Top Cybersecurity Jobs

Leads complex cloud security investigations across Microsoft Azure and Microsoft 365, serving as the senior escalation point for incident response. Develops playbooks, cloud detections, alerts, and repeatable response processes; mentors responders; performs forensic analysis using Microsoft security telemetry; and participates in on-call support. The role also requires stakeholder communication, technical documentation, automation, threat hunting, and continuous improvement of cloud incident response operations.

Develops and tracks compliance with AFRL cybersecurity architecture, strategy, plans, and policies. Provides cybersecurity support, systems and network engineering, enterprise architecture design, policy compliance monitoring, reporting, SharePoint administration, pilot project management, and customer support to AFRL technical directorates. Occasional travel may be required.

Maintains cybersecurity operations and security posture for an Air Force logistics system. Integrates cybersecurity throughout the system lifecycle, maintains authorization and compliance documentation, monitors security events and configuration changes, evaluates security controls, reports cybersecurity impacts, and supports training and certification of ISSOs and privileged users. The role is onsite at Gunter Maxwell AFB and requires advanced ISSM certification, significant professional experience, U.S. citizenship, and eligibility for a Secret clearance.

Manages school cybersecurity initiatives, including monitoring alerts, vulnerability remediation, incident response, identity and access management, security awareness, and compliance. Evaluates emerging and instructional technologies, trains faculty, supports enterprise applications, assists with integrations and workflow automation, coordinates vendors, maintains technology documentation and inventories, and participates in technology implementations.

Supports federal cybersecurity compliance and operations for NICHD systems, including FISMA authorization, RMF and ATO activities, NIST control assessments, authorization documentation, vulnerability management, continuous monitoring, incident response, remediation tracking, audit readiness, and stakeholder coordination. The role maintains security evidence and CSAM records, investigates alerts, supports containment and recovery, and translates operational findings into risk-management and compliance actions.

Lead cybersecurity policy, compliance, information assurance, and security architecture for enterprise cloud applications in DoD environments. Manage RMF workflows and the full ATO lifecycle, develop federal security documentation, implement DevSecOps and NIST 800-53 controls, evaluate cloud configurations and risks, and guide cross-functional teams and senior government stakeholders. The role requires hands-on eMASS experience, DoD security framework expertise, an IAT Level II certification, and an active Secret clearance.

Lead cybersecurity policy, compliance, information assurance, and DevSecOps implementation for enterprise cloud applications in DoD environments. Manage the complete RMF and ATO lifecycle, develop security documentation, implement NIST 800-53 controls, evaluate cloud architectures and configurations, and use eMASS to manage compliance workflows and artifacts. Provide architectural guidance, risk mitigation strategies, and stakeholder coordination with senior Department and Service-level officials.

Designs, implements, and maintains enterprise cybersecurity systems across university infrastructure, networks, cloud environments, and research systems. Configures security platforms, manages identity and access services, leads incident response and investigations, develops automation, supports zero-trust and cloud security architectures, and conducts security reviews. The role also supports HIPAA, FERPA, PCI-DSS, CMMC, and NIST compliance, documents technical processes, collaborates across IT teams, and mentors colleagues.

The Senior Manager for Medical Device Cybersecurity will lead the strategy and execution of cybersecurity initiatives for medical devices, ensuring compliance with FDA guidelines and integrating security into product development processes.

Paid cybersecurity internship focused on threat practice and penetration testing. Interns support internal, external, and web application penetration tests, remediation validation, reporting, client communication, and social engineering projects. The program develops technical and consulting skills through training labs, industry frameworks, execution planning, documentation, and client engagement support. Successful participants may receive a full-time Information Security Associate offer.

Paid cybersecurity training internship focused on solutions implementation and client consulting. Interns gather requirements, plan and execute technical solutions, document procedures, assist with security engagements, and learn cybersecurity standards including PCI-DSS, HIPAA, and ISO 27001. The role requires foundational networking and systems knowledge, strong communication and documentation skills, Excel and Word proficiency, self-directed learning, and onsite work in Irvine or Fairfax.

Paid cybersecurity internship focused on Enterprise Risk Management. Interns assist with enterprise and vendor risk assessments, governance frameworks, security advisement, compliance standards, project execution, technical documentation, and client engagements. The program develops technical and professional skills for a potential full-time Information Security Associate role.

Paid cybersecurity training internship focused on federal information security consulting. Participants assist with security assessments, governance programs, compliance frameworks, enterprise security implementations, penetration testing, requirements gathering, execution planning, documentation, and client engagements. The program develops technical and professional skills for potential progression to an entry-level Information Security Associate role.

Paid winter internship training participants for entry-level information security consulting. Responsibilities include supporting SOC assessments, security and compliance remediation, client engagements, execution planning, requirements gathering, documentation, and security program maintenance. Interns learn industry standards such as PCI-DSS, HIPAA, and ISO 27001 while developing networking, systems administration, technical writing, and consulting skills. The role is onsite in Irvine, California, or Fairfax, Virginia.

Designs and secures OT/ICS networks supporting utility-scale battery energy storage systems. Responsibilities include network segmentation, firewall configuration, Ignition SCADA administration, SIEM deployment, Azure security, identity management, vulnerability assessments, compliance with NERC CIP and IEC 62443, incident response, commissioning support, and technical mentorship. The role advises leadership on OT cybersecurity architecture and supports field operations with up to 20% travel.

Designs and maintains cybersecurity controls for DoD systems under RMF v5. Manages ATO packages, SSPs, SSPPs, cybersecurity strategies, POA&Ms, security documentation, risk assessments, incident response, and STIG remediation. Coordinates with system administrators, developers, and IT teams while supporting cyber investigations, threat analysis, and mission operations. Requires expertise in federal security frameworks, eMASS, network technologies, operating systems, and security controls, plus an active TS clearance with SCI eligibility.

Supports cybersecurity operations through daily security monitoring, incident response, information security awareness, security metrics, vulnerability investigation, forensic and data analysis, compliance testing, documentation, and implementation of security processes and solutions. Collaborates with end users, Helpdesk, and IT staff while helping improve the organization’s cybersecurity program.

Develops and continually tests cyber defenses for the Starshield satellite network. Responsibilities include implementing cyber defense strategy, assessing threats, developing countermeasures, conducting red-team exercises and vulnerability hunts, improving incident detection and response, and collaborating with security and engineering teams. The role requires hands-on cybersecurity experience with active production systems, adversary detection, incident response, networks, distributed computing, and vulnerability management.

Leads the design, deployment, and governance of AI-driven cybersecurity capabilities across enterprise environments. Develops AI-enabled threat detection, anomaly detection, and automated response solutions; configures and tunes security technologies; provides architecture guidance; analyzes AI-related threats and incidents; and partners with security operations, threat intelligence, engineering, governance, and endpoint teams. The role also drives secure AI configuration standards, enterprise platform integration, and technical leadership across cybersecurity initiatives.

Build and manage enterprise privacy, cybersecurity, and AI compliance programs in a regulated insurance environment. Responsibilities include consumer rights operations, marketing and consent compliance, cyber incident compliance support, AI governance, vendor risk reviews, policies, training, regulatory exams, audits, and board reporting. The role partners closely with Legal, Information Security, Engineering, Marketing, and business teams while managing multiple regulatory workstreams.

Designs, implements, and governs enterprise Zero Trust security architecture across identity, networks, endpoints, applications, data, cloud, and hybrid environments. Leads security transformation initiatives, architecture reviews, access modernization, micro-segmentation, cloud security, monitoring, incident response support, risk assessments, compliance controls, automation, and maturity metrics. Partners with infrastructure, cloud, applications, compliance, and cybersecurity teams while presenting recommendations to senior leadership.

Leads Revamp’s information security program and IT architecture across on-premises and cloud environments. Owns identity, endpoints, networking, backup, incident response, disaster recovery, policies, assessments, compliance, vendor management, technology strategy, and security risk reporting. Acts as the hands-on incident lead and technical authority while supporting staff technology needs, managing providers, and building the internal IT and security team.

Provides hands-on cybersecurity engineering and advisory services for client environments. Designs, deploys, configures, and supports security technologies across infrastructure, cloud, networks, and endpoints. Performs vulnerability management, secure application development, risk management, incident response, firewall and SIEM/XDR reviews, and security architecture work. Develops documentation and playbooks, advises clients on compliance frameworks and best practices, evaluates emerging technologies, and partners with internal teams to improve security posture.

Leads offensive security assessments, penetration tests, red-team campaigns, and adversary-emulation exercises for clients. Designs instrumented cyber ranges and attack scenarios, validates defensive telemetry, produces technical reports and executive briefings, and serves as exercise control during live engagements. Builds isolated environments using cloud, infrastructure-as-code, and security tooling; troubleshoots security solutions; and directs students, consultants, and technical contributors. The role also supports incident response, security architecture, documentation, and client-facing consulting engagements.

Serves as the lead legal advisor on cybersecurity for financial services operations. Advises on cyber incidents, materiality assessments, regulatory notifications, breach and privacy laws, crisis management, cyber governance, third-party security, and regulatory examinations. Drafts cybersecurity policies and incident response playbooks, supports tabletop exercises and remediation, evaluates security controls, and partners with information security, technology, compliance, risk, and executive teams.