Top 41 Cisa Jobs in Cary Nc

DevSecOps Analyst
Computer World Services —Morrisville, NC
- Full-time
- Computer science
- Computer Science
- System design
Associate Internal Auditor
Martin Marietta —Raleigh, NC
- Full-time
- CPA
- Office
- Finance
9d
IT Auditor
MetLife —Cary, NC
- $65,200 - $86,900 a year
- Email
- Hybrid work
- CPA
- Computer Science
- Mid-level
- Paid holidays
- Disability insurance
2d
IT Auditor
InfoQuest Consulting Group Inc. —Holly Springs, NC
- Email
- Bachelor of Science
- Mid-level
- Bachelor's degree
Security Analyst
Computer World Services —Morrisville, NC
- Full-time
- Hybrid work
- Computer science
- Computer Science
- 5 years
SOC Analyst
Koniag Government Services —Durham, NC
- $31 - $40 an hour
- Full-time
- Computer Science
- Bachelor of Science
- English
- Paid holidays
- Health insurance
Data Security Operations Lead
Black & Veatch Family of Companies —Cary, NC
- Full-time
- Background check
- Computer science
- Computer Science
- Wellness program
- AD&D insurance
Associate Internal Auditor
Martin Marietta Materials —Raleigh, NC
- CPA
- Office
- Finance
- Paid holidays
- Disability insurance
9d
Product Supply Chain Security Auditor
Lenovo —Morrisville, NC
- Full-time
- Computer Science
- Mid-level
- 3 years
Senior IT Auditor
MetLife —Cary, NC
- $76,500 - $102,000 a year
- Email
- Hybrid work
- Oracle
- Computer Science
- Mid-level
- Paid holidays
- Disability insurance
Sr Program Manager, Continuous Monitoring
SAS —Cary, NC
- Background check
- Computer Science
- DevOps
- Health savings account
- Paid holidays
Sr. Manager, Cyber Resilience Act Compliance
Lenovo —Morrisville, NC
- $160,000 - $190,000 a year
- Full-time
- Remote
- 11+ years
- Travel
- Senior level
Financial Controls & Compliance Manager (Hybrid)
Cisco Systems —Research Triangle Park, NC
- $105,400 - $191,300 a year
- Full-time
- Hybrid work
- CPA
- Office
- 8 years
- Paid parental leave
- Paid holidays
4d
Business Risk & Controls Advisor-Tech/Cyber
First Citizens Bank —Raleigh, NC
- $140,000 - $155,000 a year
- Full-time
- Remote
- High school diploma or GED
- Bachelor's degree
- Organizational skills
Technical Project / Program Manager – Network Security & Cyber Resilience - Assistant Vice President
Deutsche Bank —Cary, NC
- $100,000 - $153,000 a year
- Full-time
- Hybrid work
- Computer Science
- Office
- Agile
- Health insurance
- Work from home
SAP Platform Security Manager
Accenture —Raleigh, NC
- $87,400 - $293,800 a year
- Full-time
- 5 years
- US work authorization
- Military encouraged
- Paid holidays
- Disability insurance
14d
Technical Program Manager
Itron —Raleigh, NC
- Full-time
- Hybrid work
- Computer science
- Azure
- Computer Science
- Employee stock purchase plan
- 401(k) matching
Manager Security Compliance and Risk Management
LexisNexis —Raleigh, NC
- $118,300 - $219,800 a year
- Full-time
- Computer science
- Azure
- 6 years
Oracle Cloud Security Manager
Accenture —Raleigh, NC
- $87,400 - $293,800 a year
- Full-time
- Oracle
- 5 years
- US work authorization
- Paid holidays
- Disability insurance
AI Governance & Assurance Strategy Manager
Deloitte —Raleigh, NC
- $161,925 - $269,875 a year
- Full-time
- Computer Science
- Sales
- Bachelor's degree
8d

I want to receive the latest job alert for cisa in cary nc

By signing in to your account, you agree to SimplyHired's Terms of Service and consent to our Cookie and Privacy Policy.

Explore jobs in more locations

cisa jobs near cary nc

DevSecOps Analyst

Computer World Services -
Morrisville, NC

Apply Now

Job Details

Full-time

Qualifications

Data center experience
Linux support
Virtualization tools
Windows Server administration
Linux administration

Full Job Description

Computer World Services (CWS) is seeking a highly motivated and technically skilled DevSecOps Analyst to support the National Institute of Environmental Health Sciences (NIEHS) under the NSITES III contract. The DevSecOps Analyst provides technical expertise in secure software delivery, infrastructure automation, cybersecurity operations, vulnerability management, and enterprise application security. This position combines traditional information security responsibilities with modern DevSecOps practices to ensure security is integrated throughout the Software Development Lifecycle (SDLC), Infrastructure as Code (IaC), Continuous Integration/Continuous Deployment (CI/CD), and enterprise platform operations.

The successful candidate will possess hands-on experience with vulnerability management platforms, Infrastructure as Code, CI/CD technologies, container platforms, and application security tools while supporting compliance with Federal cybersecurity standards and guidance, including FISMA, NIST Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIH and HHS security policies, and Cybersecurity and Infrastructure Security Agency (CISA) Binding Operational Directives (BODs).

Key Tasks & Responsibilities

Enterprise Security Operations

Support planning, coordination, implementation, and maintenance of enterprise information security capabilities.
Administer enterprise security infrastructure supporting LAN, WAN, cloud, and hybrid environments.
Design, implement, and maintain network security controls.
Develop, review, and maintain firewall policies, NAT rules, VPN configurations, security zones, and access control lists.
Perform firewall software upgrades, patch management, and configuration maintenance.
Administer Intrusion Detection and Prevention Systems (IDS/IPS).
Administer centralized log aggregation and Security Information and Event Management (SIEM) platforms.
Support web filtering and secure web gateway technologies.
Maintain file integrity monitoring solutions.
Investigate Data Loss Prevention (DLP) alerts and resolve DLP policy issues.
Assist in incident response activities involving network, endpoint, and application security.

CI/CD Pipeline Engineering

Design, develop, maintain, and improve enterprise CI/CD pipelines.
Implement automated build, test, security validation, packaging, and deployment workflows.
Support enterprise CI/CD platforms including:
- Jenkins
- GitLab CI/CD
- GitHub Actions
Automate application deployment across development, testing, staging, and production environments.
Support Git-based source control management, branching strategies, and release management.
Troubleshoot pipeline failures and deployment issues.
Optimize pipeline performance and automation efficiency.

Infrastructure Automation

Develop Infrastructure as Code (IaC) using Terraform.
Develop system automation using Ansible.
Automate infrastructure provisioning and configuration management.
Build reusable infrastructure modules and deployment templates.
Support enterprise platform modernization initiatives.
Automate routine administrative and operational activities.
Standardize infrastructure deployments across multiple environments.

Container Platform Administration

Support Docker-based application deployments.
Administer Kubernetes clusters.
Support Rancher-managed Kubernetes environments.
Manage enterprise container registries.
Implement container security best practices.
Perform image vulnerability scanning and remediation.
Support runtime container security initiatives.
Assist application teams with container migration and deployment.
Troubleshoot containerized applications and orchestration environments.

Application Security

Integrate security testing throughout the SDLC.
Configure and maintain:
- OpenText Fortify (SAST)
- Dynamic Application Security Testing (DAST)
- Software Composition Analysis (SCA)
- Secrets Scanning
Review vulnerability scan findings.
Collaborate with developers to remediate security findings.
Implement automated security gates within CI/CD pipelines.
Promote secure coding practices.
Support software assurance initiatives.
Assist with threat modeling and application risk assessments.

Vulnerability Management

Administer Tenable Security Center (SC).
Administer Nessus vulnerability scanners.
Perform authenticated and unauthenticated vulnerability assessments.
Analyze vulnerability results.
Track remediation activities.
Conduct risk assessments.
Coordinate vulnerability remediation with infrastructure and application teams.
Support compliance reporting and continuous monitoring.
Support CISA Binding Operational Directives (BODs), CVEs, and vulnerability remediation efforts.
Assist with penetration testing remediation activities.

Software Lifecycle Management Support

Support software lifecycle management activities for:

NSITES III operational tools
Standard enterprise software deployments
Optional licensed software
Customer-requested software
Enterprise software platforms

Responsibilities include:

Software packaging
Software testing
Version control
Patch validation
Vulnerability remediation
Change management
Continuous Integration
Software maintenance
Software deployment
Lifecycle documentation

Support software enhancements, maintenance, and security updates for:

Java Runtime Environment
Enterprise software platforms
Hardware drivers
Custom applications
Commercial Off-The-Shelf (COTS) software

Support remediation of software vulnerabilities with:

CVSS v4 scores of 7.0 or higher
CISA Binding Operational Directives (BODs)
Audit findings
Penetration testing findings

Compliance and Governance

Support compliance with:

FISMA
NIST Cybersecurity Framework (CSF)
NIST Risk Management Framework (RMF)
NIST SP 800-53
NIH Information Security Policies
HHS Information Security Requirements
CISA Binding Operational Directives (BODs)
Secure Software Development Framework (SSDF)
Federal Secure Software Supply Chain requirements

Assist with:

Security documentation
Audit preparation
Risk assessments
Security control implementation
Continuous monitoring
Authority to Operate (ATO) activities

Education & Experience

Education

Bachelor’s degree in Computer Science, Information Technology Management, or Engineering. Alternatively, four years of related experience may substitute for the educational requirement.

Experience

3-7 years of experience in Windows system administration in enterprise environments
Experience supporting large-scale Data Center operations
Experience supporting multi-platform environments (Windows, Linux, virtualization, storage, and database systems)

Certifications

AWS Certified DevOps Engineer
Microsoft Azure DevOps Engineer Expert

Certifications such as CompTIA A+, Security+, Network+, or Microsoft certifications
ITIL certification preferred.

Security Clearance

Applicants must be able to obtain a Public Trust clearance

Computer World Services is an affirmative action and equal employment opportunity employer. Current employees and/or qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, disability, protected veteran status, genetic information or any other characteristic protected by local, state, or federal laws, rules, or regulations.

Computer World Services is committed to the full inclusion of all qualified individuals. As part of this commitment, Computer World Services will ensure that individuals with disabilities (IWD) are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact Human Resources at [email protected].

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Apply Now

Refine Your Search

cisa jobs in cary nc

DevSecOps Analyst

Associate Internal Auditor

IT Auditor

IT Auditor

Security Analyst

SOC Analyst

Data Security Operations Lead

Associate Internal Auditor

Product Supply Chain Security Auditor

Senior IT Auditor

Sr Program Manager, Continuous Monitoring

Sr. Manager, Cyber Resilience Act Compliance

Financial Controls & Compliance Manager (Hybrid)

Business Risk & Controls Advisor-Tech/Cyber

Technical Project / Program Manager – Network Security & Cyber Resilience - Assistant Vice President

SAP Platform Security Manager

Technical Program Manager

Manager Security Compliance and Risk Management

Oracle Cloud Security Manager

AI Governance & Assurance Strategy Manager

I want to receive the latest job alert for cisa in cary nc

Related Searches

Explore jobs in more locations

Key Tasks & Responsibilities

Education & Experience

Certifications

Security Clearance

Job Seeker Tools

Employer Tools

Browse

Stay Connected