Top Cybersecurity Jobs

Monitor and investigate security alerts across endpoints, identity, cloud, email, networks, and applications. Manage vulnerabilities and remediation lifecycles, review access controls, support incident response, hardening, phishing prevention, audits, PCI DSS compliance, and external security assessments. Maintain evidence and documentation, coordinate with technical teams and vendors, communicate risks to stakeholders, and identify opportunities to automate security monitoring and reporting.

Leads cybersecurity operations, including incident monitoring and response, threat hunting, vulnerability management, digital forensics, security-tool administration, and penetration-test remediation. Oversees onshore SOC activities, coordinates with offshore analysts, maintains SOPs and incident documentation, tracks security metrics and SLAs, and supports threat intelligence, security awareness, and purple, red, and blue team engagements. Provides technical guidance, analyst training, vendor coordination, management reporting, and after-hours incident support.

Engineer and harden classified systems, mission ground systems, and laboratory environments. Implement security controls, conduct RMF accreditation through ATO and ATC, manage vulnerabilities and incidents, automate compliance activities, and support continuous monitoring. The role also includes mentoring, developing security standards, collaborating with engineering and administration teams, and participating in on-call incident response for national security missions.

Supports a commercial client by designing, developing, and implementing SOAR automations for security incident response. Collaborates with cybersecurity SMEs, engineers, vendors, and stakeholders to create security orchestrations and innovative solutions. The role requires expertise across SOAR, SIEM, IDS/IPS, DLP, WAF, and endpoint security platforms, cybersecurity consulting experience, and onsite client work.

Manage cybersecurity programs for classified information systems, including continuous monitoring, security control assessments, configuration reviews, risk analysis, and government policy implementation. Lead Assessment and Authorization activities, Security Test and Evaluation, inspections, audits, investigations, and corrective actions. Prepare and submit security documentation such as System Security Plans, Risk Acceptance Reports, POA&Ms, and SCTMs. The role is full-time, on-site in Roy, Utah, and requires an active Top Secret clearance with potential access to Special Access Programs.

Collect, analyze, and report cyber and physical threat intelligence using OSINT and threat platforms. Produce analytic products and executive briefings, support incident response and insider threat investigations, develop dashboards (Power BI/Azure Databricks), automate intelligence processes, and partner across security teams and external agencies to inform detection, hunting, and mitigation activities.

Leads cybersecurity focused operations across threat intelligence, threat hunting, adversarial threat emulation, and defensive countermeasures. Oversees subordinate teams, integrates capabilities into a unified Fusion Cell workflow, supports cybersecurity service design and modernization, evaluates new technologies, advises leadership on resources and staff performance, and provides guidance to junior personnel. The role requires executive communication, enterprise cybersecurity expertise, compliance knowledge, MITRE ATT&CK proficiency, and experience supporting intelligence or DoD environments.

Supports cybersecurity risk, governance, awareness, resilience, and reporting initiatives. Responsibilities include gathering and analyzing metrics and documentation, researching emerging cyber risks and industry practices, collaborating with technology and business stakeholders, and contributing to presentations, communications, process improvements, and program oversight within a global financial services organization.

AeroVironment is recruiting for upcoming five-year cybersecurity contract opportunities across database engineering, information systems security, software, systems, cloud, testing, administration, web development, and data science. Team members will support defensive cyber operations, critical infrastructure protection, threat detection, containment, mitigation, systems integration, analytics, information sharing, malware analysis, configuration management, and training development. Positions begin in late 2026 or early 2027 and may require U.S. person status or U.S. citizenship under ITAR and contract requirements.

Conducts security audits, continuous monitoring, system and network assessments, vulnerability analysis, and compliance activities for classified information systems. Supports government policy implementation, risk mitigation, Assessment and Authorization, Security Test and Evaluation, and Risk Management Framework documentation. The role requires on-site work in Sunnyvale, a current Top Secret clearance, eligibility for SAP/SAR clearance, and an IAM Level II-equivalent certification.

Lead the architecture and execution of a large-scale CIAM platform migration and consolidation. Own customer identity operations, authentication flows, integrations, microservices, mobile login experiences, observability, resilience, and identity-related incident response. Partner with product, marketing, business, and customer support teams to optimize security, fraud prevention, customer experience, and conversion. Communicate platform health, migration progress, and fraud metrics to stakeholders.

Designs, implements, and maintains enterprise cybersecurity solutions across on-premises, cloud, and hybrid environments. Responsibilities include security architecture, SIEM monitoring, threat hunting, incident response, vulnerability management, patch compliance, risk analysis, ATO planning, and security control integration. The role supports NIST, RMF, and ISO standards, collaborates with infrastructure and application teams, and operates onsite in a classified workspace requiring Top Secret clearance.

Investigates and responds to cybersecurity incidents, administers security platforms, hunts threats, manages vulnerabilities, evaluates risks, and coordinates remediation. The role supports endpoint, identity, network, cloud, email, firewall, and application security; develops policies, runbooks, reports, and dashboards; assists with audits and compliance; and provides technical guidance across IT. After-hours incident support may be required.

Conduct cybersecurity control, vulnerability, software assurance, threat, and risk assessments for complex ballistic missile defense systems. Perform research, data gathering, gap analysis, and capability maturity assessments; develop cybersecurity implementation plans and documentation. Support vulnerability assessments, control development, penetration testing, security planning, and Risk Management Framework activities while applying cybersecurity standards and assessment tools.

Administers enterprise cybersecurity analytics platforms, including Splunk and Microsoft Sentinel, and maintains RHEL systems supporting security operations. Manages access controls, data forwarders, ingestion pipelines, platform health, storage, upgrades, certificates, backups, dashboards, alerts, and documentation. Troubleshoots routine ingestion, query, dashboard, and system issues while supporting security analysts and ensuring reliable security telemetry and operational readiness.

Performs cybersecurity risk and compliance activities, including ATO package management, SSP and POA&M development, vulnerability assessments, audits, incident response, RMF implementation, and security architecture reviews. Coordinates with authorizing officials, assessors, ISSMs, program managers, and contractors. Supports continuous monitoring, cybersecurity engineering, threat analysis, and compliance reporting across IT environments. Requires seven years of experience, DoD cybersecurity certifications, U.S. citizenship, and eligibility for a government security clearance.

Lead the SPS Cyber/ITS team supporting secure, classified and sensitive research environments. Responsibilities include hiring and mentoring staff, managing system authorization packages and compliance documentation, overseeing secure system design and controls, conducting risk assessments, monitoring networks and systems, developing cybersecurity training, and providing technical leadership in vulnerability management, log analysis, network analysis, and incident response. The role requires on-site work in Reston, periodic travel, U.S. citizenship, and eligibility for TS/SCI access with a CI polygraph.

Oversee daily operations of the MACC-TTE cyber training/testing center. Manage customer support for events, integrate sponsor requirements, control projects/budgets/schedules, serve as primary POC, be on-site during regular duty hours, and act as backup to the Program Manager as needed.

Develop and maintain Marine Corps FRCS enterprise and reference architectures, focusing on OT cybersecurity, SDN/SDA, segmentation, continuous monitoring, RMF authorization, and compliance. Coordinate stakeholders, CSSP responsibilities, governance documents, MOAs, SLAs, POA&Ms, security plans, and portfolio management artifacts. Support architecture working groups, workshops, briefings, training, and cybersecurity assessments. Analyze OT protocols and security postures, advise on ICS/SCADA compliance, monitor emerging threats, and travel to Marine Corps installations as needed.

Supports cybersecurity operations for Executive Airlift Communications Network environments, including Air-to-GIG Gateways, a Systems Integration Laboratory, and a Government Security Operations Center. Responsibilities include diagnosing and mitigating cyber incidents, vulnerabilities, network attacks, and service interruptions; coordinating incident resolution; documenting events in ServiceNow; managing controlled changes; reviewing tickets; and applying ITSM and ITIL processes.

Leads Brinker International’s enterprise cybersecurity strategy, threat detection, incident response, resilience, governance, compliance, vendor risk management, and restaurant payment security. Oversees protection of corporate, cloud, restaurant, and third-party environments while ensuring PCI DSS, SOX, privacy, and security framework compliance. Manages cybersecurity teams, audits, assessments, training, business continuity, and executive risk communication.

Develops AI-enabled software and rapid prototypes to improve defensive cybersecurity operations. The role collaborates with mission operators and applies Python, LLMs, and corporate AI resources to support vulnerability analysis, patching, incident response, adversary emulation, threat analysis, and COMSEC monitoring for government and Defense Industrial Base environments.

Leads vulnerability management across client applications, including analyzing findings, assigning remediation, tracking closure, and validating fixes. Supports POA&M activities, federal cybersecurity compliance, patching deadlines, dashboards, KPIs, leadership briefings, Splunk alert monitoring, secure development, audits, and assessments. Requires cybersecurity or IT risk management experience, federal Public Trust eligibility, and familiarity with vulnerability tools, NIST, FISMA, and OWASP.

Leads cybersecurity risk management across client applications, managing POA&M lifecycles, prioritizing remediation, conducting business impact analyses, and maintaining continuity documentation. The consultant coordinates with system owners, engineering, and security teams; validates fixes; prepares leadership and federal oversight reports; supports audits and assessments; and applies NIST, FISMA, and federal security requirements.

Investigate and triage advanced security alerts across endpoint, identity, email, and network telemetry. Lead Tier 2 incident response through containment, eradication, and recovery; document investigations, escalate high-severity incidents, produce customer-facing summaries, mentor Tier 1 analysts, and improve SOC processes and detection workflows.