Top Cybersecurity Engineer Jobs

Serve as senior engineering authority for cybersecurity across multiple mission-critical applications: design, implement, and monitor RMF/NIST-based security controls, produce accreditation documentation (eMASS), support ATO/IATT/cATO processes, and coordinate with system owners and government stakeholders to maintain continuous authorization and improve cyber posture.

Design and assess secure architectures for software, embedded, hardware, and cloud systems. Lead threat modeling, risk assessments, compliance/ATO support (RMF, NIST, CMMC), security testing, and remediation. Establish secure engineering standards, mentor teams, and collaborate across engineering and program stakeholders to integrate security throughout the product lifecycle.

Design and assess secure software and hardware architectures for mission-critical sensor platforms. Lead threat modeling, risk assessments, compliance/authorization (RMF/ATO), security testing, and secure development practices. Collaborate with cross-functional engineering teams to integrate security across the product lifecycle and mentor on security-by-design.

Design and assess secure architectures for software, embedded, hardware, and cloud systems. Lead threat modeling, risk assessments, security testing, and remediation. Support RMF/ATO compliance, security documentation, and audits. Integrate security into the SDLC, mentor engineering teams, and collaborate cross-functionally to operationalize product security and secure development practices.

Assess, design, and maintain cybersecurity controls for industrial control systems and enterprise environments. Conduct risk assessments, pen tests, and vulnerability remediation. Implement firewalls, IDPS, SIEM, WAF, cloud security (Azure/AWS), and endpoint/email protections. Support incident response, compliance with NIST/ISA/IEC standards, and provide training and guidance to cross-functional teams.

Design, implement, and operate network and infrastructure security controls (WAF, IPS, DDoS) in production; automate deployments and validations; partner with internal teams; secure cloud and containerized environments (AWS/GCP, Kubernetes); ensure compliance with FedRAMP/DoD IL4; support U.S. Federal contracts requiring U.S. citizenship and security-clearance eligibility.

Lead application security assessments for internal and third-party apps, perform threat modeling and secure design reviews, evolve assessment methodologies, use automation and AI-enabled tools to improve testing, document findings, validate remediations, and collaborate with engineering and product teams to embed secure-by-design practices.

Lead and perform FedRAMP/FISMA/NIST RMF security assessments for cloud systems. Conduct documentation review, evidence collection, vulnerability scanning and testing, recommend remediations, author reports, lead technical discussions, mentor teammates, and coordinate cross-functional delivery in a fast-paced remote environment.

Serve as a Senior Cybersecurity Engineer for a Navy program: integrate cyber requirements across the SDLC, perform ACAS/Nessus scans, apply DISA STIGs/SCAP, identify and remediate vulnerabilities, develop SAPs/POA&Ms/SARs, support RMF toward ATO/IATT, produce architecture and data flow diagrams, and advise stakeholders.

Lead UEBA and SOAR implementation for a Zero Trust initiative, integrating visibility/analytics with automation. Provide Tier 3/4 engineering, perform enclave and network assessments, produce RMF artifacts and manage the ATO lifecycle, interpret DISA STIGs, support assessors, and collaborate with ISSOs and stakeholders to refine processes and ensure system security and compliance.

The Cybersecurity Engineer protects assets by managing firewalls, conducting risk assessments, and ensuring network security compliance with industry standards.

Designs and implements advanced network, endpoint, and identity security solutions. Secures Agentic and Generative AI workflows, conducts assessments, automates controls, manages encryption and DLP, integrates security into SDLC, and produces technical documentation and remediation recommendations.

Lead implementation of RMF A&A activities, perform risk and vulnerability assessments, manage PKI/accounts/ACLs, ensure STIG and DoD cloud compliance, maintain classified material and clearance databases, produce security engineering artifacts, support eMASS and acquisition security, and deliver security training and stakeholder coordination to achieve authorization and continuous compliance.

Lead CrowdStrike implementation and integration across on-prem and cloud environments; harden servers, networks, and storage; support vulnerability management and SIEM development; drive CMMC/NIST 800-171 compliance; assist incident response and forensic readiness; communicate risks and remediation to leadership.

Senior cybersecurity practitioner embedded in DevSecOps teams to execute RMF, assess and remediate CVEs, prepare authorization artifacts, enable secure IL5/IL6 deployments, and communicate cyber risk to government stakeholders.

Support US federal, air-gapped classified cloud environments; perform vulnerability management, incident response, threat hunting, and detection engineering. Deploy and manage systems in AWS/Microsoft Top Secret clouds, build investigation/response tools, coordinate with customers and Cyber Defense teams, and develop best practices across environments.

Provide OT/IT security engineering, conduct IA/cybersecurity assessments and Security Test & Evaluation, perform risk assessments for NIPRNet and SIPRNet systems, develop standards/guides, handle COMSEC per DoD policy, and support DLA Cloud/OT/IT compliance and deliverable production.

Lead RMF Assessment & Authorization efforts to secure ATOs, perform vulnerability and risk assessments, secure Air Force Platform IT systems, analyze program documentation for cybersecurity compliance, prepare cybersecurity artifacts and reporting, support program managers and Program Protection planning for DoD/aerospace programs.

Provide OT/IT cybersecurity engineering and IA/ISSE support for DLA across NIPRNet and SIPRNet. Conduct vulnerability assessments, security test & evaluation, risk assessments, policy compliance reviews, develop IA standards/guides, handle COMSEC as required, and produce assessment reports and implementation documentation.

Provide cybersecurity engineering and IA support for DLA R&D OT/IT systems across NIPRNet and SIPRNet. Assess compliance with DoD/Federal policy, perform security test & evaluation, risk assessments, and develop IA standards and guides. Support cloud, OT, and classified/unclassified R&D transitions to production while maintaining SIPRNet access and reporting status on assignments.

Provide cybersecurity engineering and IA support for DLA R&D systems (OT/IT/Cloud) including compliance assessments, risk assessments, security test & evaluation, policy impact analysis, standards development, and documentation for unclassified and classified environments.

Provide cybersecurity engineering and IA support for DLA R&D systems (OT/IT/Cloud) including compliance reviews, security test & evaluation, risk assessments, standards/guides development, and integration of security solutions for NIPRNet and SIPRNet environments.

Provide cybersecurity engineering and ISSE support for DLA across NIPRNet and SIPRNet. Assess compliance with DoD/Federal IA policy, perform security test and evaluation, conduct risk assessments, develop IA standards, handle COMSEC as required, and produce assessment reports and implementation documentation.

Provide cybersecurity engineering and IA support for DLA OT/IT/Cloud across NIPRNet and SIPRNet. Assess compliance with DoD/Federal policies, perform security testing and risk assessments, develop IA standards/guides, handle COMSEC, and produce assessment reports and implementation documentation.

Provide OT cybersecurity engineering and ISSE support for DLA vulnerability management: assess compliance across NIPRNet/SIPRNet, perform security test & evaluation, conduct risk assessments, develop IA/cybersecurity standards and documentation, handle COMSEC as required, and deliver regular status and assessment reports.