Nist 800-53a Jobs

This full-time Cybersecurity Engineer role at KLA focuses on endpoint detection and protection within the semiconductor manufacturing ecosystem. The position serves as a subject matter expert responsible for configuring, tuning, and optimizing enterprise EDR and EPM platforms across Windows, macOS, and Linux environments. Key duties include designing detection policies aligned with MITRE ATT&CK frameworks, collaborating with the SOC to reduce false positives, and leading incident response investigations using endpoint telemetry. The role appeals to candidates seeking to solve complex security challenges in a culture that invests heavily in innovation and R&D. The position is based in Ann Arbor, Michigan, and offers opportunities for professional growth through exposure to cutting-edge threat hunting and advanced security tooling.

This senior-level Marine Structural Engineer role serves as a technical lead for waterfront infrastructure projects within Moffatt & Nichol's New York City office. The position focuses on developing design standards for marine structures, conducting complex structural analysis, and providing technical oversight to junior staff. Key responsibilities include collaborating with multidisciplinary teams, performing quality assurance reviews, and managing direct client interactions. The role appeals to professionals seeking to work for a globally recognized leader in port and coastal engineering. It offers a collaborative culture with extensive mentorship opportunities, comprehensive benefits including wellness programs and tuition reimbursement, and a hybrid work arrangement that is primarily office-based with occasional site visits and light travel.

The Supervisor - Cyber Engineering role is a client-facing position within RSM's global Cyber practice, focusing on cloud transformation, architecture, and DevSecOps engineering. The team collaborates with software engineers and architects to design scalable cloud solutions, implement Infrastructure as Code, and build automated CI/CD pipelines for diverse industries. Key responsibilities include guiding executive stakeholders through cloud adoption roadmaps, developing cloud-native strategies, and solving complex technology challenges using platforms like AWS, Azure, and GCP. The position appeals to professionals seeking growth in high-demand areas such as cloud security and AI development within a supportive, cross-functional environment. The role offers flexibility in scheduling to help balance professional demands with personal life while providing opportunities to work on cutting-edge digital transformation initiatives.

The Associate Director, Research Security role at the University of Pennsylvania leads the institution's program for managing federal research data security compliance within a complex academic environment. Key responsibilities include developing risk-based security policies, ensuring adherence to standards such as CMMC and NIST SP 800-171, and coordinating institution-wide initiatives to protect sensitive research data. The position involves auditing system inventories, managing incident response, and serving as a subject matter expert for contract negotiators and research teams. This opportunity appeals to professionals seeking to work at a world-renowned Ivy League university with a collaborative culture, offering access to extensive professional development, comprehensive benefits, and a dynamic urban campus in Philadelphia.

The Cyber Security Analyst II role supports the Naval Information Warfare Center in Oahu, Hawaii, focusing on the FORGE additive manufacturing facility at Schofield Barracks. Key responsibilities include developing Risk Management Framework packages, maintaining Authorization and Accreditation documentation, and implementing security controls aligned with NIST standards. The position involves assessing vulnerabilities using tools like ACAS and Nessus, managing POA&Ms, and creating system authorization boundary diagrams. This opportunity appeals to professionals seeking to work within a high-impact Department of War Joint environment while collaborating with diverse internal and external stakeholders. The role requires an active Secret security clearance and offers a chance to contribute to critical national security infrastructure.

This full-time Cybersecurity A&A Engineer role supports the Command and Control, Battle Management and Communications team at Lockheed Martin, focusing on the Missile Defense System. The position involves analyzing system scans for continuous authorization, conducting risk assessments for acceptance requests, and collaborating with stakeholders to address vulnerabilities and improve cybersecurity workflows. The role offers a collaborative environment within an agile team, opportunities to interface with key government customers, and a supportive culture that values employee well-being. Located in Colorado Springs, the job requires onsite work with approximately 10% travel and features a flexible condensed work schedule.

The Information Systems Security Officer role is based onsite at the Quonset Point, Rhode Island facility and supports the C-130J Maintenance and Aircrew Training System cybersecurity team. The position involves developing and maintaining security plans for classified Windows and Linux environments, managing system accreditation under the Risk Management Framework, and conducting vulnerability assessments using tools like ACAS and Nessus. Key responsibilities include performing routine security scans, applying patches, maintaining Plan of Action and Milestones, and investigating security incidents. This opportunity appeals to professionals seeking to work with a pioneering cyber security organization that values innovation and integrity. The role offers a collaborative culture with flexible work schedules, comprehensive benefits, and the chance to solve complex engineering challenges while supporting national security missions.

This full-time Information Systems Security Officer role is based onsite at the Quonset Point, Rhode Island facility within Lockheed Martin's Rotary and Mission Systems division. The position supports classified cybersecurity operations for the C-130J Maintenance and Aircrew Training System. Key responsibilities include managing system accreditation under the Risk Management Framework, developing security plans, conducting vulnerability scans, and maintaining compliance with NIST and DoD directives. The role appeals to professionals seeking to work on complex engineering challenges within a culture that values innovation, integrity, and purposeful mission work. Employees benefit from flexible work schedules, comprehensive health and wellness benefits, and opportunities for professional growth in a collaborative environment.

The Cyber Information Assurance Analyst III role supports federal government clients by validating security requirements and assessing systems within complex networking environments. Key responsibilities include conducting cybersecurity audits, performing vulnerability assessments using tools like eMASS and Nessus, and analyzing security gaps to provide mitigation recommendations. The position requires travel approximately 85% of the time across domestic and international locations. This opportunity appeals to professionals seeking to work with a diverse holding company that supports economic development for the Chickasaw Nation. The role offers immediate eligibility for premium benefits including medical, dental, vision, and 401(k) with immediate vesting, alongside professional development assistance and a collaborative culture focused on national security.

This senior-level Cybersecurity Engineer role supports an enterprise program management office dedicated to securing global communications networks for national defense. The position involves implementing security solutions compliant with DoD, NIST, and RMF directives while managing the Authority to Operate process using eMASS. Key responsibilities include leading vulnerability remediation efforts, developing Plan of Action and Milestones, and mentoring junior team members in a client-facing environment. The role appeals to professionals seeking to protect critical infrastructure with a mission-driven culture that values collaboration and professional growth. While the work arrangement is flexible with remote options, the position requires a Top Secret clearance and may involve occasional on-site collaboration at client facilities.

This senior principal cyber software engineering role supports the Sentinel program within Northrop Grumman Defense Systems, located in Huntsville, Colorado Springs, or Roy. The position requires an active Secret clearance and involves leading design review procedures, decomposing requirements for implementation, and providing systems engineering expertise for enterprise-level cybersecurity systems. Key duties include evaluating designs against Department of Defense standards, utilizing model-based engineering tools, and ensuring compliance with industry regulations. The role appeals to candidates seeking to work on revolutionary defense technologies that impact global security. It offers a collaborative culture that values intellectual curiosity and innovation, with opportunities for professional growth and a work arrangement that includes approximately 10% travel.

The Security Engineer II role within the Information Security department at Keck Medicine of USC focuses on safeguarding information systems assets and protecting networks from unauthorized access. Key responsibilities include implementing and monitoring security measures, investigating and remediating incidents using standard protocols, and developing technical solutions to automate security tasks. The position requires 24x7 incident response support, including after-hours and weekend availability, as well as collaboration with senior engineers on complex issues. This opportunity appeals to candidates seeking to work in a mission-driven healthcare environment where they can apply their expertise in network and system security to protect critical data. The role offers professional growth through the development of security policies and the implementation of emerging technologies while maintaining a collaborative team culture.

This Director, Information Security Officer role leads cybersecurity strategy and operations for a key line of business within Capital One's Information Security Office. The position involves building and mentoring a team of security professionals to deliver product advisory services, manage cyber risks, and integrate security into modern cloud and data ecosystems. Key responsibilities include developing tailored security strategies, overseeing threat and vulnerability management, and advising executive leadership on risk-based initiatives. The role is appealing for its opportunity to drive innovation in a dynamic financial technology environment, work with cutting-edge technologies like Generative AI and Zero Trust, and foster a culture where security acts as a business enabler rather than a compliance hurdle.

This role involves providing comprehensive geriatric care within the PACE program for a medically complex population in outpatient and community settings. The position focuses on preventive care, chronic disease management, and enhancing the quality of life for elderly participants through a collaborative interdisciplinary model. Key responsibilities include managing a daily volume of 8 to 12 patients, conducting weekly follow-up calls, and utilizing the Epic EMR system for documentation. The opportunity is appealing due to its all-inclusive housing and travel support, a structured five-day work schedule, and a supportive team environment that includes medical assistants and other staff. The role offers a three-month commitment with potential for extension and welcomes physicians who have recently completed residency.

This Principal Product Security Engineer role supports the newly formed Product Security team within Johnson & Johnson's medical device division, focusing on integrating security by design into the product lifecycle. The position requires collaboration with engineering groups to establish and refine security processes, serve as a subject matter expert on cyber risks, and manage pre-market and post-market compliance activities including threat modeling and vulnerability management. The role appeals to candidates seeking to directly impact patient safety while working in a collaborative, patient-first culture. The position is based in Danvers, Massachusetts or Raritan, New Jersey, with a hybrid work arrangement requiring office presence at least three days per week.

This Principal Product Security Engineer role supports the newly formed Product Security team within Johnson & Johnson's medical device division. The position focuses on embedding security by design throughout the product lifecycle, from pre-market development to post-market vulnerability management. Key responsibilities include partnering with engineering teams to enforce security policies, creating and improving security processes, and generating critical documentation such as threat models and risk management plans. The role also involves guiding compliance certification activities and advising on balancing business needs with medical device security objectives. This opportunity appeals to candidates seeking to directly impact patient lives within a Patient First culture. The position is based in Danvers, MA or Raritan, NJ, with a hybrid work arrangement requiring office presence at least three days per week.

This Principal Product Security Engineer role supports the newly formed Product Security team within Johnson & Johnson's medical device division. The position focuses on embedding security by design throughout the product lifecycle, from pre-market development to post-market vulnerability management. Key responsibilities include partnering with engineering teams to enforce security policies, creating and improving security processes, and delivering critical documentation such as threat models and risk management plans for regulatory compliance. The role appeals to candidates seeking to directly impact patient lives by shaping industry standards in a collaborative, patient-first culture. While the position is primarily based in Danvers, MA or Raritan, NJ with a requirement to be in-office at least three days per week, remote work options may be considered on a case-by-case basis.

This Principal Product Security Engineer role supports the newly formed Product Security team within Johnson & Johnson's medical device division. The position focuses on embedding security by design throughout the product lifecycle, from pre-market development to post-market vulnerability management. Key responsibilities include partnering with engineering teams to enforce security policies, creating and improving security processes, and delivering critical documentation such as threat models and risk management plans. The role also involves guiding compliance certification activities and advising development teams on balancing business needs with medical device security objectives. This opportunity appeals to candidates seeking to directly impact patient lives within a collaborative, patient-first culture. The position is based in Danvers, MA or Raritan, NJ, with a hybrid work arrangement requiring office presence at least three days per week.

This Principal Product Security Engineer role supports the newly formed Product Security team within Johnson & Johnson's medical device division. The position focuses on embedding security by design throughout the product lifecycle, from pre-market development to post-market vulnerability management. Key responsibilities include partnering with engineering teams to enforce security policies, creating and improving security processes, and delivering critical documentation such as threat models and risk management plans. The role appeals to candidates seeking to directly impact patient lives by shaping industry standards and ensuring compliance with rigorous regulatory frameworks like FDA, ISO 27001, and SOC2. The position is based in Danvers, MA, or Raritan, NJ, with a hybrid work arrangement requiring office presence three days per week, offering a collaborative environment within a Patient First culture.

This Principal Product Security Engineer role supports the newly formed Product Security team within Johnson & Johnson's medical device division, focusing on integrating security by design into the product lifecycle. The position requires partnering with engineering groups to enforce security policies, develop risk management documentation, and guide teams through pre-market and post-market compliance activities. Key responsibilities include creating security processes, acting as a subject matter expert on cyber threats, and supporting certifications such as SOC2 and ISO 27001. The role is based in Danvers, MA, with a hybrid schedule requiring three days in the office, though remote options may be considered. The position appeals to candidates seeking to impact patient safety directly within a collaborative, patient-first culture while shaping industry standards for medical device security.

This Principal Product Security Engineer role is part of the Technology Enterprise Strategy & Security team within Johnson & Johnson's medical device division. The position focuses on embedding security by design into the product development lifecycle, partnering with engineering groups to ensure adherence to security policies and regulatory standards. Key responsibilities include creating and improving security processes, acting as a subject matter expert on cyber security matters, and delivering critical documentation for pre-market activities and compliance certifications such as SOC2 and ISO 27001. The role appeals to candidates seeking to directly impact patient lives through innovative security solutions in a regulated environment. The position is based in Danvers, MA, with a hybrid work arrangement requiring office presence three days per week, though remote options may be considered on a case-by-case basis.

This Principal Product Security Engineer role supports the newly formed Product Security team within Johnson & Johnson's medical device division. The position focuses on embedding security by design throughout the product lifecycle, from pre-market development to post-market vulnerability management. Key responsibilities include partnering with engineering teams to enforce security policies, creating and improving security processes, and delivering critical documentation such as threat models and risk management plans. The role also involves guiding compliance certification activities and advising development teams on balancing business needs with medical device security objectives. This opportunity appeals to candidates seeking to directly impact patient lives within a Patient First culture. The position is based in Danvers, MA, with a hybrid work arrangement requiring office presence three days per week, though remote options may be considered case-by-case.