Top Cybersecurity Jobs

Engineer, administer, and optimize DLP and CASB solutions across endpoint, network, and cloud environments. Configure security policies, integrations, agents, alerts, and data-classification controls; investigate incidents and data-exfiltration risks; remediate control gaps; support firewalls, email security, WAF, and DNS security. Partner with GRC, HR, Legal, and business teams on compliance, reporting, documentation, change management, and remediation. Mentor junior security staff and support incident response activities.

Engineers, administers, and optimizes DLP and CASB solutions, including policies, alerts, integrations, data discovery, classification, and remediation. Supports firewalls, DNS, email security, WAF, incident response, and broader security control operations. Investigates data-loss and insider-risk events, develops compliance reports and metrics, tunes detection rules, manages change processes, documents runbooks, and mentors SOC personnel. The role requires incident availability 24/7 and regional client travel.

Engineers, administers, and optimizes DLP and CASB solutions, including policies, integrations, data discovery, alert triage, incident response, cloud application controls, and sensitive-data classification. The role remediates cybersecurity control gaps across firewalls, email security, WAFs, and related systems; produces risk and compliance metrics; coordinates with GRC, legal, HR, and business teams; and mentors junior security staff. It requires 24/7 incident availability and regional travel.

Lead installation, configuration, integration, and training for Forcepoint COTS cyber products. Provide on-site support, troubleshooting, upgrades, and technical documentation. Architect REST API integrations with SIEM/SOAR/IdP/cloud services, mentor junior engineers, serve as trusted advisor to customers and sales, and relay product feedback to influence the roadmap.

Implement, configure, optimize, and administer distributed LogRhythm SIEM deployments in AWS and Azure environments. Develop secure cloud infrastructure, manage security groups and storage, maintain SQL and Elasticsearch databases, troubleshoot networks and VPNs, automate operational tasks, document architectures, forecast deployment growth, and provide technical escalation support to SIEM engineers.

Provide technical support and security guidance to managed-service customers. Monitor security systems, troubleshoot security tools across Windows, Linux, Azure, and AWS environments, investigate networks and logs using SIEM technologies, identify malicious activity, and recommend security improvements. The role also supports incident response research, client implementations, knowledge transfer, documentation, and technical issue resolution.

Leads cybersecurity consulting work across client engagements, supporting RMF, A&A, security control assessments, vulnerability management, compliance reviews, system hardening, and secure configuration. Prepares SSPs, SAR inputs, POA&Ms, policies, reports, and technical presentations. Coordinates workstreams, deadlines, remediation, and quality reviews while guiding junior staff and contributing to proposals. The remote role requires travel exceeding 50% to client sites and project locations.

Provides cybersecurity consulting across multiple client engagements, including NIST RMF, assessment and authorization, security control validation, vulnerability assessment, compliance reviews, system hardening, and cybersecurity documentation. Supports project planning, client presentations, quality assurance, proposal development, and business development. Reviews systems against DoD and maritime cybersecurity requirements, mentors junior consultants, and travels regularly to client sites.

Provides Information Systems Security Engineering and DevSecOps support for the C-17 program. Integrates cybersecurity requirements into system architecture, development, configuration, and operations; traces controls to security requirements; maintains RMF artifacts and security baselines; supports vulnerability scanning, STIG assessments, audit reviews, endpoint protection, DLP, PPSM entries, and supply-chain evaluations across multiple enclaves.

Support the Risk Management Framework lifecycle by developing documentation, conducting assessments, and ensuring compliance with federal standards while working with security tools.

Lead malware, binary, firmware and source-code analysis to identify vulnerabilities in critical infrastructure and federal networks. Develop automated analysis tools and workflows, mentor staff, write technical reports, shape research direction, pursue program growth and proposals, and collaborate with sponsors to secure and harden operational technology and software assurance capabilities.

Military-only SkillBridge cybersecurity internship providing hands-on exposure to network security, IAM, SOC/SIEM, endpoint protection, incident response, GRC, threat/vulnerability management, audits, red team/social engineering exercises, and security reporting. Interns attend customer meetings, participate in industry activities, and author three 1,000-word cybersecurity articles. Remote with equipment provided; 90-day minimum.

Design and implement end-to-end cybersecurity architectures for classified, CUI, and unclassified systems supporting DoD/IC. Lead RMF accreditation (SSPs, SARs, POA&Ms), conduct threat modeling and vulnerability assessments, advise on Cross Domain Solutions and zero trust, integrate security into SDLC, and brief senior leadership. Mentor junior staff and provide SME support for classified cybersecurity programs.

Design, implement, and evaluate cybersecurity solutions and controls for DoD information systems. Conduct risk assessments and vulnerability analyses, recommend mitigations, support test plans, ensure compliance with DoD standards, prepare technical documentation, and collaborate with multidisciplinary teams.

The Senior Cybersecurity Operations Researcher conducts analytical studies on cybersecurity risks and supports strategic initiatives to enhance national security operations. Responsibilities include collaboration with diverse teams, engaging international stakeholders, and producing technical documentation and publications.

Lead oversight of cloud and application security, governance, control deviations, remediation tracking, and executive reporting. Partner with infrastructure, engineering, and application owners to assess configurations, onboard new applications (including agentic AI), validate controls, approve policy deviations, and communicate remediation progress and emerging risks to senior management.

Support a 24/7 DoD Cyber Network Defense operation by monitoring alerts, analyzing packet and log data, triaging incidents, integrating threat intelligence into sensors/SIEMs, and coordinating incident response and reporting.

The Cybersecurity Engineer detects and responds to threats, improves endpoint visibility and security posture, supports incident response, automates alerting and reporting, manages vulnerabilities, and partners with IT on patching and system hardening. The role monitors hybrid environments, investigates suspicious activity, documents security standards, and drives continuous improvement. It requires enterprise IT and cybersecurity experience, endpoint security expertise, scripting skills, and strong Windows Server knowledge.

Leads cybersecurity and RMF activities for C-17 training and sustainment systems across 16 locations. Oversees ISSO personnel, RMF documentation, eMASS workflows, ATO processes, vulnerability assessments, audits, incident response, security controls, compliance, staffing, budgets, schedules, and stakeholder coordination. Ensures alignment with DoD, USAF, NIST, NISPOM, DAAPM, and JSIG requirements while presenting risks and mitigations to leadership.

Build and operate cybersecurity capabilities in a U.S. Federal air-gapped classified cloud environment. Responsibilities include vulnerability management, incident response, threat hunting, threat detection, security tool development, and collaboration with customers and cyber defense teams. The role requires technical leadership, cloud security experience, prioritization of vulnerabilities, SIEM and SOAR expertise, and the ability to support multiple projects and operational responsibilities.

Support cybersecurity operations, threat detection, incident response, and vulnerability management across a distributed manufacturing environment. Partner with an MSSP to investigate and respond to security alerts, manage containment and recovery, and document incidents. Maintain endpoint, network, identity, and logging security systems; coordinate vulnerability remediation; develop automation and security improvements; manage metrics and dashboards; and contribute to security policies, standards, procedures, and technical documentation.

Leads cybersecurity control implementation across DoD environments and delivery pipelines. Manages RMF activities, ATO support, vulnerability monitoring, risk mitigation, compliance coordination, security response, and protection of system data. Collaborates with DevSecOps, infrastructure, and program teams across IL-5/IL-6 and cloud environments.

Leads an enterprise cybersecurity posture and hygiene program covering strategy, governance, control maturity, configuration drift, remediation, metrics, and reporting. Manages and develops a multidisciplinary security team while partnering with infrastructure, cloud, identity, network, endpoint, application, and AI engineering groups. Establishes CIS Controls-aligned frameworks, detects AI misuse and control gaps, drives secure-by-default practices, and advances continuous monitoring and risk-based improvements.

Designs and leads enterprise identity and access management architecture across cloud and on-premises environments. Responsibilities include developing IAM blueprints and roadmaps, integrating authentication, authorization, identity governance, and privileged access solutions, evaluating platforms, supporting zero-trust and compliance initiatives, coordinating with cybersecurity and engineering teams, managing vendors, and providing technical leadership for identity-related incident response. The role also defines IAM effectiveness metrics and evaluates emerging technologies such as passwordless authentication and AI-driven access decisions.

Lead development and maintenance of the enterprise cybersecurity program for a patient-facing healthcare organization. Advise on security controls, risk management, compliance (HIPAA/ISO), vendor/security assessments, and integration of cybersecurity requirements into projects and IT systems. Collaborate cross-functionally and support audits, process improvements, and strategic cybersecurity initiatives.