Top Cybersecurity Jobs

Leads cybersecurity engineering and information assurance activities, analyzing security requirements, threats, logs, IDS data, and intelligence. Builds Splunk Enterprise Security dashboards, rules, reports, monitors, and threat use cases. Administers, upgrades, troubleshoots, maintains, and backs up Splunk infrastructure and related databases. Provides security engineering support across system planning, design, development, testing, integration, and sustainment while supporting incident handlers and information assurance managers.

Leads cybersecurity engineering and information assurance activities, analyzing security requirements, threat intelligence, logs, and IDS data. Develops Splunk Enterprise Security dashboards, rules, reports, monitors, channels, trends, and threat use cases. Administers, configures, troubleshoots, upgrades, maintains, and backs up the Splunk enterprise log-management architecture while supporting incident handlers and information assurance managers.

Leads cybersecurity engineering and information assurance efforts, analyzing security requirements, threats, logs, IDS data, and intelligence reports. Designs and supports information system security engineering across planning, development, testing, and integration. Administers Splunk Enterprise Security and its backend infrastructure, creating dashboards, rules, reports, monitors, and threat use cases. Installs, configures, troubleshoots, maintains, and backs up Splunk log-management components while supporting incident handlers and information assurance managers.

Designs and administers secure, resilient enterprise networks for DoD environments. Responsibilities include routing and switching architecture, next-generation firewalls, Zero Trust segmentation, network sensors and telemetry pipelines, STIG compliance, encrypted interconnects, automation, performance tuning, incident response support, packet forensics, and RMF/ATO documentation.

Designs and administers secure enterprise network architectures for DoD environments, including routing, switching, firewalls, Zero Trust segmentation, network sensors, packet brokers, encrypted interconnects, and SIEM telemetry pipelines. Responsibilities include STIG compliance, network automation, performance tuning, incident response support, packet analysis, threat hunting collaboration, and RMF/ATO documentation. Requires active Top Secret clearance with SCI eligibility, extensive enterprise networking and cybersecurity experience, and relevant networking and security certifications.

Engineer cybersecurity for Navy control systems and platform IT supporting an electronic warfare system. Responsibilities include integrating security clients on Red Hat Enterprise Linux servers, writing Linux scripts, hardening Linux and Windows systems, conducting security scans, patching third-party software, managing vulnerabilities, and performing verification testing. The role is fully on-site in Syracuse, NY and requires U.S. citizenship and an active Department of Defense Secret clearance.

Lead and manage multiple cybersecurity risk workstreams including risk assessments, HVA oversight, and risk governance. Advise on federal cybersecurity frameworks, produce policies/SOPs, perform QA/QC on deliverables, present findings to technical and executive audiences, and coordinate with federal partners to ensure compliance with CISA, OMB, and NIST guidance.

Designs, implements, automates, and maintains cybersecurity controls across strategic enterprise platforms, including cloud, SaaS, PaaS, and AI environments. Conducts security assessments, validates controls, monitors security posture, investigates gaps, and drives remediation. Integrates security into CI/CD and platform delivery, develops controls-as-code, improves resilience, and supports governance and compliance readiness. Partners with platform, engineering, architecture, and product teams to enable secure adoption and operational efficiency.

Provides senior leadership for enterprise IT governance, cybersecurity, privacy, workforce planning, budgeting, investment management, and digital accessibility. Oversees contractor personnel, cybersecurity risk assessments, audits, vulnerability testing, incident response coordination, third-party security, and compliance frameworks. Coordinates technical teams, manages dependencies and resources, supports strategic planning, and delivers executive-level risk and decision support to government and contractor leadership.

Summer cybersecurity intern supporting information security, cloud vulnerability, IT PMO, business analysis, data management, reporting, automation, and digital transformation initiatives. Responsibilities include researching, gathering data, maintaining databases and spreadsheets, collaborating on projects, protecting sensitive information, attending training, and presenting program learnings. The role may involve administrative tasks, travel between operating locations, and work in office or operations environments.

Leads enterprise vulnerability management across data centers, endpoints, multi-cloud, AI workloads, and manufacturing environments. The role prioritizes exposures using threat intelligence, exploitability, asset criticality, business context, and attack-path analysis. Responsibilities include vulnerability scanning, remediation governance, patch coordination, exception management, automation, dashboards, intelligence workflows, 0-day response, stakeholder influence, and mentoring. The engineer partners with infrastructure, cloud, application, SOC, and incident response teams to reduce organizational risk and mature cybersecurity capabilities.

Leads Morgan Stanley’s global internal audit strategy for cybersecurity, information security, and cyber resilience across the Firm and banking entities. Directs risk-based coverage of AI, digital assets, quantum readiness, cloud, identity, network, data, incident response, resilience, and third-party security. Evaluates controls against regulatory and industry frameworks, oversees findings and remediation, advises senior management, regulators, the Board, and Audit Committee, and manages and develops a global audit team.

Performs cybersecurity operations across alert monitoring, incident response, threat hunting, vulnerability management, detection engineering, identity security, and regulatory compliance. The role administers security tools, investigates suspicious activity, coordinates containment and remediation, supports NERC CIP-008 and CIP-015 activities, maintains audit evidence, and partners with technical and business stakeholders. Participation in on-call coverage, security assessments, projects, vendor reviews, and periodic industry travel is required.

Leads complex cybersecurity incident investigations across cloud and on-premises environments. Directs investigative priorities, coordinates threat hunters and technical specialists, communicates findings and response recommendations to executive customers, and balances containment with recovery and evidence preservation. Conducts threat research, develops analytical automation, improves data quality, mentors colleagues, and contributes to technical publications and presentations.

Leads global cyber defense and response operations, including the full incident response lifecycle, critical incident containment, detection coverage, operational metrics, playbook development, and SOC automation. Manages distributed teams, drives agile improvement backlogs, expands security monitoring across hybrid and multi-cloud environments, and partners with engineering, product, legal, and compliance stakeholders. The role also advances AI-driven security workflows and protects corporate, cloud, product, containerized, and AI/ML environments.

Own the IT infrastructure and cybersecurity function for a classified site. Responsibilities include infrastructure lifecycle management, incident response, security policy enforcement, RMF and accreditation execution, vendor and budget management, customer integration, and direct leadership of IT and cyber personnel. The role requires hands-on troubleshooting, executive risk briefings, inspection readiness, and alignment with federal classified-system frameworks.

Serves as the senior technical authority for complex cybersecurity investigations, incident response, threat intelligence, threat hunting, vulnerability analysis, penetration testing, detection engineering, and audit support. Leads high-impact investigations, develops detection and analytical content, evaluates vulnerabilities and attack paths, improves operational standards, mentors junior analysts, supports security platforms and automation, and communicates technical findings to stakeholders. The role is a senior individual contributor without direct personnel-management responsibility.

Leads enterprise cybersecurity risk analysis, risk and threat modeling, cyber risk quantification, metrics reporting, and executive presentations. Evaluates exceptions, audit findings, controls, policies, asset inventories, and emerging threats across cloud, access, application, vendor, data, and infrastructure security. Manages risk projects end to end, identifies control and process gaps, recommends policy enhancements, and influences technical and business teams to mitigate risk.

Investigates and responds to high-severity cybersecurity incidents across identification, containment, eradication, recovery, and lessons learned. Performs endpoint, network, and cloud forensics; malware analysis; threat hunting; and root-cause assessments. Documents findings, presents reports, collaborates with technical and business teams, improves detection content and response playbooks, and supports automation and AI capabilities within the incident response program.

Conducts cybersecurity audits, continuous monitoring, system and network assessments, security control validation, RMF documentation, A&A support, risk mitigation, and formal Security Test and Evaluation activities for classified information systems. The role is fully onsite in Gilbert, Arizona, requires an active Top Secret clearance, IAM Level II-equivalent certification, and eligibility for Special Access Programs.

Supports Air Force cybersecurity programs by installing and maintaining ACAS vulnerability-management tools, scheduling scans, analyzing vulnerabilities, and directing STIG-based hardening. Performs DoD compliance assessments, RMF and authorization documentation, incident reporting, root-cause analysis, corrective action planning, and POA&M maintenance. Collaborates with system administrators on remediation and supports ACAS server and database administration across classified networks.

Leads cybersecurity detection engineering by designing, deploying, and optimizing SIEM, EDR, SOAR, and AI-driven detection systems. Develops detection rules, automated remediation playbooks, and multi-agent security solutions; integrates threat intelligence and incident response; performs attack simulations and purple teaming; manages log ingestion and data lakes; and ensures compliance with security standards. Provides technical leadership, mentorship, documentation, stakeholder collaboration, and occasional off-hours support.

Leads cybersecurity investigations and engagements for major law firms, financial institutions, and corporations. Responsibilities include incident analysis, threat identification, intelligence collection, insider threat analysis, security operations, forensic investigations, penetration testing, client reporting, consultant management, methodology development, proposal enhancement, and service strategy. The role requires hands-on cybersecurity expertise, strong analytical and communication skills, subcontractor oversight, and travel to clients and company offices.

Lead design, implementation, and operationalization of Microsoft security solutions across identity, endpoint, cloud, data, and SOC domains for mission‑sensitive federal environments. Serve as technical advisor, integrate Microsoft Zero Trust stack with compliance frameworks, mentor consultants, and contribute reusable architectures, playbooks, and delivery accelerators.

Support enterprise cybersecurity by deploying and configuring BigID for data discovery, classification, and protection across cloud and hybrid environments. Build and tune DLP classifiers, automate workflows with Python, analyze scan results, recommend remediation, and support compliance with GDPR, CCPA, and NIST. Collaborate with cybersecurity and cross-functional teams in a Cyber Fusion Center, mature data protection programs, train stakeholders, and address data exfiltration risks.