Open Raleigh-Durham Cybersecurity jobs

Summary

Leads Wolfspeed's global cybersecurity and information assurance strategy as Chief Information Security Officer, building an enterprise security program tailored to the risks of semiconductor manufacturing, including protection of proprietary designs, patents and other intellectual property. Responsibilities include hiring and leading a security team, managing information-security risk and budgets, overseeing incident detection and response, and ensuring compliance with industry and regulatory standards.

Summary

This is a Principal Engineer role owning cybersecurity design and analysis for multiple medical devices, including threat modeling, vulnerability scanning, and penetration/fuzz testing across embedded and hosted systems. The engineer monitors CWE/CVE threat intelligence, drives secure architecture across cross-functional teams, and interfaces with regulators on medical-device cybersecurity compliance standards such as UL-2900, ICS-CERT, and FIPS 140.

Summary

Individual-contributor security architect designing enterprise security architecture blueprints and Security Architecture as Code, translating security policies and regulatory requirements into reusable, machine-readable, version-controlled architecture assets integrated into software delivery workflows. Uses AWS cloud-security expertise and Infrastructure-as-Code tools such as Terraform, CloudFormation, and AWS CDK, and evaluates AI-generated architecture recommendations for compliance accuracy. Onsite, first shift.

Summary

Application security engineering role embedding secure-by-design practices into the software development lifecycle, covering secure API and microservices design, identity and access management (OAuth 2.0, OIDC, SAML), and cloud security across AWS and Azure. Work is grounded in standards including OWASP Top 10, NIST CSF, CIS Controls and ISO 27001, with DevSecOps practices and threat modeling as core responsibilities.

Summary

Test engineering role for Cisco Meraki MX and Catalyst networking products, focused on network security and performance validation. Work includes designing test strategies, building automation in Python alongside C++, Ruby or Go, running regression and threat-model-driven testing across IPS, malware detection, content filtering and web security, and driving traffic generators such as Spirent, Ixia and TRex. This is a hybrid site-based position rather than a remote one.

Summary

An entry-level Privileged Access Management engineering role on the information security team, supporting deployment, configuration, and day-to-day administration of PAM platforms such as CyberArk, HashiCorp Vault, or Delinea. The work centers on securing privileged accounts, credentials, and service accounts, plus documentation, patching, and troubleshooting of security tools. It is a remote role that includes a rotational on-call component.

Summary

Senior security engineer leading the enterprise API vulnerability-management program, using tools such as Akamai, Salt Security, Traceable, and Burp Suite to identify and remediate API vulnerabilities, and building automated API security testing into CI/CD pipelines. Performs penetration testing and partners with DevSecOps and application teams on remediation. Five days per week onsite in Atlanta, Raleigh, or Charlotte.

Summary

Senior threat-hunting and incident-response engineer in Truist's 24x7 Cyber Fusion Center, developing and testing hunting hypotheses across internal and external data sources and leading investigation, containment, eradication, and recovery for security incidents. Performs digital forensics across endpoint, network, and log data and participates in a rotating on-call schedule. Onsite in Atlanta or Zebulon, North Carolina.

Summary

Security engineering focused on protecting enterprise data and infrastructure, designing, implementing, and automating security controls and maintaining data loss prevention tooling and processes. Named areas include security architecture and hardening, secure coding and security code review, penetration testing, vulnerability assessment, threat analysis, risk assessment, cloud security, incident response, and NIST-aligned compliance and metrics reporting. Experience in large enterprise environments and strong scripting skills are the stated bar.

Summary

Manages large information-security projects and programs, conducting advanced threat analysis, vulnerability assessments, and penetration testing, and leading incident-response efforts including forensic investigation and reconstruction. Guides identity and access management and data-protection practices across the enterprise, requiring 7+ years of information-security experience.

Summary

Senior information-security engineering role protecting the confidentiality, integrity, and availability of Segra's fiber network and IT systems, spanning identity/authentication technologies, SIEM administration, and cloud security controls across AWS, Azure, and Office 365. Also covers incident response, PKI/TLS, and compliance with NIST and ISO frameworks, requiring 10+ years of experience. Hybrid, three days per week onsite.

Summary

Hands-on individual contributor on NVIDIA's Hardware IP Security team, protecting semiconductor design intellectual property by helping engineering teams build secure-by-default workflows and environments, writing security policy and training material, and investigating new threats to the design infrastructure. Core skills are threat modeling with data flows, trust boundaries and STRIDE-style analysis, plus securing large Linux on-premises and cloud environments through authentication, authorization, hardening, patching, logging and incident response. Eight years of experience is required; familiarity with EDA workflows and semiconductor or HPC design environments, and experience securing AI-assisted developer workflows including agent permissions and prompt injection, are differentiators.

Summary

A full stack application engineering job inside Truist banking technology: Java, J2EE, Spring Boot and microservices on the back end with TypeScript, Node.js and React on the front, running on OpenShift, Kubernetes and AWS. The security engineer half of the title refers to building and maintaining security controls and monitoring and orchestrating calls to REST, SOAP and encrypted messaging services inside multi stage fraud detection flows, not a dedicated security operations post. The posting is explicit that the role is on site in the listed hubs, and it includes leading moderately complex projects and possibly overseeing a small team.

Summary

A governance and compliance reviewer inside the cybersecurity organization rather than a coding role: first line of review for Consumer and Enterprise software releases against Secure Development Life Cycle and release policy, and first-level triage of open source packages for license compliance before escalation to the Open Source Review Board. Much of the job is developer-facing guidance, including bi-weekly office hours and answering questions in Slack support channels, plus acting as project manager to keep reviews on schedule. The stated requirement is 5 or more years translating policy requirements into actionable terms for engineering and cross-functional teams.

Summary

Enterprise application security administration inside Workday rather than software development: designing and maintaining security structures, running security audits, and controlling user access in partnership with HR, IT, and compliance teams. The listed scope spans Workday HCM, Payroll, and Financials plus Prism Analytics and Adaptive Planning, with segregation of duties, data privacy, SOX, and GDPR compliance as the governing constraints. Workday release management, security enhancements, and system documentation are ongoing parts of the job, and the title flags the position as hybrid.

Summary

Enterprise architecture role owning target-state architecture and modernization strategy for client identity and access management, fraud, and anti-money-laundering systems at a large bank. The work is strategy and governance rather than implementation: evaluating architectural alternatives on cost, value, scalability, and risk, setting and enforcing enterprise technology standards, and coordinating with CIAM, fraud, AML, cloud platform, and application development teams. It also carries a mentorship and evangelism component across the bank architecture community.

Summary

Application security consulting role focused on making vulnerability data actionable: interpreting findings across SAST, SCA, secrets, API, container, and IaC scanning, performing control testing and validation with evidence collection, and coaching application teams through remediation and vulnerability burndown. It also carries a program-metrics and standards component, producing burndown, aging, trend, and adoption reporting, refining AppSec intake workflows, and working with DevOps teams to embed security in CI/CD. The posting requires a minimum of seven years in information security and states the role is five days a week in the Atlanta, Charlotte, or Raleigh hub.

Summary

Custom software design and development of computer network operations tools for Mission Systems, including the end-to-end data flow and tasking into those tools, with programming in Assembly, C, C++, Java, Perl, or Python across Windows, UNIX, and embedded or mobile targets. The work follows government software development procedures, with authored documentation and participation in design, code, and software readiness reviews. An active TS/SCI with polygraph is required at start along with willingness to obtain another polygraph, and the listed places of performance are Annapolis Junction MD, Aurora CO, and Carey NC.

Summary

An application security architecture role in the SAS Risk Solution division, partnering with architecture, engineering and cloud hosting teams to improve the security posture of business-critical multi-tier solutions across legacy, hybrid cloud and public cloud environments. The work spans secure design and threat modeling, security code review and vulnerability triage, secure-by-default deployment and configuration, defense in depth and Zero Trust alignment, plus building a Security Champions network inside product R&D teams. The posting allows hybrid work in Cary or Glasgow, or remote within the Eastern or GMT time zones.

Summary

A security engineering role safeguarding Cisco's Webex platform, centered on Splunk-based incident detection, security monitoring, and compliance across cloud environments. The work includes SPL and detection-as-code development, risk-based alerting, data normalization, and architecture review, aligned to standards such as NIST SP 800-53 and ISO/IEC 27001. Deep Splunk Enterprise Security expertise is the core requirement.

Summary

Principal-level network security operations engineer at a bank — engineering and operating firewall, proxy, remote access, and WAF platforms, handling incident triage, change requests, and escalations for security operations teams. Remote eligible with EST hours preferred, but it includes an on-call rotation requiring night and weekend availability.

Summary

Security engineering role focused on enterprise cryptography, designing and scaling encryption and key-management solutions, hardware security modules, and data-protection technologies such as Thales CipherTrust, tokenization, format-preserving encryption, and transparent data encryption. It is hands-on across Linux and Windows with heavy scripting and automation (Bash, PowerShell, Python, Ansible) for OS hardening and HSM administration. It is in-office three days a week and explicitly offers no visa sponsorship or transfers.

Summary

A senior security engineer at Truist who owns certificate lifecycle automation end-to-end — extending existing Venafi issuance/renewal automation into the deployment and validation layers across servers, load balancers (F5), web servers (IIS, Apache, NGINX), and application environments. The role is explicitly focused on the 'last mile' of certificate installation rather than PKI issuance, and contributes to enterprise crypto agility and quantum-safe readiness initiatives. Ansible, scripting, and API automation expertise required; Charlotte, Raleigh-Durham, or Atlanta preferred.

Summary

DevSecOps engineering covering CI/CD pipeline development and standardization, infrastructure as code provisioning with Terraform and Ansible, and containerization with Docker and Kubernetes. The security half of the job is security as code, embedding security practices and tooling through the pipeline and infrastructure lifecycle in partnership with application security, governance, QA, and IT teams. Monitoring, logging, alerting, root cause analysis, and production troubleshooting round out the role; hiring is limited to NC, TX, AZ, and GA.

Summary

A people-manager role at LexisNexis overseeing a team of security engineers responsible for security compliance, audit, control, and FedRAMP Continuous Monitoring activities. Owns the enterprise technology and security risk-management program — risk register, exceptions and acceptances, KPIs and dashboards — and supports the CISO with board and executive materials. Combines security risk and compliance program leadership with people management.

Summary

A Consulting/Principal Security Engineer role acting as the senior security voice as LexisNexis product and engineering teams design and ship features, embedding security and trust requirements from the outset. Also partners with the Customer Engagement team on trust materials (whitepapers, security questionnaires) and mentors junior engineers. A product and application-security advisory role rather than a hands-on operations position.

Summary

A Senior Security Engineer role on LexisNexis's Business Engagement team, serving as a security partner as product and engineering teams design and ship new features, embedding security requirements from the first requirement. Owns security for assigned products, contributes to customer trust materials, and works with autonomy while escalating higher-stakes decisions to the Principal Engineer. A product and application-security engagement role.

Summary

A principal-level mainframe security engineering role centered on RACF administration across complex z/OS, multi-LPAR environments, designing security profiles and classes, integrating multi-factor authentication, and automating digital-certificate lifecycle and rotation. Despite the software-engineer framing, the work is mainframe identity and access security governance, using REXX, CLIST, SAS, and JCL to automate RACF administration and produce SOX, HIPAA, and PCI audit evidence. Remote eligible.

Summary

A cloud security engineering role leading the deployment and operation of cloud security tooling across a multi-cloud enterprise, including Wiz, AWS GuardDuty, Security Hub, Inspector, and Microsoft Defender. Work covers CSPM/CWPP, IAM and KMS hardening, threat detection and incident response, and embedding security guardrails into CI/CD via Terraform. Security certifications such as CCSP and AWS Security Specialty are preferred.

Summary

A cybersecurity architect role delivering security architecture and strategy for a bank's information security organization, focused on domains such as identity and access management and compute. Core work includes security design reviews, threat modeling (PASTA, STRIDE, DREAD), technical risk assessment, and applying frameworks like NIST, ISO, and ATT&CK. It is a remote role, with advanced certifications such as CISSP or CISM highly desirable.

Summary

Hardware security architecture role defining a long-term roadmap for a flexible hardware Root of Trust integrated into products. You research and design security architectures meeting internal and external standards, review architectural, microarchitectural, and verification specs for security alignment, and work with customers on threats. Requires ASIC and SoC design knowledge, secure and measured boot, and C/C++, Verilog, and ARM assembly; this is hardware security, not software.

Summary

An application penetration-testing role at a bank, planning and conducting hands-on pen tests of complex web applications and databases, coordinating third-party vendor testing, and documenting and tracking vulnerabilities. It uses tools like Kali Linux, Burp Suite, and frameworks such as OWASP and PTES, and communicates technical findings to application owners and stakeholders. Fully remote but hireable only in Arizona, Texas, or North Carolina; requires a degree plus two years (or six years) of relevant experience, with OSWE/GPEN/GWAPT certifications preferred.

Summary

Security engineering for foundational Microsoft identity infrastructure at a bank — designing and operating Active Directory Domain Services, ADFS, certificate services, DNS/DHCP, Entra Connect, MIM, and related services, plus Cisco ISE and the Symantec and Quest product suites. Office-centric five days a week (Atlanta, Charlotte, Raleigh, or Wilson, NC) with no visa sponsorship or immigration support. For an infrastructure-identity engineer rather than an application security specialist.

Summary

Principal cybersecurity advisor (AI security) role at Optiv, operating as a client-facing, quota-carrying pre-sales advisor within a Center of Excellence: designing AI-focused security solutions, identifying AI security concerns, driving services pipeline and cross-sell, and advising client executives on AI security strategy and roadmaps. Fully remote within the continental US.

Summary

A security governance, risk, and compliance role that owns Plaid's security-contracts workstream end-to-end, reviewing security provisions in customer MSAs, DPAs, and security addenda and giving Legal actionable positions. It also covers responding to customer security questionnaires and joining external audit calls, making it a customer-assurance and program-building role rather than hands-on security engineering.

Summary

An identity and access security engineering role for a bank, focused on federated authentication (SAML, OpenID Connect) and enterprise IAM/SSO platforms such as Okta or Ping, plus automating repetitive security and identity tasks. Responsibilities include security audits, gap identification, risk-mitigation solutions, and resolving complex escalated security incidents. Remote-eligible in NC, AZ, or TX; requires six or more years in systems engineering, networking, or information security.

Summary

An application-security and vulnerability-management role despite the Analyst title: running SAST, DAST, and SCA scans across development pipelines, triaging and prioritizing findings, and partnering with development teams on remediation and secure coding. It involves configuring and tuning security scanning tools (Checkmarx, Veracode, Fortify, Snyk, Burp, OWASP ZAP) and scripting automation; a remote role limited to NC, AZ, and TX.

Summary

Security engineering across the software development lifecycle at a bank — threat modeling, security testing, and penetration testing, integrating and configuring security technologies in production, maintaining baselines and guardrails, and leading incident-response execution for in-scope services. The posting is framed as a general duty description without a single platform focus, and includes mentoring and leading workstreams. For a broad, senior-leaning security engineer rather than a niche specialist.

Summary

A security automation engineer role at Truist focused on identifying automation opportunities in cybersecurity incident management workflows and building solutions using scripting, APIs, orchestration tools, and Microsoft 365 platforms. The role also involves active participation in cyber incident coordination — triaging, tracking, and facilitating stakeholder communication through the incident lifecycle. Requires a minimum of 3 years in security engineering; posted in Charlotte, Raleigh-Durham, or Atlanta with hybrid expectations.

Summary

A senior security engineering role on Truist's Proxy Team, evolving the enterprise secure access platform and modernizing internet access and traffic control capabilities. The work emphasizes consistent policy enforcement across encrypted, non-HTTP, and real-time traffic, plus automation to improve visibility and posture. This is an onsite, office-centric role 5 days a week in a Truist core location in Charlotte, Raleigh, or Atlanta.

Summary

A senior security engineer role on Truist's Proxy team evolving the enterprise secure-access platform, modernizing internet-access and traffic-control capabilities and enforcing consistent policy across encrypted and real-time traffic with automation. The position is onsite five days a week at a Truist core location in Charlotte, Raleigh, or Atlanta. A fit for a network/proxy security engineer who can work fully on-site.

Summary

This is a frontline security operations role for Abrigo's corporate and cloud environments. The person monitors SIEM, EDR, and email-security alerts, performs first-tier triage and escalation, and supports access reviews, phishing reporting, metrics, and audit evidence from the Raleigh hybrid office.

Summary

A senior security-engineering role on Epic's Anti-Cheat team, writing robust low-level software that protects millions of players a day across Epic's titles and many other games in a fast-paced environment.

Summary

A GRC automation engineer rather than a hands-on-keyboard defender: implementing and administering a GRC platform such as Vanta, building a unified control framework across SOC 2, ISO 27001, and Cyber Essentials, and replacing manual evidence gathering with automated collection and continuous monitoring. Requires 5+ years in security, compliance, or audit roles with end-to-end ISO 27001 and SOC 2 audit leadership; hands-on GRC platform experience is mandatory.

Summary

A senior security-executive role (Business Information Security Leader) embedded within a Syneos Health business unit (Corporate Systems), accountable for that unit's information-security strategy and cyber-risk posture and acting as a security business partner while functionally aligned to the CISO. Emphasis on embedding security-by-design across the product lifecycle and balancing risk, regulatory, and operational objectives; hybrid in Bridgewater, NJ or Morrisville, NC.

Summary

A senior security-executive role (Business Information Security Leader) embedded within a business unit at a healthcare/clinical-research company, accountable for information security across that sector and serving as a security business partner. The work embeds security-by-design into portfolio planning and product development, ensures transparency of cyber-risk posture, and aligns security with business and regulatory strategy while functionally reporting to the CISO. This is a strategic, stakeholder-facing security-leadership role; hybrid in Bridgewater, NJ or Morrisville, NC.

Summary

Despite the generic security engineer title, this is a senior incident-response leadership role: serving as incident commander for escalations, owning IR readiness (playbooks, tabletops, cyber-range exercises), and engineering detections and telemetry across on-prem and multi-cloud environments, especially AWS. Requires 10+ years of IT security experience with significant enterprise incident-response leadership; GCIH/GCFA-style and cloud security certifications are preferred.

Summary

A senior-manager role owning Advance Auto Parts' enterprise third-party (vendor) cybersecurity risk program, identifying, assessing, and mitigating supplier risk and driving governance, regulatory compliance, and executive visibility. It centers on third-party-risk frameworks (NIST CSF 2.0, NIST 800-161, SOC 2, PCI DSS, ISO 27001) and GRC tooling; a program-leadership role.

Summary

A SOC manager role at Labcorp (Durham, NC) leading incident handlers and responders and helping evolve the security-operations program, with tools like ServiceNow, Tines, and AlertMedia and KPI/KRI reporting. It is a people-leadership seat over security operations in a healthcare and diagnostics environment handling PHI and PII.

Summary

A senior security-engineering role building anti-cheat capabilities for Fortnite and Epic's games, combining gameplay-feature and backend-service experience to protect players and the creators who depend on the platform.

Summary

A lead network-security engineering role at Labcorp (Durham, NC), owning Palo Alto firewall infrastructure (plus Panorama and Cisco Firepower) through configuration, optimization, troubleshooting, and policy across the enterprise, with cloud (AWS/Azure/GCP) and compliance (PCI, NIST CSF, ISO 27001) context. It is a hands-on, vendor-specialized network-security seat requiring local presence near Durham.

Summary

A security-officer post at a healthcare-engagement SaaS company — owning the information security management program, policies, and risk assessments, serving as the customer-facing expert on security and member-data privacy, and reporting risk directly to the board, all while reporting to the General Counsel in the legal organization. Compensation is stated at $190,000–$230,000 plus bonus potential, with preference for Chapel Hill, NC or Newton, MA. Governance- and leadership-heavy rather than hands-on engineering.

Summary

A product-security incident-response role on Lenovo's PSIRT: independently owning product vulnerabilities from intake through remediation and public disclosure, validating issues across software, firmware, and system components, and assigning CVE, CWE, and CVSS scores. It involves drafting security advisories, coordinating disclosure with external researchers, and automating triage workflows with scripting. A hands-on vulnerability-response role rather than general software engineering.