The Security Industry Association (SIA) represents the business interests of manufacturers, service providers and integrators of electronic physical security equipment.

SIA protects and advances our members’ interests by:
   • advocating pro-industry policies and legislation on Capitol Hill and throughout the 50 states;
   • producing leading-edge global market research;
   • creating open industry standards that enable integration;
   • advancing industry professionalism through education and training; and
   • opening global market opportunities.

Industry: Security and Investigations
Company Size: 11-50 employees

Security Industry Association (SIA)

Savvy Admin PROD

SIA is the leading trade association for global security solution providers, with over 1,700 innovative member companies representing thousands of security leaders and experts who shape the future of the security industry. SIA protects and advances its members’ interests by advocating pro-industry policies and legislation at the federal and state levels, creating open industry standards that enable integration, advancing industry professionalism through education and training, opening global market opportunities and collaborating with other like-minded organizations.

SIA continues to experience significant and sustained growth in membership, along with an increased member awareness of benefits offered through SIA's programs, research, and various networking activities. As the premier sponsor of the ISC international tradeshows and conferences, SIA serves as a catalyst for growth for member companies and brands operating within the global security industry.

**DUTIES AND RESPONSIBILITIES **

**General Statements and Duties **

- Lead the membership strategy and engagement initiatives aligned with the annual budget and strategic plan.

- Lead membership sales efforts including new member recruitment, membership renewals and sponsorship activities.

- Develop and execute membership and engagement strategies using guidance and input of the Board of Directors, CEO, COO, Member Experience and Engagement Committee and relevant member stakeholders.

- Provide strategic direction, management and oversight of retention and recruitment programs, sponsorship revenues for events and activities, member services, programs and policies, member benefits, and the membership database (development, accuracy, and functionality).

- Manage a multi-functional team to define, develop, implement and evaluate strategic member services. Identify value-added offerings and track member satisfaction and engagement scores.

- Champion the strategic role of membership across the organization. Partner with departments to support customer service strategies for department’s products, initiatives and revenue goals.

- Develop strategies to increase visibility, penetration and increased contacts within current member companies.

- Manage departmental and sponsorship budgets.

**Key Responsibilities **

**Set Membership Strategy and Direction **

- Identify and design programs that enhance member value through direct benefits or overall engagement practices and policies.

- Serve as an internal advisor on membership and member experience.

- Oversee Member Services budget and operations

**Membership Recruitment **

- Develop strategies and tools to grow membership while building and supporting a strong membership culture within the organization.

- Leverage appropriate sales management technology platforms to accurately and consistently track sales performance.

- Work closely with other departments to align recruitment and retention strategies across membership types.

- Collaborate with marketing team to execute membership marketing plans.

- Oversee member prospecting efforts.

- Track and report recruitment performance.

**Membership Retention **

- Lead efforts to retain existing members.

- Oversee renewal process, including monthly billings.

- Develop engagement strategies to strengthen the organization’s pool of volunteer leaders.

- Actively solicit feedback from existing and potential members to inform strategies accordingly.

- Track and report retention performance.

**Sponsorship Revenues **

- Provide strategic direction for event sponsorship and actively participate in sales efforts.

- Coordinate online and in-person sponsorship relationships.

- Monitor and report sponsorship revenues.

**Direct Organizational Efforts in all Member Services Areas **

- Oversee and foster the cross-departmental efforts to increase member engagement.

- Develop SIA’s overall service strategy in collaboration with all departments and provide member service assistance, as appropriate.

- Provide membership-related website content.

- Coordinate responses to requests from members and other constituencies.

**Develop and Manage the Organization Member Database **

- Optimize database capabilities to support organizational goals.

- Develop and refine member engagement scores to improve overall membership value.

- Manage external vendors and consultants.

**People and Team Development **

- Lead, coach and manage the Member Services Department staff to the benefit of members, the department, and employees’ professional developmental goals.

**QUALIFICATIONS **

**Education and Experience **

- Over 10 years of applicable experience in senior marketing, sales, and/or membership positions, including a solid commitment and track record of exemplary customer service.

- Experience in the security industry is strongly preferred.

- Must supervise, manage and implement entire membership acquisition and retention programs, benefits, products and services.

- Track record in sales and acquiring, retaining and growing membership.

- Volunteer management experience, strategic thinking ability and superior communication skills. Ability to recognize and develop leadership skills of volunteers.

- B.A. in marketing field; advanced degree or MBA preferred.

**Requisite Skills and Attributes **

- Excellent verbal and written communications.

- Able to represent self and organization in a professional manner and exercise the highest level of quality customer service in all member and nonmember interactions.

- Must be able to thrive in a fast-moving working environment.

- Must see change as positive, is entrepreneurial and works to build consensus between varied groups and interests.

- Demonstrated leadership skills with collegial assertiveness.

- Ability to oversee many projects simultaneously and help to ensure completion by stated deadlines.

- The ability to translate vision into action for the staff and have a track record in coaching, mentoring, supervising and developing staff.

- Budget development and management.

- Strong member service orientation.

- Strong ability to drive consensus.

- Commitment to the success of the association.

- Proficient in computer applications (word processing, Excel, database).

- Some travel is required.

**Physical Requirements **

- Prolonged period of sitting at a desk and working at a computer.

- Must be able to lift 15 pounds at times.

This is a **hybrid position **, with three days working from our headquarters in Silver Spring, Maryland.

Reports to Chief Operating Officer

Supervises Member Services Associate Director, Member Services Senior Manager, and Member Services Coordinator

To apply, please submit a cover letter and resume to jobs@securityindustry.org.

Director, Member Services

We believe in the evolution of knowledge and the progression of people - it is so core to our business, it's the meaning of our name: EVO - to evolve, ONA - people. 

EVONA Group brings together pioneering talent solutions for today’s most ambitious companies, with a suite of services designed to meet the unique demands of space, defense, and deep tech.
 
FRACTION - www.evonafraction.com - connects VCs, PEs, and founders with fractional executives, bringing high-impact expertise exactly when it’s needed. 

GRAM PARTNERS - www.grampartners.com -  is our white-glove executive search and consulting service, led by former SpaceX and Apple executives, delivering unmatched precision in high-level talent acquisition. 

EVONA - www.evona.com -  is the original, award-winning subscription and direct hire service for VP, director, management, and individual contributor roles, trusted by top companies for a seamless recruitment experience.
 
Our platforms empower you to source talent independently or access curated executive search expertise – and we’ve built a following you can leverage to drive your mission forward.

Call on: +1 202-381-9944 (US) or +44117 2034444 (UK)

Industry: Staffing and Recruiting
Company Size: 51-200 employees

EVONA

**Senior Cloud Security Engineer (AWS & Compliance)**

**Location: ** United States (Mid-Atlantic preferred)

**Employment Type: ** Full-Time

**About The Role**

We’re hiring a **Senior Cloud Security Engineer ** to help secure and scale a highly distributed, cloud-native platform operating in a **mission-critical and regulated environment **. This role blends **hands-on AWS security engineering ** with **governance, compliance, and secure architecture design **.

You’ll work closely with platform, DevOps, and engineering teams to implement **secure-by-design practices **, strengthen cloud security posture, and ensure systems meet rigorous compliance standards.

**Key Responsibilities**

- Design and enhance AWS cloud security architecture, with a focus on IAM, least privilege, and secrets management

- Implement and enforce network security controls (VPC segmentation, security groups, NACLs, private connectivity)

- Partner with DevOps and engineering teams to secure Infrastructure-as-Code (Terraform) and CI/CD pipelines

- Define and maintain security standards, policies, and control frameworks (e.g., NIST, SOC2)

- Build and streamline audit readiness and evidence collection processes

- Configure and optimize logging, monitoring, and alerting for detection and response

- Conduct threat modeling, risk assessments, and security reviews

- Support and improve incident response processes and playbooks

- Document security architectures, patterns, and exceptions

**Required Experience**

- 7+ years in cybersecurity, cloud security, or platform security engineering

- Strong hands-on experience securing AWS environments

- Deep knowledge of:

- IAM and identity security

- VPC/network security architecture

- Logging, monitoring, and incident response

- Experience with Infrastructure-as-Code (e.g., Terraform)

- Scripting or programming experience (Python, Go, or Bash)

**Preferred Experience**

- Experience in regulated or compliance-driven environments

- Familiarity with frameworks such as NIST or SOC2

- Experience implementing policy-as-code and security guardrails

- Background in high-reliability or safety-critical industries (e.g., aerospace, defense, robotics, industrial systems)

- Exposure to cloud-native logging and detection systems

- Relevant certifications (e.g., AWS Security Specialty, CISSP)

**Technology Environment**

- AWS (core cloud platform)

- Terraform, CI/CD pipelines

- Python / Go / Bash

- Docker & cloud-native infrastructure

- Centralized logging platforms (e.g., ELK stack)

**What We’re Looking For**

- Strong collaboration skills across engineering and security teams

- Ability to balance security rigor with delivery speed

- A risk-based mindset with strong analytical skills

- Clear communicator with experience documenting technical decisions

Cyber Security Engineer

In more than 100 years of practice, Steptoe* has earned an international reputation for vigorous representation of clients before governmental agencies, successful advocacy in litigation and arbitration, and creative and practical advice in structuring business transactions. Steptoe has more than 500 lawyers and other professional staff across offices in Beijing, Brussels, Chicago, Hong Kong, Houston, London, Los Angeles, New York, San Francisco, and Washington. For more information, visit www.steptoe.com. (*Steptoe LLP, Steptoe International (UK) LLP, and affiliated entities.)

Content may include attorney advertising.

Industry: Law Practice
Company Size: 1,001-5,000 employees

Steptoe LLP

Steptoe LLP, a Washington, DC-based Am Law 100 law firm, is seeking a Security Engineer to manage the firm’s security systems as well as collaborating in the design, implementation, and support of secure system architectures in a large ever-changing environment. Monitor, analyze, and optimize security alerts and events for all enterprise security infrastructure technologies. Act as a focal point of the firm’s Computer Security Incident Response Team (CSIRT) process. Position is both technical and non-technical and requires working across multiple information security domains.

The position is both technical and non-technical and requires working across multiple information security domains.

**Essential Functions**

- Support CISO in response to security reviews and questionnaires from clients and third parties.

- Responsible for providing tier II and III support on security requests (e.g. privi-leged access, website reviews & approvals, etc.) and products including NG-SEIM, firewalls, VPNs, IDS/IPS, encryption, malware detection, anti-spam and anti-spyware security products.

- Perform analysis of events and drive problems to resolution with minimal su-pervision. Deploy host-based and network security equipment and software including, but not limited to, firewalls, intrusion detection systems, proxies, and MFA

- Participate in incident response and work with IT stakeholders to build defini-tions in response to new threats

- Act as a subject matter expert for projects by identifying risks and proposing secure solutions to ensure security & privacy by design are integrated.

- Review support tickets for trends or repetitive incidents and repair the root cause of the problem.

- Support investigation and resolution of security incidents.

- Provides security input into engineering, architectural, IT infrastructure, and application design reviews.

- Prepare and deliver reports, recommendations, and alternatives that address existing and potential trouble areas in the systems across the organization.

- Understanding of current Data Privacy (e.g., GDPR, CCPA) and regulations (i.e. HIPAA) and implementing processes and/or technology to ensure compliance and data protection against industry standards such as ISO 27001, NIST, etc.

- Support the firm’s efforts in maintaining ISO 27001 and ISO 22301 certifica-tions by working with third party auditors, gathering and providing evidence, and working to address audit findings.

- Perform network vulnerability scan for internal and external network to proac-tively identify, evaluate, and report security weaknesses.

- Conduct and participate in annual Security Tabletop Exercise

- Support the firm’s Security Awareness program.

- Participate and review bi-annual Penetration Testing.

**Non-Essential Functions**

- Additional duties as required.

**Minimum Qualification **

- Solid knowledge of Microsoft/Linux platforms.

- Bachelor’s degree in computer science/MIS/IT or equivalent certification from an accredited technical training school or equivalent (4 years) experience in general MIS/computer support.

- CISSP preferred, other IT/security certifications (i.e. GSEC, CEH, CCNA) are a plus.

- 7+ years of experience with security systems and tools design and troubleshooting.

- 5-7 years of experience in security solutions using current monitoring technologies such as: CrowdStrike, Zscaler, Proofpoint, Aruba Central.

- Must be experienced with Microsoft Based Server and Desktop Networks, Office 365, Azure AD, Security, Firewalls, Network and host-based IDS/IPS, SSO, MFA (both RSA and Azure), Web Security, Network Traffic Analysis, BGP, DNS, 802.1x, DHCP, RADIUS, TACACS, VPNs.

- Strong documentation, analytical, and presentation skills required.

**Success Factors**

- Attention to Detail: Avoid common and frequent mistakes; complete complex projects and tasks with minimal to no error.

- Innovative: Identify ways to create and design new solutions to help solve complex problems and drive innovation across the IT department on existing solutions.

- Initiative & Creativity: Identify areas for improvement within personal areas of responsibility, group, department and firm; develop unique and new approaches to address existing challenges and/or positively affect lawyer productivity, client service, and overall fiscal health of the firm

- Critical Thinking & Problem Solving: Recognize problems or situations that are new or without clear precedent; evaluate alternatives and find solutions using a systematic, multi-step approach; develop improvements and innovations to enhance performance.

- Communication: Convey goals and objectives clearly and in a compelling manner; listen effectively and clarify information as needed; ensure that project status, issues and successes are communicated to project team, stakeholders, sponsors, steering committee and all levels of management and documented appropriately; ensure open communications within project team.

- Responsibility & Accountability: Prioritize work; anticipate consequences of actions, potential problems, or opportunities for change; sets and meets realistic deadlines.

- Exceptional Interpersonal Skills: Interact professionally with partners and staff at all levels of the organization, clients, and other third parties.

**Work Environment **

- Must be able to comply with all safety requirements in our workplace which may include provision of proof of full vaccination for COVID-19 and adherence to other safety.

- Non-Smoking Environment.

- Position may be hybrid or fully remote; required to be in primary office if/as needed.

- Available to work from 9:00 – 5:30pm Monday through Friday.

- Must be available to work extended hours and weekends as required.

- Must be able to work under tight deadlines and stressful situations

- Must be willing to travel as required.

~~The anticipated base salary range for this position is $120,000 - $130,000. The actual base salary offered will be dependent upon the applicant’s experience and qualifications, as well as other job-related factors, including but not limited to, relevant skills, education, certifications or other professional licenses held, and if applicable, geographic location.~~

~~Steptoe offers a full range of benefits for you and your eligible dependents. Benefits currently include: medical, dental, vision, life, disability, dependent care, health care flexible spending accounts, 401K Plan, Profit-Sharing, Paid Time-Off and a robust Wellness Program.~~

~~Steptoe LLP is an equal opportunity employer EOE/Disability/Veteran. All qualified applicants will receive consideration without regard to race, color, religion, gender, national origin, sexual orientation, gender identity and expression, marital status, mental or physical disability, genetic information, or any basis proscribed by applicable statutes. ~~

Security Engineer

Haystack combines AI & expert vetting to deliver world-class tech candidates who are engaged, aligned, and ready to interview.

We're trusted by over 100,000+ UK-based techies, working in Software Engineering, Data, Design, DevOps, Cloud, Tech Management, Testing, Product & Delivery, Architecture and more. 

100s of employers from startups and scale-ups like Atom Bank, DuckDuckGo and Goodlord to established enterprises like American Express, Dunelm and AWS use Haystack to connect with qualified tech talent that they can't find anywhere else.

Industry: Technology, Information and Internet
Company Size: 51-200 employees

Haystack

Security Engineer | Hybrid | $77,600.00 - $176,000.00

We're hiring on behalf of a Haystack partner!

The Role

• Advise clients on building reliable networks aligned with strategic goals and operational needs.

• Lead the planning, acquisition, installation, configuration, and maintenance of network and security components.

• Resolve interoperability issues and support the acquisition of necessary hardware and software.

• Troubleshoot connectivity and policy issues using packet captures, traffic logs, and CLI tooling.

• Mentor junior engineers and take ownership of project workstreams.

• Participate in on-call rotations and triage network security events under pressure.

What You'll Need

• 6+ years of experience configuring, managing, and troubleshooting Next-Generation Firewalls (NGFW).

• Experience deploying and operating SASE solutions, including SD-WAN integration and remote access.

• Experience managing multi-device firewall environments via centralized management systems.

• Knowledge of cloud networking and deploying cloud firewalls.

• Understanding of routing protocols (BGP, OSPF) and VPN technologies (IPsec/SSL).

What's On Offer

• Competitive salary range and comprehensive benefits package.

• Opportunities for professional development, including tuition assistance.

• A collaborative work environment with a focus on supporting employee well-being.

• Chance to contribute to significant missions and protect critical infrastructure.

Apply via Haystack today!

Foxhole Technology is a thought-leading technology firm offering a robust suite of cybersecurity, software development, systems engineering, and test & evaluation solutions for the Defense and Federal Civilian markets. A Service-Disabled Veteran Owner Small Business (SDVOSB) founded in 2007, Foxhole helps agencies navigate technology and security challenges, delivering mission-focused innovations that answer evolving and complex needs. Our core capabilities consist of Full-Scope Cyber Services, Cloud and System Modernization, Application Development (Agile / DevSecOps), and Innovation as a Service. Foxhole’s talented employee-owners provide agile, scalable services and solutions that solve operational gaps, operate critical systems, and protect and secure the enterprise – across the organization and around the world.

Industry: Information Technology & Services
Company Size: 51-200 employees

Foxhole Technology

**Title Quality Assurance Engineer and Tester (Journeyman)**

**Location Arlington, VA (Hybrid)**

**Clearance Secret**

**Start Upon Contract Award**

Foxhole Technology provides robust cybersecurity and IT support capabilities for federal civilian and defense agencies. A recognized leader in navigating technology and security challenges, Foxhole delivers mission-focused innovations to answer evolving and complex needs. Our talented employee-owners provide agile, scalable services and solutions that solve operational gaps, operate critical systems, and protect and secure the enterprise - across the organization and around the world.

Foxhole is seeking a Quality Assurance Engineer and Tester (Journeyman) to support DoD modernization program. This position focuses on using relevant experience, strong problem solving, and customer service skills to ensure the appropriate operational security engineering activities are maintained for information system, integration points, and program by implementing and maintaining security controls in close coordination with the Government.

- Conduct Section 508 / WCAG 2.x level accessibility compliance testing using approved technologies for all user-facing components and portals

- As part of the Agile sprint process, perform accessibility validation against user interface changes introduced by development and testing group

- Perform checkpoint reviews at each milestone and release gates, validating usability, navigation, and that content meets compliance requirements

- Conduct peer reviews, quality audits, and deliverable inspections to validate compliance with contract standards and internal policies

- Support the monitoring of continuous improvement plans

- Collaborate with technical teams to define and maintain quality metrics, including defect rates, rework trends, and process performance indicators

- Review deliverables prior to submission, ensuring completeness, accuracy, and alignment with program objectives and formatting requirements

- Support risk-based process assessments to enhance efficiency and standardization across all task areas

- Triage test failures and security findings, distinguishing defects from false positives, tracking remediations, and ensuring pass rates meet performance targets

- At least 3+ years of experience in quality management, quality assurance, or process improvement on large-scale federal or defense programs

- Experience utilizing compliance scanning technologies

- Requirements knowledge related to Quality Management Plans (QMP) and Continuous Improvement frameworks.

- Familiarity with CMMI, ISO 9001, and ITIL quality standards

- Experience conducting peer reviews, audit readiness activities, and deliverable compliance checks

- Active DoD Secret Clearance

- Continental travel may be required

- Bachelor’s (BS) degree in relevant field - strongly preferred but not required

Requirements of position Think analytically, effective verbal and written communication skills, make decisions, observe/remember details, interpret data, concentrate on tasks, adjust to change, handle stress/emotions. Regular attendance, maintain work schedule, attend meetings, meet deadlines, keyboard/type, handle confidential information, use math/calculations, stay organized, operate office equipment, may direct others. May be exposed to dust/dirt, humidity, and noise

Foxhole Technology is an Equal Opportunity Employer and makes hiring decisions without regard to race, color, religion, sex (including pregnancy, childbirth and sexual orientation), national origin, age, disability, genetic information, military/veteran status, or any other protected class.

Quality Assurance Engineer and Tester (Journeyman)

**Title Senior Quality Assurance Engineer and Tester**

**Location Arlington, VA (Hybrid)**

**Clearance Secret**

**Start Upon Contract Award**

Foxhole Technology provides robust cybersecurity and IT support capabilities for federal civilian and defense agencies. A recognized leader in navigating technology and security challenges, Foxhole delivers mission-focused innovations to answer evolving and complex needs. Our talented employee-owners provide agile, scalable services and solutions that solve operational gaps, operate critical systems, and protect and secure the enterprise - across the organization and around the world.

Foxhole is seeking a Senior Quality Assurance Engineer and Tester to support DoD modernization program. This position focuses on using relevant experience, strong problem solving, and customer service skills to ensure the appropriate operational security engineering activities are maintained for information system, integration points, and program by implementing and maintaining security controls in close coordination with the Government.

- Implement and maintain the Quality Management Plan, aligning program processes with ISO 9001, CMMI, and DoD quality frameworks

- Conduct peer reviews, quality audits, and deliverable inspections to validate compliance with contract standards and internal policies

- Develop and monitor continuous improvement plans to identify process enhancements, performance gaps, and best practices

- Collaborate with technical teams to define and maintain quality metrics, including defect rates, rework trends, and process performance indicators

- Lead internal Quality Review Boards and provide status updates to program leadership and customer stakeholders

- Review deliverables prior to submission, ensuring completeness, accuracy, and alignment with program objectives and formatting requirements

- Support risk-based process assessments to enhance efficiency and standardization across all task areas

- Execute functional, integration, regression, and UAT for application components, aligned to program two-week sprint cycles.

- Manage and operate automated testing within CI/CD pipeline, including scanning integration, to enforce quality and security gate controls throughout build cycles

- Triage test failures and security findings, distinguishing defects from false positives, tracking remediations, and ensuring pass rates meet performance targets

- Support the program’s dedication to 508-focused commitment and ensuring components meet accessibility standards

- At least 7+ years of experience in quality management, quality assurance, or process improvement on large-scale federal or defense programs

- Demonstrated experience with Quality Management Plans (QMP) and Continuous Improvement) frameworks.

- Familiarity with CMMI, ISO 9001, and ITIL quality standards

- Experience conducting peer reviews, audit readiness activities, and deliverable compliance checks

- Active DoD Secret Clearance

- Continental travel may be required

- Bachelor’s (BS) degree in relevant field - strongly preferred but not required

Requirements of position Think analytically, effective verbal and written communication skills, make decisions, observe/remember details, interpret data, concentrate on tasks, adjust to change, handle stress/emotions. Regular attendance, maintain work schedule, attend meetings, meet deadlines, keyboard/type, handle confidential information, use math/calculations, stay organized, operate office equipment, may direct others. May be exposed to dust/dirt, humidity, and noise

Foxhole Technology is an Equal Opportunity Employer and makes hiring decisions without regard to race, color, religion, sex (including pregnancy, childbirth and sexual orientation), national origin, age, disability, genetic information, military/veteran status, or any other protected class.

Senior Software Quality Assurance Engineer and Tester

Welcome to DataAnnotation! We pay smart folks to train AI. We offer a remote, flexible work model- you choose your own hours and get to work when you want, whenever you want. Apply now through our open Job Listings.

Industry: Software Development
Company Size: 5,001-10,000 employees

DataAnnotation

**Join the DataAnnotation team ** and contribute to developing cutting-edge AI systems, while enjoying the flexibility of remote work and setting your own schedule.

We are looking for experienced **cybersecurity professionals ** to help advance AI development. Cybersecurity platforms are increasingly powered by AI — but these systems still need practitioners with real-world experience to validate whether the outputs actually hold up in practice. That's where you come in.

As a member of DataAnnotation's team, you'll work closely with state-of-the-art AI models on tasks like evaluating AI-generated security content, solving technical security problems, and providing feedback that directly shapes how these systems reason about real-world threats and defenses. Some team members fit this work alongside a full-time role, while others treat it as their primary focus.

To get started, once you sign up for an account, you'll take a short assessment (this serves as our version of an interview). If you pass, you'll receive an email confirmation and paid work will become available to you through our platform.

**Benefits**

- Fully remote: work from anywhere in the US, Canada, UK, Ireland, Australia, and New Zealand.

- Flexible schedule: choose which projects you take on and when you work.

- Competitive pay: projects are paid hourly up to $60 USD/hour, with bonuses for high-quality and high-volume work.

- Impact: help shape the future of AI technologies built for cybersecurity.

**Responsibilities**

- Evaluate AI-generated cybersecurity content — including threat analysis, vulnerability assessments, and offensive security techniques — for real-world accuracy and validity.

- Design and solve security-focused technical problems used to train AI systems.

- Write clear technical explanations and security-relevant code.

- Provide feedback that directly shapes the next generation of AI security models.

**Qualifications**

- 2+ years of hands-on experience in a cybersecurity role — such as penetration testing, red teaming, incident response, detection engineering, DFIR, malware analysis, threat intelligence, or adjacent fields, including government or military cyber operations.

- Some coding experience required; comfort navigating and patching a codebase is key.

- Fluency in English (native or bilingual level) with strong writing skills.

- A bachelor's degree is preferred.

- Cybersecurity certifications are a plus (e.g., OSCP, CRTO, GREM, GCFA, CEH, and similar).

**Note: ** Payment is made via PayPal. We will never ask for any money from you. This job is only available to those in the US, Canada, UK, Ireland, Australia, and New Zealand.

#cybersecurity

Junior Cybersecurity Engineer | Hybrid

We're hiring for a leading professional services firm that provides critical support to government defense and intelligence agencies. This is an opportunity to apply cybersecurity expertise to enhance the security of warfighter communications and protect against advanced cyber threats, joining a dedicated team focused on innovation and making a significant impact on national security.

The Role

• Collaborate with operational teams to address evolving security requirements.

• Recommend and implement new security policies to harden systems.

• Review metrics to assess policy effectiveness and resolve complex tickets.

• Test and integrate new email security components and solutions.

• Investigate new techniques and explore industry best practices for network design and customization.

• Contribute to the integration of secure practices like zero-day threat detection and anti-spoofing protocols.

What You'll Need

• Solid understanding of networking and cybersecurity concepts.

• Ability to obtain a Secret clearance.

• Bachelor's degree.

• Ability to obtain a DoD 8140 IAT Level II Certification within 6 months of start date.

• Experience with email security appliances, Microsoft Azure environments, or F5 load balancers is a plus.

• Knowledge of email network protocols (SMTP, DNS) and secure email protocols (TLS, SPF, DKIM, DMARC).

What's On Offer

• Opportunity to work on critical national security projects.

• Professional development and continuous learning opportunities.

• Hybrid work model supporting work-life balance.

• Comprehensive benefits package including health, retirement, and paid leave.

Apply via Haystack today!

Junior Cybersecurity Engineer

**Cybersecurity Engineer | Hybrid | $193,000 - $213,000 **

We're hiring for a dynamic organization committed to transforming government IT through innovative solutions and a people-first culture. This employer is making a positive impact by modernizing how government agencies operate and serve citizens.

**The Role **

• Embed security-by-design principles into system architecture, cloud infrastructure, and software configuration.

• Define cybersecurity controls and secure configuration requirements for new developments.

• Support Risk Management Framework (RMF) and authorization planning activities.

• Address access controls, data protection, and segmentation to reduce authorization risks.

• Ensure secure handling of autonomous assessment data and alignment with DoD cybersecurity requirements.

• Contribute to the responsible deployment of autonomous pentesting capabilities.

**What You'll Need **

• High School diploma with 10+ years of commensurate experience.

• Active TS/SCI CI Poly clearance.

• 10+ years of experience with DoD cybersecurity frameworks and RMF.

• Background in cloud and data security.

• Experience conducting penetration testing, risk assessments, and vulnerability scans.

• DoD 8570.01-M IAT Level II certification (e.g., Sec+CE, SSCP, CND, CCNA Security).

**What's On Offer **

• A flexible work environment to support personal and professional well-being.

• Access to a Learning & Development platform with certification preparation content.

• Opportunities for training, education, and certification assistance.

• A collaborative team environment focused on meaningful work.

Apply via Haystack today!

Green Threads, LLC has created a niche in Identity and Access Management (IAM) and Web Service (WS) Security solutions in the federal SOA Security marketplace.  Green Threads, LLC (GT) provides IAM, WS Security, and Single Sign On (SSO) solutions based on industry standards, open architecture, and vendor agnostic tools. Our team has implemented these solutions in multiple federal agencies, including U.S. Department of Veterans Affairs (VA), National Archives and Records Administration (NARA), United States Postal Service (USPS) and United States Patent and Trademark Office (USPTO).

Industry: IT Services and IT Consulting
Company Size: 2-10 employees

Green Threads, LLC

Green Threads LLC is delivering independent, evidence-based IT assessments and modernization roadmaps for federal agencies. We are seeking a Senior Federal Cybersecurity Consultant to serve as the cybersecurity and compliance lead on a comprehensive assessment engagement for a federal agency client in Washington DC. This role is central to the engagement, you will own the cybersecurity, Zero Trust, risk register, compliance gap analysis, and SOP development workstreams.

**Security Clearance Requirement: **Active TS clearance

**Work Location: **Hybrid / Primarily onsite DC

**ROLE **

You will lead the cybersecurity, compliance, and risk workstreams for a **six-month federal IT assessment engagement **. Working alongside a senior system architect, data analyst, and project manager, you will assess the agency’s cybersecurity posture across four layers, governance and accountability, technical control implementation, operational effectiveness, and integrated risk synthesis, and translate findings into a scored risk register, compliance gap analysis, and actionable SOPs that agency leadership can act on immediately.

**KEY RESPONSIBILITIES: **

- Lead governance and compliance assessment against OMB A-130, NIST CSF, NIST SP 800-53 Rev. 5, NIST SP 800-37 Rev. 2, TIC 3.0, FISMA, FedRAMP, and applicable Executive Orders

- Assess Zero Trust maturity against NIST SP 800-207 and SP 1800-35 implementation guidance

- Evaluate MFA enforcement, privileged access management, and identity and access controls

- Assess vulnerability management practices, patching cadence, and configuration management

- Evaluate incident response readiness, escalation procedures, and after-action practices

- Assess Microsoft Sentinel SIEM coverage, use-case maturity, alerting value, and dashboard utility as operational security tools, not checkbox items

- Develop a scored IT risk register with domain, root cause, consequence, H/M/L rating, mitigation recommendation, and QW/ST/LT sequencing across all assessment domains

- Produce a compliance gap analysis distinguishing documentation gaps from process gaps, technology gaps, and material mission/compliance risks

- Lead development of SOPs and policies: incident response, configuration management, access control, patching, help desk operations, cloud governance, and data governance

- Assess AI readiness: governance posture, data quality, privacy and records implications, security guardrails, and near-term use-case identification

- Participate in stakeholder interviews, system walkthroughs, and evidence validation sessions

- Contribute cybersecurity content to the current-state assessment report, modernization roadmap, and final report

**DELIVERY: **

- Cybersecurity assessment findings (governance, technical controls, operational effectiveness)

- Scored enterprise risk register integrated across all assessment domains

- Compliance gap analysis with gap classification (documentation / process / technology / mission risk)

- Draft SOPs and policies in editable Word format

- AI readiness assessment section covering governance, data, security guardrails, and use-case identification

- Input to 3–5 year target architecture and 12–24 month modernization roadmap

**MINIMUM QUALIFICATIONS **

- Bachelor’s Degree in Cybersecurity, Information Technology, Computer Science, or a related discipline; equivalent combination of education, training, and professional experience may be substituted

- Minimum of 7 years of relevant experience in systems design, cybersecurity operations, network defense, security engineering, or risk management

- Minimum of 2 years in a senior or lead cybersecurity role

- Demonstrated ability to develop, implement, and monitor security controls, vulnerability management programs, and incident response procedures

- Experience advising stakeholders and leadership on cybersecurity best practices and risk mitigation

**PREFERRED QUALIFICATIONS **

- Active federal cybersecurity certifications: CISSP, CISM, CEH, Security+, or equivalent

- Hands-on experience with NIST 800-53, FISMA compliance, FedRAMP ATO processes, and federal risk management frameworks

- Experience with Microsoft Sentinel, Defender, or equivalent SIEM/EDR in a federal environment

- Familiarity with Zero Trust architecture implementation in cloud or hybrid federal environments

- Experience developing federal SOPs and security policies in alignment with NIST standards

- Prior work at small or independent federal agencies; understanding of constrained staffing models and the operational trade-offs they require

- Experience with AI governance, data privacy, or AI readiness assessments is a plus

**CLEARANCE & WORK LOCATION **

- Active Top Secret (TS) federal security clearance required, no exceptions and no post-award processing

- Work is performed primarily onsite at the federal client’s Washington DC headquarters

- Some offsite work (analysis, drafting, internal coordination) is expected; exact hybrid ratio to be confirmed with client

- Onsite presence is required for kickoff, stakeholder interviews, leadership briefings, and process walkthroughs

**To apply: **Send resume and clearance status to info@greenthreadsllc.com with subject line “Senior Cybersecurity Consultant — [Your Name]”.

Senior Federal Cybersecurity Consultant

Find Security Lead jobs in Silver Spring, MD with Savvy's AI Recruiter. Browse opportunities from top companies and get matched with roles that match your skills using our intelligent recruitment system.