Top Cybersecurity Jobs

The Lead Cybersecurity Engineer implements cloud security standards, manages cybersecurity tools, performs assessments, and supports data privacy and governance while collaborating with various teams.

Lead and supervise a global team of product cybersecurity assessors to define and execute a cross-project cybersecurity quality strategy, maintain CSMS certification roadmap, ensure compliance with automotive cybersecurity standards, support vulnerability monitoring and incident response, coordinate with engineering and safety teams, conduct audits and assessments, and drive talent development and reporting for program launch readiness.

Lead cybersecurity across corporate and web platform domains: manage a distributed security team, define governance/policies, secure identity, endpoints, networks, cloud, email, and CI/CD; run vulnerability management, incident response, and compliance (PCI). Partner with Legal, Engineering, and Product to embed security and drive remediation.

As a Cybersecurity Senior Consultant, you will deliver cybersecurity and risk solutions, perform assessments, guide security architecture, and mentor junior consultants.

Responsible for implementing, maintaining, and optimizing security controls, administering security tools, and supporting security operations and compliance initiatives.

Serve as the principal security architect for a mission-critical federal program, leading design and implementation of an AI-enabled Intelligent Authorization Platform to accelerate RMF and ATO processes. Translate federal cybersecurity policies into architectures, expand CCP and control inheritance, implement security and workflow automation, and advise senior leadership while ensuring compliance, auditability, and rigorous security standards. Position requires active TS/SCI and technical leadership across cloud, hybrid, and enterprise environments.

The Cybersecurity Analyst III will monitor threats, coordinate responses to incidents, evaluate third-party security, and improve cybersecurity practices within the organization.

Hands-on Cybersecurity Engineer focused on maturing and automating the vulnerability management lifecycle: discovery, validation, triage, remediation tracking, and verification. Validate and deduplicate scanner findings, broaden scanning coverage, integrate SBOM and software inventory, build dashboards and metrics, and drive automation across tooling and processes while prioritizing risk based on exploitability and exposure.

Serve as a client-facing cybersecurity advisor focused on Identity and Access Management and related domains. Design pragmatic security programs, support sales pursuits, perform requirements gathering, technology selection, demonstrations, and proposal work. Maintain client and partner relationships, drive cross-sell/upsell, support service delivery alignment, and pursue continual professional development and certification. Travel roughly 25%.

Lead design, deployment, and maintenance of advanced security solutions across the environment. Implement and manage SIEM, SOAR, WAF, PAM, firewalls, and gateways; review configurations and architectures; run PoCs; document systems; train and mentor engineers; lead incident response and liaise with GRC for audits and compliance.

Manage integrated project plans and A&A/ATO activities, coordinate stakeholders, prepare security documentation (SARs, RARs, SAPs), produce executive reports and briefings, track performance and risks, and support RMF assessments and remediation efforts.

Lead end-to-end third-party risk management across vendor lifecycle, review vendor security evidence and contracts, assess supply-chain and AI vendor risks, ensure consistent scoring and escalation, and support enterprise risk register operations and executive reporting.

Lead A&A (Assessment & Authorization) activities and serve as an IA/Cybersecurity SME. Perform system certification/authorization, vulnerability severity determination, connection approval package processing, QA of CAP workflows, and provide incident management, threat intelligence, and continuous monitoring support. Brief senior leadership, manage mission partner coordination, and maintain CAO database accuracy while ensuring compliance with Federal and DoD cybersecurity policy.

Serve as an IA/Cybersecurity SME supporting DoD A&A activities, perform certification/authorization (A&A) tasks, evaluate vulnerabilities, process connection approval packages, provide incident response, continuous monitoring, and IA technical support, and brief senior leadership.

Serve as a trusted advisor to design and sell threat-management-focused cybersecurity solutions. Support account teams, perform requirements gathering, technology selection, demonstrations, and proposals. Maintain client relationships, provide thought leadership, and align security roadmaps with business goals. Participate in sales strategy, pipeline management, and up to 25% travel.

The Lead Compliance Specialist will oversee federal cybersecurity compliance, focusing on SA&A activities, documentation maintenance, and adherence to FISMA and NIST standards.

Design and lead enterprise IAM and identity security architecture aligned to NIST and Zero Trust. Build scalable authentication, authorization, federation, lifecycle, privileged access, and governance solutions across cloud, on-prem, SaaS, and hybrid systems. Review solutions, mitigate identity risks, advise engineering teams, and develop governance, policies, and patterns for non-human and AI agent identities. Mentor staff and communicate identity risk to stakeholders while ensuring regulatory compliance.

Manage and track security findings and vulnerabilities, monitor critical security controls across cloud and applications, liaise with product teams to drive remediation, deliver executive-level reports, host capability reviews and partner office hours, and support ad hoc security initiatives to maintain compliance and reduce risk.

The Cybersecurity Consultant leads vulnerability management, supports compliance activities, and monitors security alerts, requiring strong relationship-building and analytical skills.

Support cybersecurity analysis and RMF artifact maintenance: update eMASS and ITIPS, track vulnerabilities and POA&Ms, compile reports, maintain system inventory and ATO data, assist with security-control assessments, draft SSPs/RARs/policies, reconcile findings, coordinate with system owners, and escalate high-risk or overdue items for senior review.

Lead SIEM and security monitoring engineering: administer and optimize SIEM, onboard/normalize telemetry, develop and tune detections (EDR, WAF/CDN), reduce false positives, maintain monitoring baselines and documentation, support NIST/CIS configuration baselines, oversee security engineering staff, and coordinate with SOC/NOC for operational visibility and telemetry validation.

Perform system audits, continuous monitoring, and security assessments within a classified enclave. Support RMF Assessment & Authorization, Security Test & Evaluation, documentation of A&A artifacts, risk analysis, and implementation of government security policy. Work on-site in San Diego with periodic travel.

Protect enterprise systems by assessing and designing security architecture, implementing hybrid/cloud security solutions, validating and remediating vulnerabilities, and responding to incidents. Develop metrics, update procedures, mentor junior staff, and coordinate remediation with leadership. Requires regular on-site attendance for secure access and collaboration.

Monitor network traffic, system logs, and endpoint alerts to detect threats; investigate and respond to incidents; review and remediate vulnerabilities; create and manage security tickets and reports; operate and improve security tools and procedures; and collaborate with IT and development teams to reduce risk and support compliance.

Senior cybersecurity engineer responsible for developing and implementing security strategies, proactively identifying risks, deploying mitigations, conducting assessments and audits, maintaining security infrastructure, and collaborating with IT and business teams to improve incident resilience and compliance. Leverages automation, scripting, and network security principles including micro-segmentation.