Nist Jobs

The Information Systems Security Officer role within Space Dynamics Laboratory's C4ISR Division supports mission-critical defense and intelligence programs. The position focuses on ensuring system compliance with NIST 800-53 and RMF frameworks while managing the Authorization to Operate process. Key responsibilities include developing security documentation, conducting vulnerability assessments, and coordinating remediation efforts with technical teams. This opportunity appeals to professionals seeking to contribute to national security through innovative satellite and sensor technologies. The role offers a collaborative culture that values empowerment and accountability, with a work arrangement that supports a fast-paced, team-oriented environment.

This Principal Product Security Engineer role supports the newly formed Product Security team within Johnson & Johnson's medical device division, focusing on integrating security by design into the product lifecycle. The position requires collaboration with engineering groups to establish and refine security processes, serve as a subject matter expert on cyber risks, and manage pre-market and post-market compliance activities including threat modeling and vulnerability management. The role appeals to candidates seeking to directly impact patient safety while working in a collaborative, patient-first culture. The position is based in Danvers, Massachusetts or Raritan, New Jersey, with a hybrid work arrangement requiring office presence at least three days per week.

The Security Assessor role at TLA focuses on evaluating the effectiveness of security controls within information systems to ensure data protection and regulatory compliance. Key responsibilities include conducting comprehensive security assessments, identifying vulnerabilities through scanning and testing, and collaborating with IT teams to validate remediation strategies. The position requires preparing detailed documentation and ensuring adherence to frameworks such as NIST and ISO 27001. This opportunity is appealing for professionals passionate about national security missions, offering a collaborative culture that values innovation and excellence. The company supports career growth through education reimbursement, certification opportunities, and professional development. The role is based on-site with a focus on delivering impactful outcomes for government customers.

This Principal Product Security Engineer role supports the newly formed Product Security team within Johnson & Johnson's medical device division. The position focuses on embedding security by design throughout the product lifecycle, from pre-market development to post-market vulnerability management. Key responsibilities include partnering with engineering teams to enforce security policies, creating and improving security processes, and generating critical documentation such as threat models and risk management plans. The role also involves guiding compliance certification activities and advising on balancing business needs with medical device security objectives. This opportunity appeals to candidates seeking to directly impact patient lives within a Patient First culture. The position is based in Danvers, MA or Raritan, NJ, with a hybrid work arrangement requiring office presence at least three days per week.

This Principal Product Security Engineer role supports the newly formed Product Security team within Johnson & Johnson's medical device division. The position focuses on embedding security by design throughout the product lifecycle, from pre-market development to post-market vulnerability management. Key responsibilities include partnering with engineering teams to enforce security policies, creating and improving security processes, and delivering critical documentation such as threat models and risk management plans for regulatory compliance. The role appeals to candidates seeking to directly impact patient lives by shaping industry standards in a collaborative, patient-first culture. While the position is primarily based in Danvers, MA or Raritan, NJ with a requirement to be in-office at least three days per week, remote work options may be considered on a case-by-case basis.

This Principal Product Security Engineer role supports the newly formed Product Security team within Johnson & Johnson's medical device division. The position focuses on embedding security by design throughout the product lifecycle, from pre-market development to post-market vulnerability management. Key responsibilities include partnering with engineering teams to enforce security policies, creating and improving security processes, and delivering critical documentation such as threat models and risk management plans. The role also involves guiding compliance certification activities and advising development teams on balancing business needs with medical device security objectives. This opportunity appeals to candidates seeking to directly impact patient lives within a collaborative, patient-first culture. The position is based in Danvers, MA or Raritan, NJ, with a hybrid work arrangement requiring office presence at least three days per week.

This Principal Product Security Engineer role supports the newly formed Product Security team within Johnson & Johnson's medical device division. The position focuses on embedding security by design throughout the product lifecycle, from pre-market development to post-market vulnerability management. Key responsibilities include partnering with engineering teams to enforce security policies, creating and improving security processes, and delivering critical documentation such as threat models and risk management plans. The role appeals to candidates seeking to directly impact patient lives by shaping industry standards and ensuring compliance with rigorous regulatory frameworks like FDA, ISO 27001, and SOC2. The position is based in Danvers, MA, or Raritan, NJ, with a hybrid work arrangement requiring office presence three days per week, offering a collaborative environment within a Patient First culture.

This Principal Product Security Engineer role supports the newly formed Product Security team within Johnson & Johnson's medical device division, focusing on integrating security by design into the product lifecycle. The position requires partnering with engineering groups to enforce security policies, develop risk management documentation, and guide teams through pre-market and post-market compliance activities. Key responsibilities include creating security processes, acting as a subject matter expert on cyber threats, and supporting certifications such as SOC2 and ISO 27001. The role is based in Danvers, MA, with a hybrid schedule requiring three days in the office, though remote options may be considered. The position appeals to candidates seeking to impact patient safety directly within a collaborative, patient-first culture while shaping industry standards for medical device security.

This Principal Product Security Engineer role is part of the Technology Enterprise Strategy & Security team within Johnson & Johnson's medical device division. The position focuses on embedding security by design into the product development lifecycle, partnering with engineering groups to ensure adherence to security policies and regulatory standards. Key responsibilities include creating and improving security processes, acting as a subject matter expert on cyber security matters, and delivering critical documentation for pre-market activities and compliance certifications such as SOC2 and ISO 27001. The role appeals to candidates seeking to directly impact patient lives through innovative security solutions in a regulated environment. The position is based in Danvers, MA, with a hybrid work arrangement requiring office presence three days per week, though remote options may be considered on a case-by-case basis.

This Principal Product Security Engineer role supports the newly formed Product Security team within Johnson & Johnson's medical device division. The position focuses on embedding security by design throughout the product lifecycle, from pre-market development to post-market vulnerability management. Key responsibilities include partnering with engineering teams to enforce security policies, creating and improving security processes, and delivering critical documentation such as threat models and risk management plans. The role also involves guiding compliance certification activities and advising development teams on balancing business needs with medical device security objectives. This opportunity appeals to candidates seeking to directly impact patient lives within a Patient First culture. The position is based in Danvers, MA, with a hybrid work arrangement requiring office presence three days per week, though remote options may be considered case-by-case.

This Principal Product Security Engineer role resides within the Technology Enterprise Strategy & Security team at Johnson & Johnson, focusing on securing medical device products. The position involves partnering with engineering groups to embed security by design throughout the product lifecycle, from pre-market development to post-market vulnerability management. Key responsibilities include creating and refining security processes, acting as a subject matter expert on cyber threats, and delivering critical documentation for regulatory compliance such as SOC2 and ISO 27001. The opportunity is appealing for its chance to directly impact patient safety while shaping industry standards in a Patient First culture. The role is based in Danvers, MA or Raritan, NJ, with a hybrid work arrangement requiring office presence three days per week.

This Principal Product Security Engineer role supports the newly formed Product Security team within Johnson & Johnson's medical device division. The position focuses on embedding security by design throughout the product lifecycle, from pre-market development to post-market vulnerability management. Key responsibilities include partnering with engineering teams to enforce security policies, creating and improving security processes, and delivering critical documentation such as threat models and risk management plans. The role appeals to candidates seeking to directly impact patient lives by shaping industry standards and ensuring compliance with rigorous frameworks like ISO 27001 and FDA regulations. The position is based in Danvers, MA or Raritan, NJ, with a hybrid work arrangement requiring office presence three days per week, offering a collaborative environment within a Patient First culture.

This full-time Information System Security Engineer role supports the Crane Naval Base in Indiana within a government-focused technology team. The position involves designing and implementing secure network architectures, managing Risk Management Framework activities, and developing technical security documentation such as risk assessments and cybersecurity strategies. The role requires independent execution of certification and testing processes in compliance with NIST and DoD standards. The position is appealing due to the company's strong investment in employee growth through training, certification support, and tuition assistance. It offers a collaborative small-company culture with Monday through Friday day shifts, paid relocation assistance, and comprehensive benefits including healthcare and retirement plans.

The Associate Director, Research Security role at the University of Pennsylvania leads the institution's program for managing federal research data security compliance within a complex academic environment. Key responsibilities include developing risk-based security policies, ensuring adherence to standards such as CMMC and NIST SP 800-171, and coordinating institution-wide initiatives to protect sensitive research data. The position involves auditing system inventories, managing incident response, and serving as a subject matter expert for contract negotiators and research teams. This opportunity appeals to professionals seeking to work at a world-renowned Ivy League university with a collaborative culture, offering access to extensive professional development, comprehensive benefits, and a dynamic urban campus in Philadelphia.

The Cyber Security Analyst II role supports the Naval Information Warfare Center in Oahu, Hawaii, focusing on the FORGE additive manufacturing facility at Schofield Barracks. Key responsibilities include developing Risk Management Framework packages, maintaining Authorization and Accreditation documentation, and implementing security controls aligned with NIST standards. The position involves assessing vulnerabilities using tools like ACAS and Nessus, managing POA&Ms, and creating system authorization boundary diagrams. This opportunity appeals to professionals seeking to work within a high-impact Department of War Joint environment while collaborating with diverse internal and external stakeholders. The role requires an active Secret security clearance and offers a chance to contribute to critical national security infrastructure.

The Director of Information Security leads the Information Technology Compliance Department within a banking institution, overseeing enterprise-wide cybersecurity, third-party vendor risk, and incident response strategies. Key responsibilities include managing regulatory compliance with frameworks like NIST CSF 2.0 and GLBA, developing and testing incident response playbooks, and directing artificial intelligence security policies. The role involves mentoring staff, presenting risk assessments to the Board of Directors, and maintaining relationships with external regulatory agencies. This position offers a dynamic environment for a seasoned leader to shape the bank's security posture while enjoying a hybrid work arrangement that balances office collaboration with remote flexibility.

This full-time Cyber Security Engineer role supports mission-critical national security and defense programs for Maximus in San Antonio, Texas. The position requires an active TS/SCI clearance and involves implementing cybersecurity controls, conducting risk assessments, and responding to security incidents within DoD environments. Key responsibilities include performing vulnerability scans, ensuring compliance with RMF and NIST standards, and collaborating with engineering teams to maintain system security. The role appeals to professionals seeking high-impact work in a fast-paced government setting with a focus on accountability and results. Candidates must be available to work onsite five days a week and possess five years of experience with DoD frameworks and security technologies.

The Information Systems Security Officer role serves as a dual technical architect and compliance steward within the OIM department, bridging cybersecurity architecture with federal governance. Key responsibilities include designing secure-by-design systems, managing the Assessment and Authorization process, and overseeing continuous monitoring of security controls across diverse information systems. The position requires leading risk assessments, maintaining Plans of Action and Milestones, and ensuring strict adherence to NIST and DOE federal mandates. This opportunity appeals to professionals seeking to shape enterprise security strategy while working in a collaborative environment that values resilience and mission-critical protection. The role involves close collaboration with cross-functional teams and offers the chance to influence security culture through training and policy development.

This full-time Cyber Systems Security Engineer role within Lockheed Martin's Rotary and Mission Systems division focuses on securing critical defense systems, specifically supporting F-35 training and logistics operations. The position involves designing cybersecurity solutions across the entire system lifecycle, conducting risk assessments and vulnerability analyses, and collaborating with architects to resolve security trade-offs. The role also includes performing security testing to validate hardware and software designs and supporting compliance activities. This opportunity appeals to candidates seeking to work on cutting-edge technology in a collaborative environment that values innovation and professional growth. The work arrangement features a hybrid schedule with part-time remote flexibility and part-time on-site presence at a designated facility, requiring travel and a Secret-level security clearance.

This Security Operations Engineer role supports the Joint Staff and CNMF within Accenture Federal Services to plan and execute full-spectrum cyber operations for the US federal government. Key responsibilities include monitoring system logs and network traffic to identify threats, utilizing SIEM and intrusion detection tools to manage incidents, and conducting thorough investigations to mitigate security risks. The position appeals to mission-driven professionals seeking to strengthen national security within a collaborative, inclusive culture recognized as a top workplace. Candidates will benefit from extensive growth opportunities through hands-on experience, certifications, and industry training. The role requires an active TS/SCI clearance and is based on-site.

The Senior Associate Privacy Specialist role within Charles River Associates' Forensic Services practice focuses on helping clients design and implement privacy programs aligned with global data protection regulations. Key responsibilities include advising on privacy-by-design practices, conducting privacy impact assessments, translating regulatory requirements into technical specifications, and supporting the integration of privacy management technologies. The position appeals to professionals seeking to work on high-impact litigation and compliance matters while collaborating across engineering, legal, and product teams. The role offers a hybrid work arrangement requiring three to four days in the office to foster mentorship, career growth, and inclusivity within a collaborative global consulting environment.

This full-time Cybersecurity A&A Engineer role supports the Command and Control, Battle Management and Communications team at Lockheed Martin, focusing on the Missile Defense System. The position involves analyzing system scans for continuous authorization, conducting risk assessments for acceptance requests, and collaborating with stakeholders to address vulnerabilities and improve cybersecurity workflows. The role offers a collaborative environment within an agile team, opportunities to interface with key government customers, and a supportive culture that values employee well-being. Located in Colorado Springs, the job requires onsite work with approximately 10% travel and features a flexible condensed work schedule.

The Senior Specialist, Information Security Systems Engineering role supports L3Harris's mission to deliver secure technology solutions for national defense across space, air, land, sea, and cyber domains. Based in Dahlgren, VA or Colorado Springs, CO, this on-site position involves applying systems security engineering methods to design, evaluate, and integrate secure networks and systems. Key responsibilities include conducting vulnerability scans, managing risk mitigation strategies, preparing Certification and Accreditation documentation, and serving as the primary incident handler for security events. The role appeals to professionals seeking to work with state-of-the-art security tools and contribute to mission-critical projects within an inclusive culture that values professional growth and work-life success.

The Information Systems Security Officer role is based onsite at the Quonset Point, Rhode Island facility and supports the C-130J Maintenance and Aircrew Training System cybersecurity team. The position involves developing and maintaining security plans for classified Windows and Linux environments, managing system accreditation under the Risk Management Framework, and conducting vulnerability assessments using tools like ACAS and Nessus. Key responsibilities include performing routine security scans, applying patches, maintaining Plan of Action and Milestones, and investigating security incidents. This opportunity appeals to professionals seeking to work with a pioneering cyber security organization that values innovation and integrity. The role offers a collaborative culture with flexible work schedules, comprehensive benefits, and the chance to solve complex engineering challenges while supporting national security missions.

This full-time Information Systems Security Officer role is based onsite at the Quonset Point, Rhode Island facility within Lockheed Martin's Rotary and Mission Systems division. The position supports classified cybersecurity operations for the C-130J Maintenance and Aircrew Training System. Key responsibilities include managing system accreditation under the Risk Management Framework, developing security plans, conducting vulnerability scans, and maintaining compliance with NIST and DoD directives. The role appeals to professionals seeking to work on complex engineering challenges within a culture that values innovation, integrity, and purposeful mission work. Employees benefit from flexible work schedules, comprehensive health and wellness benefits, and opportunities for professional growth in a collaborative environment.