Top Cybersecurity Jobs

Assesses and advises on cybersecurity controls throughout the Risk Management Framework to obtain and maintain Authority to Operate approvals for Air Force weapon subsystems and IT systems. Collaborates with security assessors, ISSMs, program managers, and authorizing officials; performs risk assessments, reviews security documentation, communicates cybersecurity requirements to technical and senior leaders, and supports compliance with Department of War cybersecurity processes.

Leads product security engineering for satellite and ground systems, including cybersecurity architecture, RMF implementation, risk and vulnerability assessments, cryptographic keying, security requirements, certification, supplier security, and lifecycle resiliency. Coordinates with engineering teams, customers, government agencies, suppliers, and senior leadership while supporting classified environments and accreditation activities.

Owns the vision, roadmap, backlog, and delivery of cryptographic services and data protection cybersecurity products. Translates customer and business needs into engineering objectives, user stories, acceptance criteria, and prioritized features. Partners with product, engineering, architecture, and cross-functional teams in Agile and SAFe ceremonies. Uses expertise in PKI, encryption, cloud security, risk management, analytics, resilience, and emerging technologies such as post-quantum cryptography to improve cybersecurity capabilities.

Implements and sustains cybersecurity controls at a manufacturing plant. Responsibilities include vulnerability remediation, endpoint security, incident response, disaster recovery, readiness assessments, OT patching and firmware updates, risk communication, stakeholder coordination, documentation, and tracking cybersecurity issues through resolution while minimizing production disruption.

Implements and sustains cybersecurity at a manufacturing plant, including vulnerability remediation, endpoint security, incident response, disaster recovery, readiness assessments, and OT patching and firmware updates. Coordinates cybersecurity work plans and remediation across plant operations, IT, suppliers, and global teams. Communicates risks and potential production impacts, documents activities, tracks issues through resolution, and improves operational resilience while minimizing disruption to manufacturing.

Oversee supplier information security issue management and third-party risk remediation. Review assessment findings, validate supplier closure evidence, guide stakeholders on action plans and risk acceptance, and manage issues through closure. The role supports critical and high-risk suppliers, improves supplier management processes, shares best practices, and communicates risk status to senior management across business groups.

Manage supplier information-security issue lifecycles, review assessment findings, validate remediation evidence, guide stakeholders on risk reduction and acceptance, and oversee critical supplier remediation. The role requires collaboration across business groups, senior-level communication, documentation review, process improvement, compliance expertise, and supplier risk oversight.

Lead end-to-end technology issue validations, evaluating remediation effectiveness, control design, operating effectiveness, evidence quality, and residual risk. The role requires independent testing, stakeholder challenge, audit documentation, reporting, and management of concurrent validations. Responsibilities also include coaching colleagues and applying AI-enabled tools and data analytics to improve audit coverage and efficiency while complying with firm standards and data-handling requirements.

Leads Internal Audit assurance and advisory coverage for global cybersecurity, infrastructure, cloud, identity, threat detection, third-party risk, and IT operations. Owns risk assessments, audit planning, execution, reporting, remediation validation, and methodology. Advises CISO and CTO leadership, evaluates AI-enabled security risks and controls, expands analytics and continuous auditing, and develops a global team of technology and cybersecurity auditors. Communicates risk insights to executives, Audit Committee members, and risk committees.

Assess and monitor technology risks, evaluate control effectiveness, identify gaps, and recommend remediation strategies. Support technology governance, regulatory compliance, risk mitigation, and security governance through collaboration with stakeholders. Use enterprise-authorized AI to synthesize evidence, streamline control testing and reporting, and draft recommendations while validating outputs and protecting sensitive data.

Leads daily cyber-defense operations and operational tempo for a technical program supporting an Intelligence Community customer. Serves as the primary liaison among critical personnel, mission partners, customers, and internal staff; resolves mission challenges; maintains the cyber-tasking skills matrix; and ensures team readiness for dynamic threat environments.

Lead cybersecurity efforts for a classified Intelligence Community customer. Apply expertise across security operations, system and network administration, ISSO/ISSE functions, Assessment and Authorization, continuous monitoring, auditing, vulnerability management, insider threat monitoring, and security assessments. The role may also involve leading A&A processes, maintaining Splunk environments, and managing classified and unclassified systems.

Directs enterprise red team strategy, offensive security operations, adversary simulations, and external assessment providers. Leads and develops red team personnel, establishes rules of engagement and safety controls, aligns testing with threat intelligence and MITRE ATT&CK, and translates technical findings into business risk. Partners with detection, response, threat intelligence, and security engineering teams to improve preventative and detective controls while managing complex campaigns, assessments, tooling, vendors, and executive communications.

Leads cybersecurity compliance for classified information systems, including RMF assessment and authorization, risk assessments, continuous monitoring, configuration management, audits, incident response, and security documentation. Advises management and government customers, oversees staff and system security posture, and ensures compliance with federal and industry standards across classified computing environments.

Serves as the technical authority for network security, endpoint security, and detection and response. Owns security reference architectures, standards, governance, technology strategies, and multi-year roadmaps. Leads architecture reviews, platform evaluations, Zero Trust and defense-in-depth initiatives, risk assessments, and remediation recommendations. Develops detection and response capabilities for AI systems and autonomous agents, mentors security professionals, and advises executive leadership on complex cybersecurity decisions.

Conduct technology and cybersecurity audits covering cloud infrastructure, application controls, risk management, third-party management, and technology operations. Perform risk assessments, evaluate control effectiveness, analyze evidence and data, document findings, communicate results to management, track engagement budgets, and coach junior associates. The role requires expertise in cloud controls, cybersecurity risks, audit procedures, data analysis, and technology risk management.

Leads cybersecurity operations for classified information systems, enforcing security policies and Risk Management Framework requirements. Provides technical leadership, mentorship, compliance oversight, cloud migration guidance, security architecture support, threat analysis, reporting, and corrective-action recommendations. The role interfaces with government customers and cross-functional teams, develops security methodologies, evaluates and hardens software, and supports authorization and continued operation of systems processing classified information.

Leads information system security across classified computing environments, enforcing security policies and supporting RMF assessment and authorization. Manages cybersecurity teams, continuous monitoring, audits, security assessments, risk decisions, corrective actions, technical reporting, and enterprise security policy development. Advises senior leaders on technical risks and compliance while supporting multiple locations and classified programs.

Leads cybersecurity for airborne aerospace and defense platforms, including architecture, requirements, threat modeling, vulnerability assessments, attack-surface analysis, secure boot, authentication, encryption, key management, and defense-in-depth. Oversees DoD Risk Management Framework activities, authorization evidence, cybersecurity verification, penetration testing, supplier risk reviews, and corrective actions. Partners with engineering teams, suppliers, customers, and program leadership to ensure secure, resilient, safe, and mission-effective aircraft systems.

Leads hands-on cybersecurity engineering across enterprise, classified, air-gapped, and secure testing environments. Responsibilities include RMF and JSIG activities, STIG hardening, SCAP and vulnerability scanning, eMASS and SSP management, POA&M remediation, EDR/SIEM administration, security control optimization, and CMMC compliance. Partners with engineering, manufacturing, physical security, FSO, and ISSM teams to protect CUI and classified data while enabling business operations. Provides technical ownership, stakeholder guidance, audit readiness support, and mentorship.

Lead cybersecurity architecture for cloud-native enterprise solutions: evaluate controls and new technologies, advise stakeholders, provide technical guidance, promote firmwide SDLC practices, and mentor peers to mitigate risk and adopt strategic solutions.

Lead cybersecurity architecture evaluations, enterprise security solution delivery, threat modeling, control assessments, and technology selection. Advise technical teams, vendors, and senior leaders on security risks and business modifications. Apply AI-assisted security validation across software development workflows while ensuring data sensitivity, resiliency, traceability, and auditability. Secure cloud, SaaS, APIs, identities, integrations, and AI/ML applications using established security frameworks and reusable architecture patterns.

Leads global cybersecurity operations across enterprise IT, cloud, customer-facing applications, connected platforms, and manufacturing OT. Manages internal teams and MSSP partners, oversees 24/7 monitoring, incident response, detection engineering, threat hunting, compliance, metrics, and executive reporting. Serves as incident commander for major events and collaborates with application, product, plant operations, and ICS teams to improve security visibility and response.

Leads Vertafore’s global cybersecurity strategy, operations, architecture, engineering, risk mitigation, and incident response programs. Oversees cloud, SaaS, product, application, AI, identity, vulnerability, and third-party security. Builds global teams, manages budgets and vendors, advances zero-trust controls, supports audits and customer security inquiries, and reports cyber risk and program performance to executive leadership.

Conduct cybersecurity risk consulting engagements, including vulnerability assessments, social engineering exercises, phishing simulations, OSINT research, and physical penetration testing. Analyze findings, identify risks and control gaps, recommend remediation, prepare reports, and present results to clients. Coordinate engagement activities, monitor budgets and schedules, maintain cybersecurity knowledge, support service improvements and sales opportunities, and mentor junior consultants.