Top Cybersecurity Engineer Jobs

Provides hands-on cybersecurity engineering support for development teams and information systems. Responsibilities include analyzing security requirements, resolving system and workflow security problems, supporting system planning through testing and integration, and maintaining compliance with DLA policies, RMF, STIGs, audit standards, and security procedures. Requires expertise with Windows Server and RHEL, seven years of relevant IT experience, and a current Secret-level T3 investigation.

Designs, implements, optimizes, and supports enterprise cybersecurity technologies, with an immediate focus on Zscaler, SSE, SASE, and Zero Trust. Leads architecture, implementation, troubleshooting, stabilization, documentation, and operational handoff across network, cloud, identity, endpoint, and infrastructure teams. Analyzes packets and logs, resolves complex connectivity and policy issues, communicates technical risks, mentors engineers, and improves automation, reliability, and operational processes.

Manage customer onboarding, configure cybersecurity products, troubleshoot technical IT and security issues, and support NIST 800-171 and CMMC compliance. Maintain security documentation, guide customers across endpoint and network environments, coordinate with sales, product, engineering, and vendors, and communicate customer feedback. The role requires strong networking, Microsoft administration, endpoint management, command-line troubleshooting, customer communication, and the ability to manage multiple onboarding projects and accounts.

Provides cybersecurity engineering support for information-system planning, design, development, testing, integration, and security requirements. Analyzes and resolves cybersecurity, workflow, organization, and planning problems. Requires expertise with Check Point Threat Prevention, Trellix IPS Manager, and customized SNORT signatures while supporting the Defense Logistics Agency onsite.

Harden and defend wireless and edge AI infrastructure across servers, networks, radios, Kubernetes, virtualization, and management layers. Responsibilities include STIG/CIS compliance, vulnerability management, network segmentation, wireless security assessments, RMF and ATO documentation, identity and secrets management, monitoring, field security, and reproducible security procedures. The role requires hands-on lab work, technical documentation, collaboration with engineering teams, and a Secret clearance.

Provides hands-on technical leadership for researching, evaluating, testing, and validating cybersecurity hardware and software solutions supporting defensive cyber operations. The role manages one direct report, assesses mission needs, conducts prototype testing, supports vulnerability research, communicates technical findings, and collaborates with military or government customers and engineering teams. The position is onsite in Arlington, Virginia, requires approximately 20% travel, and requires an active Top Secret clearance with SCI eligibility or access.

Leads and mentors cybersecurity engineering teams researching, evaluating, testing, and validating hardware and software solutions for defensive cyber operations. Translates customer mission needs into technical plans, oversees prototype testing, communicates findings and risks, and supports vulnerability research. The role combines technical leadership, hands-on analysis, customer collaboration, process development, and management responsibilities while supporting military and government cyber missions.

Designs, deploys, documents, and secures OT networks and Windows server environments supporting industrial control systems. Implements segmentation, firewalls, endpoint hardening, intrusion detection, secure remote access, Active Directory, Group Policy, and patch management. Conducts OT asset and network assessments, identifies vulnerabilities, develops remediation plans, and communicates findings to technical and executive stakeholders. The role also manages project delivery, advises customers, and mentors junior engineers.

Leads cybersecurity for airborne aerospace and defense platforms, including architecture, requirements, threat modeling, vulnerability assessments, attack-surface analysis, secure boot, authentication, encryption, key management, and defense-in-depth. Oversees DoD Risk Management Framework activities, authorization evidence, cybersecurity verification, penetration testing, supplier risk reviews, and corrective actions. Partners with engineering teams, suppliers, customers, and program leadership to ensure secure, resilient, safe, and mission-effective aircraft systems.

Leads advanced cybersecurity engineering initiatives, designing, prototyping, testing, deploying, and sustaining cyber capabilities. Performs vulnerability and threat analysis, security automation, systems engineering, technical research, and cyber mission planning across offensive and defensive environments. Develops architecture artifacts, prototypes, software, and operational tools while conducting trade studies and supporting R&D. Serves as a senior technical authority, mentors engineers, collaborates with program teams, and interfaces with executive stakeholders.

Lead the engineering and operation of security controls for a classified secure workstation enclave. Configure and harden Red Hat Linux systems, administer Splunk, Tenable, Trellix, and Teramind, and maintain Active Directory controls. Monitor telemetry, triage alerts, investigate incidents, oversee vulnerability and STIG scanning, coordinate remediation, and support RMF continuous monitoring, auditing, documentation, assessment artifacts, and POA&M activities.

Lead cloud security assessments and independent validations for Department of Defense Cloud Service Offerings. Review CSP security documentation, architecture, controls, POA&Ms, and continuous monitoring artifacts; validate controls in eMASS/GRC systems; assess residual risk; and prepare Security Assessment Packages, authorization recommendations, and provisional authorization memoranda. Maintain assessment guides and procedures aligned with DoDI 8510.01 and the DoD Cloud Computing SRG.

Advance application security by integrating SAST, SCA, and secrets scanning into development workflows; automate security checks; monitor EDR alerts; maintain endpoint security across medical devices; conduct risk assessments; enforce security controls; and document compliance with safety standards.

Owns end-to-end cybersecurity engineering for secure command-and-control systems in critical infrastructure environments. Responsibilities include requirements analysis, architecture, Windows and Linux platform integration, network and system hardening, vulnerability assessments, testing, documentation, onsite deployment, customer acceptance testing, training, lifecycle support, and mentoring. The role requires up to 25% travel and supports regulated nuclear, defense, and government environments.

Supports DoD cybersecurity connection approval, PPSM registry management, compliance monitoring, policy development, governance, and cybersecurity strategy. Responsibilities include managing ports and protocols, security documentation, vulnerability scanning, compliance reporting, stakeholder working groups, policy repositories, technical briefings, and PPSM meetings. The role requires an active Top Secret clearance, cybersecurity policy experience, network security expertise, and full-time onsite work near Fort Meade, Maryland.

Leads product cybersecurity for regulated medical device software and connected platforms. Responsibilities include security architecture, threat modeling, risk management, security testing, vulnerability management, DevSecOps, SBOM governance, secure SDLC practices, regulatory compliance, FDA submissions, and post-market cybersecurity activities. The role guides secure design reviews, supports audits, mentors engineers, develops cybersecurity procedures, and provides hands-on technical leadership across embedded, web, cloud, and hybrid systems.

Lead enterprise User Access Review strategy and execution across IAM, IGA, ILM, and PAM environments. Design access certification programs, automate review and revocation workflows, reduce access creep, and support least-privilege initiatives. Partner with auditors on SOX, SOC 2, and ISO 27001 compliance, apply AI/ML to risk-based access decisions, and develop identity security services, policies, and architectures. Influence stakeholders across the organization while balancing security controls, operational efficiency, and user experience.

Develops cybersecurity processes, risk assessments, controls, requirements, and validation plans for safety-critical aerospace embedded systems. The role also develops embedded software and tools, collaborates with suppliers and engineering teams, supports regulatory compliance, and prepares technical documentation. Responsibilities include analyzing hardware and software architectures, managing vulnerabilities and incidents, integrating security controls, improving engineering processes, and delivering software using C/C++, Python, and MATLAB/Simulink.

Build and operate API-based security data ingestion pipelines, full-stack AWS reporting applications, self-service compliance tools, Snowflake data models, and security controls. Develop infrastructure as code, CI/CD pipelines, automated testing, and secure releases. Partner with security, IAM, cloud, and engineering teams to deliver compliance monitoring features and explain technical work to stakeholders.

Provides cybersecurity engineering and information assurance support for DLA systems. Responsibilities include Splunk Core and Enterprise Security integration and sustainment, custom dashboard and report creation, security assessments, requirements analysis, system testing, incident response, threat analysis, and reviewing logs, IDS data, intelligence reports, and vendor information. The role requires active Top Secret clearance, DoD 8140 certifications, Splunk administration, Linux+, and seven years of relevant IT experience.

Supports Department of Defense cybersecurity operations across classified environments by executing RMF and cATO activities, maintaining SSPs, POA&Ms, SARs, inventories, and audit evidence, managing vulnerabilities and STIG compliance, and coordinating assessments and remediation. The role integrates Zero Trust, cloud, Kubernetes/OpenShift, container hardening, and DevSecOps security practices into Agile software development while supporting continuous monitoring, inspections, reporting, and authorization activities.

Supports credit union cybersecurity operations with a focus on incident response. Monitors and triages security alerts, investigates suspicious activity, coordinates containment and remediation, preserves evidence, improves playbooks and detections, supports vulnerability response, conducts light threat hunting, and participates in on-call incident response. Collaborates with IT teams, an MDR provider, vendors, and stakeholders while applying financial-services security requirements and frameworks such as MITRE ATT&CK.

Implement cybersecurity standards aligned with NIST 800-53 Rev. 5 and NIH/HHS policies. Conduct continuous cyber risk assessments, deploy privacy-preserving computation methods, and coordinate control implementation with cybersecurity teams through government-directed Risk Management Framework and configuration management processes.

Build cybersecurity automation applications, agent scaffolds, evaluation harnesses, schemas, data contracts, and internal UIs. Integrate security tools including SIEM, SOAR, vulnerability scanners, ticketing, and identity platforms. Translate ambiguous partner needs into reliable production systems with testing, observability, runbooks, tracing, and operational readiness. Apply Python, AI/LLM tooling, cloud platforms, and secure software engineering practices to improve detection, response, and threat-intelligence workflows.

Design, implement, and manage security policies and procedures for cloud, database, and software environments. Secure cloud workloads, remediate STIGs and security findings, configure cybersecurity tools, and automate tasks using scripting. The role also translates between engineering and compliance teams using the Risk Management Framework and NIST 800-53. Secret clearance and a bachelor’s degree are required.