Top Cybersecurity Jobs

Leads anti-tamper systems security engineering, including threat and countermeasure analysis, security architecture, requirements development, hardware/software integration, verification, validation, and technical writing. Provides technical leadership to engineers, collaborates with customers, applies government security guidance and state-of-the-art technologies, and supports task planning and budget ownership. The role is fully onsite and focuses on protecting critical defense technologies from exploitation.

Manages a team of 10–15 engineers developing security architectures and protection schemes against adversary threats. Leads systems engineering, requirements development, architecture definition, hardware/software integration, verification, and validation. Shapes policy and governance, supports technical roadmaps, promotes model-based systems engineering, and maintains customer relationships. The position is fully onsite and focuses on safeguarding critical defense technologies from exploitation.

Designs and implements anti-tamper security architectures and countermeasures based on adversary threat analysis. Responsibilities include writing system requirements, defining architectures, integrating hardware and software, validating solutions, implementing security protocols, testing countermeasures, and leading engineering teams. The role requires customer engagement, technical presentations, and defense-in-depth solutions for critical defense technologies. Work is performed full time onsite.

Manage classified, air-gapped Windows and Linux systems in closed-area lab environments. Responsibilities include Active Directory, GPO, domain controller, VMware, Veeam, Trellix ePO, Nessus, Splunk, vulnerability remediation, data spill response, secure sanitization, STIG and RMF compliance, documentation, and audit readiness. The role is fully onsite, supports classified mission environments, and requires occasional after-hours or weekend maintenance and incident response.

The Information Systems Security Engineer leads RMF and ICD-503 assessment and authorization efforts, taking systems through A&A phases to ATO and supporting continuous monitoring. The role gathers control evidence, manages risk elements and POA&Ms, coordinates with security stakeholders, auditors, leadership, project managers, and engineers, and communicates technical and security requirements. Preferred experience includes security reporting tools such as Greenlight, Rapid7, WebInspect, and Splunk, plus public and private cloud platforms.

Senior systems administrator responsible for secure, classified IT environments: configure and maintain Lab-in-a-Box, VMware, backups, endpoint protection, vulnerability scanning, Active Directory/GPOs, Splunk logging, and ensure STIG/RMF/NISPOM compliance. Lead data spill response, system sanitization, documentation, and audit readiness while collaborating with security stakeholders in a 100% onsite classified area.

Assesses cloud service security controls through Joint Test Teams, evaluates technical content against customer requirements, produces risk artifacts for authorization decisions, recommends security policy and process improvements, and advises projects on Assessment and Authorization processes. The role requires extensive systems engineering and cybersecurity experience, cloud security expertise across major platforms, NIST 800-53A knowledge, and strong communication skills.

Supports cyber and systems engineering for Department of Defense systems, including RMF assessment and authorization, requirements development, cyber architecture, DevSecOps integration, security plan development, vulnerability assessments, STIG compliance, and static and dynamic code analysis. The role also contributes to offensive architecture, Zero Trust design, security testing, continuous monitoring, and accreditation activities, with possible travel to customer locations.

Owns the security posture of critical information systems, supporting policy enforcement, security evaluations, configuration management, incident detection, vulnerability remediation, IAVA management, system security plans, certification and accreditation documentation, and identity and authentication administration. The role also supports the ISSM and ensures compliance with information assurance requirements across isolated, connected, and standalone environments.

Administer classified, air-gapped IT systems and lab environments in a 100% onsite closed area. Responsibilities include Active Directory, VMware, Veeam, Trellix ePO, Splunk, Nessus, Lab-in-a-Box environments, vulnerability remediation, data spill response, secure wiping, domain controller maintenance, STIG/RMF compliance, documentation, and audit readiness.