Top Cybersecurity Jobs

Design and implement end-to-end cybersecurity architectures for classified, CUI, and unclassified systems supporting DoD/IC. Lead RMF accreditation (SSPs, SARs, POA&Ms), conduct threat modeling and vulnerability assessments, advise on Cross Domain Solutions and zero trust, integrate security into SDLC, and brief senior leadership. Mentor junior staff and provide SME support for classified cybersecurity programs.

Design, implement, and evaluate cybersecurity solutions and controls for DoD information systems. Conduct risk assessments and vulnerability analyses, recommend mitigations, support test plans, ensure compliance with DoD standards, prepare technical documentation, and collaborate with multidisciplinary teams.

Lead and manage the company's cybersecurity program, including strategy, governance, risk guidance, incident response, compliance and audits. Oversee security architecture, budgets, vendor relationships, and security awareness. Monitor emerging technologies, recommend controls, and train/mentor team members to improve security culture and ensure confidentiality, integrity, and availability of systems.

Support the Risk Management Framework lifecycle by developing documentation, conducting assessments, and ensuring compliance with federal standards while working with security tools.

Military-only SkillBridge cybersecurity internship providing hands-on exposure to network security, IAM, SOC/SIEM, endpoint protection, incident response, GRC, threat/vulnerability management, audits, red team/social engineering exercises, and security reporting. Interns attend customer meetings, participate in industry activities, and author three 1,000-word cybersecurity articles. Remote with equipment provided; 90-day minimum.

Lead malware, binary, firmware and source-code analysis to identify vulnerabilities in critical infrastructure and federal networks. Develop automated analysis tools and workflows, mentor staff, write technical reports, shape research direction, pursue program growth and proposals, and collaborate with sponsors to secure and harden operational technology and software assurance capabilities.

Support design, deployment, and maintenance of enterprise identity and directory solutions. Manage Active Directory, GPOs, AD migrations, authentication (Kerberos, NTLM, PIV), SSO/ADFS integrations, PKI, and related services. Develop PowerShell/Visual Basic scripts, troubleshoot directory/authentication issues, perform functional testing, document processes, and collaborate with internal teams and developers to capture requirements and deliver IAM solutions.

Detect, triage, and investigate security alerts and incidents using SIEM and endpoint tools; document findings and remediation; support offensive testing, compliance efforts (PCI, SOX, ISO, HIPAA, NIST), and cross-functional IT teams. Provide off-hours availability and operate within a global hybrid environment.

Lead and execute incident response for DoD directives, conduct forensic investigations, perform post-incident reviews, maintain IR SOPs to NIST/DISA guidance, manage enterprise monitoring/logging, produce leadership reports, and support remediation and capability improvements while providing after-hours investigative support.

Manage and enhance NICHD IT security posture: run vulnerability scanning, patching, hardening, logging/auditing, configuration management, incident response, and network defense. Support FISMA compliance, perform security assessments and annual reporting, review system security documentation, and coordinate with systems/O&M teams to maintain secure, baseline configurations and remediate vulnerabilities.

Provide security engineering and DLP administration for DLA JETS DLP program, support incident response and cybersecurity content development, analyze and implement security requirements, integrate security solutions, and coordinate enterprise-wide incident handling in accordance with DoD directives.

The Cybersecurity Engineer protects clients by managing security monitoring solutions, vulnerability management, and compliance in cloud and on-premises environments.

Secure telecommunications technologies (3GPP/IMS/packet core/5G) by performing security assessments, vulnerability testing, threat modeling, and designing security controls. Collaborate with engineering teams to integrate security into development and deployment, lead strategic initiatives for e911, VoLTE, messaging platforms, and mitigate signaling/protocol risks (Diameter, SIP, SS7).

Lead oversight of cloud and application security, governance, control deviations, remediation tracking, and executive reporting. Partner with infrastructure, engineering, and application owners to assess configurations, onboard new applications (including agentic AI), validate controls, approve policy deviations, and communicate remediation progress and emerging risks to senior management.

Support cybersecurity for power plant control systems by maintaining network diagrams and asset inventories, assisting assessments and compliance, troubleshooting critical systems, and supporting control system modernization and documentation in collaboration with engineering and plant teams.

As a Principal Cybersecurity Engineer, you will design and maintain security systems for the Workday product within AWS, focusing on Kubernetes, Python, and Infrastructure as Code tools while integrating security into the engineering workflow.

Review software releases and open-source components for security, licensing, and compliance. Provide first-line license triage, route complex cases to the Open Source Review Board, mentor developers on SDLC and licensing requirements, host office hours, and coordinate with security, engineering, and compliance teams to ensure timely, policy-aligned software delivery.

Lead and execute cybersecurity audits end-to-end: plan audits, perform control testing (walkthroughs, test scripts), develop APMs, pRCMs, findings grids and reports, present independent audit opinions, manage stakeholder communications, follow up on findings, provide subject-matter expertise, and coach team members.

Lead and manage the cybersecurity audit function, plan and oversee audit engagements, perform L2 reviews, advise senior management on risks and remediation, drive cross-functional alignment, forecast and prioritize initiatives, and develop and coach a team of audit professionals to ensure regulatory and enterprise risk compliance.

Design and evolve cybersecurity operations architecture, lead detection engineering and log ingestion strategies across cloud and SaaS, implement AI-augmented detection and response pipelines, conduct security architecture reviews, improve incident response and threat hunting, mentor SecOps teams, and advise leadership on operational risk and tooling decisions.

Lead enterprise information security strategy, governance, and incident response. Define security roadmap and policies, manage vendors and budgets, oversee IAM, SIEM, EDR, cloud security, and compliance programs, advise executives and Board, and build/mentor security teams to reduce organizational risk.

Lead global enterprise security architecture across on‑premises, hybrid, and multi‑cloud environments. Define secure design patterns (Zero Trust, Secure-by-Design), translate requirements into scalable solutions, lead threat modeling and security assessments (AI/ML, Kubernetes, APIs, IoT), and establish enterprise security standards while partnering with IT, compliance, risk, and DevSecOps teams.

Provide technical leadership for enterprise cybersecurity: lead RMF/ATO activities, oversee ISSOs and cyber engineers, manage vulnerability management, SOC operations, incident response, penetration testing, threat hunting, and compliance while coordinating with Government AO and ISSM.

Manage and optimize SIEM (Splunk) platform health, data ingestion, and detection coverage. Investigate anomalies, develop high-fidelity detections, build CI/CD tools, and collaborate with SOC and threat teams to improve threat identification and response.

Serve as a Senior Cybersecurity Engineer supporting a Navy program: integrate cyber requirements across the SDLC, perform ACAS/Nessus scans, evaluate DISA STIGs/SCAP, identify and remediate vulnerabilities, develop POA&Ms, SAPs and SARs, create architecture and data flow diagrams, and support RMF processes to achieve ATO/IATT.