Post job

Security engineer jobs in Maine - 57 jobs

  • Offensive Security Engineer, Assessments (Web3)

    Coinbase 4.2company rating

    Security engineer job in Augusta, ME

    Ready to be pushed beyond what you think you're capable of? At Coinbase, our mission is to increase economic freedom in the world. It's a massive, ambitious opportunity that demands the best of us, every day, as we build the emerging onchain platform - and with it, the future global financial system. To achieve our mission, we're seeking a very specific candidate. We want someone who is passionate about our mission and who believes in the power of crypto and blockchain technology to update the financial system. We want someone who is eager to leave their mark on the world, who relishes the pressure and privilege of working with high caliber colleagues, and who actively seeks feedback to keep leveling up. We want someone who will run towards, not away from, solving the company's hardest problems. Our ******************************** is intense and isn't for everyone. But if you want to build the future alongside others who excel in their disciplines and expect the same from you, there's no better place to be. While many roles at Coinbase are remote-first, we are not remote-only. In-person participation is required throughout the year. Team and company-wide offsites are held multiple times annually to foster collaboration, connection, and alignment. Attendance is expected and fully supported. The Application Security organization at Coinbase is seeking to hire an experienced Offensive Security Engineer specializing in Web3 penetration testing and Web3 bug bounty program management and optimization. In this role, you will collaborate with the Bug Bounty Program Lead to drive Web3 bug bounty triage, validation, and strategic initiatives aimed at increasing program efficiency, maturity, and hacker engagement. You will work closely with whitehat hackers, security engineers, and cross-functional teams to enhance Coinbase's security posture through an effective bug bounty program. Additionally, you will perform penetration tests on Web3 technologies and applications, ensuring the security of Coinbase's blockchain-based products and services. *What you'll be doing (ie. job duties):* * Conduct security assessments of Web3 products and services, including smart contracts, DeFi protocols, and blockchain infrastructure. * Collaborate with partner teams to enhance detection and response capabilities for Web3 vulnerabilities. * Stay informed on emerging security trends, advisories, and academic research in the Web3 space. * Lead Web3 bug bounty triage and validation, ensuring timely and accurate assessments of reported vulnerabilities. * Develop and implement strategies to incentivize high-quality bug bounty submissions and engage with the hacker community. * Manage the Web3 bug bounty program, including scope updates, researcher communication, and payout disbursements. * Analyze bug bounty data to identify trends, common vulnerabilities, and areas for improvement. * Collaborate with engineering teams to prioritize and remediate vulnerabilities identified through the bug bounty program. * Mentor and train junior security engineers in Web3 bug bounty triage and analysis. * Provide on-call support for critical Web3 bug bounty-related incidents. * Document and report on Web3 bug bounty metrics and program effectiveness. *What we look for in you (ie. job requirements):* * Bachelor's or Master's degree in Computer Science, Cybersecurity, Software Engineering, or a related field. * 3+ years of experience in Web3 application security and penetration testing. * Proven track record of identifying critical vulnerabilities across the blockchain protocol stack, Web2, and Web3 components. * Extensive knowledge of the blockchain ecosystem, including L1/L2 networks, DeFi protocols, and staking mechanisms. * Deep understanding of Web2 security concepts and common vulnerabilities (e.g., OWASP Top 10, SANS Top 25). * Strong analytical skills to identify trends and patterns in vulnerabilities. * Excellent communication skills for engaging with internal teams. * Passion for security and a drive to improve Web3 security posture. * Ability to work independently and take ownership of penetration testing initiatives. * Energy and self-drive for continuous learning in the rapidly evolving crypto space. * Excellence in clear, direct, and kind communication with technical and non-technical stakeholders. * Experience building relationships with product, engineering, and security teams. *Nice to haves:* * Participation in CTFs, bug bounty programs, or open-source security research. * Expertise in Application Security, Network Security, or Cloud Security. * Relevant security certifications (e.g., OSCP, GPEN). * Experience developing and implementing security tooling to support bug bounty triage and analysis. * Experience with bug bounty programs and platforms, including triage, validation, and researcher communication. * Strong analytical skills to identify trends and patterns in bug bounty submissions. * Excellent communication skills to effectively engage with bug bounty researchers. Position ID: P69494 \#LI-remote *Pay Transparency Notice:* Depending on your work location, the target annual salary for this position can range as detailed below. Full time offers from Coinbase also include bonus eligibility + equity eligibility**+ benefits (including medical, dental, vision and 401(k)). Pay Range: $152,405-$179,300 USD Please be advised that each candidate may submit a maximum of four applications within any 30-day period. We encourage you to carefully evaluate how your skills and interests align with Coinbase's roles before applying. Commitment to Equal Opportunity Coinbase is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, sex, gender expression or identity, sexual orientation or any other basis protected by applicable law. Coinbase will also consider for employment qualified applicants with criminal histories in a manner consistent with applicable federal, state and local law. For US applicants, you may view the *********************************************** in certain locations, as required by law. Coinbase is also committed to providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please contact us at accommodations*********************************** *Global Data Privacy Notice for Job Candidates and Applicants* Depending on your location, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) may regulate the way we manage the data of job applicants. Our full notice outlining how data will be processed as part of the application procedure for applicable locations is available ********************************************************** By submitting your application, you are agreeing to our use and processing of your data as required. *AI Disclosure* For select roles, Coinbase is piloting an AI tool based on machine learning technologies to conduct initial screening interviews to qualified applicants. The tool simulates realistic interview scenarios and engages in dynamic conversation. A human recruiter will review your interview responses, provided in the form of a voice recording and/or transcript, to assess them against the qualifications and characteristics outlined in the job description. For select roles, Coinbase is also piloting an AI interview intelligence platform to transcribe and summarize interview notes, allowing our interviewers to fully focus on you as the candidate. *The above pilots are for testing purposes and Coinbase will not use AI to make decisions impacting employment*. To request a reasonable accommodation due to disability, please contact accommodations[at]coinbase.com
    $152.4k-179.3k yearly 60d+ ago
  • Job icon imageJob icon image 2

    Looking for a job?

    Let Zippia find it for you.

  • Security Technical Engineer

    Connectivity Point Design and Installation 4.0company rating

    Security engineer job in Auburn, ME

    Connectivity Point is seeking a highly skilled Security Technical Engineer to serve as the critical link between our field technicians and design team. This role ensures that purchased systems are installed accurately, efficiently, and in alignment with customer expectations-delivering exceptional customer service while supporting project profitability. JOB RESPONSIBILITIES: Review project documentation to gain thorough understanding and check for accuracy. Create and maintain system configuration software. Work with design team to create and update project installation documents using Bluebeam, Visio, Excel, and/or CAD as needed. Coordinate on-site implementation process for security installations and service requests. Travel as necessary. This may include overnight travel out of state. Work with the security design engineers both presale and post-sale. Oversee implementation of security solutions to ensure that equipment is installed per industry standards and best practices. This may require working in the field along with security technicians to accomplish the installation objective, timeline, and goal of customer satisfaction. Report any out of scope work required to allow for change order generation as needed. Participate in customer construction status calls/meetings as required. Provide detailed project field status updates to security PM and Division Manager. Provide end user training on newly installed systems. Strengthen customer relationships by being responsible, accurate, helpful, and trustworthy. Proactively look for opportunities to provide more value-add services to customers. Assist with maintaining customer profiles and standards documents to ensure accuracy. Provide remote technical support for out-of-market technicians in the field as needed. Assist with ensuring customer profile documents are maintained and updated. Stay up to date on security technologies and installation practices. Work with the rest of the security team to evaluate new products and services. Support existing customers remotely or in person as needed. Perform other assigned duties as requested. SKILLS/EXPERIENCE/TRAINING: High School Diploma or General Education Degree (GED) and four to five years minimum industry experience in security system sales, management, service, or installation; or the equivalent combination of education and experience Solid security system industry experience including sales, service, project management and/or installation of security systems, access control, and CCTV. Kantech, DSC, and Exacqvision software experience. Ability to follow blueprints, notes and specifications to meets the job requirements. Basic written and verbal communications skills. Proven ability to follow instructions and focused attention to detail. Experience with construction and adherence to large and small project scheduling. Enjoys hands-on problem solving in a fast paced work environment. Ability to work well both independently and as part of a professional team. Excellent time management, planning and forward-thinking skills. Self-motivated with a positive and professional attitude. Excellent communication and listening skills. Strong teambuilding, customer service, and interpersonal skills. Must possess good decision-making skills, be very organized and detail oriented. Strong computer skills using Microsoft Office suite (i.e., Word, Excel, Outlook) required. T his job description is not intended to be and should not be construed as an all-inclusive list of all the responsibilities, skills or working conditions associated with the position. While it is intended to accurately reflect the position activities and requirements, the Company reserves the right to modify, add or remove duties and assign other duties as necessary.
    $91k-126k yearly est. 29d ago
  • Product Security Engineer, Instagram

    Meta 4.8company rating

    Security engineer job in Augusta, ME

    The Instagram Security Ecosystems team is seeking a product-focused security engineer interesting in enabling Instagram product teams to develop features with a focus on security and user safety. You will be relied upon to directly work with Instagram engineers, hardening both product features and our protective frameworks that make life harder for bad actors on the Instagram platform. **Required Skills:** Product Security Engineer, Instagram Responsibilities: 1. Threat Modeling and Security Architecture: Work directly with product managers and technical leads on threat models and security architecture for novel Instagram features or products 2. Security Reviews: Perform manual design and implementation reviews of web, mobile, and native code 3. Developer Guidance: Provide guidance and education to developers that help prevent the authoring of vulnerabilities 4. Automated Analysis and Secure Frameworks: Work with other security teams to improve Instagram's static and dynamic analysis and frameworks to scale coverage 5. Bug Bounty: Help provide technical guidance to our world class bug bounty program and independent security researchers 6. Industry Impact: Push the industry forward through conference talks and open source projects to contribute broadly to security for the world **Minimum Qualifications:** Minimum Qualifications: 7. B.S. or M.S. in Computer Science, Cybersecurity, or related field, or equivalent experience 8. 8+ years of experience finding vulnerabilities in interpreted languages (Python, PHP) 9. Extensive, proven experience in threat modeling and secure systems design 10. Experience with exploiting common security vulnerabilities **Preferred Qualifications:** Preferred Qualifications: 11. Product software engineering or product management experience 12. Experience in security consulting or other leadership-facing security advisory roles 13. Familiarity with cybersecurity investigations, abuse operations, and/or security incident response 14. Contributions to the security community (public research, blogging, presentations, bug bounty, etc.) **Public Compensation:** $184,000/year to $257,000/year + bonus + equity + benefits **Industry:** Internet **Equal Opportunity:** Meta is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Meta participates in the E-Verify program in certain locations, as required by law. Please note that Meta may leverage artificial intelligence and machine learning technologies in connection with applications for employment. Meta is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance or accommodations due to a disability, please let us know at accommodations-ext@fb.com.
    $184k-257k yearly 60d+ ago
  • Data Analyst, II - Information Security Metrics and Reporting

    Unum Group 4.4company rating

    Security engineer job in Portland, ME

    Our Fortune 500 company is driving a digital transformation and looking for forward-thinking innovators to disrupt how our industry thinks about and uses technology. As one of the world's leading employee benefits providers, we help millions of people gain affordable access to benefits that help them protect their families, their finances and their futures. Are you an asker of questions, a solver of problems, and a challenger of the status quo? Our mission is to provide a differentiated customer experience and exceed the expectations people have of technology at any company - not just insurers. We are seeking individuals to join our team of talented IT professionals who share never-ending passion and an unwavering focus on our customer experience. Team members comfortable working in an agile, fast-paced, and delivery-focused environment thrive in our environment where we value an entrepreneurial spirit and those who challenge the status-quo. Unum is changing, and we're excited about what's next. Join us. **General Summary:** The Information Security Metrics and Quality Data Analyst is responsible for simple to moderately complex data profiling, analysis and mapping with little to no oversight and exhibits a mastery of the tools and technical skillset subject matter expertise with data organization and visualization supporting information security (cyber security) risks and operations. This candidate works closely with Security Analysts, Security Engineers, Project Managers, and Global Information Security leadership. They deliver to high quality KRI/KPI and are able to accurately estimate work required to deliver on their responsibilities. They use critical thinking skills applied to data analysis in order to advance the delivery and maintenance of information security KRI and KPI. **Job Specifications** + Bachelors Degree preferred, and/or equivalent experience + 4+ years experience with demonstrated success at the Data Analyst 1 level or equivalent experience + Mastery of data profiling and analysis concepts, including data anomalies, data mapping activities. + Mastery of data modeling concepts + Mastery of PowerBI data modeling and visualization development + Clearly demonstrates data analytical ability and critical thinking skills + Ability to manage multiple tasks by paying close attention to detail + Ability to work as part of a team and interact effectively with others + Ability to embrace change, adapt to the unexpected, and focus energies, people, and solutions on practical and positive results + Takes an innovative approach to problem solving + Strong communications skills + Strong team player; able to work effectively within a team and more broadly with people from a variety of backgrounds and areas across the organization. **Principal Duties and Responsibilities** + Responsible for data profiling and analysis to evaluate data sources to determine the best source for business information. + Responsible for source to target data mapping specifications (e.g. source to target can be from one DBMS table to another DBMS table, from a DBMS table into a canonical message structure, etc.) + Design simple to moderately complex, flexible data models (conceptual and logical) and visualizations through collaborations with analysts, engineers, and leadership. Leads sizing and estimation activities within the agile team. + Create/Capture documentation (metadata) that is up-to-date. + Collaborate with the test engineers to perform data validation and testing activities as appropriate. + Develop and maintain knowledge of information security practices and the insurance industry. + Develop and maintain knowledge of information security-owned and other relevant data sources. + Adhere to approved architectural standards. + Uses critical thinking skills to recommend and implement data management practices that advance business value. + Thinks with the mind of the end customer at all times, ensuring solutions seek to improve the customer experience and delight their customers. \#LI-TO1 \#LI-MULTI IN4 Our company is built on helping individuals and families, and this starts with our employees. We want employees to maintain a positive balance, which is why we provide access to the benefits and resources they need to invest in themselves. From our onsite fitness facilities and generous paid time off to employee professional development programs, we are committed to helping employees live and work their best - both inside and outside the office. Unum is an equal opportunity employer, considering all qualified applicants and employees for hiring, placement, and advancement, without regard to a person's race, color, religion, national origin, age, genetic information, military status, gender, sexual orientation, gender identity or expression, disability, or protected veteran status. The base salary range for applicants for this position is listed below. Unless actual salary is indicated above in the job description, actual pay will be based on skill, geographical location and experience. $73,300.00-$150,500.00 Additionally, Unum offers a portfolio of benefits and rewards that are competitive and comprehensive including healthcare benefits (health, vision, dental), insurance benefits (short & long-term disability), performance-based incentive plans, paid time off, and a 401(k) retirement plan with an employer match up to 5% and an additional 4.5% contribution whether you contribute to the plan or not. All benefits are subject to the terms and conditions of individual Plans. Company: Unum
    $73.3k-150.5k yearly 4d ago
  • Engineer, Information Security and Risk

    Cardinal Health 4.4company rating

    Security engineer job in Augusta, ME

    Cardinal Health, Inc. (NYSE: CAH) is a global healthcare services and products company. We provide customized solutions for hospitals, healthcare systems, pharmacies, ambulatory surgery centers, clinical laboratories, physician offices and patients in the home. We are a distributor of pharmaceuticals and specialty products; a global manufacturer and distributor of medical and laboratory products; an operator of nuclear pharmacies and manufacturing facilities; and a provider of performance and data solutions. Working to be healthcare's most trusted partner, our customer-centric focus drives continuous improvement and leads to innovative solutions that improve the lives of people every day. With approximately 50,000 employees worldwide, Cardinal Health ranks among the top fifteen in the Fortune 500. **_Department Overview:_** **Information Technology** oversees the effective development, delivery, and operation of computing and information services. This function anticipates, plans, and delivers Information Technology solutions and strategies that enable operations and drive business value. **Information Security and Risk** develops, implements, and enforces security controls to protect the organization's technology assets from intentional or inadvertent modification, disclosure, or destruction. This job family develops system back-up and disaster recovery plans, conducts incident responses, threat management, vulnerability scanning, virus management and intrusion detection as well as completes risk assessments. We are seeking a highly skilled and experienced Identity and Access Management (IAM) Engineer to join our team. In this pivotal role, you will be instrumental in designing, implementing, and managing IAM solutions that secure our enterprise applications and facilitate the secure, efficient, and seamless integration of identity and access systems in context of our rapid growth through Mergers and Acquisitions. You will ensure robust access controls, streamline user experiences, and maintain operational continuity across our diverse IT landscape. The ideal candidate will have deep technical expertise in modern IAM principles, protocols and products along with strong management and communication skills. **Responsibilities:** + **Application Integration Leadership:** Lead the integration of various enterprise applications (SaaS, on-premise, custom-built) with our core IAM infrastructure, ensuring secure authentication, authorization, and user provisioning/de-provisioning. + **M&A Integration Strategy & Execution:** Lead the planning, design, and execution of IAM integration strategies for M&A activities, ensuring alignment with overall business and security objectives. This includes assessing the IAM landscapes of merging entities to identify challenges and solutions. + **Identity System Merging & Consolidation:** Manage the complex process of merging disparate identity providers, user directories (e.g., Active Directory, Azure AD, LDAP), and access management systems from acquired companies into the existing infrastructure. + **User Lifecycle Management:** Streamline and automate user provisioning, de-provisioning, and periodic access reviews for employees, contractors, and partners across all integrated systems, ensuring smooth onboarding and offboarding during M&A transitions. + **Solution Design & Implementation:** Design, implement, and maintain IAM solutions including Single Sign-On (SSO), Multi-Factor Authentication (MFA), Privileged Access Management (PAM), and Role-Based Access Control (RBAC) frameworks. + **Security & Compliance:** Ensure IAM systems and processes comply with regulatory requirements (e.g., GDPR, HIPAA, SOX) and internal security policies, providing auditable records of access activities. Protect against data breaches by ensuring only authorized personnel can access sensitive information. + **Technical Troubleshooting & Support:** Troubleshoot, identify, and resolve technical identity and access management-related issues, providing expert support to internal teams and end-users during and after integration. + **Collaboration & Communication:** Coordinate cross-functional teams, including Information Security, IT Operations, HR, and Application Development, to ensure effective IAM implementation and seamless integration with business processes. Communicate complex security concepts to technical and non-technical stakeholders. + **Documentation & Best Practices:** Develop, review, and maintain comprehensive technical documentation, including architecture diagrams, configuration guides, and operational procedures. Stay up-to-date with IAM best practices, regulatory requirements, and security trends. **Qualifications:** + **Education:** Bachelor's degree in Computer Science, Information Technology, Information Security, or a related field, or equivalent practical experience. + **Experience:** 5+ years of progressive experience as an IAM Engineer, designing and implementing enterprise scale solutions with significant experience in supporting M&A integration projects preferred. + **Technical Expertise:** + Proficiency in directory services (e.g., Active Directory, Azure AD, LDAP). + Extensive knowledge and experience with authentication standards and technologies such as SSO (SAML, OAuth, OpenID Connect), MFA, and privileged access management (PAM). + Hands-on experience with leading IAM platforms (e.g., Okta, Microsoft Azure AD, CyberArk, ForgeRock, Ping Identity, SailPoint). + Experience with scripting languages (e.g., PowerShell, Python) for automation and integration. + Strong understanding of security principles, risk management, and access control models (e.g., RBAC). + Understanding of DevOps practices. + Familiarity with Zero Trust architecture principles. + Familiarity with AI/ML concepts and their practical application in security and risk management, especially in IAM context. + **M&A Specific Skills:** Proven track record of managing complex integration projects, including assessing existing IAM capabilities, workflow, systems, and processes of acquired entities. Ability to navigate the complexities of integrating diverse identity infrastructures. + Strong communication and interpersonal skills to collaborate effectively with various teams and stakeholders. + Detail-oriented mindset to ensure precise access control configurations and compliance. + Excellent problem-solving and analytical abilities to troubleshoot access issues and design solutions for unique business requirements + Must be a self-starter who takes full ownership of projects from inception to completion , holding oneself accountable for the security and operation integrity of IAM platform. + Ability to manage multiple priorities and meet tight deadlines in a fast-paced M&A environment. + Adaptability to stay ahead of evolving IAM technologies and security threats. **Anticipated salary range:** $94,900 - $135,600 **Bonus eligible:** No **Benefits:** Cardinal Health offers a wide variety of benefits and programs to support health and well-being. + Medical, dental and vision coverage + Paid time off plan + Health savings account (HSA) + 401k savings plan + Access to wages before pay day with my FlexPay + Flexible spending accounts (FSAs) + Short- and long-term disability coverage + Work-Life resources + Paid parental leave + Healthy lifestyle programs **Application window anticipated to close:** 12/20/2025 *if interested in opportunity, please submit application as soon as possible. The salary range listed is an estimate. Pay at Cardinal Health is determined by multiple factors including, but not limited to, a candidate's geographical location, relevant education, experience and skills and an evaluation of internal pay equity. _Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply._ _Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal_ _Opportunity/Affirmative_ _Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law._ _To read and review this privacy notice click_ here (***************************************************************************************************************************
    $94.9k-135.6k yearly 51d ago
  • Information Security Engineer 3

    WEX 4.8company rating

    Security engineer job in Portland, ME

    About the Team/Role We're the Global Information Security Team at WEX, responsible for implementing and operating security technologies and processes throughout WEX. We partner closely with internal teams and customers to assure WEX operates in a secure and compliant manner. Our team holds itself to a high-standard and we collaborate closely with one another to ensure strong, reliable and effective relationships. We own our results and we take pride of ownership in everything we do. We need help! Changing the world isn't easy, and we have a lot of work ahead of us. From securing applications, data centers and cloud resources, we've got more work than we can handle and we're looking for great people to come along for the ride. We are looking for an application security engineer is responsible for ensuring the secure function of software security and familiarity with multiple general security practices and toolsets How you'll make an impact Culturally, you're: A highly motivated security engineer who loves working on small, high performing teams that interface with the entire enterprise A collaborative, solid communicator who works well with your team and stakeholders to drive projects from inception to completion Someone who cares deeply for team results but is able to work independently to deliver high quality solutions for projects and operational tasks Comfortable balancing the need to move fast with the realities of working in a highly regulated organization Someone who thrives in situations where details and accuracy are vital A skilled worker that has the motivation, expertise, and work ethic to operate independently across global time zones, and who is able to complete tasks and deliverables with minimal oversight Work closely with Enterprise IT teams on securing Wex's infrastructure and applications Able to mentor other engineers both technically and professionally Technically, you: Engineer, implement, and monitor security measures to protect the enterprise Configure and troubleshoot security infrastructure devices Regularly review configurations and develop improvement plans Develop technical solutions and new security tools to help mitigate security findings Write comprehensive reports including assessment-based findings, outcomes and recommendations for security enhancement. Have a general background in IT, Security, and supporting processes Deep experience working with compliance and regulatory frameworks such as PCI-DSS, HIPAA/HITRUST, SOX, GDPR, NIST, etc. Experience you'll bring Have 3-5 years of experience in Enterprise Information Security Engineering Have 3-5 years of broad experience with security technologies such as NextGen AV (EDR), DLP, email security (SPF, DMARC, DKIM), web filtering, HSM, Key and Certificate management, or Identity and Access Management Have a strong, practical understanding of modern cloud IT infrastructure, networking, and security engineering concepts Are able to troubleshoot network and security issues within a complex environment Have 3-5 years of experience in engineering solutions which meet security, compliance, and business needs Can commit and deliver on very specific project/delivery timelines with minimal supervision Are able work in an on-call rotation which may include some night and weekend shifts Have excellent customer support skills, both written and verbal Have 3-5 years of experience Linux and Unix operating systems Have 3-5 years of experience with securing applications and enabling secure communication through HTTPS It would be nice if you Have cloud experience with AWS and Azure Experience working with AI/LLM Security Experience working with Splunk Experience working with CrowdStrike Experience with automation technologies (SOAR) and writing code for automation Experience working with Fortanix, Venafi, or similar The base pay range represents the anticipated low and high end of the pay range for this position. Actual pay rates will vary and will be based on various factors, such as your qualifications, skills, competencies, and proficiency for the role. Base pay is one component of WEX's total compensation package. Most sales positions are eligible for commission under the terms of an applicable plan. Non-sales roles are typically eligible for a quarterly or annual bonus based on their role and applicable plan. WEX's comprehensive and market competitive benefits are designed to support your personal and professional well-being. Benefits include health, dental and vision insurances, retirement savings plan, paid time off, health savings account, flexible spending accounts, life insurance, disability insurance, tuition reimbursement, and more. For more information, check out the "About Us" section.Pay Range: $102,000.00 - $135,000.00
    $102k-135k yearly Auto-Apply 12d ago
  • Security Engineer II

    Trustmark 4.6company rating

    Security engineer job in Augusta, ME

    Trustmark's mission is to improve wellbeing - for everyone. It is a mission grounded in a belief in equality and born from our caring culture. It is a culture we can only realize by building trust. Trust established by ensuring associates feel respected, valued and heard. At Trustmark, you'll work collaboratively to transform lives and help people, communities and businesses thrive. Flourish in a culture of diversity and inclusion where appreciation, mutual respect and trust are constants, not just for our customers but for ourselves. At Trustmark, we have a commitment to welcoming people, no matter their background, identity or experience, to a workplace where they feel safe being their whole, authentic selves. A workplace made up of diverse, empowered individuals that allows ideas to thrive and enables us to bring the best to our colleagues, clients and communities. We are seeking a highly skilled Cyber Security Engineer to join our team and play a pivotal role in safeguarding our organization's digital assets. The ideal candidate will possess a deep understanding of cybersecurity principles, a strong technical background, and a passion for protecting sensitive information. You will be responsible for engineering, implementing and monitoring security measures for the protection of Trustmark's computer systems, networks and information. The role helps identify and define system security requirements as well as develop detailed cyber security designs. **Responsibilities:** + Design, implement, and maintain security architectures, systems, and solutions to protect critical infrastructure and data. + Conduct vulnerability assessments and penetration testing to identify and mitigate risks. + Develop and implement security policies, standards, and procedures. + Monitor security systems and respond to incidents promptly and effectively. + Stay up-to-date with the latest cybersecurity threats and trends. + Collaborate with cross-functional teams to ensure security is integrated into all aspects of the business. + Provide technical guidance and support to internal stakeholders. **Qualifications:** + Bachelor's degree in Computer Science, Information Technology, or a related field or + 3-5 Years of network engineering or cyber engineering experience + Strong understanding of cybersecurity frameworks and standards (e.g., NIST, ISO 27001). + Proficiency in network security, systems security, application security, and data security. + Hands-on experience with security tools and technologies (e.g., firewalls, intrusion detection systems, encryption, SIEM). + Excellent problem-solving and analytical skills. + Strong communication and interpersonal skills. + Ability to work independently and as part of a team. **Preferred Qualifications:** + Certifications such as CISSP, CISA, or CEH. + Experience with cloud security (e.g., AWS, Azure, GCP). + Knowledge of scripting and programming languages (e.g., Python, PowerShell). Brand: Trustmark Come join a team at Trustmark that will not only utilize your current skills but will enhance them as well. Trustmark benefits include health/dental/vision, life insurance, FSA and HSA, 401(k) plan, Employee Assistant Program, Back-up Care for Children, Adults and Elders and many health and wellness initiatives. We also offer a Wellness program that enables employees to participate in health initiatives to reduce their insurance premiums. **For the fourth consecutive year we were selected as a Top Workplace by the Chicago Tribune.** The award is based exclusively on Trustmark associate responses to an anonymous survey. The survey measured 15 key drivers of engaged cultures that are critical to the success of an organization. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex, sexual orientation, sexual identity, age, veteran or disability. Join a passionate and purpose-driven team of colleagues who contribute to Trustmark's mission of helping people increase wellbeing through better health and greater financial security. At Trustmark, you'll work collaboratively to transform lives and help people, communities and businesses thrive. Flourish in a culture where appreciation, mutual respect and trust are constants, not just for our customers but for ourselves. Introduce yourself to our recruiters and we'll get in touch if there's a role that seems like a good match. When you join Trustmark, you become part of an organization that makes a positive difference in people's lives. You will play a vital role in delivering on our mission of helping people increase wellbeing through better health and greater financial security. Our customers tell us they simply appreciate the personal attention and knowledgeable service. Others tell us we've changed their lives. At Trustmark, you'll be part of a close-knit team. You'll enjoy abundant opportunities to grow your career. That's why so many of our associates stay at Trustmark and thrive. Trustmark benefits from more than 100 years of experience but pairs that rich history with a palpable sense of optimism, growth and excitement for what's ahead - and beyond. This is a place where associates bring their whole selves to work each day. A place where you can be yourself. Whatever your beyond is, you can achieve it at Trustmark.
    $82k-101k yearly est. 60d+ ago
  • Information Security Analyst

    Deere Employees Credit Union 3.6company rating

    Security engineer job in Westbrook, ME

    INFORMATION SECURITY ANALYST SUMMARY: The Information Security Analyst is responsible for contributing, implementing, and maintaining the credit union's cyber security program. Leveraging the required skills and experience, the Information Security Analyst will investigate and respond to security incidents, work closely with internal departments and/or third parties, and provide status updates to management. ESSENTIAL DUTIES AND RESPONSIBILITIES include the following: Review daily log reports generated from information security systems and investigate anomalous behavior. Process reported social engineering attempts to determine if a threat exists and communicate outcomes to involved parties. Monitor, investigate, remediate, and report security incidents as they arise. Work with other members of the Incident Response Team, as needed. Conduct social engineering exercises across the organization and assist with training remediation efforts. Administer the organizations vulnerability management program to identify and prioritize vulnerabilities. Will also work closely with the Information Technology team and product owners to remediate discovered vulnerabilities. Administer the credit union's information security systems and tools. Contribute to the organizations security policies, procedures, and processes. Implements the information security strategy and objectives, as approved by the Chief Information Officer, including strategies to monitor and address current and emerging risks. Participates on the Change Control Board ensuring systems changes are made with appropriate Confidentiality, Availability, Integrity and Cyber Security design and controls Participates in industry collaborative efforts to monitor, share, and discuss emerging security threats. Maintains up-to-date knowledge of the security industry including awareness of new or revised security solutions, improved security processes and the development of new attacks and threat vectors. Contributes to the deployment, integration, and initial configuration of all new security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures generically and the enterprise's security documents specifically. Champions security awareness and training programs. Participate in security NIST based incident response process including event handling, process reviews and tabletop exercises. Supervise all investigations into problematic activity and provide on-going communication and reports significant security events to the board, supervisory committee, and management as appropriate. Responds to and complies with audit, regulatory, and credit union policies and procedures. Monitor and respond to security related alerts during non-business hours. QUALIFICATION REQUIREMENTS: To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. KEYS TO SUCCESS: Knowledge Of: Experience in enterprise security document creation. Experience in enterprise security architecture design. Experience in NIST based Incident Handling Working technical knowledge of Firewalls, Intrusion Detection, Networking technologies ( LAN / WAN ), Data Loss Prevention (DLP), Network Access Controls (NAC), Security Incident and Event Management Systems (SIEM), Email Security. Vulnerability Management Tools (Nessus, Nexpose, Etc) Command Line Utilities such as Nmap, netcat, etc. Experience with security in cloud environments (Azure preferred) required. Microsoft Windows Server, Active Directory, DNS and DHCP, etc. Microsoft Windows 10 and later Microsoft Office and Visio 2016 and later Ability To: Create and maintain detailed technical documentation Proven analytical and problem-solving abilities. Good written, oral, and interpersonal communication skills. Ability to conduct research into IT security issues and products as required. Ability to present ideas in business-friendly and user-friendly language. Highly self-motivated and directed. Team-oriented and skilled in working within a collaborative environment. EDUCATION, EXPERIENCE, & TRAINING GUIDELINES: Any equivalent combination of education and experience that provides the applicant with the knowledge, skills, and abilities, required to perform the job is acceptable. A typical way to obtain the knowledge and abilities would be: Education/Experience: Bachelor's degree preferably in Information Systems or Computer Science 3-5 years of relevant Information Technology or Information Security experience. License or Certification: Security certifications such as Security+, CySA+, SSCP, etc. Bondable Acceptable Credit History Compensation & Benefits: Salary Range: $62,200 - $93,300 Health, Dental & Vision Benefits Bonus opportunity 401(k) with match and profit sharing Flexible Time Off
    $62.2k-93.3k yearly 60d+ ago
  • Network Security Engineer

    Govcio

    Security engineer job in Augusta, ME

    Govico is currently hiring for a remote Network Security Engineer to support the US Courts. **Responsibilities** The Firewall Operations and Management team provides Tier 2/3 support and manages the firewall devices that protect networks. The current solution consists of approximately 1,100 Palo Alto firewalls at customer locations and three dozen Cisco firewalls (e.g., ASAs and FirePowers) at two data centers. Duties: Provide leadership and overall direction in support of the IDC firewalls by managing firewalls in DMZ, Secure Zone, and Atlas to provide boundary protection to DCN and manage firewalls to protect the network **Qualifications** + Bachelor's with 12+ years (or commensurate experience) + Deep knowledge and expert skills in Cisco ASA, Cisco Firepower, Palo Alto firewalls, and various firewall tools such as SolarWinds and Cisco Prime + Clearance Required: Ability to maintain a Public Trust clearance **Company Overview** GovCIO is a team of transformers--people who are passionate about transforming government IT. Every day, we make a positive impact by delivering innovative IT services and solutions that improve how government agencies operate and serve our citizens. But we can't do it alone. We need great people to help us do great things - for our customers, our culture, and our ability to attract other great people. We are changing the face of government IT and building a workforce that fuels this mission. Are you ready to be a transformer? **What You Can Expect** **Interview & Hiring Process** If you are selected to move forward through the process, here's what you can expect: + During the Interview Process + Virtual video interview conducted via video with the hiring manager and/or team + Camera must be on + A valid photo ID must be presented during each interview + During the Hiring Process + Enhanced Biometrics ID verification screening + Background check, to include: + Criminal history (past 7 years) + Verification of your highest level of education + Verification of your employment history (past 7 years), based on information provided in your application **Employee Perks** At GovCIO, we consistently hear that meaningful work and a collaborative team environment are two of the top reasons our employees enjoy working here. In addition, our employees have access to a range of perks and benefits to support their personal and professional well-being, beyond the standard company offered health benefits, including: + Employee Assistance Program (EAP) + Corporate Discounts + Learning & Development platform, to include certification preparation content + Training, Education and Certification Assistance* + Referral Bonus Program + Internal Mobility Program + Pet Insurance + Flexible Work Environment *Available to full-time employees Our employees' unique talents and contributions are the driving force behind our success in supporting our customers, which ultimately fuels the success of our company. Join us and be a part of a culture that invests in its people and prioritizes continuous enhancement of the employee experience. **We are an Equal Opportunity Employer.** All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, disability, or status as a protected veteran. EOE, including disability/vets. **Posted Pay Range** The posted pay range, if referenced, reflects the range expected for this position at the commencement of employment, however, base pay offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, education, experience, and internal equity. The total compensation package for this position may also include other compensation elements, to be discussed during the hiring process. If hired, employee will be in an "at-will position" and the GovCIO reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, GovCIO or individual department/team performance, and market factors. **Posted Salary Range** USD $124,540.00 - USD $140,000.00 /Yr. Submit a referral to this job (****************************************************************************************************************************** **Location** _US-Remote_ **ID** _2026-7341_ **Category** _Information Technology_ **Position Type** _Full-Time_
    $124.5k-140k yearly 2d ago
  • Information Security Analyst

    Fiber Materials 4.1company rating

    Security engineer job in Biddeford, ME

    Fiber Materials Inc. | solutions for the most extreme places in the universe FMI's manufacturing facility has been a leading solutions provider of high temperature materials and composites for more than 50 years, serving the Department of Defense and NASA. The focus in Maine is on multidirectional reinforced Carbon/Carbon (C/C) and Ceramic Matrix Composites (CMCs) that enable high-temperature components such as: thermal protection systems, re-entry vehicle nose tips as well as rocket motor throats and nozzles. Our materials are being used on ground-breaking space initiatives such as the Orion Multi-Purpose Crew Vehicle and the heat shield for NASA's Mars 2020 mission, important missile programs, airfoils in commercial and military jet engines, and as lightweight armor for U.S. military ground vehicles. Your role: FMI is seeking an Information Security Analyst to support a small, stand-alone classified information system(s) in support of a U.S. Government contract(s). As the Information Security Analyst, you will encompass the responsibilities of an Information System Security Officer (ISSO) and Information System Security Engineer (ISSE). To be successful, you will be responsible for compliance, operations, and technical security engineering of the classified environment. Please keep in mind this role is on site. Job Responsibilities: Operational Security (ISSO Duties): Perform continuous monitoring and day-to-day security administration of the system. Manage user access, account creation, and audit log reviews. Conduct security training and briefings for system users. Document and report security incidents, vulnerabilities, and mitigation actions. Engineering & Technical Security (ISSE Duties): Design, implement, and maintain technical security controls for the system. Evaluate, recommend, and integrate security solutions for classified IT environments. What we need from you: Associate's degree in Cybersecurity, Information Technology, or related field; equivalent experience considered 1-3 years of experience in information system security Active or ability to obtain and maintain an U.S. Government security clearance (Secret or above) Effective time management Technical proficiency Detail oriented Strong listening skills Customer focus Self-motivated Strong interpersonal skills Ability to work independently and as part of a team in a fast-paced environment Knowledge of NIST and or CMMC cybersecurity frameworks and standards Understanding in cyber security assessment tools and methodologies Understanding network and system security, intrusion detection and prevention, and incident response Excellent analytical and problem-solving skills Commitment to continuous learning and staying current with industry developments Excellent communication and documentation skills What you'll get from us: 16 ETO days 12 paid holidays (including Winter Closure!) Medical / Dental / Vision 401k Company Match Tuition Reimbursement $1000 Sign-On Bonus
    $96k-133k yearly est. 60d ago
  • Security Architect

    Smartoptics

    Security engineer job in Stockholm, ME

    Introduction Smartoptics provides innovative optical networking solutions for a new era of open networking. We focus on solving network challenges and increasing the competitiveness of our customers. Our customer base includes cable and telecom operators, cloud providers, Internet exchanges, governments and thousands of enterprises. The candidate will be part of the R&D team. The R&D team develops complete systems including both hardware and software. Position summary To meet future security requirements for our next generation of optical networking products, we are looking for a senior Security Architect. You will be responsible for defining security architectures and guiding the product teams through the process of meeting and maintaining compliance with international standards. This includes setting requirements, driving architectural decisions, collaborating closely with both hardware and software teams, and interfacing with certification bodies. This is a strategic and technical role where you will contribute to building secure, robust, and certifiable products that meet demanding customer and regulatory requirements. You will report to Head of System Engineering. Requirements * Based in the Stockholm area * Office-first policy * MSc or equivalent in Electrical Engineering, Computer Science, Information Security, or related field * Proven experience with security architecture for embedded systems or network equipment * In-depth knowledge of FIPS 140-3 and Common Criteria (ISO/IEC 15408) standards and certification processes * Strong understanding of both hardware and software security concepts, such as secure boot, key management, cryptographic modules, and secure software development lifecycle * Experience translating security requirements into concrete system design and documentation * Excellent communication skills in English * Interest and experience in creating and maintaining clear technical documentation Desired skills * Experience working with certification labs and evaluation bodies * Background in the fiber optical industry, telecommunication, or data communication * Hands-on knowledge of cryptographic hardware (e.g., TPMs, secure elements, HSMs) and related software stacks Smartoptics R&D team is located in Kista with head office in Oslo, Norway. Benefits include pension, health insurance, bonus scheme, 6 weeks' vacation and flexible working hours. For more information about Smartoptics, please visit our about Smartoptics page. Furthermore, note that you must have a Swedish/EU work permit. No relocation assistance or visa support provided. No recruiters or agencies, please. About Smartoptics Smartoptics is a Scandinavian company founded in 2006. We provide innovative optical networking solutions for the new era of open networking. Our focus is on solving network challenges and enhancing the competitiveness of our customers. Our clientele includes cable and telecom operators, cloud providers, Internet exchanges, governments, and thousands of enterprises. At Smartoptics, we value inclusivity and prioritize the well-being of our employees. We foster a positive company culture and provide a supportive work environment.
    $92k-133k yearly est. 24d ago
  • Facility Security Officer & Information Systems Security Officer (Onsite)

    RTX

    Security engineer job in North Berwick, ME

    Country: United States of America Onsite U.S. Citizen, U.S. Person, or Immigration Status Requirements: Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance Security Clearance: DoD Clearance: Secret Pratt & Whitney is working to once again transform the future of flight-designing, building and servicing engines unlike any the world has ever seen. And because transformation begins from within, we're seeking the people to drive it. So, calling all curious. Come ready to explore and you'll find a place where your talent takes flight-beyond the borders of title, a country or your comfort zone. Bring your passion and commitment and we'll welcome you into a tight-knit team that takes our mission personally. Channel your drive to make a difference into shaping an organization and an industry that's evolving fast to the future. At Pratt & Whitney, the difference you make is on display every day. Just look up. Are you ready to go beyond? What You Will Do: Support Pratt & Whitney's Government Security Compliance team as the Facility Security Officer (FSO) / Information Systems Security Officer (ISSO) for the North Berwick, ME facility. This critical leadership role ensures compliance with the National Industrial Security Program (NISP), NISP Operating Manual (NISPOM), Defense Counterintelligence and Security Agency (DCSA) standards, and other applicable government regulations. The FSO/ISSO will oversee security operations for a cleared facility, ensuring the protection of classified information, systems, and personnel while fostering a culture of security excellence. Key Responsibilities: The FSO/ISSO will report directly to the Pratt & Whitney Associate Director, Corporate Facility Security Officer, and will be responsible for the following: Leadership and Compliance: Lead the formulation, establishment, and execution of local collateral security policies, procedures, and protocols to ensure compliance with NISP, DAAPM, ICDs, and other governing regulations. Serve as the primary interface with internal and external stakeholders, including government agencies, subcontractors, and P&W leadership. Security Program Oversight: Manage the facility's classified holdings, maintain CAGE code facility clearance, and process changes in conditions. Conduct and oversee security program reviews, including DCSA inspections, self-inspections, and formal audits. Investigate and report security incidents/violations in collaboration with the Corporate FSO and Cognizant Security Authority. Insider Threat Program: Serve as a key member of the Insider Threat Management Council and liaise with the Corporate Insider Threat Program Senior Official (ITPSO). Provide North Berwick leadership and guidance on Insider Threat Program activities and initiatives. Information Systems Security: Collaborate with the Information Systems Security Manager (ISSM) to ensure the operational security posture of information systems. Manage user account requests, monitor user activity, and analyze audit records to identify and address anomalies. Support incident response activities in the event of security violations or breaches. Stakeholder Engagement: Foster effective communication and collaboration with government customers, associated contractors, subcontractors, P&W teams, and North Berwick senior leadership. Represent the GSC team as a project manager on select core projects and initiatives. Training and Development: Attend technical and security training to maintain expertise in security management, operating systems, and networking. Provide guidance and training to facility staff on security responsibilities and best practices. Serve as the Government Security Compliance Data Transfer Agent program focal: Provide leadership and oversight for the Data Transfer Agent (DTA) program, ensuring compliance with regulatory and customer requirements. Serve as the primary point of contact for customers regarding DTA program compliance and functionality. Collaborate with internal stakeholders to maintain and enhance program effectiveness and security. Develop and implement best practices, policies, and procedures for secure and efficient data transfer. Monitor program performance and drive continuous improvement to meet evolving security and customer needs. Other Duties: Perform additional tasks as directed by the Corporate Facility Security Officer. Coordinate and support the North Berwick Security Staff as directed. Qualifications You Must Have: Advanced degree and 5+ years of experience in industrial security, cybersecurity, government compliance, or government regulated industry; OR Bachelor's degree and 8+ years of relevant industry experience; OR an Associate's degree and 10+ years of relevant industry experience. We will also consider high school diploma, technical or military training, or recognized industry certifications in combination with 12+ years or relevant industry experience. 1+ Year of hands-on experience supporting administering and/or maintaining computing systems, networks and/or software Active U.S. government issued Secret level security clearance required plus ability to obtain and maintain a Top-Secret level security clearance. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance. Must be able to obtain industry recognized Cybersecurity certification within 12 months of hire (i.e. Security + CE) Qualifications You Prefer: Strong understanding of the NISPOM, DAAPM, ICDs, and other security regulations. Experience with DISS, NISS, SIMS, and other DCSA related databases. Proficiency in managing classified information systems and working with DCSA inspections. Cybersecurity certification (i.e. Security + CE). Facility Security Officer (FSO) certification. Information Systems Security Officer (ISSO) certification. Proven leadership experience, preferably within a defense, aerospace, or government environment. Experience with Insider Threat Programs and related compliance activities. Strong project management skills and the ability to manage multiple priorities effectively. What is my Role Type? In addition to transforming the future of flight, we are also transforming how and where we work. We've introduced role types to help you understand how you will operate in our blended work environment. This role is: Onsite: Employees who are working in Onsite roles will work primarily onsite. This includes all production and maintenance workers, as they are essential to the development of our engines. Candidates will learn more about role type and current site status throughout the recruiting process. For onsite and hybrid roles, commuting to and from the assigned site is the employee's personal responsibility. Learn more & apply today! As part of our commitment to maintaining a secure hiring process, candidates may be asked to attend select steps of the interview process in-person at one of our office locations, regardless of whether the role is designated as on-site, hybrid or remote. The salary range for this role is 101,000 USD - 203,000 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate's work experience, location, education/training, and key skills.Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company's performance.This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window. RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans' Readjustment Assistance Act. Privacy Policy and Terms: Click on this link to read the Policy and Terms
    $71k-95k yearly est. Auto-Apply 30d ago
  • Facility Security Officer & Information Systems Security Officer (Onsite)

    RTX Corporation

    Security engineer job in North Berwick, ME

    **Country:** United States of America ** Onsite **U.S. Citizen, U.S. Person, or Immigration Status Requirements:** Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance **Security Clearance:** DoD Clearance: Secret Pratt & Whitney is working to once again transform the future of flight-designing, building and servicing engines unlike any the world has ever seen. And because transformation begins from within, we're seeking the people to drive it. **So, calling all curious.** Come ready to explore and you'll find a place where your talent takes flight-beyond the borders of title, a country or your comfort zone. Bring your passion and commitment and we'll welcome you into a tight-knit team that takes our mission personally. Channel your drive to make a difference into shaping an organization and an industry that's evolving fast to the future. At Pratt & Whitney, the difference you make is on display every day. Just look up. **Are you ready to go beyond?** **What You Will Do:** Support Pratt & Whitney's Government Security Compliance team as the **Facility Security Officer (FSO) / Information Systems Security Officer (ISSO)** for the North Berwick, ME facility. This critical leadership role ensures compliance with the National Industrial Security Program (NISP), NISP Operating Manual (NISPOM), Defense Counterintelligence and Security Agency (DCSA) standards, and other applicable government regulations. The FSO/ISSO will oversee security operations for a cleared facility, ensuring the protection of classified information, systems, and personnel while fostering a culture of security excellence. **Key Responsibilities:** The FSO/ISSO will report directly to the Pratt & Whitney Associate Director, Corporate Facility Security Officer, and will be responsible for the following: + Leadership and Compliance: + Lead the formulation, establishment, and execution of local collateral security policies, procedures, and protocols to ensure compliance with NISP, DAAPM, ICDs, and other governing regulations. + Serve as the primary interface with internal and external stakeholders, including government agencies, subcontractors, and P&W leadership. + Security Program Oversight: + Manage the facility's classified holdings, maintain CAGE code facility clearance, and process changes in conditions. + Conduct and oversee security program reviews, including DCSA inspections, self-inspections, and formal audits. + Investigate and report security incidents/violations in collaboration with the Corporate FSO and Cognizant Security Authority. + Insider Threat Program: + Serve as a key member of the Insider Threat Management Council and liaise with the Corporate Insider Threat Program Senior Official (ITPSO). + Provide North Berwick leadership and guidance on Insider Threat Program activities and initiatives. + Information Systems Security: + Collaborate with the Information Systems Security Manager (ISSM) to ensure the operational security posture of information systems. + Manage user account requests, monitor user activity, and analyze audit records to identify and address anomalies. + Support incident response activities in the event of security violations or breaches. + Stakeholder Engagement: + Foster effective communication and collaboration with government customers, associated contractors, subcontractors, P&W teams, and North Berwick senior leadership. + Represent the GSC team as a project manager on select core projects and initiatives. + Training and Development: + Attend technical and security training to maintain expertise in security management, operating systems, and networking. + Provide guidance and training to facility staff on security responsibilities and best practices. + Serve as the Government Security Compliance Data Transfer Agent program focal: + Provide leadership and oversight for the Data Transfer Agent (DTA) program, ensuring compliance with regulatory and customer requirements. + Serve as the primary point of contact for customers regarding DTA program compliance and functionality. + Collaborate with internal stakeholders to maintain and enhance program effectiveness and security. + Develop and implement best practices, policies, and procedures for secure and efficient data transfer. + Monitor program performance and drive continuous improvement to meet evolving security and customer needs. + Other Duties: + Perform additional tasks as directed by the Corporate Facility Security Officer. + Coordinate and support the North Berwick Security Staff as directed. **Qualifications You Must Have:** + Advanced degree and 5+ years of experience in industrial security, cybersecurity, government compliance, or government regulated industry; **OR** Bachelor's degree and 8+ years of relevant industry experience; **OR** an Associate's degree and 10+ years of relevant industry experience. We will also consider high school diploma, technical or military training, or recognized industry certifications in combination with 12+ years or relevant industry experience. + 1+ Year of hands-on experience supporting administering and/or maintaining computing systems, networks and/or software + Active U.S. government issued Secret level security clearance required plus ability to obtain and maintain a Top-Secret level security clearance. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance. + Must be able to obtain industry recognized Cybersecurity certification within 12 months of hire (i.e. Security + CE) **Qualifications You Prefer:** + Strong understanding of the NISPOM, DAAPM, ICDs, and other security regulations. + Experience with DISS, NISS, SIMS, and other DCSA related databases. + Proficiency in managing classified information systems and working with DCSA inspections. + Cybersecurity certification (i.e. Security + CE). + Facility Security Officer (FSO) certification. + Information Systems Security Officer (ISSO) certification. + Proven leadership experience, preferably within a defense, aerospace, or government environment. + Experience with Insider Threat Programs and related compliance activities. + Strong project management skills and the ability to manage multiple priorities effectively. **What is my Role Type?** In addition to transforming the future of flight, we are also transforming how and where we work. We've introduced role types to help you understand how you will operate in our blended work environment. This role is: + **Onsite:** Employees who are working in Onsite roles will work primarily onsite. This includes all production and maintenance workers, as they are essential to the development of our engines. Candidates will learn more about role type and current site status throughout the recruiting process. For onsite and hybrid roles, commuting to and from the assigned site is the employee's personal responsibility. **Learn more & apply today!** **_As part of our commitment to maintaining a secure hiring process, candidates may be asked to attend select steps of the interview process in-person at one of our office locations, regardless of whether the role is designated as on-site, hybrid or remote._** The salary range for this role is 101,000 USD - 203,000 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate's work experience, location, education/training, and key skills. Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement. Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company's performance. This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply. RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window. _RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans' Readjustment Assistance Act._ **Privacy Policy and Terms:** Click on this link (******************************************************** to read the Policy and Terms Raytheon Technologies is An Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class.
    $71k-95k yearly est. 31d ago
  • Commercial Security Consultant

    Everon

    Security engineer job in Gray, ME

    At Everon, we truly believe that our people are the difference - for our organization, the customers we serve and the communities we protect. When you're a part of Everon, you'll have the opportunity to be a part of that difference every day. With more than 100 locations, a deep national presence, and comprehensive portfolio of solutions and services, our employees are always poised for career advancement and growth. For more information, visit *********************** or follow us on LinkedIn. (************************************************** **_Position Summary:_** The Commercial Sales Consultant is a sales representative that specializes in growing customer verticals within commercial intrusion, fire, access control, surveillance products and services. This individual will work within an assigned territory to provide a consultative, integrated solution to potential and existing commercial customers. **_Essential Duties:_** + Create new market share through prospecting and developing a new customer base. + Strengthen existing customer partnerships within commercial accounts. + Cultivate new leads through referrals, company provided leads, networking groups and cold- calling. + Efficiently manage territory resources to maximize daily production and customer relationships + Provide security consultations to customers that include design, scope of work, theory of operation and solution integration. + Promote and cross sell all Everon products and services. + Collaborate with product and manufacturing representatives and operational counterparts. **_Minimum Qualifications:_** + College Degree preferred, must have High School Diploma or GED. + Minimum of 2 years of experience in B2B sales representative, preferably in the security, telecom or technology industry. + Proficient in system design applications, bidding tools, customer management, Microsoft, etc. + Experience with integrated video surveillance, access control, and fire preferred. + Ability to read and interpret applicable documents, materials, policies, procedures, etc. as presented in English. **_Skills & Competencies:_** + Expert in customer relationships, conflict resolution, negotiation, and customer service. + Excellent communication and presentation skills with the ability to present to executives. + Proven ability to generate leads + Strong Negotiation Skills + Business Acumen + Functional/Technical Skills + Results driven + Team Oriented + Problem Solving + Forward Thinker **_Other:_** + Must have valid driver's license issued by the State in which they reside. **_Rewards and Benefits:_** + Competitive compensation packages - Base + Uncapped Commissions, Bonuses. + Mileage and Cell Phone Reimbursement. + Medical, Dental, Vision, and Supplementary Insurance Plans + 401k Match + Tuition Reimbursement, Corporate Discounts, Flexible Spending Accounts. + Paid Holidays. **_Pay and Benefits Disclosure:_** The budgeted pay range for this role as of November 2025 is $37,500 - $65,000. This range is based on multiple factors, including but not limited to tenure, previous experience, qualifications, certifications, and geographic considerations. Everon offers eligible employees competitive benefits, including health and welfare benefits, a 401(k) plan with company match, short term and long term disability coverage, life insurance, wellbeing benefits, and paid time off among others. This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required for this position. Everon may update the essential functions, qualifications, and other requirements at any time, with or without notice, consistent with the position's purpose and business necessity. Everon considers all applicants for employment without regard to protected class or characteristics. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this position. Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights (**************************** notice from the Department of Labor.
    $37.5k-65k yearly 24d ago
  • Security Technical Engineer

    Connectivity Point Design and Installation 4.0company rating

    Security engineer job in Auburn, ME

    Connectivity Point is seeking a highly skilled Security Technical Engineer to serve as the critical link between our field technicians and design team. This role ensures that purchased systems are installed accurately, efficiently, and in alignment with customer expectations-delivering exceptional customer service while supporting project profitability. JOB RESPONSIBILITIES: Review project documentation to gain thorough understanding and check for accuracy. Create and maintain system configuration software. Work with design team to create and update project installation documents using Bluebeam, Visio, Excel, and/or CAD as needed. Coordinate on-site implementation process for security installations and service requests. Travel as necessary. This may include overnight travel out of state. Work with the security design engineers both presale and post-sale. Oversee implementation of security solutions to ensure that equipment is installed per industry standards and best practices. This may require working in the field along with security technicians to accomplish the installation objective, timeline, and goal of customer satisfaction. Report any out of scope work required to allow for change order generation as needed. Participate in customer construction status calls/meetings as required. Provide detailed project field status updates to security PM and Division Manager. Provide end user training on newly installed systems. Strengthen customer relationships by being responsible, accurate, helpful, and trustworthy. Proactively look for opportunities to provide more value-add services to customers. Assist with maintaining customer profiles and standards documents to ensure accuracy. Provide remote technical support for out-of-market technicians in the field as needed. Assist with ensuring customer profile documents are maintained and updated. Stay up to date on security technologies and installation practices. Work with the rest of the security team to evaluate new products and services. Support existing customers remotely or in person as needed. Perform other assigned duties as requested. SKILLS/EXPERIENCE/TRAINING: High School Diploma or General Education Degree (GED) and four to five years minimum industry experience in security system sales, management, service, or installation; or the equivalent combination of education and experience Solid security system industry experience including sales, service, project management and/or installation of security systems, access control, and CCTV. Kantech, DSC, and Exacqvision software experience. Ability to follow blueprints, notes and specifications to meets the job requirements. Basic written and verbal communications skills. Proven ability to follow instructions and focused attention to detail. Experience with construction and adherence to large and small project scheduling. Enjoys hands-on problem solving in a fast paced work environment. Ability to work well both independently and as part of a professional team. Excellent time management, planning and forward-thinking skills. Self-motivated with a positive and professional attitude. Excellent communication and listening skills. Strong teambuilding, customer service, and interpersonal skills. Must possess good decision-making skills, be very organized and detail oriented. Strong computer skills using Microsoft Office suite (i.e., Word, Excel, Outlook) required. T his job description is not intended to be and should not be construed as an all-inclusive list of all the responsibilities, skills or working conditions associated with the position. While it is intended to accurately reflect the position activities and requirements, the Company reserves the right to modify, add or remove duties and assign other duties as necessary.
    $91k-126k yearly est. 31d ago
  • Product Security Engineer, AI

    Meta 4.8company rating

    Security engineer job in Augusta, ME

    Meta's Product Security team is seeking a experienced hacker who derives purpose in life by revealing potential weaknesses and then crafting creative solutions to eliminate those weaknesses. Your skills will be the foundation of security initiatives that protect the security and privacy of over two billion people. You will be relied upon to provide engineering and product teams with the web, mobile, or native code security expertise necessary to make informed product decisions. Come help us make life hard for the bad guys. **Required Skills:** Product Security Engineer, AI Responsibilities: 1. Security Reviews: perform manual design and implementation reviews of products and services that make up the Meta ecosystem, like Instagram, WhatsApp, Oculus, Portal, and more 2. Developer Guidance: provide guidance and education to developers that help prevent the authoring of vulnerabilities 3. Automated Analysis and Secure Frameworks: build automation (static and dynamic analysis) and frameworks with software engineers that enable Meta to scale consistently across all of our products **Minimum Qualifications:** Minimum Qualifications: 4. BS or MS in Computer Science or a related field, or equivalent experience 5. 8+ years of experience finding vulnerabilities in interpreted languages. Knowledge of best practice secure code development 6. Experience with exploiting common security vulnerabilities 7. Knowledge of common exploit mitigations and how they work 8. Coding and scripting experience in one or more general purpose languages **Preferred Qualifications:** Preferred Qualifications: 9. Experience creating software that enables security processes, especially those leveraging AI/ML for automation or augmentation 10. Experience integrating or building AI-powered tools to assist with vulnerability detection, code review, or threat modeling 11. Experience creating software that enables security processes 12. 8+ years of experience finding vulnerabilities in C/C++ code 13. Contributions to the security community (public research, blogging, presentations, bug bounty) 14. Demonstrated ability to collaborate with AI researchers or engineers to apply AI in security workflows **Public Compensation:** $184,000/year to $257,000/year + bonus + equity + benefits **Industry:** Internet **Equal Opportunity:** Meta is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Meta participates in the E-Verify program in certain locations, as required by law. Please note that Meta may leverage artificial intelligence and machine learning technologies in connection with applications for employment. Meta is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance or accommodations due to a disability, please let us know at accommodations-ext@fb.com.
    $184k-257k yearly 60d+ ago
  • Data Analyst, II - Information Security Metrics and Reporting

    UNUM Group 4.4company rating

    Security engineer job in Portland, ME

    Our Fortune 500 company is driving a digital transformation and looking for forward-thinking innovators to disrupt how our industry thinks about and uses technology. As one of the world's leading employee benefits providers, we help millions of people gain affordable access to benefits that help them protect their families, their finances and their futures. Are you an asker of questions, a solver of problems, and a challenger of the status quo? Our mission is to provide a differentiated customer experience and exceed the expectations people have of technology at any company - not just insurers. We are seeking individuals to join our team of talented IT professionals who share never-ending passion and an unwavering focus on our customer experience. Team members comfortable working in an agile, fast-paced, and delivery-focused environment thrive in our environment where we value an entrepreneurial spirit and those who challenge the status-quo. Unum is changing, and we're excited about what's next. Join us. General Summary: The Information Security Metrics and Quality Data Analyst is responsible for simple to moderately complex data profiling, analysis and mapping with little to no oversight and exhibits a mastery of the tools and technical skillset subject matter expertise with data organization and visualization supporting information security (cyber security) risks and operations. This candidate works closely with Security Analysts, Security Engineers, Project Managers, and Global Information Security leadership. They deliver to high quality KRI/KPI and are able to accurately estimate work required to deliver on their responsibilities. They use critical thinking skills applied to data analysis in order to advance the delivery and maintenance of information security KRI and KPI. Job Specifications * Bachelors Degree preferred, and/or equivalent experience * 4+ years experience with demonstrated success at the Data Analyst 1 level or equivalent experience * Mastery of data profiling and analysis concepts, including data anomalies, data mapping activities. * Mastery of data modeling concepts * Mastery of PowerBI data modeling and visualization development * Clearly demonstrates data analytical ability and critical thinking skills * Ability to manage multiple tasks by paying close attention to detail * Ability to work as part of a team and interact effectively with others * Ability to embrace change, adapt to the unexpected, and focus energies, people, and solutions on practical and positive results * Takes an innovative approach to problem solving * Strong communications skills * Strong team player; able to work effectively within a team and more broadly with people from a variety of backgrounds and areas across the organization. Principal Duties and Responsibilities * Responsible for data profiling and analysis to evaluate data sources to determine the best source for business information. * Responsible for source to target data mapping specifications (e.g. source to target can be from one DBMS table to another DBMS table, from a DBMS table into a canonical message structure, etc.) * Design simple to moderately complex, flexible data models (conceptual and logical) and visualizations through collaborations with analysts, engineers, and leadership. Leads sizing and estimation activities within the agile team. * Create/Capture documentation (metadata) that is up-to-date. * Collaborate with the test engineers to perform data validation and testing activities as appropriate. * Develop and maintain knowledge of information security practices and the insurance industry. * Develop and maintain knowledge of information security-owned and other relevant data sources. * Adhere to approved architectural standards. * Uses critical thinking skills to recommend and implement data management practices that advance business value. * Thinks with the mind of the end customer at all times, ensuring solutions seek to improve the customer experience and delight their customers. #LI-TO1 #LI-MULTI IN4 Our company is built on helping individuals and families, and this starts with our employees. We want employees to maintain a positive balance, which is why we provide access to the benefits and resources they need to invest in themselves. From our onsite fitness facilities and generous paid time off to employee professional development programs, we are committed to helping employees live and work their best - both inside and outside the office. Unum is an equal opportunity employer, considering all qualified applicants and employees for hiring, placement, and advancement, without regard to a person's race, color, religion, national origin, age, genetic information, military status, gender, sexual orientation, gender identity or expression, disability, or protected veteran status. The base salary range for applicants for this position is listed below. Unless actual salary is indicated above in the job description, actual pay will be based on skill, geographical location and experience. $73,300.00-$150,500.00 Additionally, Unum offers a portfolio of benefits and rewards that are competitive and comprehensive including healthcare benefits (health, vision, dental), insurance benefits (short & long-term disability), performance-based incentive plans, paid time off, and a 401(k) retirement plan with an employer match up to 5% and an additional 4.5% contribution whether you contribute to the plan or not. All benefits are subject to the terms and conditions of individual Plans. Company: Unum
    $73.3k-150.5k yearly Auto-Apply 4d ago
  • Engineer, Information Security and Risk

    Cardinal Health 4.4company rating

    Security engineer job in Augusta, ME

    Cardinal Health, Inc. (NYSE: CAH) is a global healthcare services and products company. We provide customized solutions for hospitals, healthcare systems, pharmacies, ambulatory surgery centers, clinical laboratories, physician offices and patients in the home. We are a distributor of pharmaceuticals and specialty products; a global manufacturer and distributor of medical and laboratory products; an operator of nuclear pharmacies and manufacturing facilities; and a provider of performance and data solutions. Working to be healthcare's most trusted partner, our customer-centric focus drives continuous improvement and leads to innovative solutions that improve the lives of people every day. With approximately 50,000 employees worldwide, Cardinal Health ranks among the top fifteen in the Fortune 500. **_Department Overview:_** **Information Technology** oversees the effective development, delivery, and operation of computing and information services. This function anticipates, plans, and delivers Information Technology solutions and strategies that enable operations and drive business value. **Information Security and Risk** develops, implements, and enforces security controls to protect the organization's technology assets from intentional or inadvertent modification, disclosure, or destruction. This job family develops system back-up and disaster recovery plans, conducts incident responses, threat management, vulnerability scanning, virus management and intrusion detection as well as completes risk assessments. **Responsibilities:** + **M&A Integration Execution:** Collaborate and engage with IAM Lead and other business partners on planning, design, and execution of IAM integration strategies for M&A activities, ensuring alignment with overall business and security objectives. This includes assessing the IAM landscapes of merging entities to identify challenges and solutions. + **Design and Implement Sailpoint IIQ Solutions:** Configure and customize Sailpoint IIQ components (Lifecycel Manager, Compliance Manager etc). Also develop workflows, rules, and connectors for identity governance. + **Application integration with Sailpoint IIQ:** Integrate Sailpoint IIQ with enterprise applications, directories and cloud platforms in addition to developing and maintaining connectros for provisioning and de-provisioning. + **Sailpoint IIQ Development and Scripting:** Write and maintain BeanShell scripts, Java code and XML configurations, develop customer Sailpoint tasks and workflows. + **Identity System Merging & Consolidation:** Manage the complex process of merging disparate identity providers, user directories (e.g., Active Directory, Azure AD, LDAP), and access management systems from acquired companies into the existing infrastructure. + **User Lifecycle Management:** Streamline and automate user provisioning, de-provisioning, and periodic access reviews for employees, contractors, and partners across all integrated systems, ensuring smooth onboarding and offboarding during M&A transitions. + **Security & Compliance:** Ensure IAM systems and processes comply with regulatory requirements (e.g., GDPR, HIPAA, SOX) and internal security policies, providing auditable records of access activities. Protect against data breaches by ensuring only authorized personnel can access sensitive information. + **Technical Troubleshooting & Support:** Troubleshoot, identify, and resolve technical identity and access management-related issues, providing expert support to internal teams and end-users during and after integration. + **Collaboration & Communication:** Coordinate cross-functional teams, including Information Security, IT Operations, HR, and Application Development, to ensure effective IAM implementation and seamless integration with business processes. Communicate complex security concepts to technical and non-technical stakeholders. + **Documentation & Best Practices:** Develop, review, and maintain comprehensive technical documentation, including architecture diagrams, configuration guides, and operational procedures. Stay up-to-date with IAM best practices, regulatory requirements, and security trends. **Qualifications** + Experience with SailPoint IdentityIQ (IIQ) is a must + Experience with SailPoint IIQ Integrations (Workday, Active Directory/LDAP, Webservices, SCIM, JDBC, SAP) + Experience implementing Life Cycle Manager (LCM) Configuration workflow tasks that model business functions, including Lifecycle Requests (Role or Entitlement), Lifecycle Events (Joiner, Mover, or Leaver), and LCM Workflow Details (Workflows and Subprocesses) + Solid understanding of the SailPoint object model, rules, and policies + Experience with both lifecycle manager (LCM) and compliance manager (CM) modules + Knowledge of Active Directory, LDAP, Workday, and cloud platforms (GCP, MS Entra ID) is required + Proven track record of successful IAM implementations including large scale enterprise deployments. + Experience working within regulatory standards and requirements such as, SOX, HIPAA, GDPR etc. is desired. **Anticipated salary range:** $94,900 - $135,600 **Bonus eligible:** No **Benefits:** Cardinal Health offers a wide variety of benefits and programs to support health and well-being. + Medical, dental and vision coverage + Paid time off plan + Health savings account (HSA) + 401k savings plan + Access to wages before pay day with my FlexPay + Flexible spending accounts (FSAs) + Short- and long-term disability coverage + Work-Life resources + Paid parental leave + Healthy lifestyle programs **Application window anticipated to close:** 12/20/2025 *if interested in opportunity, please submit application as soon as possible. The salary range listed is an estimate. Pay at Cardinal Health is determined by multiple factors including, but not limited to, a candidate's geographical location, relevant education, experience and skills and an evaluation of internal pay equity. _Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply._ _Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal_ _Opportunity/Affirmative_ _Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law._ _To read and review this privacy notice click_ here (***************************************************************************************************************************
    $94.9k-135.6k yearly 51d ago
  • Facility Security Officer & Information Systems Security Officer (Onsite)

    RTX Corporation

    Security engineer job in North Berwick, ME

    Country: United States of America Onsite U.S. Citizen, U.S. Person, or Immigration Status Requirements: Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance Security Clearance: DoD Clearance: Secret Pratt & Whitney is working to once again transform the future of flight-designing, building and servicing engines unlike any the world has ever seen. And because transformation begins from within, we're seeking the people to drive it. So, calling all curious. Come ready to explore and you'll find a place where your talent takes flight-beyond the borders of title, a country or your comfort zone. Bring your passion and commitment and we'll welcome you into a tight-knit team that takes our mission personally. Channel your drive to make a difference into shaping an organization and an industry that's evolving fast to the future. At Pratt & Whitney, the difference you make is on display every day. Just look up. Are you ready to go beyond? What You Will Do: Support Pratt & Whitney's Government Security Compliance team as the Facility Security Officer (FSO) / Information Systems Security Officer (ISSO) for the North Berwick, ME facility. This critical leadership role ensures compliance with the National Industrial Security Program (NISP), NISP Operating Manual (NISPOM), Defense Counterintelligence and Security Agency (DCSA) standards, and other applicable government regulations. The FSO/ISSO will oversee security operations for a cleared facility, ensuring the protection of classified information, systems, and personnel while fostering a culture of security excellence. Key Responsibilities: The FSO/ISSO will report directly to the Pratt & Whitney Associate Director, Corporate Facility Security Officer, and will be responsible for the following: * Leadership and Compliance: * Lead the formulation, establishment, and execution of local collateral security policies, procedures, and protocols to ensure compliance with NISP, DAAPM, ICDs, and other governing regulations. * Serve as the primary interface with internal and external stakeholders, including government agencies, subcontractors, and P&W leadership. * Security Program Oversight: * Manage the facility's classified holdings, maintain CAGE code facility clearance, and process changes in conditions. * Conduct and oversee security program reviews, including DCSA inspections, self-inspections, and formal audits. * Investigate and report security incidents/violations in collaboration with the Corporate FSO and Cognizant Security Authority. * Insider Threat Program: * Serve as a key member of the Insider Threat Management Council and liaise with the Corporate Insider Threat Program Senior Official (ITPSO). * Provide North Berwick leadership and guidance on Insider Threat Program activities and initiatives. * Information Systems Security: * Collaborate with the Information Systems Security Manager (ISSM) to ensure the operational security posture of information systems. * Manage user account requests, monitor user activity, and analyze audit records to identify and address anomalies. * Support incident response activities in the event of security violations or breaches. * Stakeholder Engagement: * Foster effective communication and collaboration with government customers, associated contractors, subcontractors, P&W teams, and North Berwick senior leadership. * Represent the GSC team as a project manager on select core projects and initiatives. * Training and Development: * Attend technical and security training to maintain expertise in security management, operating systems, and networking. * Provide guidance and training to facility staff on security responsibilities and best practices. * Serve as the Government Security Compliance Data Transfer Agent program focal: * Provide leadership and oversight for the Data Transfer Agent (DTA) program, ensuring compliance with regulatory and customer requirements. * Serve as the primary point of contact for customers regarding DTA program compliance and functionality. * Collaborate with internal stakeholders to maintain and enhance program effectiveness and security. * Develop and implement best practices, policies, and procedures for secure and efficient data transfer. * Monitor program performance and drive continuous improvement to meet evolving security and customer needs. * Other Duties: * Perform additional tasks as directed by the Corporate Facility Security Officer. * Coordinate and support the North Berwick Security Staff as directed. Qualifications You Must Have: * Advanced degree and 5+ years of experience in industrial security, cybersecurity, government compliance, or government regulated industry; OR Bachelor's degree and 8+ years of relevant industry experience; OR an Associate's degree and 10+ years of relevant industry experience. We will also consider high school diploma, technical or military training, or recognized industry certifications in combination with 12+ years or relevant industry experience. * 1+ Year of hands-on experience supporting administering and/or maintaining computing systems, networks and/or software * Active U.S. government issued Secret level security clearance required plus ability to obtain and maintain a Top-Secret level security clearance. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance. * Must be able to obtain industry recognized Cybersecurity certification within 12 months of hire (i.e. Security + CE) Qualifications You Prefer: * Strong understanding of the NISPOM, DAAPM, ICDs, and other security regulations. * Experience with DISS, NISS, SIMS, and other DCSA related databases. * Proficiency in managing classified information systems and working with DCSA inspections. * Cybersecurity certification (i.e. Security + CE). * Facility Security Officer (FSO) certification. * Information Systems Security Officer (ISSO) certification. * Proven leadership experience, preferably within a defense, aerospace, or government environment. * Experience with Insider Threat Programs and related compliance activities. * Strong project management skills and the ability to manage multiple priorities effectively. What is my Role Type? In addition to transforming the future of flight, we are also transforming how and where we work. We've introduced role types to help you understand how you will operate in our blended work environment. This role is: * Onsite: Employees who are working in Onsite roles will work primarily onsite. This includes all production and maintenance workers, as they are essential to the development of our engines. Candidates will learn more about role type and current site status throughout the recruiting process. For onsite and hybrid roles, commuting to and from the assigned site is the employee's personal responsibility. Learn more & apply today! As part of our commitment to maintaining a secure hiring process, candidates may be asked to attend select steps of the interview process in-person at one of our office locations, regardless of whether the role is designated as on-site, hybrid or remote. The salary range for this role is 101,000 USD - 203,000 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate's work experience, location, education/training, and key skills. Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement. Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company's performance. This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply. RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window. RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans' Readjustment Assistance Act. Privacy Policy and Terms: Click on this link to read the Policy and Terms
    $71k-95k yearly est. Auto-Apply 24d ago
  • Manager, Information Security Policy and Controls Governance

    UNUM Group 4.4company rating

    Security engineer job in Portland, ME

    Our Fortune 500 company is driving a digital transformation and looking for forward-thinking innovators to disrupt how our industry thinks about and uses technology. As one of the world's leading employee benefits providers, we help millions of people gain affordable access to benefits that help them protect their families, their finances and their futures. Are you an asker of questions, a solver of problems, and a challenger of the status quo? Our mission is to provide a differentiated customer experience and exceed the expectations people have of technology at any company - not just insurers. We are seeking individuals to join our team of talented IT professionals who share never-ending passion and an unwavering focus on our customer experience. Team members comfortable working in an agile, fast-paced, and delivery-focused environment thrive in our environment where we value an entrepreneurial spirit and those who challenge the status-quo. Unum is changing, and we're excited about what's next. Join us. General Summary: The Manager - Information Security Policy and Controls Governance is responsible for strategic enhancement and day-to-day operation of key governance, risk, and compliance capabilities, including policy and standards governance, enterprise and application-level risk assessments, and controls management and attestation programs. This role will oversee the full lifecycle of governing documents, manage policy exceptions, coordinate external and regulatory assessments, and ensure strong alignment between security controls and regulatory requirements. The manager will also drive consistent, timely issues management across all domains. This leader will partner closely with stakeholders across the organization to mature processes, strengthen compliance posture, and ensure effective, repeatable execution of GRC activities. They will manage a small to mid-size team of IT security and risk management professionals. Job Specifications * Bachelors degree in computer science, or relevant technical experience * Has 5+ years experience in an IT Risk Management field, or equivalent relevant work experience * Has a security technology background with strong knowledge of relevant technical security disciplines * Exhibits courage by taking smart risks and encouraging others to do so; empowers innovative approaches by motivating others to be proactive and resourceful * Able to effectively coach, mentor, identify, and address skills needs and gaps * Proficient in methods and techniques for running effective meetings and for understanding and influencing the roles played by participants * Displays good interpersonal skills at all levels of contact and in a wide variety of situations, able to listen and influence, and to relate to customers in their own language * Demonstrates the ability to champion change and support teams through change. * Demonstrates the ability to think critically, challenge conventional thinking and generate and apply unique business insight to create competitive advantage for the organization * Has solid knowledge of regulations, including, GLPA, HIPAA, GDPR, CCPA, and other cyber security regulatory compliance requirements and related programs * Has in-depth knowledge of security and control frameworks such as the NIST Cyber Security Framework, NIST SP 800-53, ISO 17799/27001, CobIT, and ITIL * CRISC, CISSP, CISM, CISA, and other security related certifications are a plus Principal Duties and Responsibilities * Oversees and evaluates the delivery and effectiveness of the organizations policy governance, risk assessments, control attestation, and issues management capabilities, taking action to address performance or quality gaps as needed. * Ensures the team maintains a well‑defined, risk‑aligned backlog of work that advances program maturity and meets regulatory, audit, and business needs. * Guides team members in prioritizing assessments, policy lifecycle activities, and control-related work based on risk, business value, and regulatory timelines. * Proactively removes obstacles and operational roadblocks that hinder timely completion of assessments, attestations, and governance processes. * Partners with business and technology stakeholders to translate security, compliance, and risk management objectives into actionable work items. * Ensures best‑practice execution, including structured assessment methodologies, clear control documentation, consistent issue tracking, adherence to policy standards, and high‑quality evidence collection. * Encourages creativity and continuous improvement in maturing governance, assessment, and control processes; fosters a culture of innovation within the team. * Uses operational metrics, assessment cycle data, and workflow insights to understand team performance and drive process efficiency. * Partners with leadership to ensure strong talent is in place to support the organization's governance, risk and compliance obligations. * Mentors, coaches, and motivates team members to elevate their GRC expertise, business partnership skills, and overall performance. * Identifies skill gaps related to risk frameworks, regulatory requirements, control design, and assessment techniques, ensuring development plans address these needs. * Promotes cross‑training and shared ownership of GRC functions to reduce single‑points‑of‑failure and increase team resilience. * While accountable for the team's output, actively cultivates a self‑organizing, autonomous, and collaborative team that consistently demonstrates accountability and continuous improvement. * Conducts regular 1:1s and development discussions to monitor progress, reinforce strengths, and close skill gaps. * Collaborates with peers to evaluate the effectiveness of resourcing models, proposing enhancements to better support team operations. * Maintains a strong understanding of emerging regulatory trends, risk frameworks (e.g., NIST CSF, HIPAA, SOC, ISO), and control expectations to inform program improvements. * Reinforces disciplined prioritization by ensuring the team focuses on the highest‑value, highest‑risk activities and commitments. * Designs and operates GRC processes with partner teams' knowledge and needs in mind, ensuring risk governance activities are clear, intuitive, and easy to complete. #LI-TO1 #LI-MULTI IN4 Our company is built on helping individuals and families, and this starts with our employees. We want employees to maintain a positive balance, which is why we provide access to the benefits and resources they need to invest in themselves. From our onsite fitness facilities and generous paid time off to employee professional development programs, we are committed to helping employees live and work their best - both inside and outside the office. Unum is an equal opportunity employer, considering all qualified applicants and employees for hiring, placement, and advancement, without regard to a person's race, color, religion, national origin, age, genetic information, military status, gender, sexual orientation, gender identity or expression, disability, or protected veteran status. The base salary range for applicants for this position is listed below. Unless actual salary is indicated above in the job description, actual pay will be based on skill, geographical location and experience. $89,400.00-$183,500.00 Additionally, Unum offers a portfolio of benefits and rewards that are competitive and comprehensive including healthcare benefits (health, vision, dental), insurance benefits (short & long-term disability), performance-based incentive plans, paid time off, and a 401(k) retirement plan with an employer match up to 5% and an additional 4.5% contribution whether you contribute to the plan or not. All benefits are subject to the terms and conditions of individual Plans. Company: Unum
    $89.4k-183.5k yearly Auto-Apply 4d ago

Learn more about security engineer jobs

Do you work as a security engineer?

What are the top employers for security engineer in ME?

Top 9 Security Engineer companies in ME

  1. Oracle

  2. Connectivity Point Design & Installation

  3. Meta

  4. Neko Health AB

  5. Concentrix

  6. Trustmark

  7. Coinbase

  8. ZOOM+Care

  9. Nelnet

Job type you want
Full Time
Part Time
Internship
Temporary

Browse security engineer jobs in maine by city

All security engineer jobs

Jobs in Maine