eligible for Long Term Incentives. In addition, Northrop Grumman provides a variety of benefits including health insurance coverage, life and disability insurance, savings plan, Company paid holidays and paid time off (PTO) for vacation and/or personal business.The application period for the job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.Northrop Grumman is an Equal Opportunity Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. For our complete EEO and pay transparency statement, please visit *********************************** U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.
Auto-ApplyInformation System Security Officer (ISSO), Classified Cybersecurity
Security architect job in Cape Canaveral, FL
Lockheed Martin Space (LMS) is seeking a Classified Cybersecurity Information Systems Security Officer (ISSO) supporting the Fleet Ballistic Missile (FBM) program. This position is located in Cape Canaveral, FL. The selected candidate will conduct daily cybersecurity operations, to include auditing, creating information system authorization packages, and implementing cybersecurity requirements for both classified and unclassified information systems. The position requires a current Secret clearance and the ability to obtain a Top Secret security clearance.
Key Responsibilities of this role include:
• Carry out technical administration of an Information System in accordance with internal LM and customer security requirements, primarily Risk Management Framework (RMF).
• Upkeep, monitor, analyze, and respond to network and security events.
• Document compliance actions within the approved compliance tracking system or develop a plan of actions and milestones (POA&M) with the Information Systems Security Manager (ISSM) to address non-compliance in the allotted time frame.
• Ensure systems are operated, maintained, and disposed of in accordance with internal security policies and practices outlined in the security plan.
• Operate and maintain ACAS laptops and servers utilizing Tenable Security Center and Nessus Security scanner.
• Audit various isolated and networked systems using vulnerability scanning and STIG analysis tools.
Basic Qualifications
• DoD Secret government security clearance with an investigation within the last 5 years and the ability to obtain and maintain a Top Secret clearance.
• Knowledge of system hardening via implementation of the Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs).
• Knowledge of security scanning tools such as SCAP, Evaluate-STIG and Tenable.
• Appropriate DoD 8570 IAT II Certification.
• Information System auditing experience.
Desired skills
• Experience with industry standard Information Assurance tools such as Splunk, Fortify, or SonarQube.
• Proficiency in multiple platforms to include Windows, Linux/Unix, and Networking equipment.
• Proficient writing technical documentation.
• Experience with Navy Fleet Ballistic Missile (FBM) program.
• Knowledge of NIST SP 800-37 Risk Management Framework (RMF), NIST SP 800-53 Security and Privacy Controls requirements, and NIST 800-171 Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations.
• Knowledge of and experience developing, reviewing and maintaining RMF artifacts.
Lockheed Martin is an equal opportunity employer. Qualified candidates will be considered without regard to legally protected characteristics.
The application window will close in 90 days; applicants are encouraged to apply within 5 - 30 days of the requisition posting date in order to receive optimal consideration.
*
At Lockheed Martin, we use our passion for purposeful innovation to help keep people safe and solve the world's most complex challenges. Our people are some of the greatest minds in the industry and truly make Lockheed Martin a great place to work.
With our employees as our priority, we provide diverse career opportunities designed to propel, develop, and boost agility. Our flexible schedules, competitive pay, and comprehensive benefits enable our employees to live a healthy, fulfilling life at and outside of work. We place an emphasis on empowering our employees by fostering an inclusive environment built upon integrity and corporate responsibility.
If this sounds like a culture you connect with, you're invited to apply for this role. Or, if you are unsure whether your experience aligns with the requirements of this position, we encourage you to search on Lockheed Martin Jobs, and apply for roles that align with your qualifications.
Other Important Information
By applying to this job, you are expressing interest in this position and could be considered for other career opportunities where similar skills and requirements have been identified as a match. Should this match be identified you may be contacted for this and future openings.
Ability to work remotely
Onsite Full-time: The work associated with this position will be performed onsite at a designated Lockheed Martin facility.
Work Schedule Information
Lockheed Martin supports a variety of alternate work schedules that provide additional flexibility to our employees. Schedules range from standard 40 hours over a five day work week while others may be condensed. These condensed schedules provide employees with additional time away from the office and are in addition to our Paid Time off benefits.
Security Clearance Information
This position requires a government security clearance, you must be a US Citizen for consideration.
Pay Rate: The annual base salary range for this position in California, Massachusetts, and New York (excluding most major metropolitan areas), Colorado, Hawaii, Illinois, Maryland, Minnesota, New Jersey, Vermont, Washington or Washington DC is $76,500 - $134,895. For states not referenced above, the salary range for this position will reflect the candidate's final work location. Please note that the salary information is a general guideline only. Lockheed Martin considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/ training, key skills as well as market and business considerations when extending an offer.
Benefits offered: Medical, Dental, Vision, Life Insurance, Short-Term Disability, Long-Term Disability, 401(k) match, Flexible Spending Accounts, EAP, Education Assistance, Parental Leave, Paid time off, and Holidays.
(Washington state applicants only) Non-represented full-time employees: accrue at least 10 hours per month of Paid Time Off (PTO) to be used for incidental absences and other reasons; receive at least 90 hours for holidays. Represented full time employees accrue 6.67 hours of Vacation per month; accrue up to 52 hours of sick leave annually; receive at least 96 hours for holidays. PTO, Vacation, sick leave, and holiday hours are prorated based on start date during the calendar year.
This position is incentive plan eligible.
Pay Rate: The annual base salary range for this position in most major metropolitan areas in California, Massachusetts, and New York is $88,000 - $152,490. For states not referenced above, the salary range for this position will reflect the candidate's final work location. Please note that the salary information is a general guideline only. Lockheed Martin considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/ training, key skills as well as market and business considerations when extending an offer.
Benefits offered: Medical, Dental, Vision, Life Insurance, Short-Term Disability, Long-Term Disability, 401(k) match, Flexible Spending Accounts, EAP, Education Assistance, Parental Leave, Paid time off, and Holidays.
This position is incentive plan eligible.
AI Security Engineer, Lead
Security architect job in Lake Mary, FL
If you are a technology visionary with a passion for transforming global tax business with digital technology, consider working with the US Tax Transformation technology team. This is an exciting opportunity to support global execution of Deloitte's tax strategy as we shift from "doing digital" to "being digital" by reimagining how we engage with our clients, deliver our services, operate our business, and create value.
Work you'll do
As a Deloitte Lead AI Security Engineer, you will be crucial in safeguarding our advanced AI models, data, and infrastructure. You'll work closely with Data Scientists, Data Engineers, and MLOps/DevOps teams.
Additional responsibilities include:
* Implement defences against AI-specific attacks (adversarial, prompt injection, data leakage)
* Conduct AI-focused security assessments, penetration tests, red/purple team exercises
* Analyse AI system vulnerabilities, develop mitigation strategies, and create AI risk heat maps
* Implement security controls throughout the AI/ML lifecycle (data handling, training with GPU isolation, deployment, monitoring, versioning, provenance). Integrate SAST/DAST for ML artifacts
* Manage audit trails and automated compliance checks
* Implement AI-specific incident response and develop regulatory disclosure playbooks
* Manage AI security monitoring, implement executive dashboards linking security to business KPIs, develop security metrics (Adversarial Risk Score, Model Drift Index)
* Implement secure training environments and fine-grained data access controls
* Contribute to AI-generated fraud detection in transaction monitoring systems.
* Act as an AI security SME, continuously research emerging threats
The Team
Deloitte Tax LLP's Tax Transformation Office (TTO) is responsible for the design, development, and deployment of innovative, enterprise technology, tools, and standard processes to support the delivery of tax services. The TTO team focuses on enhancing Deloitte Tax LLP's ability to deliver comprehensive, value-added, and efficient tax services to our clients. It is a dynamic team with professionals of varying backgrounds from tax technical, technology development, change management, Six Sigma, and project management. The team consults and executes on a wide range of initiatives involving process and tool development and implementation including training development, engagement management, tool design, and implementation.
Qualifications
Required:
* Bachelor's degree in computer science or other relevant discipline.
* Ability to perform job responsibilities within a hybrid work model that requires US Tax professionals to co-locate in person 2 - 3 days per week.
* 3+ years' cybersecurity experience (application, cloud and data security) including translating regulatory frameworks (NIST AI RMF, EU AI Act) into technical controls.
* Demonstrated proficiency in security scripting, automation, and tool development.
* Hands-on experience with the Azure Cloud ecosystem and its security services.
* Ability to travel 10%, on average, based on the work you do and the clients and industries/sectors you serve
* Limited immigration sponsorship may be available.
* One of the following active accreditations obtained, in process, or willing and able to obtain:
* Licensed CPA in state of practice/primary office if eligible to sit for the CPA
* If not CPA eligible:
* Licensed Attorney
* Enrolled Agent
* Technology Certifications:
* AWS Certified Solutions Architect
* Certified Information Systems Security Professional (CISSP)
* Certified SAFe Agile Software Engineer
* Certified SAFe Agilist
* Certified SAFe DevOps Practitioner
* Certified Secure Software Lifecycle Professional (CSSLP)
* Certified Secure Software Lifecycle Professional (CSSLP) - (ISC)2
* ISTQB (International Software Testing Qualifications Board)
* ITIL Certification
* Microsoft Azure
* SEI - Software Engineering Institute Certification
Preferred:
* Expertise in identifying and mitigating AI/ML security threats, including adversarial attacks, prompt injection, and data leakage.
* Solid knowledge of AI/ML security frameworks (NIST AI RMF, OWASP, ISO/IEC 27001) and ability to apply them as technical controls.
* Experience applying data privacy regulations (GDPR, DORA, EU AI Act) in enterprise AI environments.
* Proficiency with Azure security tools (Sentinel, Monitor, Policy, Purview, Key Vault, Azure ML).
* Hands-on skills in securing and monitoring MLOps/LLMOps pipelines, including data versioning, provenance, GPU isolation, and deployment.
* Ability to automate compliance, incident detection, and security assessments for AI/ML models, using Azure Monitor, KQL, and related tools.
* Experience designing secure training environments and implementing fine-grained data access controls.
* Track record of researching and deploying innovative AI security solutions; recognized as a subject matter expert (SME).
* Strong communication and collaboration abilities with technical and business teams, translating security risks into actionable business insights.
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $84,980 to $193,440
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Information for applicants with a need for accommodation: ************************************************************************************************************
Recruiting tips
From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters.
Benefits
At Deloitte, we know that great people make a great organization. We value our people and offer employees a broad range of benefits. Learn more about what working at Deloitte can mean for you.
Our people and culture
Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ideas and perspectives, and bring more creativity and innovation to help solve our clients' most complex challenges. This makes Deloitte one of the most rewarding places to work.
Our purpose
Deloitte's purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities. Learn more.
Professional development
From entry-level employees to senior leaders, we believe there's always room to learn. We offer opportunities to build new skills, take on leadership opportunities and connect and grow through mentorship. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career.
As used in this posting, "Deloitte" means Deloitte Tax LLP, a subsidiary of Deloitte LLP. Please see ********************************* for a detailed description of the legal structure of Deloitte LLP and its subsidiaries. Certain services may not be available to attest clients under the rules and regulations of public accounting.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.
Qualified applicants with criminal histories, including arrest or conviction records, will be considered for employment in accordance with the requirements of applicable state and local laws, including the Los Angeles County Fair Chance Ordinance for Employers, City of Los Angeles's Fair Chance Initiative for Hiring Ordinance, San Francisco Fair Chance Ordinance, and the California Fair Chance Act. See notices of various fair chance hiring and ban-the-box laws where available. Fair Chance Hiring and Ban-the-Box Notices | Deloitte US Careers
Requisition code: 315506
Job ID 315506
Information System Security Manager
Security architect job in Orlando, FL
TTS-FL Indirect Approvers start [ Twila Johnson, Jackie Webb, Tim Bankich, John Cummins, Julio Vasquez, David Gambla, Jose Diaz, Sarah Frye] end Org Code: 6. 600. 670. 10. 20 Salary Range: 140-170K Justification: This position will provide mission critical cybersecurity support to the P2T2 program.
This position will serve as cybersecurity site lead managing related direct reports.
Failure to fill this position could jeopardize delivering contracted products and services to an important government client.
Specialist, Information Security Systems Engineer Secret - FL
Security architect job in Palm Bay, FL
L3Harris is dedicated to recruiting and developing high-performing talent who are passionate about what they do. Our employees are unified in a shared dedication to our customers' mission and quest for professional growth. L3Harris provides an inclusive, engaging environment designed to empower employees and promote work-life success. Fundamental to our culture is an unwavering focus on values, dedication to our communities, and commitment to excellence in everything we do.
L3Harris Technologies is the Trusted Disruptor in the defense industry. With customers' mission-critical needs always in mind, our employees deliver end-to-end technology solutions connecting the space, air, land, sea and cyber domains in the interest of national security.
Job Title: Specialist, Info Security Sys Engineering
Job Code: 30666
Job Location: Palm Bay, FL
Job Schedule: 9/80
Job Description:
Essential Functions:
+ NSA Type 1 Certification of cryptographic high assurance devices
+ Experience with NSA High Assurance products and IASRD and SERD requirements
+ Collaborate with customers, internal program teams, and leadership to address program needs.
+ Provide DoD software selection and approval processes for COTS, GOTS, and FOSS.
+ Support security engineering activities, including basis of estimate development, requirements development, design, testing, configuration management, and maintenance of information systems and data.
+ Support the evaluation, qualification, testing, and delivery of security architecture improvements, obsolescence replacements, and vulnerability response projects.
+ Interact with customer, internal program team, and program/department leadership
+ Assess security and privacy controls in embedded systems using NIST 800-53
+ Utilize Risk Management Framework (RMF) accreditation and authorization (A&A) processes to include RMF steps 1-4 (categorization, controls selection, control implementation, security assessment) and standard body of evidence (BoE) package development
+ A&A package processing
+ RMF accreditation of Platform IT (PIT) systems
+ Experience in DoD software selection and approval processes for COTS, GOTS and FOSS
+ Support security engineering activities, including basis of estimate development, requirements development, design, test, configuration management and maintenance of information systems and data
+ Assist program security in the development of policies and procedures for emerging security technologies
+ Support the evaluation, qualification, testing and delivery of security architecture improvement, obsolescence replacement and vulnerability response projects
+ Work is to be accomplished 100% onsite, in a lab environment
Qualifications:
+ Bachelor's Degree and a minimum of 4 years of prior relevant experience. Graduate Degree and a minimum of 2 years of prior related experience. In lieu of a degree, minimum of 6 years of prior related experience.
+ Minimum of Collateral Secret security clearance required.
+ Must be able to obtain and maintain a DOD 8140 certification (or NIST 800-181), appropriate for the position within 6-months of start
Preferred Additional Skills:
+ Experience in configuration and use of cyber defense and vulnerability assessment tools such as ACAS and SCC
+ Professional experience with RMF (Risk Management Framework) in embedded systems.
+ Development and implementation of Anti-Tamper (AT) measures throughout the System Development Lifecycle.
+ Assess systems for Critical Program Information (CPI).
+ Assess threats via attack/countermeasure analysis.
+ Conduct Verification and Validation activities.
+ Use DoD 5200.39 for the identification and protection of CPI.
+ Engineer trustworthy and secure systems in accordance with NIST 800-160.
+ Develop and implement comprehensive Program Protection Plans (PPP) to safeguard critical program information (CPI) and technologies.
+ Draft Program Protection Plans (PPPs), Cybersecurity Strategies, Security Classification Guides (SCGs), and AT Plans.
+ Interact with customers to define AT requirements, solutions, trades, costs, implementation, system impacts, and effectiveness.
+ Prior or current experience with the development and implementation of Anti-Tamper (AT) for the protection of CPI throughout the System Development Lifecycle.
+ Active TS/SCI Clearance is highly desired
L3Harris Technologies is proud to be an Equal Opportunity Employer. L3Harris is committed to treating all employees and applicants for employment with respect and dignity and maintaining a workplace that is free from unlawful discrimination. All applicants will be considered for employment without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender (including pregnancy, childbirth, breastfeeding or other related medical conditions), gender identity, gender expression, sexual orientation, marital status, veteran status, disability, genetic information, citizenship status, characteristic or membership in any other group protected by federal, state or local laws. L3Harris maintains a drug-free workplace and performs pre-employment substance abuse testing and background checks, where permitted by law.
Please be aware many of our positions require the ability to obtain a security clearance. Security clearances may only be granted to U.S. citizens. In addition, applicants who accept a conditional offer of employment may be subject to government security investigation(s) and must meet eligibility requirements for access to classified information.
By submitting your resume for this position, you understand and agree that L3Harris Technologies may share your resume, as well as any other related personal information or documentation you provide, with its subsidiaries and affiliated companies for the purpose of considering you for other available positions.
L3Harris Technologies is an E-Verify Employer. Please click here for the E-Verify Poster in English (******************************************************************************************** or Spanish (******************************************************************************************** . For information regarding your Right To Work, please click here for English (****************************************************************************************** or Spanish (******************************************************************************************** .
IT Security Engineer
Security architect job in Orlando, FL
The Cybersecurity Specialist will be responsible to implement and execute risk management processes by utilizing National Institute of Standards and Technology (NIST) 800 series special publications, Federal Information Processing Standards (FIPS), and Federal Information Security Modernization Act (FISMA) compliance frameworks. The Cybersecurity Specialist will work in a collaborative unified team environment to monitor, evaluate, and manage the risk posture of systems' authorization boundary to safeguard information systems by leveraging robust understanding of NIST Risk Management Framework (RMF). This position will involve working closely with the organization's IT teams to identify vulnerabilities, conduct security control assessments, perform risk analysis and assessments, develop security strategies for mitigating and resolving findings, provide cybersecurity compliance guidance to IT teams and ensure systems remain compliant with federal standards and regulations.
Key Responsibilities:
* Cybersecurity support managing Authorization Packages (AP) to include Privacy Analysis, System Categorizations, Risk Assessment Reports (RAR), System Security Plan (SSP), and general Assessment and Authorization (A&A) oversight to obtain or maintain a system's Authorization to Operate (ATO)
* Focal point for enterprise SSPs managing the security posture by supporting Information System Owners (ISO) and Information System Security Officials (ISSO) with RMF responsibilities
* Develop and maintain accurate and effective Plans of Action & Milestones (POA&Ms) as part of continuous monitoring for implementing cybersecurity improvements
* Collaborate with Information System Administrators (ISA) and various Engineering teams to integrate security measures into new and existing information systems and major applications
* Stay up to date on general information technology innovations and emerging threats and security technologies to continuously improve security posture.
Required Qualifications:
* Bachelor's or Master's degree in Cybersecurity, Management of Information Technology, or a related field.
* 10 years of experience in information security or related roles.
* Experience with networking ports and protocols, architecture of networked and standalone systems, functionality of various operating systems, cloud computing environments and common security tools.
* Ability to develop information system topology diagrams and Concept of Operations documentation
* Knowledge with federal standards such as NIST, FISMA and FIPS
* Exposure to FedRAMP program and standards
* Experience with Security Control Audits
* Proficient with MS Office
* Experience with IT projects in a traditional waterfall or Agile framework
* Relevant certifications (e.g., CompTIA Network+, Security+, CySA+) are a plus.
* Position is hybrid remote, and candidate must be within commute distance to Kennedy Space Center.
Hybrid remote status is at the discretion of the customer and may change to on-premises support
If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.
Original Posting:
November 21, 2025
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.
Pay Range:
Pay Range $87,100.00 - $157,450.00
The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.
Information Systems Security Officer
Security architect job in Melbourne, FL
Information System Security Officer Kegman Inc. is a Woman-Owned/Service-Disabled Veteran-Owned Small Business headquartered in Melbourne FL that provides engineering and technical support services to U.S. Government clients. We are seeking an Information System Security Officer (ISSO) to join our team at Patrick Space Force Base in Melbourne, FL.
NOTE: This is not a remote/telework job. This job requires the selected applicant to have an active U.S. Government-issued security clearance at time of hire and, therefore, requires U.S. citizenship.
The ISSO will be involved in all aspects of cybersecurity operations and will partner with program/site leads as well as government staff and mission partners to maintain an effective information security program. This position will document, implement, and assess security controls to perform system monitoring and compliance assessment activities. In addition, this ISSO will provide Risk Management Framework (RMF) support.
Responsibilities
Work as part of an integrated team to develop and maintain RMF body of evidence documentation (example: System Security Plan, Security Controls Traceability Matrix, Plan of Action and Milestones, ATO's) using Microsoft products such as Word, Excel, PowerPoint, and Visio.
Maintain repositories of all body of evidence documentation for systems under your purview and ensure they are accessible only to properly authorized individuals.
Develop and execute security control assessment procedures to verify conformance with control requirements as part of ongoing continuous monitoring and authorization assessment activities.
Work in close coordination with system administrators and other cyber team members to ensure systems are operated, maintained, and disposed of in accordance with applicable security policies and procedures and notify the ISSM when changes occur that might impact system authorization posture.
Support the CISO, PM, ISSM or ISO in maintaining current authorization to operate, and approval to connect, and in implementing corrective actions identified in the plan of action and milestones. Coordinates, with the CISO, PM, ISSM and AO staffs, development of an IS Configuration Management strategy and monitor any proposed or actual changes to the system and its environment.
Ensure all security-related vulnerabilities and deficiencies are documented in the Plan of Action and Milestones (POA&M).
Ensure integration of cybersecurity into, and throughout the lifecycle of the IT, on behalf of the ISSM and ISO.
Ensure the development and implementation of an effective information security education, training, and awareness program.
Ensure configuration management policies and procedures for authorizing use of hardware/software on a system are followed and coordinate any additions, changes or modifications to hardware, software, or firmware with the ISSO/ISSM prior to the addition, change or modification.
Ensure software, hardware, and firmware complies with appropriate security configuration guidelines (e.g., security technical implementation guides (STIG)/security requirement guides).
Reports security incidents or vulnerabilities to the CISO/ISSM/wing cybersecurity office according to AFI 17-203, Cyber Incident Handling.
Basic Qualifications
Experience working in information assurance or cybersecurity roles supporting classified DoD environments
Working knowledge of NIST 800-53 controls and RMF
Experience analyzing and interpreting outputs of various endpoint security, vulnerability, and enumeration tools (example: Tenable Nessus, Security Center, SolarWinds, EndPoint Security Solutions, Vulnerator, SCAP Compliance Checker)
Preferred Qualifications
Strong interpersonal and written/oral communication skills to coordinate with program/site leads as well as government staff and mission partners
Experience working on/with Government contracts
Detail-oriented team member who can consistently meet deadlines and is able to work independently as needed
Able to multi-task and work with a diverse work group of vendors, executive managers, subcontractors, consultants, and other professionals.
Education
Bachelor's degree in Cybersecurity or other related field and 3+ years of experience, or Master's degree
Or
DoD 8570 IAM Level I (Security+) or higher baseline certification (CISSP preferred)
OTHER:
U.S. citizenship required.
Must pass a pre-employment drug test.
Must have a fully adjudicated (not an interim) U.S. Government-issued security clearance at time of hire.
Kegman Inc. is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status or any other characteristic protected by law.
Kegman will abide by the requirements of 41 CFR 60741.5(a). This regulation prohibits discrimination against qualified individuals on the basis of disability and requires affirmative action by covered prime contractors and subcontractors to employ and advance in employment qualified individuals with disabilities.
Please be aware many of our positions require an active security clearance. Security clearances are be granted to U.S. citizens. In addition, applicants who accept a conditional offer of employment that requires a security clearance will be subject to government security investigation(s) and must meet and maintain eligibility requirements for access to classified information.
By submitting your résumé for this position, you understand and agree that Kegman may share your résumé, as well as any other related personal information or documentation you provide, with its subsidiaries and affiliated companies for the purpose of considering you for other available positions.
Kegman maintains a drug-free workplace and performs pre-employment substance abuse testing where permitted by law.
Auto-ApplyInformation Systems Security Officer
Security architect job in Melbourne, FL
Job DescriptionInformation System Security Officer Kegman Inc. is a Woman-Owned/Service-Disabled Veteran-Owned Small Business headquartered in Melbourne FL that provides engineering and technical support services to U.S. Government clients. We are seeking an Information System Security Officer (ISSO) to join our team at Patrick Space Force Base in Melbourne, FL.
NOTE: This is not a remote/telework job. This job requires the selected applicant to have an active U.S. Government-issued security clearance at time of hire and, therefore, requires U.S. citizenship.
The ISSO will be involved in all aspects of cybersecurity operations and will partner with program/site leads as well as government staff and mission partners to maintain an effective information security program. This position will document, implement, and assess security controls to perform system monitoring and compliance assessment activities. In addition, this ISSO will provide Risk Management Framework (RMF) support.
Responsibilities
Work as part of an integrated team to develop and maintain RMF body of evidence documentation (example: System Security Plan, Security Controls Traceability Matrix, Plan of Action and Milestones, ATO's) using Microsoft products such as Word, Excel, PowerPoint, and Visio.
Maintain repositories of all body of evidence documentation for systems under your purview and ensure they are accessible only to properly authorized individuals.
Develop and execute security control assessment procedures to verify conformance with control requirements as part of ongoing continuous monitoring and authorization assessment activities.
Work in close coordination with system administrators and other cyber team members to ensure systems are operated, maintained, and disposed of in accordance with applicable security policies and procedures and notify the ISSM when changes occur that might impact system authorization posture.
Support the CISO, PM, ISSM or ISO in maintaining current authorization to operate, and approval to connect, and in implementing corrective actions identified in the plan of action and milestones. Coordinates, with the CISO, PM, ISSM and AO staffs, development of an IS Configuration Management strategy and monitor any proposed or actual changes to the system and its environment.
Ensure all security-related vulnerabilities and deficiencies are documented in the Plan of Action and Milestones (POA&M).
Ensure integration of cybersecurity into, and throughout the lifecycle of the IT, on behalf of the ISSM and ISO.
Ensure the development and implementation of an effective information security education, training, and awareness program.
Ensure configuration management policies and procedures for authorizing use of hardware/software on a system are followed and coordinate any additions, changes or modifications to hardware, software, or firmware with the ISSO/ISSM prior to the addition, change or modification.
Ensure software, hardware, and firmware complies with appropriate security configuration guidelines (e.g., security technical implementation guides (STIG)/security requirement guides).
Reports security incidents or vulnerabilities to the CISO/ISSM/wing cybersecurity office according to AFI 17-203, Cyber Incident Handling.
Basic Qualifications
Experience working in information assurance or cybersecurity roles supporting classified DoD environments
Working knowledge of NIST 800-53 controls and RMF
Experience analyzing and interpreting outputs of various endpoint security, vulnerability, and enumeration tools (example: Tenable Nessus, Security Center, SolarWinds, EndPoint Security Solutions, Vulnerator, SCAP Compliance Checker)
Preferred Qualifications
Strong interpersonal and written/oral communication skills to coordinate with program/site leads as well as government staff and mission partners
Experience working on/with Government contracts
Detail-oriented team member who can consistently meet deadlines and is able to work independently as needed
Able to multi-task and work with a diverse work group of vendors, executive managers, subcontractors, consultants, and other professionals.
Education
Bachelor's degree in Cybersecurity or other related field and 3+ years of experience, or Master's degree
Or
DoD 8570 IAM Level I (Security+) or higher baseline certification (CISSP preferred)
OTHER:
U.S. citizenship required.
Must pass a pre-employment drug test.
Must have a fully adjudicated (not an interim) U.S. Government-issued security clearance at time of hire.
Kegman Inc. is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status or any other characteristic protected by law.
Kegman will abide by the requirements of 41 CFR 60741.5(a). This regulation prohibits discrimination against qualified individuals on the basis of disability and requires affirmative action by covered prime contractors and subcontractors to employ and advance in employment qualified individuals with disabilities.
Please be aware many of our positions require an active security clearance. Security clearances are be granted to U.S. citizens. In addition, applicants who accept a conditional offer of employment that requires a security clearance will be subject to government security investigation(s) and must meet and maintain eligibility requirements for access to classified information.
By submitting your résumé for this position, you understand and agree that Kegman may share your résumé, as well as any other related personal information or documentation you provide, with its subsidiaries and affiliated companies for the purpose of considering you for other available positions.
Kegman maintains a drug-free workplace and performs pre-employment substance abuse testing where permitted by law.
Powered by JazzHR
XCZNDmVPTD
Security Engineer - Secure Software Development
Security architect job in Orlando, FL
By joining Sedgwick, you'll be part of something truly meaningful. It's what our 33,000 colleagues do every day for people around the world who are facing the unexpected. We invite you to grow your career with us, experience our caring culture, and enjoy work-life balance. Here, there's no limit to what you can achieve.
Newsweek Recognizes Sedgwick as America's Greatest Workplaces National Top Companies
Certified as a Great Place to Work
Fortune Best Workplaces in Financial Services & Insurance
Security Engineer - Secure Software Development
Security Engineer - Secure Software Development
**PRIMARY PURPOSE OF THE ROLE:** To manage the implementation of security measures to protect company data, networks, and computer systems. To focus on executing security fundamentals for threat detection, investigation, and response efforts.
**ARE YOU AN IDEAL CANDIDATE?** We are looking for enthusiastic candidates who thrive in a collaborative environment, who are driven to deliver great work, are customer-oriented and are naturally empathetic.
**ESSENTIAL RESPONSIBLITIES MAY INCLUDE**
+ Engineers, implements and monitors security measures for the protection of computer systems, networks and information.
+ Identifies and defines system security requirements.
+ Designs computer security architecture and develops detailed cyber security designs.
+ Prepares and documents standard operating procedures and protocols.
+ Configures and troubleshoots security infrastructure devices.
+ Develops technical solutions and new security tools to assist in mitigating security vulnerabilities and automating repeatable tasks.
+ Leads IT groups and business units as necessary in troubleshooting compatibility issues between security tools and business or productivity programs.
+ Performs analysis of suspected malicious code and other software or programs and provides written or verbal analysis to management.
+ Analyzes client and customer needs as required and provides clear and concise reports to leadership.
+ Works closely with management on assigned projects from inception through implementation ensuring adequate internal communication and user involvement is maintained.
**QUALIFICATIONS**
Eight (8) years of encryption technologies/algorithms, digital forensics, network topologies, and access controls experience or equivalent combination of educated and experience required.
**Skills & Knowledge**
+ Knowledge of TCP/IP services
+ Knowledge of audit and compliance
+ Knowledge of vulnerability management
+ Knowledge of penetration testing
+ Knowledge of various operating systems
+ Knowledge of desktop productivity software
+ Knowledge of Carbon Black Protection
+ Knowledge of Symantec Endpoint Protection and host data loss prevention
+ Knowledge of information technology security frameworks
+ Excellent oral and written communication skills, including presentation skills
+ PC literate, including Microsoft Office products
+ Analytical and interpretive skills
+ Strong organizational skills
+ Excellent interpersonal skills
+ Ability to create and complete comprehensive, accurate and constructive written reports
+ Ability to work in a team environment
+ Ability to meet or exceed Performance Competencies
**Proficient in Snyk for Application Security:** Demonstrated expertise in integrating Snyk into CI/CD pipelines to proactively identify and remediate vulnerabilities in open-source dependencies, container images, and infrastructure as code. Skilled in leveraging Snyk's developer-first tools to maintain secure codebases, enforce security policies, and ensure compliance with industry standards. Experienced in configuring automated scans, interpreting results, and collaborating with development teams to implement effective remediation strategies, contributing to a robust DevSecOps culture.
**TAKING CARE OF YOU**
+ Career development and promotional growth opportunities
+ A diverse and comprehensive benefits offering including medical, dental vision, 401K, PTO and more
\#LI-TS1
Work environment requirements for entry-level opportunities include -
Physical: Computer keyboarding
Auditory/visual: Hearing, vision and talking
Mental: Clear and conceptual thinking ability; excellent judgement and discretion; ability to meet deadlines
Travels as required
The statements contained in this document are intended to describe the general nature and level of work being performed by a colleague assigned to this description. They are not intended to constitute a comprehensive list of functions, duties, or local variances. Management retains the discretion to add or to change the duties of the position at any time.
Sedgwick is an Equal Opportunity Employer and a Drug-Free Workplace.
**If you're excited about this role but your experience doesn't align perfectly with every qualification in the job description, consider applying for it anyway! Sedgwick is building a diverse, equitable, and inclusive workplace and recognizes that each person possesses a unique combination of skills, knowledge, and experience. You may be just the right candidate for this or other roles.**
**Sedgwick is the world's leading risk and claims administration partner, which helps clients thrive by navigating the unexpected. The company's expertise, combined with the most advanced AI-enabled technology available, sets the standard for solutions in claims administration, loss adjusting, benefits administration, and product recall. With over 33,000 colleagues and 10,000 clients across 80 countries, Sedgwick provides unmatched perspective, caring that counts, and solutions for the rapidly changing and complex risk landscape. For more, see** **sedgwick.com**
Information Security Systems Engineer
Security architect job in Melbourne, FL
Role: Information Security Systems Engineer III Pay Rate: $40.00-50.00/hr on W2 Temp to Hire We are searching for talented and experienced Security Engineering professionals to join the Mission Networks Enterprise Security Team as a Level 3 Information Security Systems Engineer (ISSE).
•This position is ONSITE at Client offices located in Melbourne, Florida
•This role may require weekend, after-hours, or on-call rotations to meet program requirements and/or ongoing program support.
•This position may require limited travel in an emergency
•This position requires the ability to obtain FAA Public Trust Suitability
Security Clearance: Must be able to obtain a Public Trust
Key Responsibilities:
•Develop and enforce security policies, procedures, and measures in alignment with the program's cybersecurity strategies.
•Design, implement, and manage security solutions, including but not limited to firewalls, intrusion detection systems, endpoint protection, and encryption tools.
•Develop, maintain and publish technical documentation in accordance with Client Systems Engineering processes.
•Act as a Security Support Engineer for State, Federal and commercial customers.
•Provide technical guidance and support to less experienced team members.
•Stay abreast of the latest security trends, threats, and control technologies.
•This position will require weekend, after hours, and on-call support to meet program requirements.
Qualifications & Education:
•BS/BA (or equivalent) degree in Computer Science, IT Security or STEM related field.
o Five or more years of experience in Information Security, Network Engineering, or System Administration
•In lieu of a bachelor's degree, a candidate must have ten plus years of Security network or system engineering experience.
•Strong understanding of system administration including Windows and Linux operating systems.
•Strong knowledge of Cisco network infrastructure, including LAN/WAN, VPNs, routers, and switches.
•Strong project engineering experience in security-related environments.
•Excellent analytical and problem-solving skills.
•Effective communication and interpersonal skills.
•Experience with security frameworks (NIST SP800-53, NIST SP800-171, ISO 27001, or FISMA) and risk management methodologies.
•The candidate must have the ability to obtain a FAA Public Trust, GSA clearance and Standard Public Trust.
PREFERRED TECHNICAL SKILLS
•Experience administering Next Generation Firewalls (NGFW) (Fortinet, Cisco, or Palo Alto).
•Experience mitigating DDoS floods with on-premise and cloud-based solutions.
•Experience deploying Intrusion Detection/Prevention System configurations and providing technical support.
•Experience administering Security Information and Event Management (SIEM) infrastructure.
•Data Loss Prevention systems configuration, deployment and technical support (Varonis and Manage Engine Audit Plus).
•Experience with deployment and administration of Enterprise host intrusion and detections systems (Carbon Black or Sentinel One preferred)
Preferred Certifications:
•CISSP (Certified Information Systems Security Professional)
•CCNA (Cisco Certified Network Associate)
Visual Systems Engineer II - SECURITY CLEARANCE ELIGIBILITY REQUIRED
Security architect job in Orlando, FL
Visual System Engineer II participates in all aspects of the production and integration of visual systems and 3D databases and models on designated projects to meet customer requirements. The work pertains primarily to the research, design, development, testing, valuation,implementation, and maintenance of visual system products. The position requires working under supervision and reports to a manager.
Responsibilities
1 Responsible for analysis, design, development, integration, and unit testing for the visual system.Provides expert judgment on:
a. fundamentals and principles of professional engineering;
b. computer hardware, systems software, and computer system architecture and integration; and
c. mathematics, including calculus, probability, statistics, discrete structures, and modern algebra.
2 Participates in all aspects of the production and integration of visual systems and 3D databases and models on designated projects to meet customer requirements.
3 Responsible for various aspects of synthetic environment design and construction.
4 Ability to plan and execute complex, multi-faceted projects within established financial and time constraints.
5 Ability to plan and execute complex, multi-faceted projects within established financial and time constraints.
6 Ability to evaluate computer technology to meet requirements of scene generation with respect to frame rate, memory and disk space.
7 Able to work in a fast-paced production environment with ability to handle multiple competing tasks and demands simultaneously.
8 Able to travel to customer locations to support contractual commitments including data collection, program reviews, development, installation, integration, and testing.
9 Support installation efforts that will require travel CONUS and OCONUS.
10 Review project tasks against schedules and provides status reports.
11 Work as part of a project team.
12 Implementation and application of sound configuration management processes.
T
asks
1 Provide the development and testing of visual system content including terrain databases, three dimensional models, andanimations to ensure they conform to program requirements.
2 Provide technical support for visual and sensor synthetic natural environment design and development to ensure successful integration and performance.
3 Define synthetic natural environment content requirements and advise project teams on alternatives to achieve training effective visual cues in the environment model.
4 Facilitate and develop Acceptance Testing Procedures for customer acceptance.
5 Support design documentation development.
Education
Completion of a full course of study in an accredited college or university leading to a Bachelor's or higher degree in engineering, engineering technology, physics, electro-optics, mathematics, or computer science or a related field.
Substitutions:
Four (4) years of professional experience can be substituted for two (2) years of the educational requirements.
* US Government security clearance is required and candidate must be eligible.
* Candidate must be able to obtain a US passport.
Qualifications
Experience
5 years experience in visual systems engineering or game development and integration of complex training simulation systems.
1 Show a strong understanding of military training systems, general training simulation technology, terrain data base modeling systems, terrain data base formats for visual/sensor simulation, geographic information systems, and/or the use of mapping, charting, geodesy, and imagery (MCG&I) source data.
2 Must possess established experience in synthetic environment generation, including terrain and model development in a variety of formats and tool sets for visual/sensor simulation;
3 Must possess experience in military training systems and general training simulation technology;
4 Must possess an understanding of the defense procurement process;
5 Must possess an established understanding of sensor technologies such as infrared, image intensification, television, and radar and practical experience in how those technologies are simulated/stimulated and correlated into simulation systems.
6 Knowledge of the moving model generation process along with the required database formats.
7 Knowledge of the terrain database generation process along with the required correlated database formats to support SAF and sensor simulation.
8 Knowledge of visual and sensor simulation system design, development, analysis, and test and evaluation for training systems.
Additional Information
All your information will be kept confidential according to EEO guidelines.
Systems Engineer-Security Clearance Eligibility Required
Security architect job in Orlando, FL
We are seeking a dedicated Systems Engineer at AVT Simulation. The Systems Engineer will be responsible for the System Development Life Cycle (Planning, Analysis, Design, Implementation, Test, Maintenance) of complex aircraft simulators. Responsibilities/Duties/Functions/Tasks
Researches and defines simulator subsystems and integration strategies for design.
Builds System Diagrams and design documentation (ICDs).
Assesses hardware assembly requirements and documentation.
Develops and maintains the system architecture using applications like CAMEO, or similar, providing a blueprint for the components and their interactions.
Applies system modeling techniques to visualize and analyze the system architecture, components and their interactions.(s) .
Creates and communicates system architectures, integration plans, and interface definitions for various designs and related systems behavior.
Defines the system and its integration, including interfaces with control systems models or data.
Conducts requirements analysis to elicit, document, and manage the functional and non-functional requirements of systems.
Identifies and assesses potential risks associated with development, and integration, and proposes mitigation strategies.
Participates in test planning, defining the strategy and scope for verifying and validating the integrated simulation system against requirements.
Identifies integration requirements, data exchange needs, and works with discipline engineers to define compatible solutions.
Liaisons with process engineers, discipline engineers, and software developers to resolve questions with interpretation or execution of the design throughout its lifecycle
Design, implement, and manage network Architecture between Simulator system(s) with multiple systems integrated on server racks.
Install, Configure and Troubleshoot network devices such as Routers and Switches
Conduct regular maintenance and updates including patch management, configuration changes, re-racking, and re-cabling based off design changes
Travel On-site 15%
Other Duties
Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for the job. Duties, responsibilities and activities may change at any time with or without notice.
Qualifications/Experience
Minimum Requirements
BS degree in Engineering (e.g., Systems, Mechanical, Electrical, Aerospace) or a relevant technical field (significant work experience in systems engineering may be substituted for education).
Minimum 5 years of experience in a combination of systems engineering and a related technical domain (e.g., simulation, process control, or the aerospace industry).
Proficiency with CAMEO (or similar) and SysML.
Understands relevant industry standards and best practices in relation to system design, integration, and verification.
Interprets and defines system architectures, interface control documents, requirements specifications, and system models.
Proficiency with requirements analysis principles, methodologies, and management tools.
Experienced with system architecture development, documentation, and model-based systems engineering / Model Based Engineering or Design (MBSE/MBD).
Experienced with risk management processes.
Understands control systems principles.
Strong computer skills and experience with standard office software.
Direct experience with design, build, and successful test & delivery of 6 DoF simulators
Experience with Atlassian Suite (Jira, Confluence, etc.)
To work at this facility, you must be a US citizen
Preferred Skills and Experience
Experience with aircraft, avionics, flight simulators, or aerospace control systems.
Knowledge and/or experience with relevant quality management systems (e.g., ISO 9001).
Experience with scripting languages (e.g., Python, C++).
Experience in test planning and execution for complex systems.
Experience with Extended Reality (VR/AR/MR) development, integration and test.
Experience with simulation image generator integration and test.
Relevant Certifications in Network engineering are desirable
Essential Mental Requirements
Excellent written and spoken communication skills for documentation, intra-team, and interdisciplinary communication.
Ability to work in a team environment.
Ability to read, analyze, and interpret complex documentation.
Ability to analyze problems using scientific and logical thinking.
Possess strong organizational and detail-oriented skills.
Ability to multi-task effectively
Ability to interface with DoD professionals across all ranks.
Essential Physical Requirements
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.
While performing the duties of this job, the employee is occasionally required to stand; walk; sit; use hands to finger, handle, or feel objects, tools or controls; reach with hands and arms; talk or hear. The employee must occasionally lift or move office products and supplies, up to 10 pounds.
Equipment/Software/Tools Used
Computer, phone, photocopiers, and fax machines
Basic computer operating system (Linux, Windows)
Software requirements gathering and modeling tools
Microsoft Office Applications (Word, Excel, PowerPoint)
Microsoft Project
Our Heritage:
Founded in 1998 by an engineer, AVT Simulation is an Orlando-based, end-to-end systems integration and full-service modeling and simulation small business. Since our beginning, AVT's highly specialized staff of engineers has included some of the top leaders in the simulation industry. With an average of over 20 years of simulation experience, our dedicated staff provides specialized solutions for customers requiring on point solutions to complex problems.
AVT has always been a company that strives to make a positive difference in the lives we touch. These lives include our employees and their families, our partner companies and their employees, and ultimately the warfighters receiving our products and services. Our core values are so very important to us as a company. They guide us towards success. They make us a great company to work for and a strong partner to work with.
- People First
- Mission Excellence
- Do the Right Thing
- Commitment
People First is our first and most important core value because we firmly believe the success of AVT is directly related to supporting our employees. We have a lot of fun (with regular employee events and engagements), while still working hard to accomplish our mission of serving our military and the warfighter.
We're looking for candidates that embody these core values, know how to have fun while working hard, and think they would thrive in an environment like ours. If you're a self-motivated individual, then come join AVT. Come make your difference.
EOE - Females/Minorities/Protected Veterans/Individuals with Disabilities/Sexual Orientation/Gender Identity
Qualified individuals with a disability have the right to request a reasonable accommodation. If you are unable or limited in your ability to use or access our careers website as a result of your disability, request a reasonable accommodation by visiting ********************** and follow the instructions at the bottom.
Auto-ApplyEndpoint Cloud Security Engineer
Security architect job in Orlando, FL
Your Opportunity At Schwab, you're empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us "challenge the status quo" and transform the finance industry together. We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s).
We are seeking a technical, driven individual contributor with a deep passion for endpoint and cloud security. As a Senior Endpoint Security Engineer, you will work closely with other endpoint security engineers, cloud engineers, and infrastructure engineers to maintain and enhance endpoint security goals in public cloud. This position requires hands-on experience and the ability to test, validate, troubleshoot, and implement endpoint and cloud security solutions.
What you're good at:
* Leading the engineering efforts and implementation of endpoint security capabilities in CrowdStrike including EDR and Cloud Security.
* Engineering, implementing and monitoring endpoint security measures for the protection of AWS, Azure, and GCP.
* Strong analysis and decision-making skills with the ability to identify opportunities to mature endpoint security offerings, participate in technical cross-functional sessions, and ensure adherence to change and configuration management principles. Assessing issues and developing resolutions to meet productivity, quality goals, and objectives.
What you have
Required Qualifications:
* Bachelor's degree in computer science or related field.
* More than 7 years of progressive experience in cybersecurity engineering
* Minimum 3 years of experience in configuring and maturing endpoint security programs with a focus on public cloud.
* Minimum of 3 years technical experience with cloud support in Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Provider (GCP).
* Experience in working with Cloud native security tools such as: Wiz, Prisma, Zscaler.
* Strong programming knowledge and experience developing in one or more automation languages (Bash, Python, PowerShell, Golang )
* Experience working in DevSecOps environments with complete CI/CD solutions and developer tools such as: Gitlab, Github, Bamboo, Bitbucket, etc.
* Familiarity with Terraform, Ansible, Salt or similar automation tools are a benefit as all provisioning includes Infrastructure as Code (IaC)
* Knowledge to spot and implement new security technologies and standard methodologies into the company's cloud offerings.
* Experience in a highly regulated industry, ideally in the financial services industry.
* Experience with supporting mission critical, 24x7 systems.
Preferred Qualifications:
* Relevant cybersecurity certifications such as CISSP, CCSP, CCSK and/or GCP cybersecurity certifications.
* Experience or a working understanding of Cloud Provider Services in the areas of Database, Storage, AI/ML, and/or Middleware.
* An interest and desire to stay on top of emerging security threats, vulnerabilities, and controls.
* Excellent written and verbal communication skills with the ability to articulate complex concepts to technical and people leaders in the organization
Auto-ApplyInformation Systems Security Manager
Security architect job in Orlando, FL
What We Are Doing: Are you passionate about cybersecurity, automation, and risk governance? Lockheed Martin recognizes the challenges we face today and the need to embrace the convergence of these disciplines to transform ourselves for tomorrow. This transformation will enable Lockheed Martin to provide more autonomous and continuous cyber support for our classified environments. The Rotary and Mission Systems (RMS) Classified Cyber Security organization is seeking a Classified Cyber Security professional to deliver automated, sustainable, and consistent cyber products and services for the RMS Line of Business, which will enable the delivery of 21st-century security services to our classified programs.
The selected individual will serve as a Classified Cyber Security Technologist Manager. In this role, the selected individual will lead a team of cybersecurity professionals and work closely with internal and external stakeholders to develop and implement comprehensive cybersecurity solutions. This will involve identifying, designing, securing, and deploying specialized tools that support the governance and risk management of classified systems, infrastructure, and tools, ensuring the confidentiality, integrity, and availability of classified assets. The selected candidate will also help lead advanced risk governance operations to implement proactive security methodologies for classified programs. This position requires a thorough understanding of development and security controls, as well as a mindset focused on automation-enabled cybersecurity for day-to-day activities.
Must be a U.S. citizen
Minimum Secret security clearance required
Key Responsibilities:
Minimum of 8+ years of leadership experience in cybersecurity
Understand and demonstrate Lockheed Martin Full Spectrum Leadership (FSL) behaviors in your day-to-day activities. FSL is the Lockheed Martin model for describing expectations for successful leadership performance in the business and with our employees
Attract, develop, and retain top cyber talent to drive team excellence
Oversee the planning, implementation, testing, and monitoring of classified cyber-security measures. Overseeing and directing day-to-day information system security operations, providing guidance on all technical security matters
Assess and mitigate classified system security threats and risks throughout the program life cycle
Oversee the validation of classified system security requirements, leading teams to ensure accurate and comprehensive assessments
Direct the development and maintenance of technical system security documentation, leading teams to produce high-quality and compliant documents
Proven experience in executing security hardening on Windows and RHEL operating systems, based on approved DISA STIGs and SRGs
Demonstrated experience in implementing NIST SP 800-53 security controls to ensure compliance with industry standards (Windows, Linux, Network, etc).
Demonstrated experience leading cross-functional team projects, building consensus and collaboration
Coordinate activities as the Information System Security Manager (ISSM) to ensure systems are secure and compliant
Technical Requirements:
Be well-versed in information system security architectural documentation standards.
Understand and implement information assurance and cybersecurity standards, directives, and policies (e.g., NIST) to classified risk-based frameworks.
Develop and implement a comprehensive information system security strategy, ensuring that all components and processes are properly secured, compliant with regulatory requirements, and aligned with organizational objectives.
Compliance and Regulatory Requirements :
Ensure compliance with governing documents and security policies.
Assist in regulatory periodic assessments to ensure adherence to government regulations and cybersecurity guidelines.
Provide recommendations for secure implementation and compliance
Basic Qualifications
Demonstratable experience with standard cybersecurity and network environment tools and applications, including: SIEM, ESS, DLP, IAM, Vulnerability Scanning, etc.
Proven ability to manage multiple projects and people simultaneously in a dynamic and demanding environment.
Excellent written and verbal communication skills, with the ability to effectively interface with numerous cognizant security agencies, customers, and senior leadership.
Proven knowledge of the DCSA Assessment and Authorization Process Manual (DAAPM), Joint Special Access Program Implementation Guide (JSIG), or Risk Management Framework (RMF).
IASAE Level-III Certification, such as: ISSP-ISSAP, CISSP-ISSEP, or CCSP
Desired skills
Proven expertise in Dev/Sec/Ops concepts and processes, with the ability to apply them in real-world scenarios, including:
Expertise in Splunk, including: Writing queries, Creating dashboards, Implementing third-party apps (e.g., Qmulos Products)
Experience with network design processes, including: Understanding security objectives, Operational objectives, Risk mitigation strategies for information systems
Demonstratable experience working with complex operating systems and networks, including:
Data centers
Cloud environments
Cross-domain solutions
NSA Type 1/Commercial Solutions for Classified (CSfC) encryption solutions
Demonstratable experience conducting internal and external customer assessments, including:
Identifying areas for improvement
Providing recommendations for remediation
Developing and implementing corrective action plans
Proven ability to evaluate proposed changes or additions to the information system, including:
Assessing their security relevance
Providing advisory support to the ISSM
Ensuring compliance with relevant regulations and standards
Proven experience implementing new and complex technologies at an enterprise level, including:
Ensuring seamless integration with existing systems
Minimizing disruption to operations
Providing training and support to users
Lockheed Martin is an equal opportunity employer. Qualified candidates will be considered without regard to legally protected characteristics.
The application window will close in 90 days; applicants are encouraged to apply within 5 - 30 days of the requisition posting date in order to receive optimal consideration.
*
At Lockheed Martin, we use our passion for purposeful innovation to help keep people safe and solve the world's most complex challenges. Our people are some of the greatest minds in the industry and truly make Lockheed Martin a great place to work.
With our employees as our priority, we provide diverse career opportunities designed to propel, develop, and boost agility. Our flexible schedules, competitive pay, and comprehensive benefits enable our employees to live a healthy, fulfilling life at and outside of work. We place an emphasis on empowering our employees by fostering an inclusive environment built upon integrity and corporate responsibility.
If this sounds like a culture you connect with, you're invited to apply for this role. Or, if you are unsure whether your experience aligns with the requirements of this position, we encourage you to search on Lockheed Martin Jobs, and apply for roles that align with your qualifications.
Other Important Information
By applying to this job, you are expressing interest in this position and could be considered for other career opportunities where similar skills and requirements have been identified as a match. Should this match be identified you may be contacted for this and future openings.
Ability to work remotely
Onsite Full-time: The work associated with this position will be performed onsite at a designated Lockheed Martin facility.
Work Schedule Information
Lockheed Martin supports a variety of alternate work schedules that provide additional flexibility to our employees. Schedules range from standard 40 hours over a five day work week while others may be condensed. These condensed schedules provide employees with additional time away from the office and are in addition to our Paid Time off benefits.
Security Clearance Information
This position requires a government security clearance, you must be a US Citizen for consideration.
Pay Rate: The annual base salary range for this position in California, Massachusetts, and New York (excluding most major metropolitan areas), Colorado, Hawaii, Illinois, Maryland, Minnesota, New Jersey, Vermont, Washington or Washington DC is $139,600 - $246,100. For states not referenced above, the salary range for this position will reflect the candidate's final work location. Please note that the salary information is a general guideline only. Lockheed Martin considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/ training, key skills as well as market and business considerations when extending an offer.
Benefits offered: Medical, Dental, Vision, Life Insurance, Short-Term Disability, Long-Term Disability, 401(k) match, Flexible Spending Accounts, EAP, Education Assistance, Parental Leave, Paid time off, and Holidays.
Pay Rate: The annual base salary range for this position in California, Massachusetts, and New York (excluding most major metropolitan areas), Colorado, Hawaii, Illinois, Maryland, Minnesota, New Jersey, Vermont, Washington or Washington DC is $139,600 - $246,100. For states not referenced above, the salary range for this position will reflect the candidate's final work location. Please note that the salary information is a general guideline only. Lockheed Martin considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/ training, key skills as well as market and business considerations when extending an offer.
Benefits offered: Medical, Dental, Vision, Life Insurance, Short-Term Disability, Long-Term Disability, 401(k) match, Flexible Spending Accounts, EAP, Education Assistance, Parental Leave, Paid time off, and Holidays.
(Washington state applicants only) Non-represented full-time employees: accrue at least 10 hours per month of Paid Time Off (PTO) to be used for incidental absences and other reasons; receive at least 90 hours for holidays. Represented full time employees accrue 6.67 hours of Vacation per month; accrue up to 52 hours of sick leave annually; receive at least 96 hours for holidays. PTO, Vacation, sick leave, and holiday hours are prorated based on start date during the calendar year.
This position is incentive plan eligible.
IT Security Engineer
Security architect job in Orlando, FL
The Cybersecurity Specialist will be responsible to implement and execute risk management processes by utilizing National Institute of Standards and Technology (NIST) 800 series special publications, Federal Information Processing Standards (FIPS), and Federal Information Security Modernization Act (FISMA) compliance frameworks. The Cybersecurity Specialist will work in a collaborative unified team environment to monitor, evaluate, and manage the risk posture of systems' authorization boundary to safeguard information systems by leveraging robust understanding of NIST Risk Management Framework (RMF). This position will involve working closely with the organization's IT teams to identify vulnerabilities, conduct security control assessments, perform risk analysis and assessments, develop security strategies for mitigating and resolving findings, provide cybersecurity compliance guidance to IT teams and ensure systems remain compliant with federal standards and regulations.
**Key Responsibilities:**
+ Cybersecurity support managing Authorization Packages (AP) to include Privacy Analysis, System Categorizations, Risk Assessment Reports (RAR), System Security Plan (SSP), and general Assessment and Authorization (A&A) oversight to obtain or maintain a system's Authorization to Operate (ATO)
+ Focal point for enterprise SSPs managing the security posture by supporting Information System Owners (ISO) and Information System Security Officials (ISSO) with RMF responsibilities
+ Develop and maintain accurate and effective Plans of Action & Milestones (POA&Ms) as part of continuous monitoring for implementing cybersecurity improvements
+ Collaborate with Information System Administrators (ISA) and various Engineering teams to integrate security measures into new and existing information systems and major applications
+ Stay up to date on general information technology innovations and emerging threats and security technologies to continuously improve security posture.
**Required Qualifications:**
+ Bachelor's or Master's degree in Cybersecurity, Management of Information Technology, or a related field.
+ 10 years of experience in information security or related roles.
+ Experience with networking ports and protocols, architecture of networked and standalone systems, functionality of various operating systems, cloud computing environments and common security tools.
+ Ability to develop information system topology diagrams and Concept of Operations documentation
+ Knowledge with federal standards such as NIST, FISMA and FIPS
+ Exposure to FedRAMP program and standards
+ Experience with Security Control Audits
+ Proficient with MS Office
+ Experience with IT projects in a traditional waterfall or Agile framework
+ Relevant certifications (e.g., CompTIA Network+, Security+, CySA+) are a plus.
+ Position is hybrid remote, and candidate must be within commute distance to Kennedy Space Center.
Hybrid remote status is at the discretion of the customer and may change to on-premises support
If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.
**Original Posting:**
November 21, 2025
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.
**Pay Range:**
Pay Range $87,100.00 - $157,450.00
The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.
**About Leidos**
Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit ************** .
**Pay and Benefits**
Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at **************/careers/pay-benefits .
**Securing Your Data**
Beware of fake employment opportunities using Leidos' name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system - never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at ***************************** .
If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission (******************************* .
**Commitment to Non-Discrimination**
All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.
\#Remote
REQNUMBER: R-00170919
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status. Leidos will consider qualified applicants with criminal histories for employment in accordance with relevant Laws. Leidos is an equal opportunity employer/disability/vet.
Easy ApplyInformation Security Systems Engineer
Security architect job in Palm Bay, FL
Systems security engineering methods, practices and technologies to the architecture, design, development, evaluation and integration of systems and networks to maintain system security.
Throughout the lifecycle of system, works closely with customers to ensure that the security protection needs, concerns and requirements are defined and implemented with appropriate fidelity and rigor, early, and in a sustainable manner that will allow for the security authorization of the system of interest.
Works with systems developers or commercial product vendors in the design and evaluation of state-of-the-art secure systems, networks, and database products using methods such as encryption technology, vulnerability analysis and security management.
Responsible for integration of multiple methods into a cohesive system security perimeter and environment while implementing the policies and procedures necessary to monitor and maintain such an environment.
Prepares certification and accreditation documentation, using multiple industry standards such as DITSCAP, NIACAP, DCID 6/3, common criteria, and NIST 800-37, to achieve security authorization of supported systems.
Represents program security needs, concerns and requirements at customer meetings.
Responsibilities:
Lead the development and implementation of program protection throughout the System Development Lifecycle. Key tasks include
Assessing systems for Critical Program Information
Conducting trade studies
Developing program protection requirements
Implementing security architectures
Assessing threats via attack/countermeasure analysis
Conducting Verification and Validation activities.
Serve as a SME in the area of program protection
Draft Program Protection Plans (PPPs), Cybersecurity Strategies, Security Classification Guides (SCGs), and Program Protection Plans
Interact with customer to define program protection requirements, solutions, trades, costs, implementation, system impacts, and effectiveness
Utilize Risk Management Framework (RMF) accreditation and authorization (A&A) processes to include RMF steps 1-4 (categorization, controls selection, control implementation, security assessment) and standard body of evidence (BoE) package development.
A&A package processing
RMF accreditation of Platform IT (PIT) systems
NSA Type 1 Certification of cryptographic high assurance devices
Experience with NSA High Assurance products and IASRD and SERD requirements
Support security engineering activities, including basis of estimate development, requirements development, design, test, configuration management and maintenance of information systems and data
Assist program security in the development of policies and procedures for emerging security technologies
Support the evaluation, qualification, testing and delivery of security architecture improvement, obsolescence replacement and vulnerability response projects
Provide Security Testing and Verification
Work is to be accomplished 100% onsite, in a lab environment
Required Skills:
Bachelor's Degree and a minimum of 12 years of prior relevant ISSE experience. Graduate Degree and a minimum of 10 years of prior related experience. In lieu of a degree, minimum of 16 years of prior related experience.
Minimum of Collateral Secret security clearance required
Professional experience with RMF (Risk Management Framework) required
Must be able to obtain and maintain a DOD 8140 certification (or NIST 800-181), appropriate for the position within 6-months of start
Preferred Additional Skills:
Experience in configuration and use of cyber defense and vulnerability assessment tools such as ACAS and SCC.
Active TS/SCI Clearance is highly desired