Top Cybersecurity Engineer Jobs

Provides senior cybersecurity and ISSM support for Air Force IT, advising authorization officials, program managers, and security officers. Maintains RMF authorization, cybersecurity documentation, controls, continuous monitoring, vulnerability tracking, configuration assessments, incident reporting, and corrective actions. Evaluates application security findings using automated tools and manages deficiencies in DoD tracking systems. Oversees junior cybersecurity personnel, supports compliance with DoD and Air Force directives, and maintains required certifications and Secret clearance.

Own enterprise security engineering across endpoint privilege management, EDR, SSPM, CAASM, application control, and AI tool guardrails. Develop detection and containment automation, monitor telemetry and SaaS configuration drift, validate asset coverage, integrate security signals through APIs, and support threat triage. Mentor engineers, provide escalation support, and create technical runbooks and operational playbooks. The role requires strong enterprise cybersecurity experience, scripting, operating system knowledge, security tooling expertise, and cross-functional communication.

Lead and mature the organization's cybersecurity strategy through security engineering, cloud security, advanced security operations, incident response, architecture, compliance, and risk management. Oversee penetration testing, vulnerability management, threat detection, security tooling, and regulatory readiness. Partner with technology, infrastructure, legal, and compliance teams; manage vendors and budgets; report security metrics; and mentor cybersecurity professionals while serving as an escalation point for critical incidents.

Designs, deploys, and administers Axonius integrations across enterprise IT and cybersecurity data sources. Develops queries, dashboards, enforcement actions, ingestion standards, quality checks, access controls, and governance policies. Supports systems engineering lifecycle activities, technical documentation, architecture reviews, Agile delivery, and operational transition. Integrates endpoint, cloud, identity, vulnerability management, CMDB, and network security platforms in a regulated enterprise environment.

Designs, implements, and maintains cybersecurity controls across cloud, network, application, and infrastructure environments. Responsibilities include security engineering, threat hunting, SIEM management, incident response, forensic analysis, penetration testing, vulnerability management, security automation, audits, architecture reviews, policy development, vendor coordination, executive reporting, and mentoring cybersecurity and IT staff.

Designs, implements, monitors, and maintains cybersecurity infrastructure and programs. Responsibilities include managing firewalls, endpoint protection, SIEM, vulnerability management, IAM, cloud security, and incident response; conducting security assessments and audits; hardening systems; maintaining policies and compliance; and collaborating with infrastructure, networking, and business teams to improve security posture.

Designs, implements, and maintains cybersecurity controls including firewalls, encryption, IDS/IPS, MFA, and network security measures. Conducts vulnerability assessments and penetration testing, monitors and responds to incidents, supports security audits, and develops security documentation. Collaborates with engineering teams on secure software development, cybersecurity requirements, compliance, and cyber supply chain threat monitoring. Provides technical troubleshooting and stays current with emerging threats and security practices.

Provides technical direction for cybersecurity, cloud engineering, agile DevSecOps, AI/ML, and Zero Trust initiatives. Develops cybersecurity architecture and technical plans, applies relevant standards and emerging technologies, and oversees complex engineering execution. Requires at least 10 years of comparable cybersecurity engineering experience, along with AWS, CISSP, and Scrum certification. Additional Google Cloud, Microsoft Azure, and Microsoft Office 365 certifications are preferred.

Supports cybersecurity requirements analysis, architecture, system integration, hardening, vulnerability assessment, testing, and deployment of command-and-control systems for nuclear and critical infrastructure environments. Configures Windows and Linux systems, Active Directory, virtualized infrastructure, networks, switches, and firewalls. Performs onsite customer turn-up, acceptance testing, documentation, training, and lifecycle improvement. Travel up to 25% is required.

Designs, integrates, and oversees cybersecurity technologies and secure architectures for enterprise networks supporting national security systems. Responsibilities include security requirements analysis, threat identification and mitigation, security architecture and implementation, change-impact assessment, POA&M management, security documentation, and development of tools to address vulnerabilities and automate tasks. The role requires strong network, operating system, and security engineering expertise along with an active Top Secret clearance and SCI eligibility.

Supports cybersecurity engineering for CBP operational technology and mission systems, including secure architecture, vulnerability management, incident response, risk assessment, RMF, ATO, continuous monitoring, and security documentation. Translates mission requirements into security controls, evaluates vulnerabilities and operational impact, develops remediation strategies, and advises engineering and government stakeholders. The role requires government-system authorization experience, FISMA and NIST knowledge, and support for complex, high-availability environments.

Investigates cybersecurity findings from assessments, incidents, red teams, and operations; performs root cause and risk analysis; prioritizes remediation; designs technical and procedural solutions; and communicates recommendations to technical teams, stakeholders, and senior leaders. Uses validated enterprise AI capabilities to accelerate evidence synthesis and reporting while maintaining security, resiliency, compliance, and data-handling standards.

Designs and integrates cybersecurity requirements into information systems, including cloud and on-premises environments. Supports systems development, security architecture, technology research, alternative analyses, and security roadmaps. Engineers cybersecurity solutions involving big data, automation, and artificial intelligence, while translating regulatory requirements into secure designs. The role also oversees junior and mid-level cybersecurity engineers and requires an active TS/SCI clearance with the ability to obtain a polygraph.

The Cybersecurity Engineer III manages enterprise vulnerability programs across infrastructure, endpoints, applications, cloud, and networks. Responsibilities include developing scanning strategies, analyzing vulnerabilities and threat intelligence, prioritizing remediation, coordinating remediation teams, managing exceptions and compensating controls, producing risk reports, integrating security platforms, supporting assessments and audits, and automating scanning and reporting workflows. The role also provides technical guidance and communicates emerging security risks.

Develops and enforces DoD cybersecurity policies, manages ATO and ATC documentation, performs vulnerability assessments and system hardening, supports incident response, analyzes audit logs, tracks POA&Ms, and maintains RMF compliance and continuous monitoring. The role coordinates cybersecurity requirements with ISSMs and international mission partners while supporting Cross Domain Solutions and secure data exchanges.

Implements and maintains cloud security controls across Microsoft 365 GCC High, Azure, AWS, and hybrid environments. Administers cloud security platforms, integrates telemetry, supports vulnerability remediation, and validates controls against CMMC, NIST, DFARS, ITAR, ISO 27001, and other requirements. Secures generative AI, machine-learning, copilot, RAG, and agentic systems through access controls, sandboxing, logging, and execution safeguards. Performs risk assessments, control testing, audit evidence collection, SOC escalation support, automation, documentation, and occasional off-hours incident support.

Serve as the principal technical authority for enterprise endpoint security across macOS and Windows. Architect endpoint privilege management, application control, runtime safeguards, and secure AI and developer-tool governance. Integrate EDR, SSPM, telemetry, and automation platforms; establish security architecture and technical standards; advise leadership and vendors; lead design reviews, escalations, and multi-quarter roadmaps; and mentor junior and mid-level cybersecurity engineers.

Leads cybersecurity and operational resilience engagements for government, defense, and critical infrastructure customers. Develops security assessment standards, measurement approaches, frameworks, models, tools, policies, guidance, and training. Advises mission partners, leads technical projects, conducts applied research, presents findings, publishes work, mentors team members, and contributes to cybersecurity, continuity, risk management, and emerging technology initiatives. Frequent travel and the ability to obtain and maintain a Department of War security clearance are required.

Leads RMF and authorization activities for DoD and federal systems, including ATO package development, SSP and SAR maintenance, POA&M management, continuous monitoring, vulnerability analysis, and security assessment support. Configures Azure security and enterprise monitoring tools, coordinates remediation with technical teams, applies federal cybersecurity policies, documents security evidence, and supports audits. This is an onsite role at the Mark Center in Alexandria, Virginia, requiring an active DoD Secret clearance.

Supports the integration, testing, configuration, and operation of cloud and on-premises security controls. Evaluates cloud security tools through proof-of-concept testing, documents results, maintains architectural diagrams and runbooks, and assists with security-control deployments. Provides technical support to agency stakeholders, collaborates with project teams, and helps align security readiness with deployment schedules in a 24/7 operational environment.

Supports the integration, testing, configuration, and operation of defensive security technologies across hybrid cloud and on-premises environments. Evaluates cloud security tools through proof-of-concept testing, documents results, maintains architectural diagrams and operational runbooks, and assists with security-control deployments. Provides technical support to agency stakeholders and coordinates security readiness with project teams. The role may require nights, weekends, or varied shifts in a 24/7 operation.

Designs and implements defensible network security infrastructure for New York City government agencies. Responsibilities include reviewing security architecture, identifying gaps, developing risk management plans, building and testing cyber defense systems, implementing continuous monitoring, administering security tools, automating controls, integrating security procedures, coordinating with technical teams, and supporting cybersecurity vendor procurement. The role operates within a 24/7 environment and may require nights, evenings, or weekends.

Supports the security of industrial control and operational technology systems used in critical municipal infrastructure. Responsibilities include implementing security controls, configuring segmented networks and firewalls, supporting incident response, conducting risk and vulnerability assessments, maintaining documentation and asset inventories, providing technical guidance, and contributing to ICS security training. The role is based in Brooklyn and may require nights, weekends, or other shifts in a 24/7 operation.

Supports New York City’s Software Security Assurance Program by conducting SAST, DAST, and software composition analysis; identifying application and third-party component vulnerabilities; reviewing cloud vendor applications; integrating security requirements into development workflows; and maintaining security documentation aligned with OWASP, NIST, and CIS standards.

Designs and maintains secure Azure architectures and virtual machines for DoD collaboration services. Automates security operations, patching, configuration enforcement, monitoring, and recovery using Azure Automation. Supports RMF/ATO compliance, STIG and SRG implementation, vulnerability management, security documentation, and incident response coordination. Provides technical guidance on Zero Trust, identity and access management, and boundary protection while engaging DISA, GDIT, and engineering stakeholders.