Top Cybersecurity Jobs

Lead the RMF Assessment & Authorization lifecycle for a DevSecOps platform: create and maintain SSPs, POA&Ms, SARs and ATO artifacts in eMASS; conduct IV&V of vulnerability scans (ACAS/IAVM), enforce NIST 800-53/CNSSI 1253 controls and STIG hardening, monitor logs and support incident response, and advise engineering/tenant teams to integrate security into pipelines.

Lead ISSO for a DevSecOps platform managing RMF A&A, eMASS artifacts, vulnerability scanning and remediation, NIST 800-53/CNSSI 1253 control implementation, STIG compliance, incident support, and security assessments for platform changes while advising engineering and tenant teams.

Operate within an air-gapped DoD network to deploy and support security capabilities, perform Windows/Linux systems administration, manage identity and PKI, administer VMware virtualization, create and maintain system documentation, and coordinate cyber risk mitigation. Position is onsite with occasional travel (up to ~10%).

Designs and implements GRC automation and continuous control monitoring across cloud, on‑prem, identity, OT, and security platforms. Builds automated evidence collection, control testing, risk intelligence, and integrates data sources for audit‑ready controls. Leads remediation, develops SOPs, collaborates with architecture and engineering, and evaluates AI/LLM workflows for governance and control testing.

Operate onsite in an air-gapped DoD network to deploy and support security capabilities, perform systems administration (Linux/Windows), manage identity/PKI and virtualization, document systems, assess and mitigate cyber risk, and integrate cybersecurity posture across enterprise services.

Embed security throughout the SDLC by partnering with engineering teams to design secure systems, identify and remediate vulnerabilities, perform code reviews, and integrate SAST/DAST/SCA and CI/CD security tooling. Blend offensive and defensive skills to reduce production risk while enabling agile software delivery.

Lead product cybersecurity architecture for autonomous vehicle systems: define and evaluate controls (OS, networking, cryptography), conduct threat modeling and verification activities, embed security into development lifecycles, liaise with vendors, and present cybersecurity evidence for product releases.

Lead and execute advanced adversary simulation and detection validation mapped to MITRE ATT&CK. Design tests, generate behavioral anomalies, query SIEM telemetry, classify non-detections, validate remediations, produce timestamped forensic findings, and mentor testers. One role will lead Purple Team and detection methodology.

Lead end-to-end delivery of a multi-agency cybersecurity and compliance program: plan and track work, coordinate testing and access, manage risks/issues, produce executive reporting, ensure evidence handling and public records compliance, and deliver audit-grade artifacts with knowledge transfer to government stakeholders.

Lead and execute cybersecurity risk assessments for federal components, applying NIST/FIPS frameworks, producing SOPs and reports, advising system owners, presenting findings to technical and executive audiences, and managing workstream deliverables and stakeholder engagement.

Lead and manage multiple cybersecurity risk workstreams including risk assessments, HVA oversight, and risk governance. Advise on federal cybersecurity frameworks, produce policies/SOPs, perform QA/QC on deliverables, present findings to technical and executive audiences, and coordinate with federal partners to ensure compliance with CISA, OMB, and NIST guidance.

Lead cybersecurity risk management and governance for federal clients: maintain and improve enterprise risk register, scope and execute Tier 1 technology risk assessments, prepare risk acceptance memoranda, implement corrective action plans, apply NIST/FIPS frameworks, and present findings and recommendations to technical and executive stakeholders.

Lead design and implementation of DoD cloud and enclave security architectures. Integrate RMF, cATO, Zero Trust, and DevSecOps into Agile workflows; maintain Bodies of Evidence, validate controls, support vulnerability management, STIGs, and cloud-native security across development and classified environments. Brief leadership and coordinate cross-functional cyber teams.

Perform system audits, continuous monitoring, and security assessments; validate and recommend security requirements; support A&A and RMF documentation; conduct ST&E activities and report results; implement government policy, mitigate risks, and prepare risk management evidence for classified systems.

Perform system audits, continuous monitoring, and security assessments to evaluate and improve information system security posture. Support RMF Assessment & Authorization, ST&E testing, documentation (SSPs, POA&Ms), and investigations. Work within strict program controls for classified environments and assist with implementation of government security policy and safeguards.

Lead day-to-day security operations and the SOC, manage incident response and vulnerability management, operate enterprise security tools (endpoint, cloud, SIEM, DLP, firewalls), drive security projects and vendor relationships, contribute to policies, awareness, and strategy, and respond to high-severity alerts including off-hours incidents.

Lead design and governance of enterprise AI security: secure AI models, data pipelines, and agent deployments; build guardrails; perform threat modeling and risk assessments; deploy AI-powered security tools; integrate AI security across cloud, DevSecOps, and application teams; mentor and drive cybersecurity projects and incident response.

Lead full enterprise sales cycles for Fortune 500 clients, engaging CISOs/CIOs to align cybersecurity investments with business goals. Manage complex 6-12 month, multi-stakeholder deals, drive platform adoption, collaborate with Solutions Architects and partners, apply consultative methodologies (MEDDPICC, Challenger), and consistently exceed bookings, revenue, and margin targets.

Drive consultative enterprise sales to CISOs/CIOs/CFOs at $1B+ organizations, leading multi-stakeholder 6–12 month deals, promoting platform adoption, partnering with solutions, services and channel teams, and exceeding quota.

Lead complex, consultative enterprise sales to $1B+ organizations by engaging CISOs/CIOs/CFOs, managing 6-12 month multi-stakeholder deals, driving platform adoption, partnering with Solutions, Services and channel partners, and consistently exceeding revenue and margin targets using methodologies like MEDDPICC.

Drive strategic enterprise sales by owning complex consultative deals with CISOs/CIOs/CFOs at $1B+ organizations. Lead multi-stakeholder 6–12 month deals, collaborate with solutions, services, and partners, apply methodologies like MEDDPICC, and exceed bookings, revenue, and margin targets while promoting platform adoption.

Drive enterprise sales across $1B+ organizations by managing full sales cycles, engaging CISOs/CIOs/CFOs, leading multi-stakeholder 6-12 month deals, promoting platform adoption, and partnering with Solutions, Services, and channel partners to exceed bookings and revenue targets.

Lead and run the CFIUS-focused cybersecurity compliance program, translate US/North American regulations and standards into processes, manage audit readiness and reporting, coordinate with legal and agencies, support ISO 27001 and application-level assessments, and drive tooling and automation improvements (ServiceNow, OneTrust, Power Platform, Power BI, AI-enabled capabilities).

The Senior Principal Cybersecurity Architect will assess risks, develop security programs, create security requirements, and supervise cybersecurity testing initiatives to enhance security controls across technologies.

Lead security monitoring, investigations, and incident response. Maintain CSIRT and incident response plan, optimize security tools, mentor junior analysts, recommend control improvements, and leverage AI to accelerate investigations and threat detection. Drive deployment methodologies and train teams on security best practices.