Top Cybersecurity Jobs

Contribute to GMF's cybersecurity program by developing and updating policies and controls (NIST-aligned), tracking remediation, partnering with business stakeholders, documenting discrepancies, translating business requirements into security initiatives, and serving as a liaison and first point of contact for cybersecurity concerns across projects.

Perform system audits, continuous monitoring, and security assessments within classified enclaves. Support Assessment & Authorization (A&A), Security Test & Evaluation (ST&E), RMF documentation, risk analysis, and implementation of government security policy. Produce reports, POA&Ms, and evidence for accreditation; assist with security certifications, investigations, and process tailoring.

Perform system and network security assessments (compliance audits, vulnerability scans), support certification and accreditation (ST&E, Security Plans, POA&Ms), apply government policies (NISPOM, DCID 6-3), recommend safeguards, assist with RMF and DISA STIG implementation, and monitor/close corrective actions.

Lead positioning and go-to-market for SHI's cybersecurity portfolio. Create messaging, GTM plans, market analysis, sales enablement, content, launches, and performance tracking to drive pipeline and revenue while partnering with product, sales, and cross-functional teams.

Lead and manage cybersecurity program activities for classified information systems, including continuous monitoring, RMF Assessment & Authorization (A&A), ST&E execution, security control assessments, documentation (SSP, SCTM, POA&M), risk analysis, and coordination with government accrediting authorities. Ensure compliance, implement safeguards, and support inspections, audits, and emerging-technology reviews for classified enclaves.

Designs and governs enterprise cybersecurity data architecture to support detection, response, and decision-making. Defines data models, integration patterns, and governance (classification, retention, lineage, access controls). Partners with cybersecurity, IT, and data teams to implement scalable, cloud/hybrid data platforms and enable threat detection, incident response, and continuous monitoring.

Rapidly prototype and rigorously evaluate frontier AI models for security tasks; build datasets, harnesses, and scoring; engage the security community; design tooling and defaults with engineers to operationalize reliable capabilities; track capability changes and inform product direction.

Monitor and investigate email threats (phishing, BEC, malware, spam, impersonation) using Proofpoint and Abnormal Security. Analyze headers, authentication (SPF/DKIM/DMARC), URLs and attachments; remediate malicious messages; tune policies; support phishing simulations and user education; document incidents, maintain playbooks and metrics; coordinate with SOC, IAM, IR, Microsoft 365, Legal and HR.

Lead product strategy and roadmap for Scale's Cybersecurity portfolio, building training data, RL environments, agentic task suites, and evaluation products. Define capability maps, drive infrastructure for reproducible execution and verification, establish governance and responsible-disclosure processes, recruit practitioner contributors, and partner with ML researchers, customers, and GTM to launch and measure security capabilities end-to-end.

Manage and grow a portfolio of client accounts in cybersecurity, drive upsell/cross-sell and renewals, develop strategic account plans, maintain CRM records, coordinate handoffs with project managers, ensure client satisfaction, identify new opportunities and maintain pipeline, and travel up to 25% for client meetings and events.

Design, implement, and secure Process Control Network (PCN) architectures; administer switches, VLANs, and domain controllers; deploy and manage firewalls/IDS/IPS; monitor and respond to incidents; ensure compliance (NERC CIP, ISO 27001); manage patching, backups, and disaster recovery; collaborate with IT/engineering and provide training.

Develop and apply AI/ML techniques for anomaly detection in cybersecurity, build and optimize models and tools using Python, Pandas, and C/C++, analyze and troubleshoot security events, work with embedded DoD devices, and support on-site activities with quarterly travel while maintaining an active Secret clearance.

The Cybersecurity Specialist will develop security policies, monitor compliance, respond to threats, and operate security tools like firewalls and intrusion detection systems.

The Cybersecurity Specialist develops and enforces security policies, monitors systems, conducts investigations, and ensures compliance with security standards.

Support daily cybersecurity operations including monitoring threats, implementing security controls, and maintaining compliance with DoD policies.

Provide cybersecurity expertise for surface combat system program offices; lead RMF Assessment & Authorization to achieve/renew ATOs; perform security control assessments, risk assessments, POA&M updates, and ATO package preparation; ensure system hardening per STIGs/SRGs and DoD/DON regulations; identify vulnerabilities in software, hardware, and architecture and recommend mitigations; coordinate cyber test events and mentor team members; prepare briefs and prioritize program cyber tasking.

Perform RMF Assessment & Authorization to obtain/renew ATOs for Navy combat system platforms. Conduct security control assessments, risk assessments, POA&M updates, STIG/SRG hardening, ATO package preparation, and advise program offices on secure design. Coordinate with NAVSEA/PEO IWS, mentor team members, and brief decision makers.

Lead and improve cybersecurity operations, incident response, vulnerability management, and technical risk reduction. Coordinate cross-functional remediation, manage security technologies and vendors, develop metrics and playbooks, and communicate risks to stakeholders and leadership.

Lead enterprise IT and cybersecurity operations including cloud (M365 GCC High/Azure Government), hybrid identity, endpoints, network, backups/DR, vendor/MSP management, and CMMC Level 2 / NIST SP 800-171 compliance; manage staff, incident response, risk register, audits, and report posture to executive leadership.

The Senior Cybersecurity Engineer leads the implementation of security technologies, manages cybersecurity platforms, and collaborates with teams to enhance the organization's security posture.

The Cybersecurity Engineer will support incident response and monitoring for threats, triaging alerts, investigating suspicious activities, and developing response playbooks while coordinating with internal teams and external partners to enhance cybersecurity measures.

Lead cloud security posture management across AWS, Azure, and Microsoft 365 using CSPM/CNAPP tools. Identify misconfigurations and vulnerabilities, define remediation requirements, drive closure with Infra/App teams, integrate cloud telemetry into logging/SIEM, support Proofpoint email gateway operations, enforce cloud baselines and standards (NIST/CIS), and deliver risk reporting to Cybersecurity and IT leadership.

The Cybersecurity Engineer III is responsible for security engineering, architecture, penetration testing, system compliance, and risk assessment to protect network systems.

Support and advance the information security program by managing regulatory compliance and audits, performing third-party/vendor risk assessments, maintaining vendor risk registers, leading security awareness and phishing programs, mapping controls to frameworks (NIST CSF, CIS, NYDFS), tracking KPIs/KRIs, developing dashboards and executive reports, and coordinating with auditors, state insurance departments, and business stakeholders.

Serve as cybersecurity SME for a Joint Interagency Task Force: design, integrate, test, and evaluate cybersecurity for C-sUAS and embedded systems; perform RMF accreditation (eMASS), risk/vulnerability assessments, certification activities, mentoring, and cybersecurity strategy and test plan development.