Top Cybersecurity Jobs

Support the Risk Management Framework lifecycle by developing documentation, conducting assessments, and ensuring compliance with federal standards while working with security tools.

Support design, deployment, and maintenance of enterprise identity and directory solutions. Manage Active Directory, GPOs, AD migrations, authentication (Kerberos, NTLM, PIV), SSO/ADFS integrations, PKI, and related services. Develop PowerShell/Visual Basic scripts, troubleshoot directory/authentication issues, perform functional testing, document processes, and collaborate with internal teams and developers to capture requirements and deliver IAM solutions.

Lead malware, binary, firmware and source-code analysis to identify vulnerabilities in critical infrastructure and federal networks. Develop automated analysis tools and workflows, mentor staff, write technical reports, shape research direction, pursue program growth and proposals, and collaborate with sponsors to secure and harden operational technology and software assurance capabilities.

Military-only SkillBridge cybersecurity internship providing hands-on exposure to network security, IAM, SOC/SIEM, endpoint protection, incident response, GRC, threat/vulnerability management, audits, red team/social engineering exercises, and security reporting. Interns attend customer meetings, participate in industry activities, and author three 1,000-word cybersecurity articles. Remote with equipment provided; 90-day minimum.

Design and implement end-to-end cybersecurity architectures for classified, CUI, and unclassified systems supporting DoD/IC. Lead RMF accreditation (SSPs, SARs, POA&Ms), conduct threat modeling and vulnerability assessments, advise on Cross Domain Solutions and zero trust, integrate security into SDLC, and brief senior leadership. Mentor junior staff and provide SME support for classified cybersecurity programs.

Entry-level security role supporting monitoring, alert triage, vulnerability scanning, incident response evidence collection, and GRC/compliance tasks (SOC 2, NIST CSF). Daily use of AI tools, documentation, KnowBe4 campaign support, and close mentorship with growth toward SOCOps or GRC specialization within 12–18 months.

Design, implement, and evaluate cybersecurity solutions and controls for DoD information systems. Conduct risk assessments and vulnerability analyses, recommend mitigations, support test plans, ensure compliance with DoD standards, prepare technical documentation, and collaborate with multidisciplinary teams.

Lead and manage the company's cybersecurity program, including strategy, governance, risk guidance, incident response, compliance and audits. Oversee security architecture, budgets, vendor relationships, and security awareness. Monitor emerging technologies, recommend controls, and train/mentor team members to improve security culture and ensure confidentiality, integrity, and availability of systems.

Manage and enhance NICHD IT security posture: run vulnerability scanning, patching, hardening, logging/auditing, configuration management, incident response, and network defense. Support FISMA compliance, perform security assessments and annual reporting, review system security documentation, and coordinate with systems/O&M teams to maintain secure, baseline configurations and remediate vulnerabilities.

Design, implement, and automate cybersecurity controls across IaC, PaaS, and containerized mission applications. Integrate security toolchains (SIEM, SAST/DAST/SCA), automate RMF and compliance evidence, harden platforms to STIG/CIS standards, develop Ansible playbooks, and collaborate with DevOps and engineering teams to improve security posture and resilience.

The Senior Cybersecurity Operations Researcher conducts analytical studies on cybersecurity risks and supports strategic initiatives to enhance national security operations. Responsibilities include collaboration with diverse teams, engaging international stakeholders, and producing technical documentation and publications.

Detect, triage, and investigate security alerts and incidents using SIEM and endpoint tools; document findings and remediation; support offensive testing, compliance efforts (PCI, SOX, ISO, HIPAA, NIST), and cross-functional IT teams. Provide off-hours availability and operate within a global hybrid environment.

Lead oversight of cloud and application security, governance, control deviations, remediation tracking, and executive reporting. Partner with infrastructure, engineering, and application owners to assess configurations, onboard new applications (including agentic AI), validate controls, approve policy deviations, and communicate remediation progress and emerging risks to senior management.

Operate day-to-day security operations in a cloud-first environment: monitor and triage SIEM alerts, perform incident response, build detection rules, manage vulnerability remediation, run penetration testing programs, manage email security and phishing simulations, support DLP and access reviews, produce leadership reports, maintain documentation, and support audits and regulatory requests.

Support a 24/7 DoD Cyber Network Defense operation by monitoring alerts, analyzing packet and log data, triaging incidents, integrating threat intelligence into sensors/SIEMs, and coordinating incident response and reporting.

As a Principal Cybersecurity Engineer, you will design and maintain security systems for the Workday product within AWS, focusing on Kubernetes, Python, and Infrastructure as Code tools while integrating security into the engineering workflow.

Provide security engineering and DLP administration for DLA JETS DLP program, support incident response and cybersecurity content development, analyze and implement security requirements, integrate security solutions, and coordinate enterprise-wide incident handling in accordance with DoD directives.

Lead and execute incident response for DoD directives, conduct forensic investigations, perform post-incident reviews, maintain IR SOPs to NIST/DISA guidance, manage enterprise monitoring/logging, produce leadership reports, and support remediation and capability improvements while providing after-hours investigative support.

Support cybersecurity for power plant control systems by maintaining network diagrams and asset inventories, assisting assessments and compliance, troubleshooting critical systems, and supporting control system modernization and documentation in collaboration with engineering and plant teams.

Leads a team building and improving enterprise threat detection, SIEM/SOAR content, automation playbooks, validation practices, and detection lifecycle governance. The manager remains hands-on with detection engineering, alert tuning, threat modeling, MITRE ATT&CK coverage, incident response automation, integrations, metrics, audit documentation, and roadmap planning. Partners across SOC, incident response, threat intelligence, cloud, identity, network, OT, IT, and business teams to improve alert fidelity, investigation speed, response scalability, and overall SecOps maturity.

Lead and scale product marketing across Cato's portfolio: define portfolio strategy, positioning, launches, and messaging; build and mentor a PMM team; drive cross-functional alignment; create thought leadership and data-driven go-to-market programs supporting sales and product.

The Cybersecurity Engineer detects and responds to threats, improves endpoint visibility and security posture, supports incident response, automates alerting and reporting, manages vulnerabilities, and partners with IT on patching and system hardening. The role monitors hybrid environments, investigates suspicious activity, documents security standards, and drives continuous improvement. It requires enterprise IT and cybersecurity experience, endpoint security expertise, scripting skills, and strong Windows Server knowledge.

Leads cybersecurity and RMF activities for C-17 training and sustainment systems across 16 locations. Oversees ISSO personnel, RMF documentation, eMASS workflows, ATO processes, vulnerability assessments, audits, incident response, security controls, compliance, staffing, budgets, schedules, and stakeholder coordination. Ensures alignment with DoD, USAF, NIST, NISPOM, DAAPM, and JSIG requirements while presenting risks and mitigations to leadership.

Build and operate cybersecurity capabilities in Workday’s U.S. Government air-gapped classified cloud. Responsibilities include vulnerability management, incident response, threat hunting, threat detection, security tooling, and collaboration with federal customers and internal cyber defense teams. The role requires cloud security experience, technical leadership, security operations expertise, and eligibility for a potential TS/SCI with CI Poly clearance.

Build and operate cybersecurity capabilities in a U.S. Federal air-gapped classified cloud environment. Responsibilities include vulnerability management, incident response, threat hunting, threat detection, security tool development, and collaboration with customers and cyber defense teams. The role requires technical leadership, cloud security experience, prioritization of vulnerabilities, SIEM and SOAR expertise, and the ability to support multiple projects and operational responsibilities.