Top Cybersecurity Jobs

Partner with enterprise business units to manage security risk registers, conduct architecture reviews and threat modeling, provide security expertise, prioritize remediation, and drive bug closure. The role requires translating security frameworks into business-relevant risk, communicating with senior stakeholders, and applying sound judgment to AI-assisted security analysis. Responsibilities and autonomy vary across Senior Analyst, Lead, and Senior Lead levels.

Leads complex technology risk remediation engagements across enterprise organizations. Coordinates stakeholders, tracks commitments and decisions, validates remediation plans and control effectiveness, assesses residual risk, prepares executive reporting, and escalates blockers. The role ensures remediation is structured, evidence-based, accountable, and focused on measurable risk reduction without owning implementation.

Supports a Sponsor’s cyber mission by coordinating technical exchanges, documenting and evaluating cyber projects, integrating cyber datasets and tools with IT systems, developing technical roadmaps, and tracking process improvements. The role analyzes user needs, supports technical operations, communicates with technical and non-technical stakeholders, evaluates cybersecurity solutions, and contributes to technical review processes.

Supports cyber threat intelligence and vulnerability management by gathering, analyzing, and disseminating intelligence from classified, unclassified, open-source, and dark web sources. Identifies emerging threats and vulnerabilities, recommends countermeasures, produces analytical reports, conducts briefings, coordinates with stakeholders, and defines intelligence collection requirements. The role requires active TS/SCI clearance, U.S. citizenship, DHS suitability, and relevant cybersecurity or incident management experience.

Develops and supports security education and awareness initiatives across the bank. Creates communications, guides, digital content, and campaign materials explaining IT security policies and regulations. Analyzes campaign data, identifies trends, recommends improvements, supports awareness events, and responds to audit and regulatory requests while managing stakeholder expectations.

Supports the Information Security Management System, cybersecurity risk management, security documentation, vendor and internal system assessments, and collaboration with managed security providers. The internship also provides exposure to incident management, business continuity, threat hunting, gap analysis, incident response, event detection, reporting, and security event correlation. Candidates must be enrolled in a relevant cybersecurity or related degree program throughout the five-month internship.

Leads cybersecurity for airborne aerospace and defense platforms, including architecture, requirements, threat modeling, vulnerability assessments, attack-surface analysis, secure boot, authentication, encryption, key management, and defense-in-depth. Oversees DoD Risk Management Framework activities, authorization evidence, cybersecurity verification, penetration testing, supplier risk reviews, and corrective actions. Partners with engineering teams, suppliers, customers, and program leadership to ensure secure, resilient, safe, and mission-effective aircraft systems.

Leads hands-on cybersecurity engineering across enterprise, classified, air-gapped, and secure testing environments. Responsibilities include RMF and JSIG activities, STIG hardening, SCAP and vulnerability scanning, eMASS and SSP management, POA&M remediation, EDR/SIEM administration, security control optimization, and CMMC compliance. Partners with engineering, manufacturing, physical security, FSO, and ISSM teams to protect CUI and classified data while enabling business operations. Provides technical ownership, stakeholder guidance, audit readiness support, and mentorship.

Leads cybersecurity solution sales for enterprise and small-to-medium business customers. Builds security transformation strategies, identifies and qualifies opportunities, develops pipelines, conducts consultative conversations, and drives complex cloud solution deals through closure. Partners with internal teams and channel partners on proposals, account planning, forecasting, competitive strategy, events, and customer outcomes. Serves as a cybersecurity subject matter expert, mentors colleagues, and supports customer adoption of AI, cloud, and security solutions.

Leads a cybersecurity practice within a defense CTO organization, overseeing offerings, talent, solutioning, delivery, IRAD initiatives, and communities of practice. The role connects cyber strategy to execution across Zero Trust, offensive and defensive cyber, OT/ICS, enterprise IT, weapons platforms, and edge environments. It partners with growth and delivery teams, develops architectures and proposals, manages technical teams, and drives modernization outcomes. U.S. citizenship, an active Secret clearance, eligibility for TS/SCI, and 25% travel are required.

Develops and administers privacy, data classification, retention, and data-sharing policies for a federal court data platform. Conducts Privacy Impact Assessments, privacy risk analyses, and technical problem solving; drafts and manages data-sharing agreements, MOUs, and ISAs; maintains agreement inventories; and advises governance, legal, engineering, and business stakeholders on privacy-by-design, regulatory compliance, and secure handling of sensitive and personally identifiable information.

The Security Compliance Analyst manages cybersecurity, data privacy, classification, retention, governance, vulnerability assessments, incident response, and ATO documentation. Responsibilities include monitoring cloud environments and system logs, using SIEM tools, analyzing security risks, supporting security policies, reporting incidents, and ensuring compliance throughout the system lifecycle. The role also collaborates with Agile teams and stakeholders to protect sensitive data and resolve information assurance issues.

Designs, engineers, monitors, and manages enterprise network security infrastructure, including firewalls, IDS/IPS, VPNs, and network access controls. Analyzes architectures and vulnerabilities, investigates security events, leads incident response, implements security enhancements, and develops policies aligned with NIST, CIS, ISO 27001, and federal requirements. Advises leadership, collaborates with infrastructure and security teams, and mentors junior engineers.

Leads enterprise cybersecurity architecture and engineering for Department of Defense defensive cyber operations. Owns Zero Trust, ICAM, RMF/ATO lifecycle management, security boundaries, configuration management, incident response, threat hunting, SIEM/SOAR, EDR, and MISP threat intelligence capabilities. Requires daily SCIF access, Top Secret clearance with SCI eligibility, and collaboration on classified cyber defense activities.

Designs, integrates, assesses, and maintains security controls for classified DoD information systems, including Collateral, SCI, and SAP environments. Leads security engineering and cybersecurity teams, supports RMF and JSIG authorization, performs risk assessments, develops STIGs and test procedures, integrates monitoring and SIEM tools, and mitigates system threats throughout the lifecycle. The role also provides technical leadership, incident response support, operational procedures, and guidance to architects and developers.

Maintains the operational security posture of classified information systems supporting Collateral, SCI, and SAP environments. Responsibilities include authorization package management, configuration change impact analysis, compliance reviews, audit monitoring, vulnerability identification, incident handling, media sanitization, security documentation, system recovery oversight, and coordination with ISSM and authorization officials. The role is onsite in Massachusetts and requires current TS/SCI clearance with the ability to obtain TS/SCI with CI polygraph.

Lead cybersecurity architecture for cloud-native enterprise solutions: evaluate controls and new technologies, advise stakeholders, provide technical guidance, promote firmwide SDLC practices, and mentor peers to mitigate risk and adopt strategic solutions.

Monitors, detects, and responds to cybersecurity threats affecting government systems, networks, and sensitive data. Responsibilities include security event and log analysis, threat hunting, continuous monitoring, incident response, detection policy development, automation improvements, security reporting, metrics collection, and strengthening cybersecurity controls and operational resilience.

Develops and validates hardware and software security solutions for DoD sensor payloads and military systems. Responsibilities include systems security engineering, Anti-Tamper and cybersecurity architecture, requirements development, risk management, reverse engineering, security testing, cryptographic protection, technology release analysis, exportability assessments, and compliance with US Government security policies. The role also supports Assessment and Authorization, Security Plans, POA&Ms, stakeholder coordination, training, and international defense product initiatives.

Develops and validates hardware and software systems security solutions for DoD sensor payloads and military systems. Responsibilities include Anti-Tamper and cybersecurity architecture, requirements, testing, reverse engineering, RMF compliance, technology release analysis, exportability assessments, cryptographic protection, security documentation, and Security Test and Evaluation. Collaborates with government, program, and international stakeholders while supporting security plans, POA&Ms, training, and strategic technology development. This is a full-time, on-site role in San Antonio, Texas, requiring U.S. citizenship and eligibility for a Secret clearance.

Lead risk-based IT audits across cloud, datacenter, infrastructure, security, networking, and software engineering. Assess controls, identify gaps, draft reports, coordinate with stakeholders and external auditors, and follow up on remediation.

Leads customer- and partner-facing technical enablement across the Americas for Darktrace’s AI-driven cybersecurity portfolio. Delivers demonstrations, workshops, practical exercises, and product education; explains AI-enabled threat detection, investigation, prioritization, and response; and supports customer adoption and operational security outcomes. Collaborates with sales, customer success, engineering, and product teams while improving technical materials and learning experiences. Requires strong cybersecurity and AI security knowledge, multilingual communication skills, and travel of up to 40%.

Lead cybersecurity architecture evaluations, enterprise security solution delivery, threat modeling, control assessments, and technology selection. Advise technical teams, vendors, and senior leaders on security risks and business modifications. Apply AI-assisted security validation across software development workflows while ensuring data sensitivity, resiliency, traceability, and auditability. Secure cloud, SaaS, APIs, identities, integrations, and AI/ML applications using established security frameworks and reusable architecture patterns.

Leads global cybersecurity operations across enterprise IT, cloud, customer-facing applications, connected platforms, and manufacturing OT. Manages internal teams and MSSP partners, oversees 24/7 monitoring, incident response, detection engineering, threat hunting, compliance, metrics, and executive reporting. Serves as incident commander for major events and collaborates with application, product, plant operations, and ICS teams to improve security visibility and response.

Plans and coordinates cybersecurity initiatives involving cyber operations, technical analysis, information integration, and technology deployment. Gathers and validates customer requirements, develops project plans and roadmaps, analyzes cyber datasets, evaluates cybersecurity tools, prepares technical documentation, and facilitates technical exchanges with technical and non-technical stakeholders.