Security Engineer Remote Jobs in Idaho (US)
This page tracks remote security engineer openings that are location-eligible for Idaho.
This page tracks remote security engineer openings that are location-eligible for Idaho.
Open jobs
3,226
Hiring companies this week
10
Salary sample
$98,400 - $160,000
Jobs added last hour
0
3226 Jobs
1679 Companies
• Lead and deliver complex security engagements centered on Azure Security, Identity & Access Management (IAM), and Microsoft Purview / AI Governance. • Serve as a principal-level architect, thought leader, and trusted advisor who shapes secure cloud, data, and AI governance strategies for enterprise clients while remaining deeply engaged in delivery. • Provide senior technical leadership across multiple strategic client engagements. Lead executive and architectural design sessions, define target-state security architectures, and guide delivery teams through implementation with a strong focus on quality, scalability, and measurable business outcomes. • Act as a trusted advisor to client stakeholders, including security, infrastructure, data, and executive leaders. Shape security roadmaps, advise on operating models and governance, and bring forward innovative perspectives on Azure security, identity modernization, data protection, and AI governance. • Remain hands-on in delivery while overseeing complex programs from strategy through implementation. Partner with delivery leadership to align milestones, manage technical risk, remove blockers, and ensure successful outcomes across architecture, implementation, and adoption phases. • Design and lead implementation of enterprise security architectures across Azure and hybrid environments, including Microsoft Entra ID, Conditional Access, Identity Protection, Privileged Identity Management (PIM), role-based access control, Zero Trust controls, workload protection, and security monitoring patterns aligned to least privilege and strong governance. • Lead engagements focused on Microsoft Purview, information protection, data security posture management, data loss prevention, compliance, and governance for Copilot, AI applications, and AI agents. Help clients establish secure and compliant approaches for data access, policy enforcement, monitoring, lifecycle management, and responsible AI enablement. • Contribute approximately 25-30% of role capacity to sales enablement and solution development activities. Partner with account teams and solution leaders to shape opportunities, lead discovery conversations, develop solution approaches, support estimates and statements of work, contribute to proposals, and articulate differentiated value in client pursuits. • Help scale the security practice through reusable assets, reference architectures, accelerators, and delivery standards. Mentor architects and engineers, coach teams on emerging Microsoft security capabilities, and strengthen organizational readiness across Azure security, identity, data governance, and AI security disciplines.
Vultr is on a mission to make high-performance cloud computing easy to use, affordable, and locally accessible.
• Define and own the roadmap for data center physical security programs, including access control, surveillance, intrusion detection, and perimeter protection. • Translate business and security objectives into executable program plans with measurable outcomes. • Lead global initiatives spanning new builds, retrofits, and operational enhancements. • Drive end-to-end program execution across design, procurement, deployment, and operations. • Manage dependencies across engineering, construction, compliance, and vendor teams. • Ensure programs are delivered on time, within scope, and aligned with risk posture. • Partner with security engineers to define scalable, standardized physical security architectures. • Establish global design standards for systems such as CCTV, badge access, biometrics, and monitoring platforms. • Continuously evaluate emerging technologies and integrate improvements. • Identify, assess, and mitigate physical security risks across data center environments. • Ensure compliance with industry standards (e.g., ISO 27001, SOC 2, NIST frameworks). • Lead audits, incident reviews, and corrective action programs. • Collaborate with executive leadership, regional operations, legal, and compliance teams. • Communicate program status, risks, and tradeoffs clearly to technical and non-technical audiences. • Influence decision-making across organizational boundaries. • Manage relationships with security vendors, integrators, and consultants. • Oversee RFP processes, vendor selection, and performance management. • Drive cost efficiency without compromising security posture.
Oracle, headquartered in Austin, Texas, is a global leader in computing solutions. The company specializes in database management systems, cloud-engineered systems, and enterprise
Role Description Oracle is seeking a Senior Manager, Security Evaluations to lead our global security evaluation strategy and team of specialists. This leader will drive certification initiatives across Oracle products and services, ensuring alignment with evolving global security standards while enabling business growth, customer trust, and market access. This is a highly strategic and technical leadership role requiring deep, recent experience working with external certification and regulatory ecosystems, including standards bodies and government schemes such as: - FIPS - Common Criteria - NESAS - Other related international frameworks The successful candidate will serve as Oracle's senior representative to industry and regulatory organizations, partnering with Oracle engineering, product management, compliance, and leadership to influence certification requirements and integrate certification planning into product roadmaps. The successful candidate will remotely manage a globally distributed team of five specialists across Europe, Canada, and the U.S. Candidate would also oversee relationships with Oracle business units that rely on the team’s regulatory compliance expertise. Qualifications - Deep experience with external certification and regulatory ecosystems - Experience with standards bodies and government schemes - Ability to influence certification requirements - Experience managing a distributed team Requirements - Strong leadership skills - Technical expertise in security evaluations - Excellent communication and collaboration abilities Benefits - Flexible medical options - Life insurance - Retirement options - Opportunities for community involvement through volunteer programs Company Description Only Oracle brings together the data, infrastructure, applications, and expertise to power everything from industry innovations to life-saving care. And with AI embedded across our products and services, we help customers turn that promise into a better future for all. True innovation starts when everyone is empowered to contribute. That’s why we’re committed to growing a workforce that promotes opportunities for all. Oracle is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans’ status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.
Role Description Monitor our security dashboards, triage findings, and plan and implement remediation steps end to end. - Proactively shape our infrastructure architecture and configuration with security and compliance front of mind. - Implement infrastructure changes hands-on, applying DevOps practices across infrastructure-as-code, CI/CD, and cloud configuration. - Keep track of emerging threats, CVEs, and advisories, and drive timely mitigation across our systems. - Partner with engineering teams to embed security into the development lifecycle rather than bolting it on. - Help us meet and maintain compliance requirements relevant to healthcare data. Qualifications - Solid experience in a DevOps, SRE, or cloud security role, with hands-on infrastructure work. - Strong knowledge of AWS, containerized workloads (Docker, Kubernetes), and infrastructure-as-code (Terraform). - Hands-on experience with cloud security posture management tooling. - A working understanding of vulnerability management and how to prioritize and remediate threats in practice. - Familiarity with security and compliance frameworks (e.g., SOC 2, ISO 27001, GDPR; healthcare-specific frameworks a plus). - Comfortable building and maintaining CI/CD pipelines. - A proactive, ownership-driven mindset and the ability to communicate risk clearly to engineers and stakeholders. - Proven experience in collaboration with AI tools like Codex or Claude Code. - English working proficiency. Benefits - Exciting start-up atmosphere. Gone are the days in which you wait for approvals for months. - Make our disruptive product even better. Change how healthcare functions. - Work with state-of-the-art technology. No legacy code. No technological debt. All green fields. - Your workplace—your choice. Office? Great! Home? Sure! Mars? Not sure about the Internet there, but why not. - Flexible working hours. No downtime. High degree of autonomy. - The team. Collaborative. Fun. True professionals. A real team. - Remote work opportunity. Company Description We are growing and excited to meet you to join us on our mission. Let's revolutionize health care together!
Role Description We are seeking an experienced Security Engineer – Smart Contract Auditor to ensure the robustness, transparency, and safety of our blockchain ecosystem. The role requires deep technical expertise in smart contracts, blockchain security, and cryptographic protocols. - Conduct comprehensive audits of smart contracts, blockchain protocols, and decentralized applications (dApps). - Identify, analyze, and remediate vulnerabilities in smart contracts, including reentrancy, overflow/underflow, logic errors, gas optimization issues, and governance risks. - Design and implement security best practices for smart contract development and deployment. - Collaborate with blockchain engineers to review architecture and propose secure design improvements. - Perform penetration testing and threat modeling specific to blockchain and DeFi environments. - Write detailed audit reports, including vulnerabilities, risk assessments, and recommendations. - Monitor deployed contracts and blockchain infrastructure for abnormal activities and potential exploits. - Stay updated on the latest blockchain security threats, vulnerabilities, and industry best practices. - Educate internal teams on security awareness, safe coding practices, and emerging risks. Qualifications - 3–5 years of experience in blockchain security, smart contract auditing, or cybersecurity roles. - Strong understanding of Ethereum, Solidity, and EVM-based chains (experience with other chains like BSC, Polygon, Polkadot, or Layer-2s is a plus). - Hands-on experience auditing DeFi protocols, staking contracts, NFTs, or DAO governance contracts. - Proven experience with blockchain security tools (e.g., MythX, Slither, Echidna, Foundry, Tenderly, Hardhat, Truffle). - Knowledge of cryptographic principles (hashing, signatures, zero-knowledge proofs) and applied security. - Experience publishing or contributing to audit reports, whitepapers, or security advisories is a strong plus. - Expert in Solidity, smart contract development, and debugging. - Strong analytical and problem-solving skills for identifying complex vulnerabilities. - Proficiency in penetration testing, fuzzing, and formal verification methods. - Ability to clearly document findings and communicate with both technical and non-technical stakeholders. - Familiarity with secure coding guidelines and blockchain threat landscapes. Requirements - Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Cryptography, or related technical field. - Fluent in English. Benefits - Competitive Financial Compensation: We offer financial benefits that reflect the value of your work and dedication. - Work Flexibility: Enjoy the flexibility to work from home, the office, or even abroad. - Annual Holidays: Generous paid time off to help you maintain a healthy work-life balance. - Relocation Assistance: We provide relocation support for employees moving to new locations. - Professional Development: Opportunities for training, certifications, and career growth. - Employee Recognition: Programs to celebrate and reward your achievements and contributions. - Inclusive & Collaborative Culture: A supportive and diverse work environment where your voice matters. - Diversity, Equality, and Inclusion: We are committed to fostering a workplace that values diversity and promotes equality and inclusion for all employees.
Solving big problems, building trust in society, and empowering our clients to shape the future.
Role Description The Security Assessor supports security and privacy control assessments for public‑sector systems by evaluating control effectiveness, validating evidence, and contributing to formal assessment documentation under the direction of a Senior Security Assessor. This role is primarily focused on assessment execution and documentation; however, it also provides exposure to more technical aspects of system architecture and control implementation. Candidates should demonstrate curiosity and interest in expanding their skillset toward security engineering, automation, and emerging AI‑enabled approaches to compliance and assessment activities. This role focuses on assessment execution and documentation, not system engineering or operational security responsibilities. - Perform security and privacy control assessments in accordance with established assessment plans. - Review security documentation and technical evidence. - Validate control implementation through: - Evidence inspection - Architecture and system documentation review - Interviews with system owners and technical staff - Contribute to assessment artifacts, including: - SSP updates - SARs - ISRAs - POA&Ms - Document assessment results and clearly articulate control gaps and risks. - Maintain assessment independence and objectivity. - Identify opportunities to improve assessment efficiency through standardization, tooling, or automation of evidence collection and validation. - Support the use of data-driven or AI-assisted techniques to enhance analysis, traceability, and reporting over time. Qualifications - Minimum of THREE (3) years of experience supporting security control assessments, audits, or authorization activities. - Bachelors Degree is required. - US Citizenship is required. - Hands‑on experience contributing to formal security assessment documentation (SSPs, SARs, POA&Ms, or equivalents). - Working knowledge of NIST SP 800‑53 security and privacy controls. - Understanding of risk‑based assessment concepts. - Ability to analyze assessment evidence and clearly document findings. Requirements - Experience supporting government or other regulated environments. - Exposure to CMS, healthcare, or public‑sector security compliance frameworks. - Familiarity with A&A, RMF, or Security Control Assessment processes. - Relevant certifications (CISA, CISSP, CISM, Security+, or similar). - Prior background in or exposure to security engineering, cloud security, or system implementation. - Familiarity with modern architectures (cloud platforms, IAM, logging/monitoring, APIs) and how controls are implemented in those environments. - Exposure to automation tools, scripting, or GRC platforms supporting assessment or compliance activities. - Interest in applying AI/automation to improve audit readiness, evidence analysis, or continuous monitoring processes. Benefits - Medical, Rx, Dental & Vision Insurance. - Personal and Family Sick Time & Company Paid Holidays. - Position may be eligible for a discretionary variable incentive bonus. - Parental Leave and Adoption Assistance. - 401(k) Retirement Plan. - Basic Life & Supplemental Life. - Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts. - Short-Term & Long-Term Disability. - Student Loan PayDown. - Tuition Reimbursement, Personal Development & Learning Opportunities. - Skills Development & Certifications. - Employee Referral Program. - Corporate Sponsored Events & Community Outreach. - Emergency Back-Up Childcare Program. - Mobility Stipend.
HealthEdge is a Burlington, Massachusetts-based computer software company that provides services and solutions to the healthcare payer market. These services include digital end-to
Role Description The Information Security Architect will play a pivotal role in designing, implementing, and maintaining our organization's information security architecture on an enterprise scale. You’ll ensure our security capabilities are robust, scalable, and aligned with industry best practices and regulatory requirements by leveraging your deep understanding of cybersecurity principles, emerging threats, and advanced security technologies. - Strategic Leadership: Contribute to developing and communicating a strategic vision for our global security architecture. Alignment of security initiatives with business goals is a critical key to our success. - Architecture Design: Help design and implement comprehensive security architectures that encompass network security, application security, data protection, and identity management. - Risk Management: Identify and assess security risks and develop mitigation strategies to reduce those risks. - Technology Integration: Evaluate and implement advanced security technologies and solutions, working closely with IT teams to integrate security controls into existing and new systems. - Automation: Leverage automation throughout our technology stack to enhance business investments. - Focus on ensuring best practices are established with all facets of Identity and Access management. - Stakeholder Management: Build bridges throughout our organization, leading with education and building influence. Foster a positive and fun environment with a strong emphasis on exceptional mentoring. Qualifications - At least 10 years of experience in information security, with a focus on security architecture. - Extensive experience in engineering on-prem, hybrid, and cloud-based solutions. - Deep understanding of on-prem and cloud-based network securities, identity management, EDR, device trust, SASE, DLP, vulnerability management, and automation strategies. - Experience building scalable and future-proofed solutions that embrace defense in depth. - Proven ability to influence and drive change across an organization. Requirements - Experience with cloud security and securing cloud-based environments. - Knowledge of DevSecOps practices and integrating security into the software development lifecycle. - Experience with security information and event management (SIEM) solutions. - Knowledge of data privacy regulations and best practices for data protection. Benefits - Remote work opportunity. - Full-time, permanent employment. - Exempt FLSA classification (USA Only). - Competitive salary range of $146,000 to $156,000.
Built on more than 130 years of experience, GE Vernova, a division of General Electric (GE), is leading a new era of energy by electrifying the world while work
Role Description The Lead Protection and Controls Cyber Security Engineer is a key technical resource directly supporting Project Management and Technical Leaders for the definition, design, and implementation of the Cybersecurity requirements for Substation Automation projects. The incumbent acts as a technical authority for the project, ensuring the successful execution of both basic and detailed design phases within the defined delivery timelines, design budget (man-days), and quality standards. This role will deliver the technical execution for the substation LAN Networks and ensures Cybersecurity compliance for the substation automation system. Project architectures will encompass hardware devices and software applications to monitor, control, and protect various industrial applications in the energy sector and in particular the electrical grids. You will be actively involved in tendering support, design, configuration, FAT, and SAT activities. This is a customer-facing role requiring experience presenting solutions and supporting demos, pilots, and proof‑of‑concepts to stakeholders at multiple levels. Essential Responsibilities - Create and implement comprehensive substation automation network & cybersecurity designs, including creating Functional Design Specifications (FDS) and defining related architectures. - Act as the point of contact for all matters related to cybersecurity and networking in a project environment. - Lead the configuration of Cyber security devices including Switches, Routers, firewalls, etc. - Prepare and execute FAT and SAT plans to validate the Network and Cybersecurity solution. - Assist tendering team with reviewing RFQs, identifying clarifications and exceptions, preparing reference architectures, and estimating costs associated with implementing cybersecurity solutions. - Lead design reviews and customer technical discussions, resolving comments and driving timely approvals in compliance with quality and engineering standards. - Coordinate with cross-functional teams, suppliers, and partners to support FAT, site issue resolution, snag closure, and Site Acceptance Testing. - Drive on-time, high-quality delivery of design packages by tracking progress, controlling design hours, mitigating execution risks, and supporting scope and variation order assessments. - Represent customer technical requirements in design decisions, align engineering deliverables with business objectives, and ensure strict adherence to EHS standards and safe work practices. Qualifications - Bachelor’s degree in Electrical Engineering, Computer Science, or a related discipline from an accredited institution. - Minimum 5 years’ experience in design, implementation, testing, troubleshooting, and delivery of OT Networking solutions and Cybersecurity. - Minimum 3 years’ experience in substation automation protection and control solutions. - Fluent in English and able to travel up to 30% across the U.S. and Canada. Desired Characteristics - Strong technical expertise in the design and implementation of Substation Automation and protection and control solutions. - Knowledge of OT-specific protocols and standards such as Modbus, DNP3, IEC 61850, and OPC. - Experience in designing and implementing security controls for OT systems, including firewalls, intrusion detection systems, and access controls. - Familiarity with network segmentation techniques and security architectures for OT systems. - Knowledge of cyber security standards and regulations affecting the utilities industry, such as IEC 62443, NERC CIP, IEEE 1686, IEC 62351. - Relevant Cyber security certification (ex. ISC2, SANS, ISACA, CISSP) and Professional Engineering (PE) license are a plus. - Strong understanding of utility standards and practices, with the ability to tailor solutions to diverse customer requirements. - Working knowledge of protection systems and commissioning processes for Substation Automation Systems (SAS). - Proficient in project organization, engineering workflows, and execution planning to ensure efficient delivery. - Strong leadership, interpersonal, and stakeholder management skills, with the ability to influence cross-functional teams and communicate complex technical concepts clearly. - Excellent analytical, problem-solving, and Microsoft Office skills (Outlook, Word, Excel, PowerPoint, Visio). Benefits - Medical, dental, vision, and prescription drug coverage. - Access to Health Coach from GE Vernova, a 24/7 nurse-based resource. - Access to the Employee Assistance Program, providing 24/7 confidential assessment, counseling, and referral services. - Retirement benefits including the GE Vernova Retirement Savings Plan, a tax-advantaged 401(k) savings opportunity with company matching contributions. - Access to Fidelity resources and financial planning consultants. - Tuition assistance, adoption assistance, paid parental leave, disability benefits, life insurance, 12 paid holidays, and permissive time off. Additional Information GE Vernova offers a great work environment, professional development, challenging careers, and competitive compensation. GE Vernova is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law. GE Vernova will only employ those who are legally authorized to work in the United States for this opening. Any offer of employment is conditioned upon the successful completion of a drug screen (as applicable). This posting is expected to remain open for at least seven days after it was posted on June 08, 2026.
IOActive provides computer security services to Global 500 companies in a wide range of industries. IOActive specializes in computer security services that include application secu
Title: Red Team Specialist Location: United States Job Description: OUR MISSION UNITES US "Making the world a safer and more secure place." It's our mission, plain and simple. It drives everything we do - from research to client work to community involvement. And it unifies our global team into an elite force with integrity, fierce passion, and relentless creativity that doesn't just "push the envelope" or "think outside the box." We shred the envelope, crush the box, and we have fun doing it. We are always looking for people who share our mission to join us. About IOActive: IOActive, a trusted partner for Global 1000 enterprises, provides research-fueled security services across all industries. Our cutting-edge cybersecurity teams provide highly specialized technical and programmatic services including full-stack penetration testing, program efficacy assessments, and hardware hacking. IOActive brings a unique attacker's perspective to every engagement to maximize cybersecurity investments and improve the security posture and operational resiliency of our clients. Founded in 1998, IOActive is headquartered in Seattle with global operations, including state of the art hardware hacking labs in Seattle, WA, Madrid, Spain and Cheltenham, UK. IOActive Red Team Specialists perform multi-vector, chained attacks that include exploitation through physical, network, web, and social engineering methods with the goal of making our clients more secure and prepared to respond to real incidents. Activities involve planning and reconnaissance to identify critical assets and potential attack paths, exploitation of vulnerabilities resulting in infiltration of the environment, acting on the objectives of the campaign through post-exploitation, and documentation of actions and outcomes. What you'll do: - Work as part of a team performing Red and Purple Team Campaigns for IOActive clients, both remotely and on-site - Perform adversarial emulation, assumed breach scenarios, post-exploitation, social engineering, and physical security testing - Manage project tasks and deadlines on a multi-time-zone team - Develop unique tools to assist in project goals - Exploit vulnerabilities found in client's people, processes, and technology; then clearly communicate complex vulnerabilities to both technical and non-technical client staff - Create comprehensive technical reports explaining technical and business risk of the vulnerabilities found. This includes actionable recommendations/considerations for the client - Participate in project conference calls with clients and on business development calls in support of sales activities - Create and lead technical customer presentations - Provide technical leadership/mentorship to the consulting team and to our clients on security topics - Contribute to the security industry through presentations, whitepapers and/or research What you bring: - Experience performing and leading covert red team operations and activities, including performing adversarial emulation, assumed breach scenarios, post-exploitation, social engineering, and physical security testing - Penetration testing experience in Network, Web applications, Wireless networks, Physical security, and Social engineering - Experience with C2 and post-exploitation frameworks, including Cobalt Strike, Empire, Metasploit, Throwback, and similar tools - Understanding and proficiency with some of the following: Python, Ruby, PowerShell, Java, and Shell scripting - Knowledge and experience with enterprise network/system/application architecture and design including complex environments utilizing Microsoft Windows, Active Directory, and Linux - Deep understanding on Windows and Linux systems administration and post-exploitation activities on each platform - Ability to present complex material in a digestible, consumable manner to all levels of management - Highly experienced with OS, services, and application hardening - Strong ability to find vulnerabilities and develop proof of concepts - Ability and desire to travel at least 50% of the time - both nationally and globally What We Offer - A chance to work with an industry leader in cyber security - Access to world-class technical teams and research - A high-energy, collaborative team that values innovation - Flexibility-work remotely or from the office as needed - Opportunities for travel - Competitive compensation and performance-based incentives - Compensation Range: 100,000 to 150,00 USD, based on location and experience level. - If this sounds like your kind of challenge, we'd love to hear from you. Let's talk! Why IOActive: We have over 25 years of experience that's established and stable; yet high-growth with the energy, passion and dynamic work environment of a startup. We are renowned for our innovation and thought leadership within our high-profile, cutting edge space. We're one of "the good guys" doing crazy cool stuff to thwart bad guys in a critically important business, social and political arena. Our work is great fun with great importance. Above all else, we value our people and our customers. Relationships matter. IOActive is an equal opportunity employer that is committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws. This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. IOActive makes hiring decisions based solely on qualifications, merit, and business needs at the time.
Code Metal, Inc., established in 2023 and based in Boston, Massachusetts, specializes in AI-driven development workflows tailored for edge computing. Leveraging expertise from MIT
Facility Security Officer (FSO) Location Remote Employment Type Full time Department Operations About Code Metal Code Metal is redefining code translation for mission-critical industries, helping defense partners move more quickly and reliably from algorithm to silicon. Our platform accelerates deployment of DSP, RF, communications, and embedded signal processing algorithms onto heterogeneous compute targets, including GPUs, FPGAs, ASICs, and edge SoCs. We also support automotive, aerospace, and semiconductor partners deploying complex algorithms onto constrained hardware with speed and rigor. Facility Security Officer (FSO) Remote (U.S.-Based) | Full-Time Code Metal is currently seeking an experienced leader to serve as our Facility Security Officer (FSO). The selected individual will lead and implement the DoD Industrial Security Program. The FSO will coordinate and monitor highly sensitive aspects of the DoD Industrial Security Program and security activities while ensuring compliance with Government and company security policies and procedures. The successful candidate will interface with Code Metal personnel to include program leadership and government personnel to ensure full compliance with National Industrial Security Operating Manual (NISPOM), Contract Security Classification Specifications (DD254), and applicable federal regulations, policies, and contractual security requirements. Primary Responsibilities: - Serve as the primary point of contact with the Defense Counterintelligence and Security Agency (DCSA) and other government security stakeholders for all matters related to the National Industrial Security Program (NISP). - Maintain the facility security clearance (FCL), including preparation and submission of required documentation. - Develop, implement, and oversee the facility’s security program, including written procedures, internal controls, and compliance initiatives. - Manage personnel security processes, including initiation, tracking, and maintenance of personnel security clearances (PCLs) and access authorizations. - Conduct security briefings, debriefings, and training for cleared employees, including compliance initial, annual refresher, and specialized security training requirements. - Safeguard classified information by implementing appropriate physical, technical, and administrative security controls in accordance with NISPOM and ICD requirements. - Oversee classified information management, including receipt, storage, reproduction, transmission, inventory, and destruction in accordance with NISPOM requirements. - Conduct self-inspections, internal audits, and vulnerability assessments to ensure program effectiveness and identify areas for improvement. - Prepare for and support government security reviews, inspections, and assessments, including corrective action planning and follow-up. - Manage and report security incidents, violations, and adverse information in accordance with regulatory requirements and company policy. - Oversee visitor control and classified visit authorization processes, including validation and documentation of access requirements. - Ensure proper implementation of information systems security measures for classified systems in coordination with IT and cybersecurity personnel, as applicable. - Advise senior leadership, program managers, and employees on security requirements, risks, and best practices. - Maintain accurate security records and documentation to support compliance and audit readiness. - Establish and promote a strong security culture through training, communication, and continuous improvement initiatives. - Stay current on changes to NISP regulations, government guidance, and emerging security threats, and adjust procedures accordingly. - Bring security risks to the attention of the senior management as identified. - Work as a team player, exhibit flexibility, and excellent organizational skills. - Analyze moderate problems and provide focused solutions with the ability to effectively communicate information to various audiences. - Must be available to promptly address and manage urgent notifications and facility-related incidents in accordance with established procedures. Basic Qualifications: - 8+ years of relevant experience. - Experience establishing DoD Industrial Security Program for small businesses. - Completed DCSA FSO Curriculum – with certificate of completion. - Strong working knowledge of 32 CFR Part 117 National Industrial Security Operating Manual (NISPOM). - Working knowledge of SF-86, SF-312, DD-254, 441, 441-1, SF-328, and other government required forms. - Must be a US citizen; must possess and be able to maintain a current DOD Top Secret clearance, with ability to obtain an SCI. - Thorough understanding of security databases such as DISS, SAM.gov, and NISS. - Experience with ICD 705 requirements. - Experience creating and conducting security briefings, debriefings, indoctrinations, pre/post foreign travel briefings and refresher briefings, as appropriate. - Strong communications skills, both oral and written. Preferred Qualifications: - COMSEC Certification. - OPSEC Level II Certification. - Working knowledge of Microsoft Software Suite (e.g., Word, Excel, PowerPoint, and Power Business Intelligence). - Working knowledge of the Google Software Suite (e.g. Docs, Sheets, Slides, Workspace) - Working knowledge of other relevant DoD security guidance, DoD Manual 5205.07, Intelligence Community Directive (ICD) standards. - Experience conducting security incident inquiries. - Industrial Security Professional (ISP) Certification. Benefits - Pay depends on experience, but we strive to be at the upper end of the salary range - Health care plan with 100% premium coverage, including medical, dental, and vision - 401k with 5% matching - Paid Time Off (uncapped vacation, plus sick and public holidays) - Flexible hybrid or remote work arrangement - Relocation assistance for qualifying employees We are an equal opportunity employer. US Citizenship may be required for certain project assignments involving security clearance. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
3,216more opportunities are still waiting for you.Log in now and take your next shot before someone else does.
AI, Cyber Security, Excel, Azure, Cloud, PMP