Top Cybersecurity Jobs

Leads cybersecurity consulting engagements focused on third-party risk management, cyber risk assessments, governance, resilience, regulatory readiness, and security program advisory. Designs TPRM operating models, evaluates supplier controls, manages client projects and teams, develops executive reporting, supports transactions and business development, and advises on emerging technology risks including AI. Builds client relationships, mentors consultants, and contributes to methodologies, thought leadership, and practice growth.

Leads cybersecurity engineering and DevSecOps across regulated medical device product lifecycles. Responsibilities include threat modeling, security risk assessments, security requirements, CI/CD security controls, vulnerability management, incident response, identity and access management, patching, compliance, and collaboration with engineering, quality, regulatory, and IT teams.

Supports the Behavioral Threat Analysis Center by analyzing cyber threats, conducting digital forensics, assessing risks and vulnerabilities, and recommending countermeasures. Designs cybersecurity solutions for threat identification, protection, detection, response, and recovery. Develops security policies, governance, hardening, monitoring, incident response, disaster recovery, and threat-hunting strategies while coordinating with defense and intelligence stakeholders.

Participate in a paid 10-week internship developing secure applications and systems, implementing security controls, identifying vulnerabilities, and improving security automation. Collaborate with engineering, security, and platform teams in Agile environments while gaining hands-on experience, mentorship, and leadership development.

Leads cybersecurity operations and compliance, including SOC 2 and ISO 27001 programs, threat and vulnerability management, threat hunting, incident response, malware analysis, SIEM administration, endpoint protection, and security technology strategy. Oversees hybrid infrastructure security, regulatory compliance, disaster recovery, security policies, budgets, technology selection, and development of high-performing cybersecurity teams.

Analyzes open-source and intelligence reporting to produce actionable threat briefings for cybersecurity teams. Supports detection and protection gap identification, reviews logs and network alerts for attacks and advanced persistent threats, performs root cause analysis, and supports remediation of OT cybersecurity incidents. Serves as the subject matter expert for OT security across ICS and SCADA environments.

Leads Valmont’s global cybersecurity program across security operations, engineering, architecture, IAM, application security, incident response, cloud, enterprise systems, and operational technology. Develops strategy, policies, security controls, metrics, budgets, and organizational capabilities while advising executives and partnering with technology, manufacturing, legal, audit, and business teams. Oversees cyber incident response, resilience, Zero Trust, secure architecture, awareness, vendor relationships, and a geographically distributed cybersecurity organization.

Leads technology and cybersecurity risk management and regulatory exam activities for a bank. Responsibilities include conducting risk analyses, developing mitigation plans, coordinating regulatory responses, preparing examination materials and presentations, maintaining compliance documentation, improving policies and training, and escalating risk issues. The role collaborates with Technology, Cybersecurity, Risk, Internal Audit, business teams, and senior leadership to support regulatory compliance and organizational resilience.

Leads and manages a complex DoD cybersecurity task order focused on web and application vulnerability management. Oversees multidisciplinary cybersecurity teams, contract execution, deliverables, schedules, staffing, quality control, risk assessments, RMF compliance, vulnerability assessments, and security engineering activities. Serves as the primary liaison to DLA and government stakeholders, conducts project reviews, monitors performance, and ensures compliance with DoD, NIST, and DLA cybersecurity requirements.

Serve as a senior cybersecurity mission integrator and advisor for Department of War enterprise mitigation efforts. Advise senior leaders on vulnerabilities, operational risk, mitigation priorities, acquisition impacts, and implementation progress. Lead cross-organizational coordination with defense program offices, NSA, military Services, and technical stakeholders. Develop executive briefings and recommendations, assess weapons and mission systems, guide multiple workstreams, support governance, and mentor action officers in classified environments.

Leads research and client advisory on securing artificial intelligence and generative AI systems. Develops written research, presentations, market analysis, and actionable cybersecurity guidance; evaluates AI security controls, standards, governance practices, and supporting technology markets. Represents Gartner as an industry expert, supports sales and research teams, reviews content, presents at events, and collaborates with research peers.

Designs, implements, and automates cybersecurity controls across SOC operations, network and cloud security, endpoint protection, DLP, incident response, vulnerability management, and security automation. Develops SOAR playbooks, IaC and CI/CD workflows, improves detection and response capabilities, manages security tooling, investigates alerts, supports remediation, and collaborates with technical, legal, GRC, and business teams.

Supports cybersecurity controls, tooling, monitoring, alert triage, vulnerability management, access reviews, secure configurations, and incident escalation. The role partners with IT, engineering, and business teams to remediate risks, support security awareness, and improve security practices. It also participates in tabletop exercises, training, and knowledge sharing. This Tempe, Arizona position is primarily in-office four days per week, with optional remote work on Fridays.

Serves as an Information System Security Officer supporting DoD systems, managing system certifications and approvals, coordinating incident response, delivering cybersecurity training, and maintaining cybersecurity websites. Requires expertise in information security principles, risk assessments, vulnerability mitigation, security frameworks, operating systems, databases, networks, and security tools. The role requires an active DoD Top Secret/SCI clearance, IAT Level II certification, STEM education, and relevant experience.

Leads a CSIRT shift responsible for security alert intake, triage, incident response, containment, recovery, and post-incident analysis. Develops response frameworks, coordinates major incidents, reports trends to leadership, mentors analysts, tests readiness through simulations, integrates threat intelligence, and automates response processes. The role requires technical leadership, team management, and hands-on expertise across monitoring, detection, digital forensics, cloud security, threat hunting, and security operations.

Leads medical device software cybersecurity verification and validation, including test strategy, automation, traceability, metrics, root cause analysis, regulatory compliance, and audit readiness. Coordinates cross-functional testing, mentors engineers, evaluates tools, and develops security regression, negative, abuse-case, and automated test suites. The role requires expert Python skills, technical leadership, and experience with secure development, DevSecOps, security testing tools, and medical device standards.

Secures cloud-hosted IT system architecture and design, ensuring DoD compliance and requirements. Reviews cloud security policies, supports secure deployments, advises on threat detection and response, contributes to authorization-to-operate efforts, and guides cybersecurity vulnerability assessments for cloud environments.

Provides cybersecurity engineering and ISSO support for Air Force command-and-control systems. Responsibilities include RMF authorization activities, STIG compliance, access control, vulnerability and incident remediation, security documentation, configuration management, risk assessments, system design reviews, and coordination with government stakeholders. The role supports DoD cybersecurity policies, cloud infrastructure security, DevSecOps practices, and classified-system requirements.

Performs defensive cyber operations and security engineering using SIEM, SOAR, EDR/XDR, vulnerability management, network segmentation, and incident response workflows. Conducts threat hunting, analyzes telemetry and logs, develops MITRE ATT&CK-aligned detection, reduces alert noise, supports containment and recovery, and contributes to compliance reporting and operational coordination in mission-critical environments.

Develops and implements cybersecurity architecture, controls, and hardened solutions for DoD systems. Performs vulnerability scanning, risk assessments, security control assessments, remediation, Fortify analysis, threat detection, and event correlation. Supports RMF activities and IATO/ATO authorization while ensuring compliance with DoD policies, STIGs, and cybersecurity directives. Collaborates with technical teams and senior stakeholders to secure hybrid systems and AI/ML networks.

Manages cybersecurity programs for classified information systems, including continuous monitoring, security assessments, compliance, risk management, Assessment and Authorization, Security Test and Evaluation, and security documentation. Leads audits, control reviews, policy implementation, corrective actions, and government accreditation activities. The role is full-time onsite in Aurora, Colorado, requires an active Top Secret/SCI clearance with CI polygraph, IAM Level II certification, and eligibility for Special Programs access.

Conduct information system security research, analysis, assessments, compliance audits, vulnerability assessments, and continuous monitoring in cleared environments. Develop RMF procedures and security documentation, manage media and cross-domain data transfers, monitor corrective actions, support system accreditation and certification, investigate security violations, and advise on government information security policies and best practices.

Advise clients on cybersecurity strategy, governance, risk, and compliance across long-term engagements. Develop security roadmaps, translate technical risks for executives and boards, align programs with major frameworks, and guide policy, architecture, and tooling decisions. Manage client relationships, support incident readiness and tabletop exercises, validate remediation with technical teams, mentor junior staff, and improve advisory methodologies. Travel may reach 65%.

Owns configuration, tuning, health, and operational effectiveness of enterprise security platforms across multiple client environments. Responsibilities include detection engineering, SIEM onboarding, vulnerability remediation, incident leadership, cloud and Microsoft security administration, AI system controls, automation, vendor management, root cause analysis, documentation, client reporting, and mentoring junior engineers.

Leads cybersecurity research and development, prototypes security technologies, manages technical execution, supports business development and customer relationships, mentors researchers, and shares results with industry. Focus areas include offensive cyber, systems security engineering, formal methods, and security software. The role requires strong computing expertise, research experience, leadership in capture activities, and the ability to obtain a Top Secret clearance.