Top Cybersecurity Jobs

Supervise a cybersecurity section: manage staff schedules, performance, hiring recommendations, budgets, and act as POC. Develop and implement cybersecurity programs and controls, support China Lake range accreditation, collaborate with government counterparts, and perform occasional field work and travel. On-site at China Lake; U.S. citizenship required; active Secret clearance preferred.

Serve as senior engineering authority for cybersecurity across multiple mission-critical applications: design, implement, and monitor RMF/NIST-based security controls, produce accreditation documentation (eMASS), support ATO/IATT/cATO processes, and coordinate with system owners and government stakeholders to maintain continuous authorization and improve cyber posture.

Manage RMF and A&A activities for Department of the Navy systems, conduct risk assessments and vulnerability analysis, develop authorization artifacts and cybersecurity documentation in eMASS and related tools, support continuous monitoring, configuration management, and remediation planning, and coordinate with program managers, engineers, ISSMs, and government stakeholders to achieve and maintain cybersecurity compliance and accreditation.

Assess, design, and maintain cybersecurity controls for industrial control systems and enterprise environments. Conduct risk assessments, pen tests, and vulnerability remediation. Implement firewalls, IDPS, SIEM, WAF, cloud security (Azure/AWS), and endpoint/email protections. Support incident response, compliance with NIST/ISA/IEC standards, and provide training and guidance to cross-functional teams.

Support and improve application security by implementing and operating SAST/DAST, API and container security solutions; triage and resolve security issues; collaborate with dev and product teams; participate in on-call rotation; drive projects to completion and integrate security into DevSecOps practices.

Design, implement, and operate network and infrastructure security controls (WAF, IPS, DDoS) in production; automate deployments and validations; partner with internal teams; secure cloud and containerized environments (AWS/GCP, Kubernetes); ensure compliance with FedRAMP/DoD IL4; support U.S. Federal contracts requiring U.S. citizenship and security-clearance eligibility.

Lead application security assessments for internal and third-party apps, perform threat modeling and secure design reviews, evolve assessment methodologies, use automation and AI-enabled tools to improve testing, document findings, validate remediations, and collaborate with engineering and product teams to embed secure-by-design practices.

Support cybersecurity architecture and engineering across enterprise environments including Zero Trust, cloud security, DevSecOps, AI/GenAI security, PQC, SSO, vulnerability scanning, automation, and documentation. Develop technology roadmaps, conduct market research and proofs of concept, and support integration, CONOPS, and engineering activities.

Lead governance, operational oversight, and continuous improvement for internal cybersecurity services and third‑party providers. Define KPIs/SLAs, monitor vendor performance, manage risks/issues, drive recovery, and deliver executive reporting. Build stakeholder relationships, onboard providers, and improve service management and governance maturity.

Lead end-to-end product management for enterprise security operations platforms, translating SOC/operator needs into roadmaps, user stories, and validated AI use cases. Manage vendors, enforce SLA and model validation, coordinate Agile delivery, UAT, adoption, and report platform and AI performance to senior leadership.

Provide cybersecurity consulting for clients including risk assessments, policy and disaster recovery planning, incident response, security awareness, regulatory IT examination support, AI integration guidance, vendor oversight, reporting to leadership and boards, project management, and IT audit assistance. Deliver tailored security programs, documentation, tabletop testing, and timely communications while adapting to evolving regulations and client needs.

Senior data scientist role focused on measuring and improving AI-agent security. Define metrics and evaluations, build data foundations, strengthen detection and response, run experiments, and translate analysis into product and security improvements across engineering, product, and research teams.

Lead the security posture strategy for an NSPM platform: design and maintain posture assessment rule frameworks, map device configurations to compliance standards, define risk scoring, ensure scalable rule execution across heterogeneous network devices, translate emerging threats and regulations into automatable rules, engage customers and stakeholders, and mentor engineers and analysts on posture rule design and compliance mapping.

Lead and oversee system security engineering and certification activities for SAP/SCI systems. Chair cybersecurity working groups, assess designs for compliance with NIST/RMF and JSIG, provide risk management and accreditation support, assist program protection planning, and coordinate with approval authorities to obtain Authorization to Operate.

Manage and optimize enterprise Proofpoint email security for a hybrid M365/on-premises Exchange environment. Configure gateway rules, quarantine workflows, mail relays, and DKIM/SPF/DMARC strategy. Analyze TAP telemetry and threat intelligence, collaborate with SOC to build automated response playbooks, troubleshoot delivery and authentication failures, and communicate platform health and risk to stakeholders.

The Freelance Cybersecurity Content Writer will produce high-quality articles on cybersecurity topics, ensuring technical accuracy and engaging a diverse audience. Responsibilities include writing, adapting content for various audiences, and implementing feedback effectively.

Implement, operate, and improve cybersecurity solutions; provide functional and technical expertise on security projects; gather business/IT requirements to develop security processes; triage incidents and provide urgent support; participate in on-call rotation; and drive projects to completion through project management and stakeholder coordination.

Serve as a Senior Cybersecurity Engineer for a Navy program: integrate cyber requirements across the SDLC, perform ACAS/Nessus scans, apply DISA STIGs/SCAP, identify and remediate vulnerabilities, develop SAPs/POA&Ms/SARs, support RMF toward ATO/IATT, produce architecture and data flow diagrams, and advise stakeholders.

Perform RMF across all phases: categorize systems, develop and update SSPs, SAPs, POA&Ms and RARs in eMASS. Review DISA STIGs/SRGs, SCAP and ACAS results, identify vulnerabilities, track risks, support ISSMs and stakeholders, and provide authorization status and cybersecurity guidance throughout system engineering, deployment, and sustainment.

Lead RMF activities across system engineering, deployment, and sustainment. Develop SSPs, SAPs, POA&Ms, and RARs in eMASS; document NIST 800-53 control implementations; review DISA STIGs/SRGs, SCAP, and ACAS results; track/report cybersecurity risks to ISSM and engineering teams.

Serve as a senior security operations advisor: lead incident response, tune detection tooling (SIEM/SOAR/XDR/EDR), apply identity-centric and Zero Trust controls, advise product/R&D on secure-by-design, document runbooks and metrics, automate tasks, mentor teammates, and communicate findings across technical and non-technical stakeholders.

Provide legal counsel on cybersecurity and privacy matters, advise on contract cyber requirements, support enterprise frameworks and incident response, monitor regulatory changes, develop training, and lead cross-functional cyber/privacy initiatives.

Lead UEBA and SOAR implementation for a Zero Trust initiative, integrating visibility/analytics with automation. Provide Tier 3/4 engineering, perform enclave and network assessments, produce RMF artifacts and manage the ATO lifecycle, interpret DISA STIGs, support assessors, and collaborate with ISSOs and stakeholders to refine processes and ensure system security and compliance.

Teach and develop project-based undergraduate and advanced courses and labs in cybersecurity, information systems, computer science, or cyber engineering; advise students; participate in student organizations, assessment, accreditation, committees, and professional development while maintaining community and industry relationships.

Lead and improve global SOC capabilities by overseeing threat detection, incident response, and SIEM-driven operations. Serve as technical escalation for analysts, develop playbooks and automation, coordinate stakeholders, and use metrics and threat analysis to drive detection and response maturity.