Top Cybersecurity Jobs

Leads cybersecurity engineering, RMF authorization, vulnerability management, system security documentation, architecture security, risk assessments, and classified information protection for Air Force systems. Supports ATO/ATC, continuous monitoring, eMASS administration, ACAS scanning, STIG implementation, cross-domain solutions, policy development, acquisition security, and cybersecurity training. Advises government leadership and coordinates with government and commercial stakeholders to achieve compliance and mission objectives.

Supports cybersecurity for C-130 and other aeronautical systems at the Air Force Life Cycle Management Center. Advises the ISSM, develops cybersecurity strategies and RMF artifacts, supports IATT and ATO authorization, reviews program documentation, analyzes system components and vulnerabilities, identifies risks and safeguards, and verifies cybersecurity controls and mitigations. Requires aircraft or weapon-system experience, a Secret clearance, U.S. citizenship, and occasional travel.

Performs risk-based cybersecurity control assessments, technical validation, configuration reviews, vulnerability and exploitability testing, attack-path analysis, and audit support. The role uses GRC and continuous-control-monitoring processes to automate evidence collection, track remediation, develop risk metrics, and improve reporting. Partners with cybersecurity, technology, risk, audit, and business teams to translate technical findings into practical remediation and strengthen cyber resilience.

Support the Air Force Rapid Sustainment Office by executing Risk Management Framework activities for networked, standalone, and cloud systems. Responsibilities include system categorization, security control selection and assessment, vulnerability and risk identification, remediation planning, RMF documentation, policy enforcement, and coordination of accreditation tasks. The role requires independently recommending cybersecurity solutions and applying DoD and Air Force security policies to achieve RMF acceptance and system accreditation.

Leads cybersecurity programs and services for a government client, overseeing governance, risk management, compliance, secure system design, vulnerability management, security operations, and operational defense. Manages project delivery, Agile planning, schedules, budgets, staffing, risks, vendors, deliverables, and stakeholder communications. Oversees recruitment, onboarding, skills assessment, and performance of cybersecurity and technology personnel across development and staff augmentation engagements while ensuring contractual, security, and service-level requirements are met.

Leads cybersecurity governance, risk, and compliance activities, including policy and standards development, third-party risk assessments, internal risk analysis, compliance reporting, regulated-data safeguards, business continuity, awareness training, phishing simulations, and incident-response documentation. Coordinates stakeholders, maintains risk and exception records, supports audits and assessments, and prepares quantitative risk and compliance metrics for senior IT leadership.

Provide cybersecurity expertise for mission-critical enterprise systems by evaluating security controls, conducting vulnerability assessments and threat modeling, and recommending risk mitigation. Ensure alignment with NIST, ISO 27001, GDPR, and DoD RMF requirements. Collaborate with engineering and leadership to integrate secure development practices, review security tool outputs, mentor teams, and present assessment findings. The role supports government and defense-related environments and requires eligibility for TS/SCI clearance and a CI polygraph.

Provide independent assurance and advisory services over technology, cybersecurity, data, cloud, AI, and business transformation initiatives. Plan and execute audits (risk assessment, scoping, testing, reporting), evaluate ITGCs and automated controls, and use data analytics, automation, and AI tools to improve audit effectiveness and communicate findings to stakeholders.

Leads Raymond James’s IT compliance program and governance framework. Oversees compliance methodologies, risk assessments, monitoring, testing, and regulatory change management across technology, cybersecurity, privacy, AI, cloud, and third-party risk. Advises senior leadership on emerging compliance risks and partners with technology, security, privacy, legal, risk, audit, and business teams to maintain regulatory compliance and independent oversight.

Serves as the strategic bridge between Cybersecurity and IT Infrastructure teams and the Digital organization. Advises senior leaders, communicates security and infrastructure risks, reports on program progress, defines cybersecurity requirements, coordinates third-party risk assessments, supports transformation initiatives, promotes security policies, and partners with Compliance, Legal, and IT teams to deliver secure, scalable infrastructure.

Designs and develops secure systems and architectures for U.S. Navy missions. Responsibilities include analyzing engineering and security requirements, hardening systems, reducing attack surfaces, applying secure coding and operating-system security practices, evaluating architectures against adversary threats, and implementing cybersecurity countermeasures across system lifecycles.

The CISO will develop and manage the Bank's information security programs, ensuring compliance and protecting customer data while mitigating risks. They will also lead a security team, oversee third-party risk, and promote a culture of security awareness across the organization.

The Sr. Manager of Information Risk & Controls drives the risk management evolution by leading risk identification, developing frameworks, and collaborating with teams across Invesco.

Conduct mixed-method behavioral research on cybersecurity, privacy, artificial intelligence, risk, trust, and human behavior. Design and lead interviews, focus groups, surveys, and experiments; analyze quantitative and qualitative data; publish findings; support grant proposals; mentor student researchers; manage project milestones; and disseminate results with interdisciplinary and international collaborators.

Lead Citi’s enterprise Insider Threat program within the Cybersecurity Fusion Center. Responsibilities include defining strategy, managing and developing multidisciplinary teams, implementing data-centric detection and response processes, applying AI and advanced analytics, integrating behavioral and technical indicators, advising senior stakeholders, coordinating governance and risk controls, and engaging industry and government partners. The role requires extensive cybersecurity leadership, insider threat expertise, incident response experience, and the ability to drive global transformation.

Lead the development and execution of Citi’s enterprise insider threat program. Responsibilities include strategic planning, AI-driven threat detection, data-centric process implementation, threat triage and response, stakeholder engagement, governance, risk management, metrics, reporting, and incident response support. The role partners with cybersecurity, legal, HR, compliance, risk, technology teams, industry peers, vendors, and government agencies while helping drive organizational transformation and mentor team members.

Leads cybersecurity integration for newly acquired sites, including security assessments, firewall and VPN deployment, network segmentation, Zero Trust and Entra ID configuration, EDR and SIEM onboarding, email security, vendor coordination, documentation, and operational handoff. The role independently owns security architecture from assessment through steady-state transition, with approximately 75–80% travel to domestic and international acquisition sites and occasional after-hours or weekend cutovers.

Plans, coordinates, and governs the cybersecurity program, aligning initiatives with organizational objectives, regulatory requirements, and security strategy. Oversees cybersecurity roadmaps, budgets, vendors, project portfolios, reporting, and knowledge management within the CISO organization. Requires cybersecurity program management experience and familiarity with Microsoft 365 tools, healthcare regulations, and security frameworks.

Leads SIEM engineering and cloud security for hybrid on-premises and cloud environments. Responsibilities include onboarding applications and workloads, integrating and parsing log sources, creating detection use cases, securing AWS and Azure migrations, supporting EDR and network monitoring, and applying incident response, identity management, segmentation, DLP, and healthcare security practices.

Provides senior cybersecurity and ISSM support for Air Force enterprise IT programs. Responsibilities include RMF compliance, continuous monitoring, authorization and security documentation, risk and configuration assessment, incident and vulnerability reporting, cybersecurity training, and advising authorization officials and program managers. The role also oversees security controls, corrective actions, developer findings, and cybersecurity personnel while supporting Agile development environments.

Provides senior ISSM cybersecurity support for Air Force REMIS, including RMF compliance, continuous monitoring, security control assessment, authorization maintenance, vulnerability tracking, configuration-change analysis, incident reporting, and cybersecurity documentation. The role guides ISSOs and privileged users, supports corrective actions, evaluates automated security findings, and ensures compliance with DoD and Air Force cybersecurity policies. Requires substantial cybersecurity experience, U.S. citizenship, a T3/Secret clearance, and an advanced DCWF ISSM certification.

Monitor and investigate security alerts across endpoints, identity, cloud, email, networks, and applications. Manage vulnerabilities and remediation lifecycles, review access controls, support incident response, hardening, phishing prevention, audits, PCI DSS compliance, and external security assessments. Maintain evidence and documentation, coordinate with technical teams and vendors, communicate risks to stakeholders, and identify opportunities to automate security monitoring and reporting.

Leads cybersecurity operations, including incident monitoring and response, threat hunting, vulnerability management, digital forensics, security-tool administration, and penetration-test remediation. Oversees onshore SOC activities, coordinates with offshore analysts, maintains SOPs and incident documentation, tracks security metrics and SLAs, and supports threat intelligence, security awareness, and purple, red, and blue team engagements. Provides technical guidance, analyst training, vendor coordination, management reporting, and after-hours incident support.

Engineer and harden classified systems, mission ground systems, and laboratory environments. Implement security controls, conduct RMF accreditation through ATO and ATC, manage vulnerabilities and incidents, automate compliance activities, and support continuous monitoring. The role also includes mentoring, developing security standards, collaborating with engineering and administration teams, and participating in on-call incident response for national security missions.

Supports a commercial client by designing, developing, and implementing SOAR automations for security incident response. Collaborates with cybersecurity SMEs, engineers, vendors, and stakeholders to create security orchestrations and innovative solutions. The role requires expertise across SOAR, SIEM, IDS/IPS, DLP, WAF, and endpoint security platforms, cybersecurity consulting experience, and onsite client work.