Top Cybersecurity Engineer Jobs

Lead cybersecurity engineer and ISSO responsible for RMF lifecycle execution, ATO sustainment, continuous monitoring, vulnerability remediation, STIG/IAVM compliance, cybersecurity reporting, audit readiness, and Zero Trust controls in a secure AWS IL5 environment. The role maintains RMF artifacts and eMASS documentation, coordinates remediation and security validation, integrates cyber reviews into cloud and DevSecOps processes, and collaborates with government and program stakeholders.

Investigate and respond to cybersecurity incidents, manage escalated SOC alerts, conduct threat hunting and digital forensics, perform root cause analysis, develop mitigation strategies and incident response playbooks, support audits, and collaborate with IT and security teams to contain and remediate threats.

Designs, administers, and improves cybersecurity technologies and processes protecting users, systems, applications, and data. Responsibilities include managing security platforms, monitoring and responding to incidents, conducting vulnerability assessments, coordinating remediation, supporting Azure and Microsoft 365 security, administering identity and access controls, developing security documentation, and collaborating with IT teams on security and compliance.

Develops cybersecurity-focused reinforcement learning systems to improve secure coding, vulnerability remediation, and defensive cybersecurity. Responsibilities include designing RL environments, implementing research in code, conducting experiments and evaluations, delivering models into production training runs, and collaborating with AI researchers, engineers, and cybersecurity specialists. The role requires cybersecurity research, machine learning, software engineering, and interest in safe AI development.

Owns day-to-day cybersecurity operations, including alert monitoring, incident investigation, containment, recovery, detection engineering, vulnerability remediation, security automation, and security awareness. Builds SOAR workflows integrating SIEM, EDR, identity, email, and ticketing systems. Assesses network and cloud security, supports compliance and audits, develops procedures and playbooks, reports security metrics, and participates in after-hours on-call response.

Leads cybersecurity engineering for C-UAS systems supporting the U.S. Army. Responsibilities include secure architecture, cloud and network security, risk assessment, RMF and ATO activities, control implementation, system integration, authorization sustainment, and coordination with government, vendors, and senior stakeholders.

Designs, implements, tests, and deploys cybersecurity controls for customer control systems, SCADA, HMI, DCS, and OT networks. Assesses customer requirements, supports compliance with IEC 62443 and NERC CIP, performs security validation, and assists with FAT, SAT, commissioning, and system integration. Develops technical documentation, monitors emerging standards and advisories, and collaborates with customers, engineering teams, and cybersecurity specialists across project lifecycles.

Leads enterprise threat defense, incident response, cybersecurity architecture, identity and cloud security, vulnerability reduction, automation, and security governance. Investigates and contains threats, develops detections and playbooks, coordinates major incidents, performs forensic collection, designs secure technology controls, assesses AI and software vendor risk, supports audits, and manages cybersecurity platforms and vendors.

Provide hands-on cybersecurity engineering and technical authority for DoD systems in a secure environment. Responsibilities include vulnerability assessment and remediation, DISA STIG and SCAP validation, security control implementation, RMF and ATO support, continuous monitoring, incident response, system hardening, architecture risk assessment, and cybersecurity guidance for Zero Trust, cloud, DevSecOps, AI, and security automation initiatives.

Designs, develops, and supports enterprise AI applications, agents, and workflow automations. Builds Generative AI solutions using LLMs, prompt engineering, retrieval-based approaches, APIs, and enterprise data. Responsibilities include full software delivery, stakeholder collaboration, AI output evaluation, secure engineering, governance reviews, monitoring, risk controls, and operational support. The role requires strong software development experience, Python expertise, enterprise integrations, and understanding of responsible AI, security, privacy, and governance.

Designs, deploys, maintains, and validates NSA-compliant CSfC secure communication architectures, including Data-at-Rest and Data-in-Transit solutions. Performs encrypted tunneling integration, SIEM monitoring, incident response, risk and vulnerability assessments, compliance checks, documentation, accreditation support, and lifecycle management. Coordinates with government stakeholders and cybersecurity teams to meet mission security requirements.

Supports cybersecurity systems engineering across requirements, architecture, integration, testing, fielding, and sustainment. Develops technical documentation, manages engineering changes and configuration baselines, coordinates multidisciplinary stakeholders, tracks technical actions and milestones, and integrates cybersecurity and Risk Management Framework requirements. Evaluates system architectures, risks, dependencies, and technical solutions while supporting verification, validation, operational testing, Fleet deployment, and reporting to government leadership.

Administer and optimize SIEM, endpoint, network, cloud, SASE, ZTNA, and email security platforms. Detect, investigate, respond to, and remediate security incidents; perform forensic analysis, vulnerability remediation, system hardening, and root cause analysis. Support Windows and Linux administration, document security processes, collaborate with IT and compliance teams, and participate in on-call and major incident response.

Develops reinforcement learning environments and agentic integrations for defensive cybersecurity. Responsibilities include cybersecurity research, incident response, security analysis, vulnerability remediation, experiments, evaluations, production training runs, and collaboration with AI researchers and security specialists. The role requires machine learning, cybersecurity research, and strong software engineering skills, with potential on-call participation.

Provides hands-on cybersecurity engineering and technical leadership for information security systems. Responsibilities include vulnerability scanning, threat detection, incident response, risk assessments, security policy development, employee security training, SIEM and security tool administration, forensic analysis, system hardening, regulatory compliance, and technical documentation. The role supports antivirus, IDS/IPS, firewalls, data loss prevention, and related enterprise security systems.

Designs, implements, manages, and monitors cybersecurity controls protecting enterprise systems and networks. Responsibilities include SIEM and endpoint security administration, incident response, vulnerability management, security audits, RMF and ATO support, POA&M tracking, secure configuration, DevSecOps integration, and cybersecurity compliance. The role collaborates with engineers, developers, security managers, assessors, and government stakeholders to protect mission systems and address threats and vulnerabilities.

Support cybersecurity compliance for Marine Corps Oracle EBS systems by designing and implementing technical cyber controls, hardening Oracle platforms, reviewing code and documentation, analyzing requirements, supporting testing and deployments, and coordinating with product owners, SMEs, vendors, and government stakeholders. The role requires Oracle Linux and shell scripting experience, secure coding knowledge, DoD cybersecurity standards familiarity, documentation skills, and CompTIA Security+ certification.

Lead enterprise cybersecurity architecture and infrastructure security across cloud environments. Translate security policies into automated, testable controls; drive security strategy, threat modeling, DevSecOps, and Infrastructure as Code practices; solve complex security challenges; advise executive leadership; mentor engineers; and develop secure architectures for AI, distributed systems, and mission-critical platforms.

Leads the design and implementation of infrastructure security controls, automates governance and compliance through code, and embeds security into CI/CD pipelines. Architects secure cloud infrastructure across AWS, GCP, and Azure; develops Infrastructure as Code modules; drives DevSecOps adoption; and mentors engineers. The role also leads complex security initiatives, supports compliance frameworks, influences governance decisions, and communicates technical risks to executives and engineering stakeholders.

Lead and execute adversary emulation and purple team operations to validate detections, logging, and response. Build repeatable MSV-based validation workflows, develop custom offensive tooling (C2, payloads, automation), test cloud and endpoint attack paths (AWS, GCP, Azure), and partner with Detection Engineering and Incident Response to convert findings into improved detections, documentation, and hunts.

Develop and maintain RMF security artifacts for federal building and facility control systems. Gather technical information, support system categorization and risk assessments, review vulnerability scans, create and track POA&Ms, assist with STIG compliance, maintain system inventories, and coordinate with government cybersecurity teams, system owners, engineers, and security officers to support ATO activities and recurring reporting.

Lead DoD Risk Management Framework authorization activities across system development, testing, authorization, and operations. Develop and maintain ATO/IATT packages, SSPs, POA&Ms, security control documentation, and assessment evidence in eMASS. Analyze NIST, DISA STIG, vulnerability, and configuration requirements; coordinate with ISSMs, ISSOs, SCAs, AOs, engineers, and government stakeholders. Support continuous monitoring, system changes, vulnerability remediation, security assessments, and secure configuration guidance across Linux, Windows, network, and virtualized environments.

Leads multiple Enterprise Security Operations Center teams monitoring classified and unclassified networks. Oversees incident detection, analysis, response, remediation, post-incident reviews, and root-cause planning. Provides technical guidance, manages projects, coordinates with IT teams and external partners, and communicates cybersecurity concepts to technical and non-technical stakeholders. Requires Top Secret clearance, relevant degree, cybersecurity experience, and CISM or CEH certification.

Leads cybersecurity detection engineering across enterprise and customer environments. Designs SIEM, EDR, SOAR, AI-driven, and automated detection capabilities; develops detection rules, remediation playbooks, and threat-hunting frameworks; manages log ingestion and data lake infrastructure; conducts attack simulations and purple-team exercises; and partners with Incident Response, Threat Intelligence, Vulnerability Management, Engineering, and Product teams. Provides technical mentorship, improves detection coverage, supports compliance, and contributes to off-hours response activities.

Own infrastructure and runtime vulnerability management across cloud, servers, endpoints, and production environments. Manage scanning coverage, operate Tenable and AWS Inspector, prioritize vulnerabilities by risk, drive remediation, administer exceptions and SLAs, identify coverage gaps, monitor emerging threats, and develop vulnerability metrics and reporting. The role also supports Security Operations investigations, projects, automation, integrations, and process improvements while collaborating with technology and asset owners.