Top Cybersecurity Jobs

Administer and optimize Trellix cybersecurity tools across enterprise Windows and Linux environments. Manage policies, deployments, endpoint health, detections, integrations with SIEM/SOAR and vulnerability platforms, dashboards, compliance, documentation, and incident response activities. Support endpoint forensics, containment, IOC sweeps, risk assessments, security control validation, and RMF/NIST compliance while coordinating with systems, network, and cybersecurity teams.

Designs and integrates enterprise cybersecurity solutions, with emphasis on cloud security architecture, secure migrations, vulnerability management, incident response, firewalls, IDS/IPS, and SIEM technologies. The role supports military cyberspace operations, evaluates cybersecurity tools, prepares technical security documentation, and collaborates with internal teams and external customers. Applicants must possess TS/SCI clearance and be able to obtain a CI Poly.

Leads cybersecurity assessment and authorization activities for classified DoD and Intelligence Community systems. Maintains SSPs, POA&Ms, SARs, and ATO artifacts; performs vulnerability scanning and remediation tracking; validates NIST and CNSSI controls; supports hardening, patching, STIG compliance, monitoring, incident response, and change-impact assessments. Collaborates with engineering, administration, and DevSecOps teams.

Lead cybersecurity assessment and authorization activities for classified DoD and Intelligence Community systems. Responsibilities include executing RMF processes, maintaining SSPs, POA&Ms, SARs, and ATO artifacts, managing vulnerability remediation, validating NIST and CNSSI controls, enforcing STIG compliance, hardening Windows, Linux, and network systems, monitoring environments, supporting incident response, and assessing security impacts of system changes.

Conduct advanced cybersecurity monitoring, incident detection, investigation, response, threat analysis, and security validation across on-premises and cloud environments. Perform authorized vulnerability validation, penetration-test finding reproduction, remediation verification, and application security testing. Develop incident-response procedures, testing methodologies, documentation, and playbooks while supporting offensive security, adversary emulation, and purple-team capabilities. Mentor junior analysts and collaborate with technical teams and government stakeholders.

Maintains Authority to Operate for Navy education and training systems by managing compliance, vulnerability remediation, incident response, access coordination, security documentation, and continuous monitoring. Supports DevSecOps security integration, cloud security architecture, risk management, cybersecurity reporting, stakeholder coordination, vendor engagement, and implementation of security tools and controls across classified and unclassified environments.

Secure and accredit multi-tenant, multi-classification cloud environments across development, integration, and test enclaves. Implement JSIG, NIST, STIG, RMF, and ATO requirements; maintain SSPs, POA&Ms, and continuous-monitoring evidence; validate vulnerability, application-security, container, and infrastructure-as-code outputs; support secure cloud and DevSecOps design; and provide cybersecurity guidance for capability-provider artifacts and promotion decisions.

Build and operate secure DevSecOps pipelines using SAST, DAST, container scanning, SBOM/SCA, artifact validation, and vulnerability gates. Produce RMF/cATO evidence, support secure coding compliance, drive CWE/CVE remediation, validate rollback readiness, and help developers adopt secure-by-default CI/CD automation across cloud and mission environments.

Maintain Authority to Operate for Navy education systems, coordinate secure access, monitor vulnerabilities and incidents, manage compliance reporting, support audits, and integrate security into DevSecOps. The role includes incident investigation, threat analysis, remediation, cloud and enterprise security architecture, cybersecurity documentation, vendor coordination, risk management, and implementation of secure tools, applications, migrations, and deployment processes.

Manage complex, citywide cybersecurity programs and multiple concurrent projects across agencies, vendors, and stakeholders. Responsibilities include vendor selection, RFI/RFP development, budgeting, scheduling, contractor management, risk assessment, reporting, dashboard strategy, PMO development, workflow implementation, proof-of-concept trials, and executive communications. The role supports Cyber Command leadership and may require varied shifts in a 24/7 operational environment.

Lead advanced cyber investigations and detection engineering across endpoint, network, cloud, identity, application, and manufacturing environments. Develop and tune detections in SIEM/EDR/NDR/SOAR, conduct threat hunting, apply MITRE ATT&CK, automate workflows with scripting/AI, mentor analysts, and collaborate across security teams to improve detection fidelity and response.

Leads the Cyber & Information Security portfolio and program governance for a healthcare organization. Oversees prioritization, dependencies, risks, budgeting, execution, reporting, process optimization, and executive visibility across security initiatives. Supports CISO and Board engagements, coordinates governance materials and follow-up, participates in business continuity exercises, advises leadership on operational risks, and mentors team members. Requires substantial experience managing complex technology or security programs in regulated environments.

Lead pre-sales security architecture engagements by designing and validating defense-in-depth solutions across hybrid, cloud, application, identity, endpoint, network, and data environments. Conduct security assessments, create remediation roadmaps, integrate security platforms, and support DevSecOps, SOC, detection engineering, incident response, compliance, and risk programs. Collaborate with sales, engineering, clients, and executive stakeholders to communicate technical trade-offs and deliver scalable enterprise security strategies.

Designs and implements cybersecurity controls, evaluates network, system, and application vulnerabilities, identifies advanced threats, and develops remediation strategies. The role involves monitoring and improving cyber defenses, responding to security breaches, communicating security risks to stakeholders, and supporting mission-critical infrastructure and national security initiatives.

Lead the strategy, roadmap, and growth of Horizon3’s Tripwires threat detection and deception product. Own detection fidelity, deployment coverage, alerting, integrations, dashboards, analyst workflows, customer insight, and commercial outcomes. Partner with Engineering, Design, Sales, Marketing, Customer Success, and Security teams to deliver precise, low-noise alerts and integrate Tripwires with SOC response workflows. Define product metrics, influence executive direction, and guide launches and adoption.

Designs and delivers GM Financial’s cybersecurity architecture and program, including security controls, risk assessments, cloud and application security, network protections, compliance, and security strategy. Partners with technical and business stakeholders to reduce risks, assess systems, improve security maturity, guide infrastructure and application teams, and support cybersecurity education. The role also mentors team members and contributes to security automation, DevOps, container, and cloud security initiatives.

Executes cybersecurity governance and risk initiatives by developing policies, standards, and procedures; managing audits, remediation tracking, security requirements, and compliance reporting. Partners with business and technical teams to protect information assets, monitor adherence to controls, and address threats. The role requires knowledge of networking, infrastructure, security frameworks, IT service management, cloud technologies, and relevant regulations. It operates in a flexible hybrid environment with four office days weekly.

Provides cybersecurity engineering support to a NAVSEA contractor team. Responsibilities include implementing and monitoring cyber defense measures, assessing vulnerabilities, developing remediation strategies, maintaining security controls, responding to breaches, and ensuring compliance with cybersecurity policies and Assessment and Authorization requirements. The role is based primarily at the Washington Navy Yard, with occasional naval-centric travel to locations including Norfolk and San Diego.

Lead and oversee a large DoD enterprise IT and cybersecurity contract, interfacing with government leadership, managing staffing, subcontractors, risk, finances, compliance, SLAs, transitions, and delivery of cloud, infrastructure, DevSecOps, and security services across dispersed sites.

Implement and assess cybersecurity controls across information systems and Microsoft Azure environments. Support DoD RMF activities, Zero Trust implementation, ACAS vulnerability scanning, remediation tracking, Azure Policy administration, Microsoft Defender for Cloud assessments, Xacta documentation, infrastructure automation, continuous monitoring, and security-control evidence collection. Collaborate with cloud engineers, system administrators, DevSecOps teams, ISSOs, and cybersecurity personnel while documenting configurations and remediation activities.

Supports ISSMs and ISSOs in securing DoD information systems across tactical Army programs. Implements cybersecurity policies, manages RMF documentation and ATO packages, reviews vulnerability and penetration-test findings, analyzes architectures and data flows, coordinates incident remediation, maintains security artifacts, and supports continuous monitoring, system hardening, secure application development, and DevSecOps practices.

Conduct cybersecurity assessments, residual risk analysis, and Risk Management Framework documentation for Department of War IT systems. Recommend secure architectures, administer mixed network environments, perform vulnerability testing, support military tactical and non-tactical systems, and contribute to cybersecurity reporting. The role is fully on-site and requires eligibility for a Secret security clearance.

Conduct vulnerability scans and security analyses on undersea combat platforms and support networks. Monitor SIEM data, detect and report cyber threats, analyze malicious activity, and develop and test mitigations. Apply cyber threat intelligence to address malware, phishing, and advanced persistent threats. Participation requires SkillBridge eligibility, military approval, U.S. citizenship, and an active Secret clearance.

Monitor network traffic, IDS alerts, security events, and logs to identify threats and false positives. Develop SOC procedures, produce situation reports, investigate incidents, create SIEM and IDS detection content, recommend proactive security blocks, and advise incident responders. The role requires shift work, multitasking under pressure, incident response experience, a bachelor’s degree, a relevant cybersecurity certification, and eligibility for a government clearance.

Monitor network traffic, IDS, SIEM events, and security logs; distinguish real threats from false alarms; investigate incidents; create detection content; maintain SOC procedures; advise incident responders; produce situation reports and security communications; and track investigations to resolution while working shifts.