Top Cybersecurity Jobs

As a Junior Cybersecurity Analyst, you will provide support in cybersecurity, compliance, and IT operations while gaining industry certifications and experience in high-growth environments.

As a Junior Cybersecurity Analyst, you'll support senior analysts, manage client accounts, and learn cybersecurity frameworks and compliance tools.

Provide cybersecurity and information assurance activities at Aberdeen Proving Ground. Review cybersecurity packages, develop strategies, and manage documentation.

Operate, maintain, tune, and engineer enterprise SIEM and log-aggregation platforms. Develop detection content, alerting rules, playbooks, and parsing for ingestion. Troubleshoot event flows, ensure 99.99% availability, perform maintenance/patching, document incidents, and support CSOC analytics and integrations with government reporting systems.

Operate, maintain, and improve enterprise SIEM and log aggregation platforms (ArcSight, ElasticSearch, Kibana, Splunk). Onboard assets, develop alerts/playbooks/rules, tune queries, troubleshoot event flow and parsing, and perform engineering, testing, and emergency maintenance to meet 99.99% availability and Intelligence Community standards. Document incidents, use ticketing systems, and support CSOC reporting and integrations. Requires active TS/SCI and relevant DoD 8570 certifications.

Lead enterprise cybersecurity architecture across Zero Trust, cloud, identity, networks, applications, and data. Design secure hybrid on‑prem/cloud architectures, establish baselines and standards, ensure NIST/RMF/OMB-CISA compliance, oversee modernization efforts, coordinate cross-functional teams for threat modeling, secure API design, encryption, secrets management, and advise senior leadership on strategy and enterprise risk.

Support and secure mission-critical intelligence systems through RMF-aligned assessments, vulnerability identification, and mitigation. Evaluate architectures, document SOPs, automate testing and monitoring with Python/PowerShell, manage containerized/virtualized environments (Kubernetes, AWS), and collaborate with DevOps and systems teams to ensure secure design and mission readiness in classified environments.

Provide cyber intelligence services for the U.S. energy sector: deliver threat intelligence on nation-state and criminal actors; design, implement, and secure enterprise IT and OT environments; manage cloud security, Zero Trust, RMF/NIST 800-53 compliance; support ATO packages and continuous monitoring; perform endpoint security, vulnerability management, and system hardening. Requires active TS/SCI or DOE Q.

Provide Assessment & Authorization (A&A) support under DoD/IC RMF for USSOCOM networks and systems. Perform risk and vulnerability assessments, create A&A/CAP packages, use ACAS/Nessus/SCAP and STIGs, validate patching, develop POA&Ms and ISCM plans, coordinate with DoD/IC agencies, and advise on mitigation and authorization actions to obtain ATO/IATT/ATC.

Oversee Minitab's Information Security Management System, manage risk compliance, third-party security assessments, and develop security training programs.

Design, implement, and operate enterprise security controls across Azure, M365, and hybrid environments. Support incident response, PKI and key management, DLP, EDR, secure configuration baselines, and Zero Trust operationalization. Collaborate with GRC, Threat & Exposure Management, infrastructure, and application teams to remediate vulnerabilities, embed security into SDLC, and maintain global security platform reliability and compliance.

Law firm seeks associates (2-4 years post-JD) for privacy, cybersecurity, and communications regulatory practice. Responsibilities include privacy and data security counseling, transactional and litigation work, and representing clients before regulators (FTC, foreign DPAs, state AGs). Focus on compliance with HIPAA, GLBA, FTC Act, international privacy law, and self-regulatory standards; cyber incident response and information security planning experience is a plus.

Lead global infrastructure and cybersecurity for corporate and plant environments: design and operate networks, cloud, virtualization, backups, endpoint and OT security; transition operations to MSPs; own vendor governance, budgets, incident response, and a permanent security/infrastructure team.

Protect firm employees, data, and infrastructure by developing and using monitoring tools, performing incident response and remediation, conducting unstructured investigations, and promoting cybersecurity best practices across the organization.

The Cybersecurity Engineer is responsible for protecting data and infrastructure, implementing firm-wide defenses, leading awareness efforts, and handling incident responses.

Lead and mentor a team of Security Engineers to design and enforce secure architectures for electronic warfare systems. Manage RMF (Steps 1-6) and ISSE/ISSO functions to achieve IATT/ATO, produce A&A documentation with Xacta/eMASS, run continuous monitoring and vulnerability management (Nessus/ACAS/SCAP), and direct incident response while ensuring compliance with NIST SP 800-53, ICD 503, and CNSSI 1253.

Defend DoD networks as part of a 24x7 SOC: analyze real-time threat intelligence, correlate security events, perform packet and log forensics, triage alerts, integrate IOCs into sensors/SIEMs, and coordinate incident response with USCYBERCOM and customers.

Design, build, and operate a secure Kubernetes-based platform: automate infrastructure (Terraform), CI/CD (Argo CD), observability, and security tooling; ensure availability, compliance, and incident troubleshooting while collaborating with engineering teams and documenting platform standards.

Senior security engineer to build, operate, and secure a Kubernetes-based cloud platform. Responsibilities include infrastructure automation (Terraform), CI/CD (Argo CD), observability, security tooling, compliance, troubleshooting, documentation, and cross-team collaboration to support U.S. federal contracts.

Lead development and maintenance of a technology and cybersecurity governance framework across on-prem and cloud environments. Manage policy and controls programs, risk and controls mapping (SOC2, NIST, PCI, NYDFS), annual risk assessments, GRC automation, SOC2 audits and regulatory exams. Partner with enterprise risk, architects, and tech teams to measure and report program effectiveness and ensure compliance.

Lead and grow the attack surface management program by identifying, assessing, and prioritizing exposures; drive remediation and automation; collaborate with AppSec, DevOps, and cloud teams; maintain standards, runbooks, and attack surface maps; present risk metrics; mentor teammates; and lead compliance activities (e.g., PCI).

Lead enterprise security operations across IT and OT, overseeing SOC/MDR partners, TVM and patch management, incident response, threat hunting, data privacy/governance, security tooling optimization, awareness programs, and alignment of cybersecurity strategy with business risk and senior leadership.

Lead cybersecurity architecture for an Air Force weapons system program: design and implement secure on‑prem and cloud infrastructure, integrate security into CI/CD/DevOps, support ATO/RMF accreditation, configure enterprise security tools (Splunk, HBSS, ACAS, SolarWinds), perform risk assessments, and collaborate with program leadership to enforce policies, IAM, encryption, monitoring, and incident response.

Lead design and architecture of cybersecurity solutions for federal networks: harden systems, reduce attack surface, develop Zero Trust roadmaps, guide product selection, and coordinate cross-functional teams to implement cloud, IoT, A&O, IAM, and ML security capabilities.

Lead and evolve a 24x7 Cybersecurity Operations Center into an AI-enabled, automated SOC. Oversee incident response, threat hunting, detection engineering, SOAR playbooks, MSSP integration, and talent development while driving operational KPIs and security technology strategy across cloud, endpoint, network, and email environments.