Top Cybersecurity Jobs

Leads OT cybersecurity initiatives across research, technical assistance, and manufacturing environments. Evaluates proposals, assesses industrial network architectures and risks, advises engineering and IT teams, develops technical proposal content, and demonstrates OT security technologies on factory floors. The role requires hands-on experience with PLCs, HMI/SCADA, industrial protocols, and ISA/IEC 62443, plus strong communication skills, travel, onsite work, and U.S. citizenship.

Lead concurrent cybersecurity advisory and SOC assurance engagements from planning through delivery. Manage scope, budgets, staffing, client communications, control testing, reporting, and engagement economics. Support AI governance assessments, ISO 42001 alignment, cybersecurity framework assessments, and SOC examinations. Translate technical findings into business recommendations, mentor team members, contribute to proposals and practice development, and build scalable delivery playbooks.

Conducts proactive threat hunting across enterprise networks by analyzing logs, network data, attacker techniques, and threat intelligence. Investigates suspicious activity, identifies vulnerabilities and mitigations, supports critical incident response, and leads analysis of advanced persistent threats. Develops hunting strategies, automation, and tools to detect sophisticated adversaries while documenting findings and actionable intelligence.

Monitors, investigates, and responds to cybersecurity incidents using SIEM, IDS/IPS, and EDR tools. Performs log analysis, alert triage, threat hunting, vulnerability monitoring, threat intelligence analysis, incident reporting, and SOC process improvement. Collaborates with IT, security teams, vendors, government agencies, and local agencies. Works rotating 24/7 shifts, on-call rotations, and provides storm and emergency response support.

Provides cybersecurity engineering support across information-system planning, design, testing, integration, and maintenance. Analyzes threat data from logs, IDS, intelligence reports, and vendors; creates Splunk ES dashboards, rules, reports, monitors, and use cases; and supports incident handlers and information assurance managers. Administers, configures, troubleshoots, upgrades, maintains, and backs up the DLA Splunk architecture and backend infrastructure.

Leads cybersecurity engineering and information assurance activities, analyzing security requirements and resolving system, workflow, and technology problems. Supports the planning, design, development, testing, demonstration, and integration of information systems. The role requires DoD Secret and IT-I/Tier 5 clearance eligibility, intermediate cyber defense and network operations expertise, and F5 ASM certification.

Lead cybersecurity engineering role supporting DLA information systems. Responsibilities include analyzing security requirements and threat intelligence, administering Splunk Enterprise Security and log-management infrastructure, creating dashboards, rules, reports, monitors, and use cases, and supporting system design, testing, integration, troubleshooting, maintenance, and backups. The role also provides incident-handling and information-assurance recommendations while supporting cybersecurity and network-operations functions.

Leads cybersecurity engineering and information assurance activities, analyzing security requirements, threats, logs, IDS data, and intelligence. Builds Splunk Enterprise Security dashboards, rules, reports, monitors, and threat use cases. Administers, upgrades, troubleshoots, maintains, and backs up Splunk infrastructure and related databases. Provides security engineering support across system planning, design, development, testing, integration, and sustainment while supporting incident handlers and information assurance managers.

Leads cybersecurity engineering and information assurance activities, analyzing security requirements, threat intelligence, logs, and IDS data. Develops Splunk Enterprise Security dashboards, rules, reports, monitors, channels, trends, and threat use cases. Administers, configures, troubleshoots, upgrades, maintains, and backs up the Splunk enterprise log-management architecture while supporting incident handlers and information assurance managers.

Leads cybersecurity engineering and information assurance efforts, analyzing security requirements, threats, logs, IDS data, and intelligence reports. Designs and supports information system security engineering across planning, development, testing, and integration. Administers Splunk Enterprise Security and its backend infrastructure, creating dashboards, rules, reports, monitors, and threat use cases. Installs, configures, troubleshoots, maintains, and backs up Splunk log-management components while supporting incident handlers and information assurance managers.

Designs and administers secure, resilient enterprise networks for DoD environments. Responsibilities include routing and switching architecture, next-generation firewalls, Zero Trust segmentation, network sensors and telemetry pipelines, STIG compliance, encrypted interconnects, automation, performance tuning, incident response support, packet forensics, and RMF/ATO documentation.

Designs and administers secure enterprise network architectures for DoD environments, including routing, switching, firewalls, Zero Trust segmentation, network sensors, packet brokers, encrypted interconnects, and SIEM telemetry pipelines. Responsibilities include STIG compliance, network automation, performance tuning, incident response support, packet analysis, threat hunting collaboration, and RMF/ATO documentation. Requires active Top Secret clearance with SCI eligibility, extensive enterprise networking and cybersecurity experience, and relevant networking and security certifications.

Engineer cybersecurity for Navy control systems and platform IT supporting an electronic warfare system. Responsibilities include integrating security clients on Red Hat Enterprise Linux servers, writing Linux scripts, hardening Linux and Windows systems, conducting security scans, patching third-party software, managing vulnerabilities, and performing verification testing. The role is fully on-site in Syracuse, NY and requires U.S. citizenship and an active Department of Defense Secret clearance.

Lead and manage multiple cybersecurity risk workstreams including risk assessments, HVA oversight, and risk governance. Advise on federal cybersecurity frameworks, produce policies/SOPs, perform QA/QC on deliverables, present findings to technical and executive audiences, and coordinate with federal partners to ensure compliance with CISA, OMB, and NIST guidance.

Designs, implements, automates, and maintains cybersecurity controls across strategic enterprise platforms, including cloud, SaaS, PaaS, and AI environments. Conducts security assessments, validates controls, monitors security posture, investigates gaps, and drives remediation. Integrates security into CI/CD and platform delivery, develops controls-as-code, improves resilience, and supports governance and compliance readiness. Partners with platform, engineering, architecture, and product teams to enable secure adoption and operational efficiency.

Provides senior leadership for enterprise IT governance, cybersecurity, privacy, workforce planning, budgeting, investment management, and digital accessibility. Oversees contractor personnel, cybersecurity risk assessments, audits, vulnerability testing, incident response coordination, third-party security, and compliance frameworks. Coordinates technical teams, manages dependencies and resources, supports strategic planning, and delivers executive-level risk and decision support to government and contractor leadership.

Summer cybersecurity intern supporting information security, cloud vulnerability, IT PMO, business analysis, data management, reporting, automation, and digital transformation initiatives. Responsibilities include researching, gathering data, maintaining databases and spreadsheets, collaborating on projects, protecting sensitive information, attending training, and presenting program learnings. The role may involve administrative tasks, travel between operating locations, and work in office or operations environments.

Leads enterprise vulnerability management across data centers, endpoints, multi-cloud, AI workloads, and manufacturing environments. The role prioritizes exposures using threat intelligence, exploitability, asset criticality, business context, and attack-path analysis. Responsibilities include vulnerability scanning, remediation governance, patch coordination, exception management, automation, dashboards, intelligence workflows, 0-day response, stakeholder influence, and mentoring. The engineer partners with infrastructure, cloud, application, SOC, and incident response teams to reduce organizational risk and mature cybersecurity capabilities.

Performs cybersecurity operations across alert monitoring, incident response, threat hunting, vulnerability management, detection engineering, identity security, and regulatory compliance. The role administers security tools, investigates suspicious activity, coordinates containment and remediation, supports NERC CIP-008 and CIP-015 activities, maintains audit evidence, and partners with technical and business stakeholders. Participation in on-call coverage, security assessments, projects, vendor reviews, and periodic industry travel is required.

Leads complex cybersecurity incident investigations across cloud and on-premises environments. Directs investigative priorities, coordinates threat hunters and technical specialists, communicates findings and response recommendations to executive customers, and balances containment with recovery and evidence preservation. Conducts threat research, develops analytical automation, improves data quality, mentors colleagues, and contributes to technical publications and presentations.

Own the IT infrastructure and cybersecurity function for a classified site. Responsibilities include infrastructure lifecycle management, incident response, security policy enforcement, RMF and accreditation execution, vendor and budget management, customer integration, and direct leadership of IT and cyber personnel. The role requires hands-on troubleshooting, executive risk briefings, inspection readiness, and alignment with federal classified-system frameworks.

Serves as the senior technical authority for complex cybersecurity investigations, incident response, threat intelligence, threat hunting, vulnerability analysis, penetration testing, detection engineering, and audit support. Leads high-impact investigations, develops detection and analytical content, evaluates vulnerabilities and attack paths, improves operational standards, mentors junior analysts, supports security platforms and automation, and communicates technical findings to stakeholders. The role is a senior individual contributor without direct personnel-management responsibility.

Leads enterprise cybersecurity risk analysis, risk and threat modeling, cyber risk quantification, metrics reporting, and executive presentations. Evaluates exceptions, audit findings, controls, policies, asset inventories, and emerging threats across cloud, access, application, vendor, data, and infrastructure security. Manages risk projects end to end, identifies control and process gaps, recommends policy enhancements, and influences technical and business teams to mitigate risk.

Investigates and responds to high-severity cybersecurity incidents across identification, containment, eradication, recovery, and lessons learned. Performs endpoint, network, and cloud forensics; malware analysis; threat hunting; and root-cause assessments. Documents findings, presents reports, collaborates with technical and business teams, improves detection content and response playbooks, and supports automation and AI capabilities within the incident response program.

Supports Air Force cybersecurity programs by installing and maintaining ACAS vulnerability-management tools, scheduling scans, analyzing vulnerabilities, and directing STIG-based hardening. Performs DoD compliance assessments, RMF and authorization documentation, incident reporting, root-cause analysis, corrective action planning, and POA&M maintenance. Collaborates with system administrators on remediation and supports ACAS server and database administration across classified networks.