Job Details:Job Description:
Our Government Information Techology and Security (GITS) Team is looking for a talented and motivated individual with strong technical skills and the ability to rapidly learn new technologies. We are growing our Hybrid Cloud solution suite to meet US Government requirements for data safeguarding.
Information SecurityEngineers within GITS are actively involved in the following:
Identifies, develops, plans, implements, and supports enterprise security systems using Agile methodologies and DevOps principles to improve and grow our secure solutions to enhance Intel Federal's capabilities with a constant focus on security.
Creates solutions in partnership with enterprise architecture to design security measures (from infrastructure to software) that safeguard sensitive data, protect confidentiality and availability, and enable compliance with security policies and regulatory requirements for the enterprise and USG regulations and standards.
Partners with system engineers, network engineers, database administrators, and information security personnel in support, integration, development, and lifecycle management.
Develops and validates functional requirements and identifies gaps or risks to meet business and security outcomes.
Reviews health measures for various functional performance components of platform, applications, controls, and appliances and supports key security systems, responds to security events, and troubleshoots and proactively discovers security issues across the enterprise.
Validates security controls are working as designed (validation and/or efficacy) to ensure effective security measures.
Develops new and/or updates existing controls that limit the risk exposure for the company and optimizes security system performance.
Researching new security and information technology trends in enterprise applications, networks, and systems to understand and drive strategic plans, forward engineering, upgrades, and changes while influencing vendors to drive bug resolution, product feature enhancement, and key security improvements.
Works to identify, design, test, document, and implement internal process improvements such as automating manual processes, optimization of data delivery, elimination of technical debt, and support/administration of key security control systems.
Supports lifecycle management of systems, software, and infrastructure.
Behavioral Traits
Passion for Information Security.
Customer service and stakeholder management skills, including experience in setting and managing user and stakeholder expectations is a must in this role. We partner closely with the Intel Federal business teams to ensure we can prioritize and deliver key IT solutions to the business.
Strong interpersonal, analytical, problem solving, negotiating, influencing, facilitation, organizational, prioritization, decision making and conflict resolution skills.
Strong team player who works both independently and collaboratively with peers and teams.
Qualifications:
Minimum qualifications are required to be initially considered for this position. Preferred qualifications are in addition to the minimum requirements and are considered a plus factor in identifying top candidates. Requirements listed would be obtained through a combination of industry relevant job experience, internship experiences and / or schoolwork/classes/research.
Minimum Qualifications
U.S. Citizenship.
Bachelor's degree in computer science, Information Security, or related Information Technology field with 3+ years of relevant experience.
3+ years of experience in Information Security.
1+ year of experience working in an environment that supports Controlled Unclassified Information (CUI) or International Traffic in Arms Regulations (ITAR) data.
3+ years of experience with script writing for automation and integration (e.g. PowerShell, .Net, Python, etc.)
1+ year of Identity Access Management experience. (e.g. Entra ID or other IAM tools)
1+ year Azure or AWS Hosted Cloud environment experience.
Preferred Qualifications:
Track record of excellent customer Service and Support skills - Independently troubleshoots for successful problem resolution.
MS Azure Government Cloud and Amazon Web Services GovCloud solutions deployment experience desired.
1+ year of experience working with NIST Special Publication 800-171 and/or 800-53 compliance standards.
1+ year of experience working with NIST 800- 171A readiness assessment procedures.
Willingness to quickly ramp up on online data solutions - quickly applying trusted technologies across on-premises, cloud, and hybrid cloud environments.
Experience using Privilege Access Management (PAM) or similar tools.
Windows and Linux OS and application operations support, administration, security configuration and monitoring.
Security certifications are an advantage (CISSP, CISM, CEH, CCNA, etc.)
Experience working with applications such as SCOM, BigFix, Azure Security Center and Antivirus configuration.
Experience with Datacenter management operations such as servers/hardware handling, installation, configuration, decom and general support.
Experience with Agile Scrum and/or Kanban project management methodologies.
Scaled Scrum, SAFe, or other scaled Agile framework approaches to manage operations, engineering and development workloads.
Job Type:Experienced HireShift:Shift 1 (United States of America) Primary Location: US, Oregon, HillsboroAdditional Locations:US, Arizona, Phoenix, US, California, Folsom, US, Virginia, FairfaxBusiness group:Posting Statement:All qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance.Position of TrustN/ABenefits
We offer a total compensation package that ranks among the best in the industry. It consists of competitive pay, stock bonuses, and benefit programs which include health, retirement, and vacation. Find out more about the benefits of working at Intel.
Annual Salary Range for jobs which could be performed in the US: $105,300.00-206,510.00 USDThe range displayed on this job posting reflects the minimum and maximum target compensation for the position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific compensation range for your preferred location during the hiring process.
Work Model for this Role
This role will require an on-site presence. * Job posting details (such as work model, location or time type) are subject to change.
$105.3k-206.5k yearly Auto-Apply 60d+ ago
Looking for a job?
Let Zippia find it for you.
Security Engineer
Krg Technology 4.0
Security engineer job in Hillsboro, OR
Rajesh
KRG Technologies Inc.
25000 | Avenue Stanford | Suite 253 | Valencia, CA 91355
rajesh.b at krgtech.com / ************ EXT- 514
Job Description :
General Cryptography (symmetric algorithms like AES, DES and asymmetric or public crypto like RSA, EC)
Experience of open security suites like Openssl, embed TLS, Elgamal or other opensource secure communication packages which export general crypto api's (e.g. Open SSL, Elgamal)
Public key and private key concepts
Programming in ‘C'
Preferred:
Basic kernel driver development concepts, linux Userspace
Desirable :
DRM's, NOCS, Nagra
Additional Information
All your information will be kept confidential according to EEO guidelines.
$95k-128k yearly est. 60d+ ago
Substation Physical Engineer
Leidos 4.7
Security engineer job in Portland, OR
**Looking for an opportunity to make an impact?** **At Leidos,** we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers' success. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business.
**Your greatest work is ahead!**
We are looking for a **Substation Physical Engineer** to join our team. As an Career Substation Physical Engineer, candidates will have the opportunity to work on projects for electric utilities at voltages from 12kV up to 500kV. This is an exciting and growing field in the power systems industry and allows candidates to get exposure to how the power generation such as that of renewable energy ties into the electric system. Candidates will be expected to use knowledge of digital logic design, AC and DC circuits to design substation electrical projects.
***Hybrid Schedule Available!**
Successful candidates can look forward to a fast paced, diverse work environment and flexible work hours/work arrangements as well as managers who will encourage **career development and growth including:**
+ Engineer in Training Certificate (EIT).
+ Professional Engineer License (PE).
+ Project Management Professional (PMP).
+ Technical & Non-Technical Training Opportunities.
+ Leadership Opportunities.
+ Mentorship & Training Opportunities.
+ Opportunity to Lead, Grow, and Inspire a Dynamic Team
**Are you ready to make an impact? Begin your journey of a flourishing and meaningful career, share your resume with us today!**
**The Challenge:**
+ Experience in executing substation physical projects
+ Excellent communication skills and ability to interact with the internal team and clients to meet project needs.
+ Performing quality control checks on substation physical design projects.
+ Expected to read and design substation physical drawings such as one-line drawings, three-line drawings, plan-section drawings, foundation, grounding drawings.
+ Create and check bill of materials for substation physical
+ Expected to attend site visit at customer location
Successful candidates must comply with quality control and safe work practices and maintain compliance with project scope, schedule, and budget. This position will be a member of a design team comprised of engineers, designers, and CAD technicians and will work with client standards to implement design.
**What Sets You Apart:**
+ **Mid-Level** : Bachelor's degree in electrical engineering, or related degree with two (2+) or more years of related substation physical design experience.
+ **Senior-Level** : Bachelor's degree in electrical engineering, or related degree with four (4+) or more years of related substation physical design experience.
+ **Lead -Level:** Bachelor's degree in electrical engineering, or related degree with eight (8+) or more years of related substation physical design experience.
+ Experience with grounding studies/lightning protection and lighting studies.
+ Demonstrate Excellent communication skills and ability to interact with the internal team and clients to meet project needs.
+ Ability to meet deadlines under pressure situations.
+ Collaborator and leader who can work effectively in team environment.
+ Self-starter who works independently with minimal direction.
+ Strong analytical skills and proven problem solver in both team and independent environments.
+ High level of computer competency.
+ Willingness to travel to project / client sites and Portland, OR office as needed.
**You Might Also have:**
+ US Citizen and able to pass a DOE Background
+ Engineer Intern ("EI" or "EIT") professional certification.
+ Professional Engineer ("PE") License.
+ Working knowledge of protection and control design
+ Experience with bus calculation
+ Experience with WinIGS or CDEGS
+ Master's degree in related field.
**WHAT WE DO**
Leidos is a trusted and technology-focused solutions provider. Utilities and mobile operators rely on our Power Delivery Services Team for reliable power and telecommunication expertise, as reflected through our work with more than 50 investor-owned utilities, more than 160municipals/cooperatives,as well as a growing number of mobile operators, local utility providers and private developers. In addition to providing engineering and project management services, Leidos works with an established group of industry-leading construction partners delivering meaningful Energy Delivery Solutions. Our recognition as an industry leader is confirmed by the latest national rankings by Engineering News-Record (ENR) ranking Leidos within the Top 10 T&D Firms, and Top 10 Power Firms. To explore and learn more, click here (***************************************************** !
**At Leidos,** we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers' success. We empower our teams, contribute to our communities, and operate sustainably. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business.
**We take care of our employees.** Leidos seeks the best and the brightest, and in return, we invest in you, with an eye on your future, through career advancement, growth opportunities and continuous improvement via mentoring, formal and informal project management training and assistance with obtaining pertinent certifications. We challenge you to help solve some of the world's toughest problems, and reward you (************************************ with a welcoming culture that recognizes the importance of a strong work/life balance, as well as competitive compensation and benefits (******************************************** . We believe that diversity and inclusion make us all better and offer the chance to have fun and make a difference.
PowerDelivery
PDSSUBSTATION
If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.
**Original Posting:**
September 22, 2025
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.
**Pay Range:**
Pay Range $87,100.00 - $157,450.00
The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.
**About Leidos**
Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit ************** .
**Pay and Benefits**
Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at **************/careers/pay-benefits .
**Securing Your Data**
Beware of fake employment opportunities using Leidos' name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system - never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at ***************************** .
If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission (******************************* .
**Commitment to Non-Discrimination**
All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.
REQNUMBER: R-00167217
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status. Leidos will consider qualified applicants with criminal histories for employment in accordance with relevant Laws. Leidos is an equal opportunity employer/disability/vet.
$87.1k-157.5k yearly Easy Apply 60d+ ago
Security Systems Administrator
Perspecta 4.5
Security engineer job in Portland, OR
Responsibilities
is Contingent Upon Award**
Peraton seeks innovative professionals who thrive in mission-critical environments and are passionate about protecting our national critical infrastructure. This is your chance to make an impact on one of the nation's vital organizations, working alongside leaders in cybersecurity engineering, operations, forensics, threat analysis, data science, and systems integration.
Join Peraton in supporting a large critical infrastructure operator to defend its corporate and operations networks from nation-state attacks, ensure the confidentiality, integrity, and availability of its systems and operations infrastructure, and comply with federal and industry cybersecurity regulation. As a security systems administrator in a state-of-the-art 24-hour Cybersecurity Operations Center (CSOC), you will be part of a dynamic team responsible for securing and maintaining enterprise systems in accordance with established security standards and compliance requirements. This role ensures system availability while enforcing security controls, hardening standards, and compliance requirements. The systems administrator will maintain smooth operation of multi-user CSOC computer systems, including coordination with network engineers. You will monitor and manage system resources, including CPU usage, disk usage, and response times to maintain operating efficiency and perform systems security administration functions, including creating user profiles and accounts. Other duties may include setting up administrator accounts, maintaining system documentation, tuning system performance, installing system wide software and allocating mass storage space and performing installation and providing backup recovery.
Primary Responsibilities:
The Security Systems Administrator will be responsible for:
In accordance with security baselines, administer, configure, harden, and backup Windows and Linux security applications systems used in the CSOC such as Splunk, Axonius, Palo Alto XSOAR
Implement and maintain security controls, access controls, and system configurations
Monitor system logs, alerts, and security events; investigate and escalate issues as needed
Apply system updates, patches, and configuration changes in a timely and secure manner
Manage user accounts, permissions, and authentication mechanisms
Maintain system documentation, security configurations, operational procedures, and backups
Collaborate with CSOC, infrastructure, and compliance teams
Prepare shift reports and brief CSOC Manager, infrastructure stakeholders and corporate management on systems' status
Stay abreast of the latest cyber threats and relevant system updates
Additional Responsibilities:
Security hardening and configuration
Support incident response by collecting logs, artifacts, and system data
Perform vulnerability scanning, assess findings, and support remediation efforts
Support audits and compliance activities by providing evidence and system details
Qualifications
2 years with BS/BA; 0 years with MS/MA; 6 years with no degree
Required:
U.S. Citizenship Required
Must have the ability to obtain / maintain a DOE L Level or DOE Secret clearance
Degree in computer science, engineering, information technology, or related field
2 years of experience with BS/BA; 0 years with MS/MA
Experience in IT infrastructure and cybersecurity
Understanding of industry cybersecurity standards such as FISMA, NIST 800 series, and regulatory compliance requirements
Strong analytical and problem-solving skills to troubleshoot and provide reactive maintenance for system-level issues
Understanding of TCP/UDP packet capture and analysis
Excellent verbal and written communications skills
Ability to communicate technical issues to CSOC team members and management
Must be available for occasional on-call or after-hours flexibility
Desired:
Hold technical and/or cybersecurity certification such as GIAC GSEC, GIAC GCIH, CISA SSCP, CompTIA Security+
A master's degree in computer science, engineering, cybersecurity, information technology, or related field
Basic understanding of computer networking and routing principles
Peraton Overview
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure.
Target Salary Range $66,000 - $106,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. EEO EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.
Our Mission At Palo Alto Networks everything starts and ends with our mission: Being the cybersecurity partner of choice, protecting our digital way of life. Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we're looking for innovators who are as committed to shaping the future of cybersecurity as we are.
Who We Are
We take our mission of protecting the digital way of life seriously. We are relentless in protecting our customers and we believe that the unique ideas of every member of our team contributes to our collective success. Our values were crowdsourced by employees and are brought to life through each of us everyday - from disruptive innovation and collaboration, to execution. From showing up for each other with integrity to creating an environment where we all feel included.
As a member of our team, you will be shaping the future of cybersecurity. We work fast, value ongoing learning, and we respect each employee as a unique individual. Knowing we all have different needs, our development and personal wellbeing programs are designed to give you choice in how you are supported. This includes our FLEXBenefits wellbeing spending account with over 1,000 eligible items selected by employees, our mental and financial health resources, and our personalized learning opportunities - just to name a few!
Job Description
Your Career
As a Domain Consultant for SOC Transformation you will be the expert for our Cortex portfolio, a Next-Gen AI-powered security operations platform. You will play a key role in defining technical solutions that secure a customer's key business imperatives. You evangelize our industry leading solutions in Security Intelligence and Automation, XDR, Attack Surface Management, SOAR and Incident Response that establish Palo Alto Networks as a customer's cybersecurity partner of choice.
Your Impact
* Collaborate with account teams to recommend and develop customer solutions within your assigned specialization area
* Present to customers as our expert at all levels in the customer hierarchy, from practitioner to senior leadership
* As the main technical point of contact for Cortex, you will assist and collaborate to respond effectively to RFIs/RFPs.
* Lead and support customer demonstrations that showcase our unique value proposition
* Scope and lead Proof of Value (PoV) projects for prospective customers and partners based on best practices to ensure technical win in your assigned opportunities
* Drive high technical validation and PoV win rates within your assigned specialization area
* Responsible for discussing and highlighting product alignment with customer requirements and differentiation
* Architect solutions that will help our customers strengthen and simplify their security posture
* Document High-Level Design and Key Use Cases to ensure proper implementation and value realization of Palo Alto Networks Solutions
* Help our customers build and develop further their services around Cortex solutions
* Lead conversations about industry trends and emerging changes to the security landscape
* Discuss, with credibility, competitive offers in the marketplace and position ours as the best alternative
* Position Palo Alto Networks or Partner delivered services as appropriate to ensure proper implementation and value realization of Palo Alto Networks solutions
* Initiate projects to improve individual team's performance
* Implement organizational policies & help others adopt
* Act as a conduit for customer feedback to Product Management, Technical Marketing, competitor intelligence, and R&D to create requirements and deliver product features for our customers
Qualifications
Your Experience
* 6+ years experience in Security Operations or pre-sales/sales engineering within SIEM, SOAR, SOC, and/or XDR/EDR environments
* IBM QRadar design, deployment, and/or pre-sales experience highly desirable
* Experience in working with customers, demonstrating problem-solving skills and a can-do attitude
* Solid understanding of Security Operations Center processes
* Advanced knowledge of SIEM and/or SOAR solutions
* Scripting experience is a plus - Python preferred
* This is a field sales position where travel requirements may be required to support in person customer meetings, please discuss with the recruiter on the specifics for this position.
* Proficient in English
Additional Information
The Team
Our Domain Consultant team members work hand-in-hand with organizations around the world to keep their digital environments protected. We educate, inspire,and empower our potential clients in their journey to security.
You are empowered with unmatched systems and tools and a team built on joint success. You won't find someone at Palo Alto Networks that isn't committed to your success - with everyone pitching in to assist when it comes to solutions selling, learning, and development. Our Solutions Consulting community is driven by the mission to be our customers' cybersecurity partner of choice, protecting their digital way of life.
Compensation Disclosure
The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/commissioned roles) is expected to be between $198,000 - $273,000/YR. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here.
Our Commitment
We're problem solvers that take risks and challenge cybersecurity's status quo. It's simple: we can't accomplish our mission without diverse teams innovating, together.
We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at accommodations@paloaltonetworks.com.
Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.
All your information will be kept confidential according to EEO guidelines.
Our Commitment
We're problem solvers that take risks and challenge cybersecurity's status quo. It's simple: we can't accomplish our mission without diverse teams innovating, together.
We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at accommodations@paloaltonetworks.com.
Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.
All your information will be kept confidential according to EEO guidelines.
The SecurityEngineer will focus on hardening and isolating K3s clusters to minimize blast radius in the event of compromise. This includes enforcing Linux security modules (SELinux, AppArmor), leveraging TPM for secure boot and attestation, implementing least privilege across nodes and workloads, and ensuring multi-tenant isolation within hybrid Kubernetes environments (x86, ARM, accelerators).
Responsibilities
Security Architecture & Policy Enforcement
Design and implement security-first cluster configurations for K3s nodes.
Enforce mandatory access control (MAC) using SELinux and AppArmor profiles for pods and system services.
Integrate TPM-based attestation and secure boot for cluster nodes to ensure trust in hardware and OS integrity.
Establish node, pod, and namespace isolation strategies to reduce lateral movement risk.
Harden cluster components (API server, etcd, kubelet) following CIS and NSA Kubernetes security benchmarks.
Blast Radius Reduction
Define and enforce workload sandboxing strategies (seccomp, AppArmor, SELinux contexts, gVisor/Kata if applicable).
Configure minimal privilege policies (RBAC, PodSecurityStandards, NetworkPolicies) to ensure least-privilege execution.
Implement namespace, node pool, and hardware partitioning to confine workloads and protect sensitive applications.
Apply resource quotas, limits, and scheduling constraints to contain denial-of-service blast radius.
Integration with Identity & Secrets Management
Work with Security team to ensure strong identity, authentication, and authorization models.
Integrate TPM-backed secrets storage and HSM/KMS systems for cryptographic operations.
Ensure secure distribution of workload secrets with solutions like SealedSecrets, HashiCorp Vault, or SOPS.
Runtime & Supply Chain Security
Enforce image signing and verification with cosign or Notary.
Integrate SBOM scanning and vulnerability management into CI/CD pipelines.
Monitor workloads for runtime anomalies (Falco, Cilium Tetragon, or equivalent).
Apply kernel hardening measures (seccomp-bpf, kernel lockdown, IMA/EVM with TPM).
Monitoring & Incident Response
Build observability hooks for security events (audit logs, syscall monitoring, TPM attestations).
Define blast radius response runbooks for compromised pods or nodes.
Work with SRE and Security teams to test chaos/security drills simulating breaches.
Deliverables
K3s cluster baseline hardened with SELinux and AppArmor profiles.
TPM-enabled secure boot and node attestation pipeline.
Enforced PodSecurityStandards and workload sandboxing (seccomp, gVisor/Kata optional).
Documentation of isolation strategies (namespaces, node pools, network segmentation).
Audit-ready evidence of compliance with CIS/NSA Kubernetes security benchmarks.
Security runbooks for containment and blast radius reduction.
Required Skills & Experience
Strong knowledge of K3s/Kubernetes internals, especially security features.
Hands-on experience with SELinux, AppArmor, seccomp, and Linux capabilities.
Experience with TPM (Trusted Platform Module) for secure boot and attestation.
Deep understanding of Pod Security (PodSecurityPolicies/Standards, OPA/Gatekeeper/Kyverno).
Experience implementing RBAC, NetworkPolicies, and workload isolation at scale.
Proficiency in Linux kernel security mechanisms and debugging.
Familiarity with container runtimes (containerd, CRI-O, gVisor, Kata) and their security implications.
Strong background in incident response, forensic data collection, and audit logging in Kubernetes.
Nice to Have
Contributions to Kubernetes SIG-Security or open-source security tooling.
Experience with supply chain security frameworks (SLSA, NIST 800-190).
Familiarity with confidential computing (TEE/SGX/SEV) for workload isolation.
Hands-on with Cilium Tetragon, Falco, or other runtime security tools.
Knowledge of air-gapped deployments and hardened Linux distributions (e.g., Flatcar, Bottlerocket).
$86k-121k yearly est. Auto-Apply 55d ago
Meter Modernization Security Consultant
Mag Tech 4.6
Security engineer job in Portland, OR
Job Description Opportunity Description: Our Utilities Industry client is in the process of formulating a project team tasked with driving the clients continued customer meter infrastructure modernization strategy impacting a broad range of process, IT security, data collection, and core Enterprise Technology applications.
Role Description:
Among the various program requirements, specifically the client desires to update its current gas meter data collection solutions. This requires operational modernization based on a comprehensive Meter Strategy that is designed to assist in the alignment of the wide variety of business and technological needs that must be addressed over the coming years. The output of this strategic recommendation requires a series of diverse and complex projects that will have several interdependencies and will require integrated technical designs and impact many business stakeholders. Timelines are based on current understanding of project requirements and are subject to change. Scope The scope includes consulting on the project during the design and implementation phases as well as creating and updating documentation on the work performed. There are two distinct initial efforts: Onboarding of a new tool to ensure operational readiness and an upgrade of existing application impacting consumer gas meters.
Key Responsibilities:
Review new solutions using the NIST (National Institute of Standards and Technology) Cyber Security Framework (CSF) to ensure security risks are identified, documented, and dispositioned.
Work with vendors and the client Compliance Team to complete a Third-Party Information Security Assessment (TISA), which evaluates the security posture of the vendors.
Work with other project team members to integrate new solutions into the existing client environment following client's policies, standards, and guidelines and industry best security practices.
Consult on impacts of project efforts to TSA Security Directive Pipeline-2021-02D (SD-02D), and future revisions or superseding regulations, including potential integration and configuration of additional critical cyber systems to client's environment.
Consult on a wide range of security tools & technologies, specifically including Public Key Infrastructure (PKI).
Create as-built artifacts and standards.
Prepare and provide documentation and input for audits.
Attend and actively participate in validation sessions along with client business owners, Technical SMEs, PMs, and Change Management team members.
Work in collaboration with client technical SMEs (Subject Matter Experts) and Administrators, client Project Management, and Change Management team members during client working hours 8 AM - 5 PM PST Monday-Friday.
Attend routine stand ups. - Attend routine working sessions.
Provide and respond to frequent daily communications and status requests from stakeholders, PMs (Project Managers), and Change Managers
Weekly time tracking and approval.
Deliverables Documentation -Security Design Review Assessment and findings, including:
Vulnerability scans and associated remediations. Inventory, Architectural Diagram, Threat Model, System Security Authorization Plan (SSAP), Disaster Recovery (DR) and DR Test Plans,
Business Impact Assessment (BIA), Exception Requests (as needed), Plan of Action
and Milestones (POAM) (as needed). Third-Party Information Security Assessment (TISA) - Architectural Review Board (ARB) - Technical Review Board (TRB) - Change Management Review Board (CMRB) - Change Advisory Board (CAB) - Other documentation as required (e.g., for audits and inspections, updates to standards and procedures, etc.)
Assessment of products and implementation plans.
Assist with operationalization of chosen technologies (e.g., develop procedures), including a form factor and Operating System (OS) change for field users.
Consult with project team and other stakeholders, e.g., OT practitioners, the Cybersecurity and Compliance teams, Enterprise Architecture, Infrastructure, Network, etc. during development and implementation.
Key Skills and Qualifications:
8+ years of practical information security experience.
4+ years of Operational Technology (OT) experience.
Experience working in a regulated utility environment is a plus.
Knowledge of networking security concepts in a geographically dispersed environment.
Experience working in a cross functional team, with the ability to lead/drive the scope of work.
Experience with cyber security assessments.
Industry cybersecurity and/or technology certifications are a plus.
Demonstrated experience in working with a remote team.
Excellent interpersonal skills, including collaboration, facilitation, and negotiation.
Ability to lead work effort with little day to day supervision. Ability to work through ambiguity and escalate issues to maintain project momentum.
$79k-104k yearly est. 30d ago
Senior Security Engineer
Pacific Seafood 3.6
Security engineer job in Happy Valley, OR
At Pacific Seafood, we do more than just provide the world with the healthiest proteins on the planet. We are a family-owned, excellence-driven organization committed to being the brand of choice in the marketplace and the employer of choice in the community. We believe in servant leadership, investing in our team members' personal and professional growth, and rewarding performance. We live by the core values of our Diamond Philosophy: Teamwork, Productivity, Quality, and Excellence-which means consistently doing your best and always striving to do better.
Summary:
The Senior SecurityEngineer at Pacific Seafood is a key role in our information technology team supporting efforts to strengthen, enhance, and protect the security posture of our enterprise environment. This position involves leading security initiatives, monitoring and improving security controls, driving incident response and partnering across IT and business teams and is ideal for someone who is proactive, highly analytical, calm under pressure and passionate about building a security by design culture.
Key Responsibilities:
1. SecurityEngineering & Architecture:
Establish, maintain and implement enterprise security best practices, policies and hardening standards
Participate in architectural reviews and provide security requirements for new systems, applications, cloud resources and infrastructure
Integrate new security technologies into existing environments and ensure secure configuration of all systems
2. Threat Detection & Vulnerability Management:
Leverage and centralize all logging platforms
Conduct proactive threat hunting, log analysis and behavioral detection reviews
Perform vulnerability scanning, prioritization, and remediation planning with cross functional teams
3. Incident Response & Security Operations:
Oversee the incident response lifecycle including detection, containment, eradication and recovery
Develop incident response playbooks and runbooks, and post-incident review documentation
Support endpoint detection and response, antivirus tools, server/endpoint security controls
4. Network, Analysis & Security:
New Network Device Detection and Threat Determination
Device Anomalous Communication Detection and Remediation
Network segmentation strategy
Firewall Device and User Policy Determination
Other duties as assigned
Additional responsibilities may be assigned as deemed necessary to support the overall goals and objectives of the position.
What you bring to Pacific Seafood:
Required:
Bachelor's degree in Computer Science or equivalent professional experience
Minimum of five years of related experience in information security or infrastructure security
Strong experience with Active Directory, Azure Entra ID, MFA, and identity lifecycle management
Hands-on experience with endpoint and server security tools including EDR, anti-virus, and configuration baselines
Working knowledge of firewalls, enterprise networking, and network security policies
Experience with centralized logging solutions, SIEM tools, and vulnerability scanners
Ability to analyze technical and non-technical controls, identify gaps, and propose remediations
Experience conducting internal security audits, investigations, and compliance reviews
Strong communication, documentation, and problem-solving skills
Ability to travel as necessary; valid driver's license
Preferred:
Experience leading enterprise-wide security projects or architectural reviews
Palo Alto Security toolset experience (Strata, IoT, PanOS, Cortex XDR)
Experience with Microsoft Exchange, Microsoft Purview, and email security tools
Experience with privileged access management (PAM) systems
Threat hunting and SIEM rule development experience (Sentinel, LogRhythm, etc.)
Security certifications such as CISSP, GSEC, CEH, or equivalent
Total compensation:
At Pacific Seafood your base wage is only a portion of your overall compensation package. We invest in our Team Members through a comprehensive and attractive total rewards package, including but not limited to:
Health insurance benefits options, including medical, prescription, vision, dental, basic group life and short term disability.
Flexible spending accounts for health flex and dependent care expenses
401(k) Retirement Plan options with generous annual company profit sharing match
Paid time off for all regular FT team members, to include sick days, paid holidays, vacation and personal time
Employee Assistance Program- Confidential professional counseling, financial, and legal assistance provided at no charge to Team Members and immediate family members
Product purchase program
Pacific Seafood is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law.
$114k-157k yearly est. Auto-Apply 48d ago
Senior Security Engineer
Microsoft Corporation 4.8
Security engineer job in Hillsboro, OR
The Microsoft Offensive Research & SecurityEngineering (MORSE) team is looking for a learn-it-all engineer that will help secure Microsoft products and devices. The MORSE team is responsible for securing Microsoft's operating systems, including Windows, cloud computing platforms, and virtualization technologies. These solutions support the daily needs of over one billion customers worldwide. This team performs security design reviews, code reviews, and vulnerability research on key features of Windows and Azure to make sure they meet the highest possible security standards.
In this role, you will help a team of engineers tasked with building automation and tooling to streamline and scale detection of vulnerabilities. The ideal candidate will have hands-on experience with native code (C/C++), building security-focused developer-facing tools, a clear understanding of OS security fundamentals, solid computer science skills, and a passion for keeping Microsoft customers safe.
Responsibilities
* Equip Microsoft developers with powerful, easy-to-use security tools to catch security issues earlier
* Improve existing processes and tools to help us deliver our goal of ubiquitous fuzzing
* Collaborate with teams of security experts to understand their requirements and build tools to streamline or automate common tasks
* Devise new methods to systematically detect vulnerabilities at scale
Qualifications
Required
* Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 3+ years experience in security or related field OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years experience in security or related field OR equivalent experience.
Other Requirements:
Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings:
Microsoft Cloud Background Check:
This position will be required to pass the Microsoft Cloud Background Check upon hire/transfer and every two years thereafter.
Preferred
* Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 6+ years experience in security or related field OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 8+ years experience in security or related field OR equivalent experience.
* Public track record of relevant security research, especially around vulnerability discovery
* Experience exploiting bugs and bypassing security mitigations in Operating Systems
* Familiarity with Microsoft Windows architecture
* 5+ years of experience in a software engineering or security-related field
* 3+ years of software engineering in a systems language such as C, C++, or Rust
Penetration Testing IC4 - The typical base pay range for this role across the U.S. is USD $119,800 - $234,700 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $158,400 - $258,000 per year.
Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
****************************************************
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.
Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.
$158.4k-258k yearly 16d ago
Information Security Analyst I
Beneficial State Bank 3.2
Security engineer job in Portland, OR
TITLE: N/A JOB CODE: FLSA: Exempt SALARY GRADE: 7 CATEGORY: Full-time UNION REPRESENTATION: NA SCHEDULE: Hybrid SUPERVISORY ROLE Y/N: 11.2025 The Information Security Analyst I plays a critical role in safeguarding the organization's systems and information assets. This position supports the development and implementation of security strategies, tools, and guidelines to protect against unauthorized access, data breaches, and system disruptions.
Responsibilities include monitoring and responding to Information Security-related alerts, supporting audit and risk assessment activities, evaluating internal controls, and recommending improvements to enhance security posture.
The analyst assists in migrating non-compliant environments to meet regulatory standards and ensures adherence to data protection laws and banking industry compliance requirements. This role is foundational to maintaining the confidentiality, integrity, and availability of sensitive financial data and supporting the organization's overall cybersecurity framework.
ESSENTIAL DUTIES
Identity and Access Management
Support access provisioning, modification, and termination processes to ensure timely and secure access control.
Conduct administrator activity and user access reviews across IT systems, including privileged access audits and firewall/cloud app usage monitoring.
Maintain asset and access inventories, perform recurring audits of critical systems, and reconcile against endpoint and network tools.
Security Monitoring and Incident Response
Monitor and respond to alerts from SIEM, IDS, firewalls, and endpoint protection systems.
Conduct vulnerability scans, track remediation efforts, and facilitate related meetings.
Maintain readiness for incident response activation, including participation in tabletop exercises.
System Administration and Tool Management
Administration of cloud computing environments, conditional access, and guest provisioning following established best practices.
Manage software controls, browser extensions, and patching processes.
Administer security camera system and ensure system uptime.
Administer Mobile Device Management system.
Threat Intelligence and Continuous Improvement
Stay informed on emerging threats in the banking sector and contribute to threat intelligence reporting.
Research and test new security tools, controls, and AI applications to enhance the Bank's security posture.
Correctly identify true and false positives in alerting systems and tune these systems for continuous improvement.
Security Awareness and Training
Support phishing simulations and training campaigns, track completion, and report metrics to management.
Documentation and Reporting
Log findings, remediation efforts, and audit results in a structured ticketing system.
Assist with vendor management program administration and reporting.
Data Protection and Compliance
Ensure compliance with GLBA, FFIEC, and other applicable regulations through log retention, configuration management oversight, and DLP monitoring.
Administer data classification tools and respond to violations involving PII or sensitive data.
Audit VPN usage and test controls across email, endpoint, and network security platforms.
Completes mandatory compliance training in accordance with established deadlines.
The position performs duties specific to the position and other functions as assigned.
ROLE COMPETENCIES/SKILLS
Attention to Detail
Collaboration & Communication
Diversity & Inclusion
Execution & Ownership
Time Management
Compliance
Innovation
Systems Thinking
Data Analysis & Management
Information Security
Network Operations
Critical Thinking
Consulting
Analytical Thinking
ENVIRONMENT, PHYSICAL & MENTAL ACTIVITIES
The incumbent is in a non-confined office-type setting in which they are free to move about at will. It may include some minor annoyances such as noise, odors, drafts, etc. For Hybrid and Remote roles, work may also be performed away from BSB worksites depending on the position and requirements. For Hybrid/Remote work, employees are required to have an environment when working at home that has a dependable, high-speed internet connection and environment conducive to frequent phone or internet calls where private, confidential or other information is not visible, able to be overheard, or physically or electronically accessible to anyone else.
The incumbent in the course of performing this position spends time writing, typing, speaking, listening, lifting (up to 10 pounds), driving, carrying, seeing (such as close, color and peripheral vision, depth perception and adjusted focus), sitting, pulling, walking, standing, squatting, kneeling and reaching.
The incumbent for this position may operate any or all of the following: personal computer, cellular telephone, printer, fax, and other standard office equipment.
The incumbent in this position must be able to accommodate reading documents or instruments, detailed work, problem solving, customer contact, reasoning, math, language, presentations, verbal and written communication, analytical reasoning, stress, multiple concurrent tasks and constant interruptions.
The work environment characteristics, physical and mental demands described here are representative of those an employee encounters while performing the essential functions of this job.
Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
POSITION REQUIREMENTS
Minimum Qualifications
Bachelor's degree in Information Technology, Cybersecurity, or a related field, or equivalent combination of education and experience.
5 years of professional experience in IT support or related technical roles.
Foundational understanding of cybersecurity principles, including access control, endpoint protection, and network monitoring.
Familiarity with Microsoft 365, Active Directory, and basic system administration tasks.
Ability to conduct audits, manage tickets, and document findings accurately.
Strong analytical and troubleshooting skills.
Effective communication skills and ability to collaborate across departments.
Preferred Qualifications
Bachelor's degree in Information Technology, Cybersecurity, or a related field.
Experience with banking industry compliance standards (e.g., GLBA, FFIEC).
Hands-on experience with security tools such as SIEM, DLP, IDS/IPS, EDR, Email Filtering, and Firewalls.
Exposure to vulnerability management platforms and identity/access management processes.
Familiarity with Microsoft cloud services and Mobile Device Management.
Experience supporting or administering phishing simulations, security awareness programs, or similar efforts.
Knowledge of vendor management platforms and data classification tools.
Management reserves the right to change this position description at any time according to business needs. #LI_Hybrid
$111k-144k yearly est. 6d ago
PERS - Information Security Analysis
Perfecta
Security engineer job in Tigard, OR
Founded in 2017 Perfecta is a division and a wholly owned subsidiary of City National Security a well known and reputed company providing IT Consulting , Staffing and Security services throughout the United States. Perfecta brings a rich experience of over 12 years in providing fully scaled IT Consulting and Staffing & Recruiting services. Perfecta brings a successful track record of delivering value based quality professional solutions at economical price to its customers across the U.S. Perfecta has successfully executed various IT and Staffing projects with its government and commercial clients and has consistently provided quality services to its customers.
Job Description
Part I. General Information
Under this Statement of Work (SOW), the Contractor shall analyze, recommend, create working documentation, guidelines, policies, standards, instructional procedures, and conduct assessments to support the implementation of the following:
• PERS Information Security Awareness and Training Program
• PERS Information Security Program
• Reorganization and alignment of PERS Information Security policies, standards, and procedures
Part II. Work
The Contractor shall comply with OPERS contractual deliverable review and approval processes by working with OPERS Quality Assurance in utilizing the Quality Checkpoint process attached to this SOW as Attachment 1. Quality Checkpoint is a Quality Assurance process to verify that major deliverables in the project have been reviewed and approved by their respective stakeholders.
PERS Information Security Awareness and Training Program
Contractor shall assist OPERS' CISO in the creation, documentation, and implementation of a structured Information Security Awareness and Training Program. Contractor shall work with OPERS to plan, document and implement solutions to fit the needs of OPERS. Tasks to support OPERS' Information Security Awareness and Training Program include, but not limited to:
1. Define activities to be performed to enable and implement the Security Awareness and Training Program
2. Research and document materials needed to implement the program
3. Research and document delivery methods and related activities to implement the program
4. Research, obtain stakeholder buy-in, and document a regularly occurring schedule of activities.
5. Develop content for PERS specific, role based training for data/system owners/custodians.
6. Develop content, produce materials for PERS specific training for staff.
7. Deliver Security, Awareness and Training materials, presentations, etc. to targeted audiences
Reorganization of PERS Information Security policy structure
In the first phase of policy, standard, procedure creation, emphasis was placed on creating required policy documentation to address HPE findings. In this second phase, the emphasis is to consolidate and reorganize the policy structure, resulting in fewer policies, and more specific requirements, based on security domains:
1. Identify and convert redundant policies to standards as appropriate
2. Align policy structure to NIST CSF domains
3. Address gaps by creating policies, standards, and procedures as identified and needed.
Implementation of PERS Information Security Program
Initialize and implement operation of Information Security program:
1. Conduct Third Party and Software Development Information Security assessments
2. Initialize policy exception requesting, approval, denial, and risk acceptance process.
Part III. Special Considerations
Contractor acknowledges and agrees that any and all information regarding OPERS installation, design, configuration, data migration will be kept confidential.
Part IV. Travel and Other Expenses
OPERS shall not reimburse Contractor for any expenses under this Contract. Work must be completed on-site, Tigard, OR
Additional Information
All your information will be kept confidential according to EEO guidelines.
$126k-188k yearly est. 60d+ ago
Information Security Operations Analyst
Moda Health 4.5
Security engineer job in Portland, OR
Let's do great things, together!
About Moda Founded in Oregon in 1955, Moda is proud to be a company of real people committed to quality. Today, like then, we're focused on building a better future for healthcare. That starts by offering outstanding coverage to our members, compassionate support to our community and comprehensive benefits to our employees. It keeps going by connecting with neighbors to create healthy spaces and places, together. Moda values diversity and inclusion in our workplace. We aim to demonstrate our commitment to diversity through all our business practices and invite applications from candidates that share our commitment to this diversity. Our diverse experiences and perspectives help us become a stronger organization. Let's be better together.
Position Summary
The Operations Analyst is a technical role within Moda's Information Security team and will play a vital role in keeping the organization's proprietary and sensitive information secure. This position works interdepartmentally to investigate issues, identify and correct flaws in security systems, solutions, and programs, and recommend measures to improve the company's overall security posture. Acting as a liaison between Security and IT management, the analyst assists IT strategy and architecture design from a security perspective and identifies issues, concerns, or recommendations as the organization grows its technology infrastructure and processes. This is a FT WFH position.
Pay Range
$70,496.52 - $91,647.55 annually (depending on experience)
*This role may be classified as hourly (non-exempt) depending on the applicant's location. Actual pay is based on qualifications. Applicants who do not exceed the minimum qualifications will only be eligible for the low end of the pay range.
Please fill out an application on our company page, linked below, to be considered for this position.
************************** GK=27768922&refresh=true
Benefits:
Medical, Dental, Vision, Pharmacy, Life, & Disability
401K- Matching
FSA
Employee Assistance Program
PTO and Company Paid Holidays
Required Skills, Experience & Education:
Bachelor's or master's in Computer Science, Information Security, Cybersecurity, or a related field.
5+ years of experience as a security operations analyst or in related fields such as IT audit, enterprise risk management, penetration testing, or red team/incident response.
Experience with common security tools such as SIEM platforms, EDR solutions, and cloud platforms (e.g., Microsoft Azure, Amazon AWS).
Knowledge of Microsoft Azure configuration and management is highly desirable.
3+ years of experience with regulatory compliance and information security management frameworks (e.g., HIPAA, NIST, IS0 27000, or COBIT).
Strong documentation and reporting skills, including the ability to record security events, investigations, and recommendations for technical and non-technical audiences.
Excellent collaboration and communication skills with the ability to influence and work effectively across cross-functional teams.
Industry recognized cybersecurity certification (e.g., CISSP, CISM, CompTIA Security+) preferred.
Primary Functions:
Defend against cybersecurity incidents and identify, analyze, communicate, and contain incidents as they occur.
Monitor systems and networks for security alerts, notifications, and issues including patching and update process issues and investigate and document any security issues or events that may occur.
Own and drive the investigation of security events and other cybersecurity incidents including review, triage, and response to alerts and notifications.
Take a lead role in the documentation of security events and incidents and the assessment of the damage they cause.
Review threat intelligence and analyze the current threat landscape and apply threat analysis to Moda's infrastructure systems and networks to identify and address vulnerabilities or exploitable attack paths.
Build and drive proactive threat hunting programs including detailed threat analysis of exploitable vulnerabilities leading to actionable remediation plans.
Work with IT resources and architects to develop and implement cloud security strategies to facilitate migration of key assets into a public cloud hosted environment.
Advise on installation and configuration of security controls, systems, and software to protect systems and information infrastructure and recommend enhancements based on compliance requirements and industry best practices.
Work with IT and Security leadership to perform tests or support external testing such as network penetration tests, vulnerability testing, and disaster response failover tests to uncover network vulnerabilities.
Advise on installation and configuration of security controls, systems, and software to protect systems and information infrastructure and recommend enhancements based on compliance requirements and industry best practices.
Take a proactive and operational role in creating the best practices for IT security companywide.
Support cybersecurity risk assessment activities.
Work with both Security and IT management to ensure security policies and goals are met in infrastructure and development contexts.
Stay current on IT security trends and news including evolving standards.
Collaborate and communicate effectively with cross functional colleagues at all levels.
Other duties as assigned.
Working Conditions:
Remote office environment with extensive close PC and keyboard use, constant sitting, and frequent phone communication. Must be able to navigate multiple computer screens. A reliable, high-speed, hard-wired internet connection required to support remote or hybrid work. Must be comfortable being on camera for virtual training and meetings. Work in excess of standard workweek, including evenings and occasional weekends, to meet business need.
Internally with all departments. Externally with auditors, clients, technology partners, and other various entities.
Together, we can be more. We can be better.
Moda Health seeks to allow equal employment opportunities for all qualified persons without regard to race, religion, color, age, sex, sexual orientation, national origin, marital status, disability, veteran status or any other status protected by law. This is applicable to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absences, compensation, and training.
For more information regarding accommodations, please direct your questions to Kristy Nehler & Danielle Baker via our ***************************** email.
$70.5k-91.6k yearly Easy Apply 6d ago
Google Cloud Security Architect
Slalom 4.6
Security engineer job in Portland, OR
Who You'll Work With As a modern technology company, our Slalom Technologists are disrupting the market and bringing to life the art of the possible for our clients. We have passion for building strategies, solutions, and creative products to help our clients solve their most complex and interesting business problems. We surround our technologists with interesting challenges, innovative minds, and emerging technologies
As a Consultant or Senior Consultant, you will collaborate with cross-functional teams, including IT, security, and business units, to design and implement Google Cloud-based application innovation solutions. You will work alongside experienced cloud architects, data scientists, and other specialists, ensuring the successful delivery of scalable, cloud-native applications and AI-powered solutions.
What You'll Do
* Stay current with security trends, technologies, and best practices around Google Cloud solutions, leveraging tools like Cloud IAM, Cloud Security Command Center, BeyondCorp, and Cloud Armor.
* Define and guide transformational security strategies for Google Cloud environments, ensuring alignment with Google's Zero Trust and BeyondCorp principles.
* Translate complex regulatory requirements (e.g., GDPR, SOC 2, HIPAA) and technology standards into actionable functional and technical requirements for cloud and hybrid environments, ensuring security and compliance.
* Lead teams through various phases of gap analyses, including security assessments, remediation planning, roadmap development, and implementation of remediation actions using Google Cloud-native tools.
* Deliver on the vision, architecture, execution, and quality assurance of security projects on Google Cloud, driving initiatives that secure enterprise workloads and data.
* Guide stakeholders and senior leaders on aligning security solutions with broader business goals, ensuring the architecture follows Google Cloud's security best practices and roadmap.
* Establish security architecture patterns based on Google Cloud security frameworks and industry standards to meet the unique needs of enterprise clients.
* Collaborate with other Google Cloud architects and security teams to continuously improve security knowledge assets and best practices, ensuring the most effective security solutions for clients.
* Design and architect solutions to secure Generative AI models and applications against adversarial attacks, prompt injection, and their potential misuse for malicious cyber activities.
What You'll Bring
* Proven experience with Google Cloud security architecture, with hands-on experience in tools like Cloud IAM, VPC Service Controls, Cloud DLP, and Cloud Armor.
* Strong background in defining and implementing Zero Trust and BeyondCorp security models within Google Cloud environments.
* Familiarity or direct experience with Identity and Access Management (IAM), Data Protection, Vulnerability Management, and Cloud Security solutions in Google Cloud.
* Extensive experience with security design patterns specific to Google Cloud, as well as hybrid and multi-cloud security architecture.
* Experience in security and risk advisory consulting, particularly related to cloud security transformations.
* Ability to lead the development and implementation of cloud security roadmaps aligned with business goals and compliance needs.
* Familiarity with Google Cloud's Artificial Intelligence (AI) capabilities (e.g., Vertex AI, Generative AI services, Model Armor) including their applications, associated security risks (e.g., prompt injection, data poisoning, privacy concerns), and proven strategies for implementing security controls, governance, and responsible AI practices.
* Relevant certifications are strongly desired, including (but not limited to):
* GCP Professional SecurityEngineer
* GCP Professional Cloud Architect
* CISSP
* Security+
About Us
Slalom is a fiercely human business and technology consulting company that leads with outcomes to bring more value, in all ways, always. From strategy through delivery, our agile teams across 52 offices in 12 countries collaborate with clients to bring powerful customer experiences, innovative ways of working, and new products and services to life. We are trusted by leaders across the Global 1000, many successful enterprise and mid-market companies, and 500+ public sector organizations to improve operations, drive growth, and create value. At Slalom, we believe that together, we can move faster, dream bigger, and build better tomorrows for all.
Compensation and Benefits
Slalom prides itself on helping team members thrive in their work and life. As a result, Slalom is proud to invest in benefits that include meaningful time off and paid holidays, parental leave, 401(k) with a match, a range of choices for highly subsidized health, dental, & vision coverage, adoption and fertility assistance, and short/long-term disability. We also offer yearly $350 reimbursement account for any well-being-related expenses, as well as discounted home, auto, and pet insurance.
Slalom is committed to fair and equitable compensation practices. For this position the base salary pay ranges are listed below. In addition, individuals may be eligible for an annual discretionary bonus. Actual compensation will depend upon an individual's skills, experience, qualifications, location, and other relevant factors. The salary pay range is subject to change and may be modified at any time.
East Bay, San Francisco, Silicon Valley:
* Consultant: $120,000-$177,000
* Senior Consultant: $140,000-$203,000
San Diego, Los Angeles, Orange County, Seattle, Houston, New Jersey, New York City, Westchester, Boston, Washington DC:
* Consultant: $110,000-$162,000
* Senior Consultant: $130,000-$186,000
All other locations:
* Consultant: $105,000-$148,000
* Senior Consultant: $115,000-$171,000
EEO and Accommodations
Slalom is an equal opportunity employer and is committed to inclusion, diversity, and equity in the workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veterans' status, or any other characteristic protected by federal, state, or local laws. Slalom will also consider qualified applications with criminal histories, consistent with legal requirements. Slalom welcomes and encourages applications from individuals with disabilities. Reasonable accommodations are available for candidates during all aspects of the selection process. Please advise the talent acquisition team if you require accommodations during the interview process.
We are accepting applications until 12/31.
$140k-203k yearly 23d ago
Cyber Security Engineer, Staff
Synopsys, Inc. 4.4
Security engineer job in Hillsboro, OR
Category Engineering Hire Type Employee Job ID 13881 Base Salary Range $129000-$193000 Remote Eligible No Date Posted 08/01/2026 We Are: At Synopsys, we drive the innovations that shape the way we live and connect. Our technology is central to the Era of Pervasive Intelligence, from self-driving cars to learning machines. We lead in chip design, verification, and IP integration, empowering the creation of high-performance silicon chips and software content. Join us to transform the future through continuous technological innovation.
You Are:
You are a proactive and analytical Cyber SecurityEngineer who thrives on challenges and is passionate about safeguarding complex digital environments. With a strong background in vulnerability management and a deep understanding of enterprise security, you excel at identifying, assessing, and remediating vulnerabilities across diverse infrastructures.
Collaboration is second nature to you; you engage effectively with teams across geographies and cultures, building strong partnerships to drive security initiatives forward. Your communication skills enable you to articulate risks, propose solutions, and influence decision-makers at all levels. With a strong sense of ownership, you are comfortable working independently and taking initiative, yet you also thrive in dynamic, fast-paced environments where teamwork is key. If you are eager to make a measurable impact on the security posture of a global technology leader, Synopsys is the place for you.
We are currently hiring for our Hillsboro, Oregon office; however, we are also accepting applications from candidates interested in joining our offices located in Austin, Texas or Morrisville, North Carolina.
What You'll Be Doing:
* Managing the end-to-end vulnerability life cycle, from initial discovery through resolution and closure.
* Leading the development, maintenance, and enhancement of vulnerability management data and reporting platforms for enterprise-wide visibility.
* Designing and implementing comprehensive reports and dashboards tailored to demonstrate assessment scope, remediation progress, and risk posture for various stakeholders.
* Conducting in-depth vulnerability assessments to identify weaknesses, recommend countermeasures, and deliver timely, actionable reports to key stakeholders.
* Driving automation initiatives to streamline vulnerability management processes and improve operational efficiency.
* Monitoring vulnerability disclosure mailing lists and threat intelligence feeds to proactively assess emerging threats relevant to Synopsys infrastructure and applications.
* Contributing to the ongoing strategic direction and maturity of Synopsys' vulnerability management capabilities.
* Supporting compliance and risk management efforts by recommending security controls and corrective actions to mitigate identified vulnerability risks.
The Impact You Will Have:
* Strengthening Synopsys' security posture by proactively identifying and mitigating vulnerabilities across a global infrastructure.
* Increasing stakeholder confidence with clear, actionable, and timely communication of security risks and remediation efforts.
* Driving alignment between technical teams, risk management, and compliance through collaborative solutions and best practices.
* Reducing the organization's exposure to evolving threats by staying ahead of the latest vulnerability disclosures and threat intelligence.
* Supporting Synopsys' mission to deliver secure, high-performance products and services to customers worldwide.
What You'll Need:
* Bachelor's degree in Computer Science, Information Systems, Electrical Engineering, or equivalent experience.
* 5+ years of experience designing and implementing vulnerability management programs in large, global enterprise environments.
* Strong data analytics skills with the ability to analyze large datasets and proficiency in using databases/data warehouses and visualization tools (e.g., Grafana, Power BI, Tableau, or similar).
* Extensive hands-on experience with enterprise vulnerability scanning tools such as Rapid7 Nexpose, Qualys, Tenable Nessus, and Unified Vulnerability Management (UVM) solutions.
* Proven experience managing vulnerabilities in cloud environments, including GCP, AWS, and Azure.
* Familiarity with security testing tools (e.g., Kali/Metasploit, Burp Suite) and a solid understanding of common computer weaknesses, exploits, and configuration issues.
* Proficiency in using the Common Vulnerability Scoring System (CVSS) for vulnerability assessment and prioritization.
* Experience with software development and scripting languages (such as Python, Bash, or PowerShell) to automate workflows and processes.
Candidates must be U.S. citizens residing in the United States to meet federal regulations.
Who You Are:
* A strategic thinker with exceptional problem-solving and analytical skills.
* Highly collaborative, with a proven ability to work effectively in cross-functional, geographically distributed teams.
* Excellent communicator, able to present complex technical information clearly to both technical and non-technical audiences.
* Self-motivated, organized, and able to work independently with minimal supervision.
* Adaptable and resilient in dynamic, fast-paced environments.
* Committed to continuous learning and staying current on evolving security trends and technologies.
The Team You'll Be A Part Of:
You'll join the Synopsys Attack Surface Management team, a highly skilled and collaborative group dedicated to identifying and managing security vulnerabilities across the company's global infrastructure, applications, and services. The team values innovation, knowledge sharing, and continuous improvement, working together to proactively defend Synopsys against ever-evolving cyber threats. As part of this team, you'll have the opportunity to shape the future of vulnerability management at Synopsys and make a direct impact on the company's security posture.
Rewards and Benefits:
We offer a comprehensive range of health, wellness, and financial benefits to cater to your needs. Our total rewards include both monetary and non-monetary offerings.
At Synopsys, we want talented people of every background to feel valued and supported to do their best work. Synopsys considers all applicants for employment without regard to race, color, religion, national origin, gender, sexual orientation, age, military veteran status, or disability.
In addition to the base salary, this role may be eligible for an annual bonus, equity, and other discretionary bonuses. Synopsys offers comprehensive health, wellness, and financial benefits as part of a competitive total rewards package. The actual compensation offered will be based on a number of job-related factors, including location, skills, experience, and education. Your recruiter can share more specific details on the total rewards package upon request. The base salary range for this role is across the U.S.
$129k-193k yearly 4d ago
Identity Security Engineer
Intel 4.7
Security engineer job in Hillsboro, OR
The world is transforming - and so is Intel. Intel is a company of bold and curious inventors and problem solvers who create some of the most astounding technology advancements and experiences in the world. With a legacy of relentless innovation and a commitment to bring smart, connected devices to every person on Earth, our diverse and brilliant teams are continually searching for tomorrow's technology and revel in the challenge that changing the world for the better brings. We work every single day to design and manufacture silicon products that empower people's digital lives. Come join us and do something wonderful.
Who we Are:
Intel's Information Security organization enables Intel to provide secure products, solutions, and services which meet U.S. regulatory requirements. The Information Security organization supports the unique IT information Security and Compliance requirements for Intel Federal projects that deliver products and/or services to the US Government (USG).As part of this team, you will help us grow our secure solution suite to meet U.S. Government requirements. The Intel Information Security organization is seeking an Identity SecurityEngineer. The candidate chosen for this role will assist senior engineers with design, architecture, and build of secure classified network products to support USG operations.
Primary duties and responsibilities:
o Assist with architecting identity and identity security products in secured enclaves, including product testing, validation, and selection.
o Assist with design and long-term roadmap planning for new and future scalability in secure enclaves.
o Coordinate security assessments to identify security control failures and recommend corrective actions.
o Development and configuration experience of various SailPoint IIQ modules (e.g. audit, compliance, lifecycle, service account, Microsoft Active Directory connector).
o Design and integration of Microsoft Active Directory.
o Design and deploy custom forms, approval workflows, connections in SailPoint for access requests, access certifications, and provisioning.
o Automate processes in the SailPoint toolset using PowerShell scripting.
o Business travel is required as needed.
o Ability to thrive in dynamic and fast-paced environments.
o Excellent communication, leadership, strong troubleshooting, debugging, and analytical skills.
\#cj
**Qualifications:**
You must possess the below minimum qualifications to be initially considered for this position. Preferred qualifications are in addition to the minimum requirements and are considered a plus factor in identifying top candidates. Experience listed below would be obtained through a combination of your degree, research and or relevant previous job and or internship experiences.
Minimum Qualifications:
o US Citizenship required
o Ability to obtain and maintain a US Government Security Clearance
o Bachelor's degree in a STEM field and 2+ years of applicable experience
o 2+ years' experience configuring Access Profiles, Roles, and Identity Profiles
o 2+ years' experience in Active Directory
o 2+ years' experience in APIs (RESTful services preferred)
o 1+ years' experience in implementing and supporting SailPoint IIQ modules like Compliance Manager, Lifecycle Manager, Integration modules, in both production and nonproduction environments
o 1+ years' experience in designing and implementing custom SailPoint solutions
Preferred Qualifications:
o Active US Government Top Secret (TS) Security Clearance with the ability to obtain and maintain SCI access
o Experience with DoD security implementation (e.g. STIG) and security tools for managing the environment
o Experience with business continuity and disaster recovery
o Experience with scripting in the Windows and UNIX environment
o Experience with Microsoft SQL Server 2019/2022
o Experience with Web Tech: HTML, JavaScript, JSP, XML, XSL, and DTD
**Job Type:**
Experienced Hire
**Shift:**
Shift 1 (United States of America)
**Primary Location:**
US, California, Santa Clara
**Additional Locations:**
US, Arizona, Phoenix, US, Oregon, Hillsboro
**Business group:**
Join Intel's Finance Group, a key player in driving strategic business decisions that enhance shareholder value. Our team is dedicated to facilitating change and improvement across finance and the operations we support. As strategic partners, we lead acquisitions and inorganic growth initiatives, managing transactions from ideation to completion while serving as trusted advisors to executive leadership. Additionally, we enhance employee experiences by maintaining Intel sites globally and advancing environmental sustainability efforts.
**Posting Statement:**
All qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance.
**Position of Trust**
N/A
**Benefits**
We offer a total compensation package that ranks among the best in the industry. It consists of competitive pay, stock bonuses, and benefit programs which include health, retirement, and vacation. Find out more about the benefits of working at Intel (*********************************************************************************** .
Annual Salary Range for jobs which could be performed in the US: $105,300.00-148,660.00 USD
The range displayed on this job posting reflects the minimum and maximum target compensation for the position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific compensation range for your preferred location during the hiring process.
**Work Model for this Role**
This role will require an on-site presence. * Job posting details (such as work model, location or time type) are subject to change.
$105.3k-148.7k yearly 53d ago
Substation Physical Engineer
Leidos 4.7
Security engineer job in Portland, OR
Looking for an opportunity to make an impact?
At Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers' success. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business.
Your greatest work is ahead!
We are looking for a Substation Physical Engineer to join our team. As an Career Substation Physical Engineer, candidates will have the opportunity to work on projects for electric utilities at voltages from 12kV up to 500kV. This is an exciting and growing field in the power systems industry and allows candidates to get exposure to how the power generation such as that of renewable energy ties into the electric system. Candidates will be expected to use knowledge of digital logic design, AC and DC circuits to design substation electrical projects.
*Hybrid Schedule Available!
Successful candidates can look forward to a fast paced, diverse work environment and flexible work hours/work arrangements as well as managers who will encourage career development and growth including:
Engineer in Training Certificate (EIT).
Professional Engineer License (PE).
Project Management Professional (PMP).
Technical & Non-Technical Training Opportunities.
Leadership Opportunities.
Mentorship & Training Opportunities.
Opportunity to Lead, Grow, and Inspire a Dynamic Team
Are you ready to make an impact? Begin your journey of a flourishing and meaningful career, share your resume with us today!
The Challenge:
Experience in executing substation physical projects
Excellent communication skills and ability to interact with the internal team and clients to meet project needs.
Performing quality control checks on substation physical design projects.
Expected to read and design substation physical drawings such as one-line drawings, three-line drawings, plan-section drawings, foundation, grounding drawings.
Create and check bill of materials for substation physical
Expected to attend site visit at customer location
Successful candidates must comply with quality control and safe work practices and maintain compliance with project scope, schedule, and budget. This position will be a member of a design team comprised of engineers, designers, and CAD technicians and will work with client standards to implement design.
What Sets You Apart:
Mid-Level: Bachelor's degree in electrical engineering, or related degree with two (2+) or more years of related substation physical design experience.
Senior-Level: Bachelor's degree in electrical engineering, or related degree with four (4+) or more years of related substation physical design experience.
Lead -Level: Bachelor's degree in electrical engineering, or related degree with eight (8+) or more years of related substation physical design experience.
Experience with grounding studies/lightning protection and lighting studies.
Demonstrate Excellent communication skills and ability to interact with the internal team and clients to meet project needs.
Ability to meet deadlines under pressure situations.
Collaborator and leader who can work effectively in team environment.
Self-starter who works independently with minimal direction.
Strong analytical skills and proven problem solver in both team and independent environments.
High level of computer competency.
Willingness to travel to project / client sites and Portland, OR office as needed.
You Might Also have:
US Citizen and able to pass a DOE Background
Engineer Intern (“EI” or “EIT”) professional certification.
Professional Engineer (“PE”) License.
Working knowledge of protection and control design
Experience with bus calculation
Experience with WinIGS or CDEGS
Master's degree in related field.
WHAT WE DO
Leidos is a trusted and technology-focused solutions provider. Utilities and mobile operators rely on our Power Delivery Services Team for reliable power and telecommunication expertise, as reflected through our work with more than 50 investor-owned utilities, more than 160 municipals/cooperatives, as well as a growing number of mobile operators, local utility providers and private developers. In addition to providing engineering and project management services, Leidos works with an established group of industry-leading construction partners delivering meaningful Energy Delivery Solutions. Our recognition as an industry leader is confirmed by the latest national rankings by Engineering News-Record (ENR) ranking Leidos within the Top 10 T&D Firms, and Top 10 Power Firms. To explore and learn more, click here!
At Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers' success. We empower our teams, contribute to our communities, and operate sustainably. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business.
We take care of our employees. Leidos seeks the best and the brightest, and in return, we invest in you, with an eye on your future, through career advancement, growth opportunities and continuous improvement via mentoring, formal and informal project management training and assistance with obtaining pertinent certifications. We challenge you to help solve some of the world's toughest problems, and reward you with a welcoming culture that recognizes the importance of a strong work/life balance, as well as competitive compensation and benefits. We believe that diversity and inclusion make us all better and offer the chance to have fun and make a difference.
PowerDelivery
PDSSUBSTATION
If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.
Original Posting:September 22, 2025
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.
Pay Range:Pay Range $87,100.00 - $157,450.00
The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.
Job Description
The SecurityEngineer will focus on hardening and isolating K3s clusters to minimize blast radius in the event of compromise. This includes enforcing Linux security modules (SELinux, AppArmor), leveraging TPM for secure boot and attestation, implementing least privilege across nodes and workloads, and ensuring multi-tenant isolation within hybrid Kubernetes environments (x86, ARM, accelerators).
Responsibilities
Security Architecture & Policy Enforcement
Design and implement security-first cluster configurations for K3s nodes.
Enforce mandatory access control (MAC) using SELinux and AppArmor profiles for pods and system services.
Integrate TPM-based attestation and secure boot for cluster nodes to ensure trust in hardware and OS integrity.
Establish node, pod, and namespace isolation strategies to reduce lateral movement risk.
Harden cluster components (API server, etcd, kubelet) following CIS and NSA Kubernetes security benchmarks.
Blast Radius Reduction
Define and enforce workload sandboxing strategies (seccomp, AppArmor, SELinux contexts, gVisor/Kata if applicable).
Configure minimal privilege policies (RBAC, PodSecurityStandards, NetworkPolicies) to ensure least-privilege execution.
Implement namespace, node pool, and hardware partitioning to confine workloads and protect sensitive applications.
Apply resource quotas, limits, and scheduling constraints to contain denial-of-service blast radius.
Integration with Identity & Secrets Management
Work with Security team to ensure strong identity, authentication, and authorization models.
Integrate TPM-backed secrets storage and HSM/KMS systems for cryptographic operations.
Ensure secure distribution of workload secrets with solutions like SealedSecrets, HashiCorp Vault, or SOPS.
Runtime & Supply Chain Security
Enforce image signing and verification with cosign or Notary.
Integrate SBOM scanning and vulnerability management into CI/CD pipelines.
Monitor workloads for runtime anomalies (Falco, Cilium Tetragon, or equivalent).
Apply kernel hardening measures (seccomp-bpf, kernel lockdown, IMA/EVM with TPM).
Monitoring & Incident Response
Build observability hooks for security events (audit logs, syscall monitoring, TPM attestations).
Define blast radius response runbooks for compromised pods or nodes.
Work with SRE and Security teams to test chaos/security drills simulating breaches.
Deliverables
K3s cluster baseline hardened with SELinux and AppArmor profiles.
TPM-enabled secure boot and node attestation pipeline.
Enforced PodSecurityStandards and workload sandboxing (seccomp, gVisor/Kata optional).
Documentation of isolation strategies (namespaces, node pools, network segmentation).
Audit-ready evidence of compliance with CIS/NSA Kubernetes security benchmarks.
Security runbooks for containment and blast radius reduction.
Required Skills & Experience
Strong knowledge of K3s/Kubernetes internals, especially security features.
Hands-on experience with SELinux, AppArmor, seccomp, and Linux capabilities.
Experience with TPM (Trusted Platform Module) for secure boot and attestation.
Deep understanding of Pod Security (PodSecurityPolicies/Standards, OPA/Gatekeeper/Kyverno).
Experience implementing RBAC, NetworkPolicies, and workload isolation at scale.
Proficiency in Linux kernel security mechanisms and debugging.
Familiarity with container runtimes (containerd, CRI-O, gVisor, Kata) and their security implications.
Strong background in incident response, forensic data collection, and audit logging in Kubernetes.
Nice to Have
Contributions to Kubernetes SIG-Security or open-source security tooling.
Experience with supply chain security frameworks (SLSA, NIST 800-190).
Familiarity with confidential computing (TEE/SGX/SEV) for workload isolation.
Hands-on with Cilium Tetragon, Falco, or other runtime security tools.
Knowledge of air-gapped deployments and hardened Linux distributions (e.g., Flatcar, Bottlerocket).
$86k-121k yearly est. 27d ago
Senior Security Engineer
Pacific Seafood 3.6
Security engineer job in Happy Valley, OR
At Pacific Seafood, we do more than just provide the world with the healthiest proteins on the planet. We are a family-owned, excellence-driven organization committed to being the brand of choice in the marketplace and the employer of choice in the community. We believe in servant leadership, investing in our team members' personal and professional growth, and rewarding performance. We live by the core values of our Diamond Philosophy: Teamwork, Productivity, Quality, and Excellence-which means consistently doing your best and always striving to do better.
Summary:
The Senior SecurityEngineer at Pacific Seafood is a key role in our information technology team supporting efforts to strengthen, enhance, and protect the security posture of our enterprise environment. This position involves leading security initiatives, monitoring and improving security controls, driving incident response and partnering across IT and business teams and is ideal for someone who is proactive, highly analytical, calm under pressure and passionate about building a security by design culture.
Key Responsibilities:
1. SecurityEngineering & Architecture:
* Establish, maintain and implement enterprise security best practices, policies and hardening standards
* Participate in architectural reviews and provide security requirements for new systems, applications, cloud resources and infrastructure
* Integrate new security technologies into existing environments and ensure secure configuration of all systems
2. Threat Detection & Vulnerability Management:
* Leverage and centralize all logging platforms
* Conduct proactive threat hunting, log analysis and behavioral detection reviews
* Perform vulnerability scanning, prioritization, and remediation planning with cross functional teams
3. Incident Response & Security Operations:
* Oversee the incident response lifecycle including detection, containment, eradication and recovery
* Develop incident response playbooks and runbooks, and post-incident review documentation
* Support endpoint detection and response, antivirus tools, server/endpoint security controls
4. Network, Analysis & Security:
* New Network Device Detection and Threat Determination
* Device Anomalous Communication Detection and Remediation
* Network segmentation strategy
* Firewall Device and User Policy Determination
* Other duties as assigned
Additional responsibilities may be assigned as deemed necessary to support the overall goals and objectives of the position.
What you bring to Pacific Seafood:
Required:
* Bachelor's degree in Computer Science or equivalent professional experience
* Minimum of five years of related experience in information security or infrastructure security
* Strong experience with Active Directory, Azure Entra ID, MFA, and identity lifecycle management
* Hands-on experience with endpoint and server security tools including EDR, anti-virus, and configuration baselines
* Working knowledge of firewalls, enterprise networking, and network security policies
* Experience with centralized logging solutions, SIEM tools, and vulnerability scanners
* Ability to analyze technical and non-technical controls, identify gaps, and propose remediations
* Experience conducting internal security audits, investigations, and compliance reviews
* Strong communication, documentation, and problem-solving skills
* Ability to travel as necessary; valid driver's license
Preferred:
* Experience leading enterprise-wide security projects or architectural reviews
* Palo Alto Security toolset experience (Strata, IoT, PanOS, Cortex XDR)
* Experience with Microsoft Exchange, Microsoft Purview, and email security tools
* Experience with privileged access management (PAM) systems
* Threat hunting and SIEM rule development experience (Sentinel, LogRhythm, etc.)
* Security certifications such as CISSP, GSEC, CEH, or equivalent
Total compensation:
At Pacific Seafood your base wage is only a portion of your overall compensation package. We invest in our Team Members through a comprehensive and attractive total rewards package, including but not limited to:
* Health insurance benefits options, including medical, prescription, vision, dental, basic group life and short term disability.
* Flexible spending accounts for health flex and dependent care expenses
* 401(k) Retirement Plan options with generous annual company profit sharing match
* Paid time off for all regular FT team members, to include sick days, paid holidays, vacation and personal time
* Employee Assistance Program- Confidential professional counseling, financial, and legal assistance provided at no charge to Team Members and immediate family members
* Product purchase program
$114k-157k yearly est. 48d ago
Information Security Operations Analyst
Moda Health 4.5
Security engineer job in Portland, OR
Job Description
Let's do great things, together!
About Moda Founded in Oregon in 1955, Moda is proud to be a company of real people committed to quality. Today, like then, we're focused on building a better future for healthcare. That starts by offering outstanding coverage to our members, compassionate support to our community and comprehensive benefits to our employees. It keeps going by connecting with neighbors to create healthy spaces and places, together. Moda values diversity and inclusion in our workplace. We aim to demonstrate our commitment to diversity through all our business practices and invite applications from candidates that share our commitment to this diversity. Our diverse experiences and perspectives help us become a stronger organization. Let's be better together.
Position Summary
The Operations Analyst is a technical role within Moda's Information Security team and will play a vital role in keeping the organization's proprietary and sensitive information secure. This position works interdepartmentally to investigate issues, identify and correct flaws in security systems, solutions, and programs, and recommend measures to improve the company's overall security posture. Acting as a liaison between Security and IT management, the analyst assists IT strategy and architecture design from a security perspective and identifies issues, concerns, or recommendations as the organization grows its technology infrastructure and processes. This is a FT WFH position.
Pay Range
$70,496.52 - $91,647.55 annually (depending on experience)
*This role may be classified as hourly (non-exempt) depending on the applicant's location. Actual pay is based on qualifications. Applicants who do not exceed the minimum qualifications will only be eligible for the low end of the pay range.
Please fill out an application on our company page, linked below, to be considered for this position.
************************** GK=27768922&refresh=true
Benefits:
Medical, Dental, Vision, Pharmacy, Life, & Disability
401K- Matching
FSA
Employee Assistance Program
PTO and Company Paid Holidays
Required Skills, Experience & Education:
Bachelor's or master's in Computer Science, Information Security, Cybersecurity, or a related field.
5+ years of experience as a security operations analyst or in related fields such as IT audit, enterprise risk management, penetration testing, or red team/incident response.
Experience with common security tools such as SIEM platforms, EDR solutions, and cloud platforms (e.g., Microsoft Azure, Amazon AWS).
Knowledge of Microsoft Azure configuration and management is highly desirable.
3+ years of experience with regulatory compliance and information security management frameworks (e.g., HIPAA, NIST, IS0 27000, or COBIT).
Strong documentation and reporting skills, including the ability to record security events, investigations, and recommendations for technical and non-technical audiences.
Excellent collaboration and communication skills with the ability to influence and work effectively across cross-functional teams.
Industry recognized cybersecurity certification (e.g., CISSP, CISM, CompTIA Security+) preferred.
Primary Functions:
Defend against cybersecurity incidents and identify, analyze, communicate, and contain incidents as they occur.
Monitor systems and networks for security alerts, notifications, and issues including patching and update process issues and investigate and document any security issues or events that may occur.
Own and drive the investigation of security events and other cybersecurity incidents including review, triage, and response to alerts and notifications.
Take a lead role in the documentation of security events and incidents and the assessment of the damage they cause.
Review threat intelligence and analyze the current threat landscape and apply threat analysis to Moda's infrastructure systems and networks to identify and address vulnerabilities or exploitable attack paths.
Build and drive proactive threat hunting programs including detailed threat analysis of exploitable vulnerabilities leading to actionable remediation plans.
Work with IT resources and architects to develop and implement cloud security strategies to facilitate migration of key assets into a public cloud hosted environment.
Advise on installation and configuration of security controls, systems, and software to protect systems and information infrastructure and recommend enhancements based on compliance requirements and industry best practices.
Work with IT and Security leadership to perform tests or support external testing such as network penetration tests, vulnerability testing, and disaster response failover tests to uncover network vulnerabilities.
Advise on installation and configuration of security controls, systems, and software to protect systems and information infrastructure and recommend enhancements based on compliance requirements and industry best practices.
Take a proactive and operational role in creating the best practices for IT security companywide.
Support cybersecurity risk assessment activities.
Work with both Security and IT management to ensure security policies and goals are met in infrastructure and development contexts.
Stay current on IT security trends and news including evolving standards.
Collaborate and communicate effectively with cross functional colleagues at all levels.
Other duties as assigned.
Working Conditions:
Remote office environment with extensive close PC and keyboard use, constant sitting, and frequent phone communication. Must be able to navigate multiple computer screens. A reliable, high-speed, hard-wired internet connection required to support remote or hybrid work. Must be comfortable being on camera for virtual training and meetings. Work in excess of standard workweek, including evenings and occasional weekends, to meet business need.
Internally with all departments. Externally with auditors, clients, technology partners, and other various entities.
Together, we can be more. We can be better.
Moda Health seeks to allow equal employment opportunities for all qualified persons without regard to race, religion, color, age, sex, sexual orientation, national origin, marital status, disability, veteran status or any other status protected by law. This is applicable to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absences, compensation, and training.
For more information regarding accommodations, please direct your questions to Kristy Nehler & Danielle Baker via our ***************************** email.
$70.5k-91.6k yearly Easy Apply 7d ago
Google Cloud Security Architect
Slalom 4.6
Security engineer job in Portland, OR
Who You'll Work With As a modern technology company, our Slalom Technologists are disrupting the market and bringing to life the art of the possible for our clients. We have passion for building strategies, solutions, and creative products to help our clients solve their most complex and interesting business problems. We surround our technologists with interesting challenges, innovative minds, and emerging technologies.
Join the Slalom Cloud Team -a team of trailblazers ensuring we achieve our strategic goals through innovation and investment in the future. You'll collaborate with local market teams, niche experts, and global partners to drive cloud solution sales and empower clients on their cloud transformation journey. As a key member of Slalom's Google Cloud Center of Excellence, you'll leverage our award-winning partnerships and multidisciplinary teams to deliver business value and technical excellence for high-impact security and infrastructure solutions.
What You'll Do
* Stay current with security trends, technologies, and best practices around Google Cloud solutions, leveraging tools like Cloud IAM, Cloud Security Command Center, BeyondCorp, and Cloud Armor.
* Define and guide transformational security strategies for Google Cloud environments, ensuring alignment with Google's Zero Trust and BeyondCorp principles.
* Translate complex regulatory requirements (e.g., GDPR, SOC 2, HIPAA) and technology standards into actionable functional and technical requirements for cloud and hybrid environments, ensuring security and compliance.
* Lead teams through various phases of gap analyses, including security assessments, remediation planning, roadmap development, and implementation of remediation actions using Google Cloud-native tools.
* Deliver on the vision, architecture, execution, and quality assurance of security projects on Google Cloud, driving initiatives that secure enterprise workloads and data.
* Guide stakeholders and senior leaders on aligning security solutions with broader business goals, ensuring the architecture follows Google Cloud's security best practices and roadmap.
* Establish security architecture patterns based on Google Cloud security frameworks and industry standards to meet the unique needs of enterprise clients.
* Collaborate with other Google Cloud architects and security teams to continuously improve security knowledge assets and best practices, ensuring the most effective security solutions for clients.
* Design and architect solutions to secure Generative AI models and applications against adversarial attacks, prompt injection, and their potential misuse for malicious cyber activities.
What You'll Bring
* Proven experience with Google Cloud security architecture, with hands-on experience in tools like Cloud IAM, VPC Service Controls, Cloud DLP, and Cloud Armor.
* Strong background in defining and implementing Zero Trust and BeyondCorp security models within Google Cloud environments.
* Familiarity or direct experience with Identity and Access Management (IAM), Data Protection, Vulnerability Management, and Cloud Security solutions in Google Cloud.
* Extensive experience with security design patterns specific to Google Cloud, as well as hybrid and multi-cloud security architecture.
* Experience in security and risk advisory consulting, particularly related to cloud security transformations.
* Ability to lead the development and implementation of cloud security roadmaps aligned with business goals and compliance needs.
* Familiarity with Google Cloud's Artificial Intelligence (AI) capabilities (e.g., Vertex AI, Generative AI services, Model Armor) including their applications, associated security risks (e.g., prompt injection, data poisoning, privacy concerns), and proven strategies for implementing security controls, governance, and responsible AI practices.
* Relevant certifications are strongly desired but not required, including (but not limited to):
* GCP Professional SecurityEngineer
* GCP Professional Cloud Architect
* CISSP
* Security+
About Us
Slalom is a fiercely human business and technology consulting company that leads with outcomes to bring more value, in all ways, always. From strategy through delivery, our agile teams across 52 offices in 12 countries collaborate with clients to bring powerful customer experiences, innovative ways of working, and new products and services to life. We are trusted by leaders across the Global 1000, many successful enterprise and mid-market companies, and 500+ public sector organizations to improve operations, drive growth, and create value. At Slalom, we believe that together, we can move faster, dream bigger, and build better tomorrows for all.
Compensation and Benefits
Slalom prides itself on helping team members thrive in their work and life. As a result, Slalom is proud to invest in benefits that include meaningful time off and paid holidays, parental leave, 401(k) with a match, a range of choices for highly subsidized health, dental, & vision coverage, adoption and fertility assistance, and short/long-term disability. We also offer yearly $350 reimbursement account for any well-being-related expenses, as well as discounted home, auto, and pet insurance.
Slalom is committed to fair and equitable compensation practices.
Slalom is committed to fair and equitable compensation practices. For this role, we are targeting the following levels and salary ranges:
East Bay, San Francisco, Silicon Valley:
* Senior Consultant: $131,000-$196,500
San Diego, Los Angeles, Orange County, Seattle, Houston, New Jersey, New York City, Westchester, Boston, Washington DC:
* Senior Consultant: $120,000-$180,000
All other locations:
* Senior Consultant: $110,000-$165,000
In addition, individuals may be eligible for an annual discretionary bonus. Actual compensation will depend upon an individual's skills, experience, qualifications, location, and other relevant factors. The salary pay range is subject to change and may be modified at any time.
EEO and Accommodations
Slalom is an equal opportunity employer and is committed to inclusion, diversity, and equity in the workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veterans' status, or any other characteristic protected by federal, state, or local laws. Slalom will also consider qualified applications with criminal histories, consistent with legal requirements. Slalom welcomes and encourages applications from individuals with disabilities. Reasonable accommodations are available for candidates during all aspects of the selection process. Please advise the talent acquisition team if you require accommodations during the interview process.
How much does a security engineer earn in Vancouver, WA?
The average security engineer in Vancouver, WA earns between $83,000 and $158,000 annually. This compares to the national average security engineer range of $77,000 to $141,000.