Top Cybersecurity Jobs

Supports a national security customer by addressing cybersecurity inquiries, translating security needs into technical requirements, developing architecture risk and mitigation plans, identifying security gaps, shaping cybersecurity policies, and publishing baseline requirements for enterprise services. Provides security guidance, contributes to ICAM and Zero Trust initiatives, participates in technical exchanges, and ensures compliance with cybersecurity directives.

Leads cyber resilience across North and Latin America while owning global cybersecurity products and services. Partners with executives and cross-functional teams to translate cyber risks into business priorities, drive secure digital transformation, implement policies and controls, improve recovery readiness, and measure resilience maturity. The role also develops service roadmaps, accelerates adoption, strengthens IT, OT, cloud, and emerging technology security, and promotes AI-enabled security operating models.

Lead embedded systems security engineering for DoD sensor payloads and mission systems. Responsibilities include developing security architectures and requirements, ensuring JSIG and DAAPM compliance, supporting security testing and authorization activities, maintaining security plans and POA&Ms, assessing exportability, and applying reverse engineering, anti-tamper, cyber resiliency, and hardware/software assurance techniques. The role requires collaboration across program and business development teams, strategic cybersecurity planning, and full lifecycle systems engineering from architecture through verification and validation.

Lead Citi’s enterprise Insider Threat program within the Cybersecurity Fusion Center. Responsibilities include defining strategy, managing and developing multidisciplinary teams, implementing data-centric detection and response processes, applying AI and advanced analytics, integrating behavioral and technical indicators, advising senior stakeholders, coordinating governance and risk controls, and engaging industry and government partners. The role requires extensive cybersecurity leadership, insider threat expertise, incident response experience, and the ability to drive global transformation.

Lead the development and execution of Citi’s enterprise insider threat program. Responsibilities include strategic planning, AI-driven threat detection, data-centric process implementation, threat triage and response, stakeholder engagement, governance, risk management, metrics, reporting, and incident response support. The role partners with cybersecurity, legal, HR, compliance, risk, technology teams, industry peers, vendors, and government agencies while helping drive organizational transformation and mentor team members.

Leads product vision, strategy, and roadmap for Illumio Insights, a SaaS security analytics platform. Owns advanced threat detection, behavioral analysis, investigation, response workflows, AI/ML capabilities, and ecosystem integrations. Partners with engineering, customers, field teams, and strategic partners to define requirements and validate product-market fit. Oversees competitive positioning, enterprise product delivery, and product manager development while advancing Illumio’s detection-and-containment platform.

Leads the risk-based IT audit function, including audit planning, control testing, reporting, remediation validation, and external audit support. Evaluates IT general controls, cybersecurity, application and infrastructure controls, cloud environments, third-party providers, disaster recovery, and compliance frameworks. Partners with Finance, IT, Cybersecurity, Legal, executives, and the Audit Committee to address technology risks, improve internal controls, and advise on emerging technology governance. Manages consultants and helps build a scalable IT audit team.

Lead PKI implementation and data protection projects, advise clients on privacy laws and compliance, conduct privacy impact assessments, develop privacy policies, manage project planning and budgets, coach and mentor teams, collaborate on breach response and cross-functional cybersecurity initiatives, and review legal documents to support compliance.

Advises strategic enterprise customers on cybersecurity, cloud security, compliance, privacy, and risk. Leads security reviews and executive briefings for CISOs and risk leaders, presents Salesforce’s security architecture and controls, supports audits, questionnaires, contractual requirements, and escalations, and creates customer-facing security materials. Partners with Sales, Customer Success, Legal, Product, Engineering, and Security teams while translating complex technical and regulatory topics into actionable guidance.

Manage day-to-day security operations for DoD information systems supporting Collateral, SCI, and SAP environments. Develop and maintain RMF authorization packages, monitor compliance, coordinate system changes, review audit records, identify vulnerabilities, support incident recovery, maintain security documentation, and conduct continuous monitoring. Assist ISSMs and government and contractor organizations with assessment and authorization efforts.

Supports Grant Thornton’s Cybersecurity and Privacy team across consulting engagement phases, including cyber strategy, privacy compliance, AI security, cloud security, identity and access management, threat monitoring, incident management, ethical hacking, and data protection. Contributes to business development, marketing initiatives, and thought leadership while building business, technical, analytical, communication, and project management skills.

Supports cybersecurity risk management, governance, oversight, risk assessments, control evaluations, compliance monitoring, reporting, and remediation tracking. Analyzes evidence, metrics, and documentation; researches emerging cyber threats and industry practices; and collaborates with technology, security, risk, and business stakeholders. The role is part of an 18-month early-career development program for recent graduates, including mentorship, structured learning, cross-functional projects, and coaching.

Supports cybersecurity risk, governance, awareness, resilience, and reporting initiatives. Responsibilities include gathering and analyzing metrics and documentation, researching emerging cyber risks and industry practices, collaborating with technology and business stakeholders, and contributing to presentations, communications, process improvements, and program oversight within a global financial services organization.

AeroVironment is recruiting for upcoming five-year cybersecurity contract opportunities across database engineering, information systems security, software, systems, cloud, testing, administration, web development, and data science. Team members will support defensive cyber operations, critical infrastructure protection, threat detection, containment, mitigation, systems integration, analytics, information sharing, malware analysis, configuration management, and training development. Positions begin in late 2026 or early 2027 and may require U.S. person status or U.S. citizenship under ITAR and contract requirements.

Evaluates cybersecurity submissions for drone systems under the Blue UAS Cleared List Program. Reviews assessment reports, penetration testing results, vulnerabilities, remediation plans, and supporting evidence; assesses residual risks to missions and national security; provides recommendations on risk mitigation and technical acceptance; and applies NIST controls, supply chain risk management, DoD RMF, and applicable cybersecurity policies.

Leads Navy cyber and information warfare strategy, growth, capture, and proposal development. Owns go-to-market strategies, major contract wins, revenue and pipeline targets, executive client relationships, and federalization of commercial AI and cybersecurity solutions. Builds operational capabilities, mentors talent, coordinates multidisciplinary delivery teams, and ensures technical accuracy and delivery excellence across strategic Navy programs.

Advise and advance enterprise Third Party Risk Management capabilities, policies, governance, and operating practices. Assess complex third- and fourth-party risks, develop enterprise risk strategies, lead cross-functional initiatives, advise senior leaders, improve governance and analytics, and influence stakeholders across technology, cybersecurity, procurement, legal, resilience, and risk functions.

Serves as the cybersecurity subject matter expert for Joint Interagency Task Force 401. Designs and evaluates secure system architectures, translates mission requirements into cybersecurity solutions, supports testing and design reviews, conducts risk and vulnerability assessments, develops security strategies, mentors team members, and leads certification and accreditation activities using the DoD RMF and eMASS.

Evaluate cybersecurity submissions for the DCMA Blue List Program, focusing on embedded systems, firmware, wireless communications, software assurance, and supply chain risks. Review assessment reports, penetration testing results, vulnerability analyses, technical evidence, and remediation plans. Provide risk-based recommendations, validate mitigation effectiveness, advise Government stakeholders, interpret cybersecurity standards and policies, and monitor emerging threats affecting small unmanned systems and national security.

Supports hardware assurance for the GBSD defense program by assessing hardware and firmware threats, vulnerabilities, and risks; reviewing security assessments; identifying noncompliance; recommending mitigations; and helping ensure secure system architecture and implementation. The role also supports vulnerability management, supply chain security, counterfeit prevention, program protection, stakeholder communication, technical working groups, and security requirements across complex defense systems.

Oversee daily operations of the MACC-TTE cyber training/testing center. Manage customer support for events, integrate sponsor requirements, control projects/budgets/schedules, serve as primary POC, be on-site during regular duty hours, and act as backup to the Program Manager as needed.

Designs and assesses security for complex systems, cloud infrastructure, applications, media workflows, APIs, vendor tools, and third-party integrations. The engineer leads high-risk AppSec and CloudSec assessments, develops threat models and reusable security controls, establishes hardening baselines, advises secure content-production workflows, tests tooling, researches AI security implications, and mentors engineers. The role is primarily office-based Monday through Thursday in Glendale, California, with remote work on Fridays.

Protect P&G’s global IT environment from cyber threats through security engineering or analysis. Responsibilities include designing and monitoring security platforms, investigating incidents, responding to threats, assessing vulnerabilities, driving remediation, researching emerging attack techniques, strengthening security controls, and communicating risks to technical and business stakeholders.

Lead cross-functional cybersecurity programs spanning product, cloud, enterprise, vulnerability management, compliance, and incident readiness. Own roadmaps, budgets, risks, dependencies, metrics, executive reporting, assessments, audits, certifications, and vendor engagements. Coordinate incident response and remediation while partnering with engineering, IT, legal, privacy, compliance, and business teams. Track emerging risks and regulatory requirements, strengthen security-by-design practices, and use AI and automation to improve execution.

Leads and grows a global digital risks and cybersecurity consulting business. Responsibilities include strategy, business development, sales, complex cyber advisory and incident response engagements, AI risk and governance services, threat analysis, executive recommendations, project profitability, team leadership, recruitment, and mentoring. The role advises clients on cyber resilience, information security risk, governance, forensics, analytics, emerging technology risk, and multi-jurisdictional cyber investigations.