Top Cybersecurity Engineer Jobs

Designs, operates, secures, and troubleshoots resilient networks connecting unmanned aircraft systems and ground control stations. Responsibilities include VPN, firewall, routing, RF, satellite, Linux, and Windows network architecture; monitoring and diagnostics; field support; vulnerability remediation; system hardening; documentation; and root-cause analysis. The role also develops standardized configurations, health checks, and operational procedures for reliable communications across tactical and remote environments.

Applies security best practices to optimize systems, analyzes and resolves security challenges, drives cross-functional security initiatives, collaborates with engineers, and improves security processes and team effectiveness. The role requires independent security decision-making and alignment of solutions with business objectives.

Lead technical sales engagements for an AI-powered cybersecurity platform. Responsibilities include conducting discovery, advising security executives, designing solutions, delivering demonstrations and proofs of concept, translating customer feedback into product priorities, mentoring sales engineers, representing the company at industry events, and improving pre-sales processes and documentation.

Supports cybersecurity engineering for Air Force air defense sensor programs. Responsibilities include RMF authorization and accreditation, security documentation, vulnerability assessments, STIG compliance, PKI and access control management, security configuration and remediation, classified information accountability, system design reviews, acquisition security documentation, and security awareness training.

Lead and improve the enterprise vulnerability management program using risk-based methods. Analyze scan results, assess organizational risk, coordinate remediation, operate scanning infrastructure, automate security workflows, integrate security data, and provide escalation guidance. Mentor junior analysts, evaluate emerging threats and technologies, track remediation through Jira and Confluence, create risk reporting, and present vulnerability trends and recommendations to technical stakeholders and executives.

Leads cybersecurity detection engineering by designing, deploying, and optimizing SIEM, EDR, SOAR, and AI-driven detection systems. Develops detection rules, automated remediation playbooks, and multi-agent security solutions; integrates threat intelligence and incident response; performs attack simulations and purple teaming; manages log ingestion and data lakes; and ensures compliance with security standards. Provides technical leadership, mentorship, documentation, stakeholder collaboration, and occasional off-hours support.

Support enterprise cybersecurity by deploying and configuring BigID for data discovery, classification, and protection across cloud and hybrid environments. Build and tune DLP classifiers, automate workflows with Python, analyze scan results, recommend remediation, and support compliance with GDPR, CCPA, and NIST. Collaborate with cybersecurity and cross-functional teams in a Cyber Fusion Center, mature data protection programs, train stakeholders, and address data exfiltration risks.

Designs and secures OT/ICS networks supporting utility-scale battery energy storage systems. Responsibilities include network segmentation, firewall configuration, Ignition SCADA administration, SIEM deployment, Azure security, identity management, vulnerability assessments, compliance with NERC CIP and IEC 62443, incident response, commissioning support, and technical mentorship. The role advises leadership on OT cybersecurity architecture and supports field operations with up to 20% travel.

Leads the design, deployment, and governance of AI-driven cybersecurity capabilities across enterprise environments. Develops AI-enabled threat detection, anomaly detection, and automated response solutions; configures and tunes security technologies; provides architecture guidance; analyzes AI-related threats and incidents; and partners with security operations, threat intelligence, engineering, governance, and endpoint teams. The role also drives secure AI configuration standards, enterprise platform integration, and technical leadership across cybersecurity initiatives.

Designs, implements, and governs enterprise Zero Trust security architecture across identity, networks, endpoints, applications, data, cloud, and hybrid environments. Leads security transformation initiatives, architecture reviews, access modernization, micro-segmentation, cloud security, monitoring, incident response support, risk assessments, compliance controls, automation, and maturity metrics. Partners with infrastructure, cloud, applications, compliance, and cybersecurity teams while presenting recommendations to senior leadership.

Develops and maintains DoD cybersecurity Assessment and Authorization packages, conducts continuous monitoring, vulnerability testing, risk assessments, and security analysis for U.S. Navy tactical combat systems. The role applies RMF, STIGs, NSA recommendations, and DoD security policies; serves as an ISSO; documents requirements and system architectures; and supports cybersecurity engineering, compliance, testing, and risk mitigation activities.

Develops and documents cybersecurity requirements, policies, architectures, risk assessments, threat analyses, and mitigation plans for Navy combat systems. Conducts classified cyber assurance research, analyzes policy gaps, leads cybersecurity strategy working groups, and applies MBSE models to cybersecurity engineering. The role is fully on-site at NSWC Dahlgren and requires an active Top Secret clearance with SCI eligibility.

Lead cybersecurity assessment and authorization activities for classified DoD and Intelligence Community systems. Responsibilities include executing RMF processes, maintaining SSPs, POA&Ms, SARs, and ATO artifacts, managing vulnerability remediation, validating NIST and CNSSI controls, enforcing STIG compliance, hardening Windows, Linux, and network systems, monitoring environments, supporting incident response, and assessing security impacts of system changes.

Leads cybersecurity assessment and authorization activities for classified DoD and Intelligence Community systems. Maintains SSPs, POA&Ms, SARs, and ATO artifacts; performs vulnerability scanning and remediation tracking; validates NIST and CNSSI controls; supports hardening, patching, STIG compliance, monitoring, incident response, and change-impact assessments. Collaborates with engineering, administration, and DevSecOps teams.

Build and operate secure DevSecOps pipelines using SAST, DAST, container scanning, SBOM/SCA, artifact validation, and vulnerability gates. Produce RMF/cATO evidence, support secure coding compliance, drive CWE/CVE remediation, validate rollback readiness, and help developers adopt secure-by-default CI/CD automation across cloud and mission environments.

Secure and accredit multi-tenant, multi-classification cloud environments across development, integration, and test enclaves. Implement JSIG, NIST, STIG, RMF, and ATO requirements; maintain SSPs, POA&Ms, and continuous-monitoring evidence; validate vulnerability, application-security, container, and infrastructure-as-code outputs; support secure cloud and DevSecOps design; and provide cybersecurity guidance for capability-provider artifacts and promotion decisions.

Responds to cybersecurity alerts, investigates threats, hunts for malicious activity, protects sensitive healthcare and financial data, and engineers preventive security solutions. The role addresses nation-state, cybercriminal, and insider threats through forensic analysis and incident response. It also supports security awareness through written communication and public speaking. This hybrid position in Mountlake Terrace, Washington, includes an on-call rotation.

Build and mature PDW’s cybersecurity GRC program across enterprise, engineering, manufacturing, and business systems. Translate CMMC, NIST SP 800-171, ISO 27001, ITAR, and customer requirements into controls; manage risk assessments, documentation, evidence, audits, remediation, vulnerability management, and third-party risk. Configure and validate security tools, support incident response, improve endpoint, identity, cloud, network, and monitoring controls, and report security metrics to leadership. The role requires cross-functional collaboration with auditors, customers, vendors, and system owners.

Owns perimeter, cloud, email, identity, endpoint, and detection defenses across AWS and Azure. Responsibilities include managing WAF and bot controls, writing Terraform, operating SIEM and EDR/MDR tooling, developing detections, responding to incidents, administering email security and MDM, advancing Zero Trust, supporting penetration testing, and using AI-assisted tools for security automation. The role requires strong compliance experience, on-call incident response participation, and hands-on security engineering skills.

Test and evaluate Department of Defense systems using white-box adversarial methods. Analyze security controls, data flows, filtering capabilities, and access controls under the NIST 800-53 Risk Management Framework. Use Linux scripting, networking, virtualization, and cybersecurity testing techniques to support Air Force clients. The role may involve test plans, technical documentation, penetration testing, vulnerability assessment, and system hardening.

Leads the Cyber Engineering organization supporting NGA cybersecurity services and capabilities. Oversees strategy, technical performance, modernization, solution design, integration, operations, and sustainment of complex enterprise cybersecurity systems. Provides expert guidance, resolves complex technical issues, drives innovation, and communicates recommendations to executive and senior customer stakeholders. Requires extensive DoD or IC cybersecurity experience, cloud transition expertise, RMF and NIST knowledge, leadership experience, and TS/SCI clearance with polygraph eligibility.

Provides cybersecurity and information assurance engineering for Defense Logistics Agency systems. Responsibilities include analyzing DoD security requirements, supporting secure system design and integration, implementing security controls, resolving IA challenges, and maintaining continuous monitoring and risk management. Requires extensive federal IT experience, multiple cybersecurity certifications, Microsoft Windows Server certification, RSA Archer administration certification, and an active Top Secret clearance.

Design, build, automate, and operate network security controls across AWS, GCP, private cloud, and enterprise environments. Lead security architecture initiatives, implement zero trust and SASE solutions, assess infrastructure designs, and support firewalls, WAF, DDoS, and IPS/IDS controls. Partner with cybersecurity and trust teams on policies and compliance, mentor engineers, document architectures, and participate in production on-call support.

Designs and secures edge and hybrid-cloud infrastructure operating in contested, air-gapped, and degraded network environments. Responsibilities include container hardening, threat modeling, vulnerability management, automated provisioning, secrets and PKI lifecycle management, Linux security, and DoD/IC accreditation compliance. The role also contributes to security architecture, embedded Linux hardening, secure software supply chains, and mission-critical infrastructure reliability.

Leads cybersecurity innovation for critical infrastructure and electric power systems. Identifies market and customer needs, develops strategic opportunities, translates them into product requirements, and influences product roadmaps and business cases. Serves as a cybersecurity subject matter expert for OT, ICS, substations, communications networks, security architectures, standards, risk assessment, and controls. Engages customers and industry stakeholders, mentors engineers, supports adoption and growth, and contributes to technical education, intellectual property, and thought leadership.