Top Cybersecurity Jobs

Leads defensive cyber operations and cybersecurity engineering across enterprise systems. Designs, implements, and sustains cybersecurity capabilities; oversees subordinate teams; develops strategies, metrics, and resource recommendations; conducts risk assessments, design studies, and Analysis of Alternatives; supports DoD compliance, accreditation, and audits; and briefs executives on cybersecurity posture, capability gaps, and future operations.

Build and operate cybersecurity capabilities in a U.S. government air-gapped classified cloud environment. Responsibilities include vulnerability management, incident response, threat hunting, threat detection, security tool development, customer coordination, and establishing consistent cyber defense practices across environments.

Provides cybersecurity engineering across on-premises, cloud, and hybrid environments. Owns security architecture, SIEM/SOAR security, endpoint protection, detection engineering, automation, vulnerability management, incident response, and CMMC/NIST compliance support. Enhances Microsoft Defender and Darktrace tooling using PowerShell, KQL, and automation workflows. Maintains security documentation and provides backup infrastructure support for VMware and Veeam. Participates in after-hours response and cross-functional IT projects.

Serves as the primary liaison between cybersecurity teams and Department of the Air Force stakeholders. Coordinates risk assessments, incident response communications, policy implementation, cybersecurity awareness, regulatory compliance, threat intelligence, and performance reporting. Supports Active Directory security, OU design, Intune configuration, STIG implementation, vulnerability remediation, and security integration into projects. Requires extensive cybersecurity experience, DoD certification, and a TS/SCI clearance.

Leads security architecture reviews and governance for enterprise services, applications, integrations, and cloud environments. Develops Zero Trust reference architectures, secure-by-design patterns, and DevSecOps guardrails across hybrid and multicloud platforms. Oversees AWS, API, Kubernetes, data, AI, third-party, and integration security; conducts risk assessments and maps controls to security frameworks. Guides incident response, compliance, PAM, remediation, and security strategy while mentoring security and delivery teams.

Audits Windows infrastructure, Active Directory, virtualization, and container platforms for DoD cybersecurity and STIG compliance. Validates patching, authentication, access controls, and secure deployments; supports STIG remediation and ATO documentation. Produces assessment reports and actionable recommendations for DTRA sites as part of a CORA team. The role requires an active Top Secret clearance with SCI eligibility, U.S. citizenship, and 5–10 years of Windows systems engineering or cybersecurity experience.

Conduct Linux STIG compliance reviews, vulnerability scans, remediation validation, and endpoint security assessments using ACAS, Tanium, and Trellix. Review Docker and Kubernetes configurations, support STIG implementation and ATO documentation, and produce assessment reports with prioritized remediation strategies for DTRA systems.

Provides cybersecurity and information assurance support for AFOSI systems. Responsibilities include RMF authorization packages, security control monitoring, vulnerability scanning, STIG reviews, POA&M tracking, GRC and eMASS documentation, SIEM log analysis, security reporting, and remediation coordination. The role also supports security architecture, secure configuration baselines, development pipeline testing, incident response, and collaboration with infrastructure, operations, and development teams.

Conduct cybersecurity assessments of network infrastructure, boundary devices, and VoIP systems against DoD STIGs and SRGs. Validate segmentation, ACLs, routing, Zero Trust controls, and least-privilege enforcement; analyze configurations and logs for vulnerabilities; support DTRA sites with remediation, STIG implementation, and ATO preparation; and produce detailed reports with prioritized recommendations. The position supports DTRA’s CORA team in Fort Belvoir, Virginia, with 20% travel and a Top Secret clearance requirement.

The Junior Cyber Analyst will support USCYBERCOM by developing operational plans and coordinating integrated cyber operations, utilizing cybersecurity knowledge to address threats.

Designs and develops enterprise identity and access management architecture across cloud and on-premises environments. Responsibilities include IAM workflows, lifecycle management, identity governance, Zero Trust architecture, APIs, application integrations, automation, documentation, security standards, and incident response. The role collaborates with HRIS, IT, service owners, and business stakeholders to implement scalable identity solutions and secure SaaS integrations.

Owns enterprise cybersecurity strategy, architecture, governance, risk, compliance, incident response, security operations, identity governance, vendor management, and security team development. Advises executives and the board, establishes control frameworks, leads material incidents, protects cloud, corporate IT, mining, data center, OT, and AI environments, and builds a scalable internal security capability.

Leads cybersecurity architecture and implementation across corporate IT, cloud, data centers, mining operations, OT, and AI environments. Designs security standards and controls, oversees IAM, monitoring, EDR, vulnerability management, incident response, application and data security, and supports governance, risk, compliance, audits, and third-party assessments. Partners cross-functionally to secure platforms and integrations, validates control effectiveness, develops operational documentation, and mentors technical stakeholders.

Conduct advanced threat detection, hunting, incident response, log correlation, malware and network analysis, and SOC capability improvements. Develop detection logic, playbooks, and post-incident reports; map findings to MITRE ATT&CK; support purple-team operations; coordinate remediation with cyber and IT teams; mentor analysts; brief stakeholders; and work rotating shifts in a classified 24/7 SOC environment.

Provides cybersecurity engineering across on-premises, cloud, and hybrid environments. Responsibilities include security architecture, SIEM/SOAR administration, endpoint security ownership, detection engineering, automation, incident response, vulnerability management, compliance support, and security tooling enhancement. The role uses Microsoft Defender, Darktrace, PowerShell, KQL, and related platforms while providing backup infrastructure support for VMware and Veeam. It also maintains documentation, supports audits, participates in on-call response, and coordinates with IT and business stakeholders.

Monitors information systems for threats, vulnerabilities, and breaches; performs risk assessments, STIG compliance reviews, RMF A&A support, POA&M tracking, incident response, audits, and security documentation. The analyst helps develop security policies, verifies remediation, supports compliance reporting, and collaborates with IT teams to integrate security into system operations.

Proactively hunts advanced cyber threats across enterprise environments, analyzing network traffic, logs, endpoint telemetry, and threat intelligence. The role develops hunting strategies, investigates attacker TTPs using MITRE ATT&CK, automates detection capabilities with Splunk, Python, and PowerShell, supports incident response, identifies defensive gaps, and communicates findings and mitigations to technical teams and leadership.

Monitor SIEM and cybersecurity tools in a 24x7x365 environment, investigate threats and incidents, perform root cause analysis, and recommend containment and remediation. Track APTs and low-and-slow attacks using logs, network traffic, intelligence resources, and security tools. Support cybersecurity tool sustainment, Defense-in-Depth controls, and incident-response improvements. Develop detection and response scripts using SPL, Python, or PowerShell, and advise leadership on incident severity and priorities.

Monitor, investigate, and respond to cybersecurity incidents; administer endpoint, cloud, identity, vulnerability, and data protection technologies; lead incident response and remediation; support compliance, access governance, threat hunting, security awareness, and phishing simulations; and mentor junior cybersecurity professionals.

A 10-week cybersecurity and technology risk internship supporting security monitoring, incident response, threat intelligence, web and network defense, application security, vulnerability management, governance, audits, and risk reduction. Interns will analyze threats, assist with investigations and alert triage, document controls, collaborate across security teams, and contribute to cybersecurity program maturity while developing professional skills through mentorship and hands-on projects.

Designs and implements secure enterprise, application, and cloud architectures for USSTRATCOM mission systems. Responsibilities include cyber forensics, intrusion detection, incident response, vulnerability assessment, network and system security, secure coding, DevSecOps automation, cloud security, identity management, and compliance. The role supports 24/7 IT and network services across classified environments and requires collaboration, documentation, analytical problem-solving, and detailed security operations.

Leads enterprise cybersecurity governance and assurance, including policies, standards, controls, risk management, regulatory compliance, audits, metrics, remediation, and continuous monitoring. Partners with cybersecurity, technology, legal, privacy, risk, engineering, and audit teams to improve control effectiveness and executive visibility. Manages governance transformation, multi-cloud compliance, strategic planning, and a high-performing team while advising senior leaders and driving cross-functional accountability.

Monitor and analyze SOC security alerts, investigate and triage incidents, correlate logs and network data, identify indicators of compromise, document findings, support incident response, and prepare technical and executive reports. The role also contributes to threat detection improvements and requires shift, weekend, and holiday support.

Designs and delivers cybersecurity and Zero Trust training for NIH professionals and the general workforce. Responsibilities include applying ADDIE, creating course materials and SCORM e-learning modules, producing microlearning videos, ensuring Section 508 compliance, co-facilitating training, analyzing evaluations, and contributing to final training documentation. The role requires cybersecurity training experience, federal client support, e-learning authoring expertise, accessibility knowledge, and the ability to explain technical concepts clearly.

Designs and applies cybersecurity engineering practices across the system lifecycle for Navy and DoD mission systems. Responsibilities include threat modeling, vulnerability and attack-path analysis, cyber risk assessment, defensive technology evaluation, mitigation development, and communicating recommendations to multidisciplinary engineering and customer teams. The role requires active DoD Secret clearance and eligibility to obtain TS/SCI clearance.