Top Cyber Security Jobs

Manage user access and identity tasks including account updates, address book and distribution list management, server access review and PowerKeeper configuration, troubleshooting access via Remedy, and participating in IAM and infrastructure projects while enforcing security policies and data privacy compliance.

Perform RMF lifecycle tasks to obtain/maintain IATT/AO/ATO, implement and test DoD STIG/SRG controls, run vulnerability assessments (ACAS/SCAP/SCC), maintain POA&Ms in eMASS/VRAM, patch and harden Windows Server and Cisco assets, image/re-image systems, and support configuration management and PPSM for NSWC-PD.

Administer and secure Microsoft 365, Azure, Intune, Defender, Purview and on-prem Windows servers. Monitor security posture, investigate alerts, manage identity/access (Entra ID, PIM, MFA), enforce policies, maintain documentation and compliance evidence, support remediation and infrastructure projects, and participate in IT on-call rotation.

Lead cybersecurity for mission-critical DoD systems: develop and enforce policies, manage vulnerability assessments (ACAS, STIGs, SCAP), implement RMF and continuous monitoring, evaluate NIAP/Common Criteria and DISA APL compliance, prepare authorization documentation and MOAs, advise leadership, and mentor junior staff.

Serve as the ISSO for a DoD program enforcing security policies and STIG-based configurations, conducting vulnerability assessments (ACAS, SCAP), continuous monitoring (SolarWinds/Splunk), risk analysis, ATO documentation (SSP, POA&Ms), and coordinating mitigation, certification letters, and cross-functional cybersecurity efforts for mission-critical and satellite communication systems.

Serve as an ISSO for a DoD program: implement and enforce information system security policies, perform vulnerability assessments (ACAS, STIGs, SCAP), implement OS/network STIG configurations, conduct continuous monitoring, risk assessments, and support ATO documentation (SSP, POA&Ms, SOPs). Collaborate on mitigation strategies and prepare certification artifacts for DoD systems, including satellite communications infrastructure.

Manage the company's end-to-end compliance program: run compliance automation, triage and remediate failing controls, maintain policies and evidence, coordinate external audits, administer Google Workspace and MDM, track risk and lead mitigation with stakeholders.

Execute offensive security engagements (red team, app/cloud assessments), develop custom exploits/payloads and tools, translate field findings into product improvements, integrate AI tooling into workflows, and mentor peers while producing clear, actionable client reports.

Lead and grow a team of offensive security engineers, ensure high-quality red team, application, and cloud security engagements, drive operational metrics (utilization, margin, NPS), integrate field findings into product, champion AI/automation, and support sales and client relationships at executive levels.

Support RMF processes and system security engineering for government systems. Collaborate with stakeholders to complete security documentation, perform audits, apply NIST 800-53 Rev.5 controls, implement defense-in-depth strategies, ensure STE/STN compliance, and assist in system authorization and assessments.

Maintain and strengthen the security posture of mission systems using RMF and NIST SP 800-53. Manage 8–10 System Security Plans, support continuous monitoring, perform audits, assess controls, assist with reaccreditation, and ensure compliance with STE/STN requirements.

Lead SecOps functions including threat detection, alert triage, incident response, vulnerability and configuration management, endpoint and network security operations, threat hunting, malware analysis, vendor management, and mentoring a team of security analysts to improve detection and response capabilities.

Support RMF lifecycle for classified systems: develop A&A/ATO packages, implement and validate security controls, perform vulnerability and compliance scanning, manage STIG implementation and patch validation, produce RMF artifacts, and participate in continuous monitoring and risk analysis.

Support the full RMF lifecycle for classified systems: develop and maintain authorization packages, conduct security control assessments, track vulnerabilities and remediation, support continuous monitoring, review configurations and scans, collaborate with system owners and administrators, and participate in audits to maintain ATOs and system security.

Lead regional network security engineering: administer and optimize WAN/LAN/Wi‑Fi, troubleshoot complex incidents, implement firewalls/load balancers, automate network tasks, ensure security/compliance, perform capacity planning, document architecture, and collaborate with cross-functional teams and vendors.

Lead enterprise infrastructure and security architecture across cloud, on-prem, and hybrid environments. Define target-state architectures, reusable patterns, and secure landing zones. Partner with cloud, EIS, security, and product teams to prioritize remediation, automate platform capabilities (IaC, CI/CD), improve resilience, and translate regulatory requirements into practical architecture. Mentor architects and guide platform onboarding, tooling, and adoption of AI-enabled automation within governance frameworks.

Design, implement, and operate application and cloud security controls across the SDLC. Integrate security tooling (SAST/DAST/SCA/IaC), secure CI/CD pipelines, run secure code reviews and threat modeling, deploy and manage cloud security posture and CNAPP tooling, and partner with engineering teams to remediate vulnerabilities and build secure, repeatable patterns.

Design, develop, and deploy autonomous AI agents and ML models to automate cybersecurity use cases (incident investigation, vulnerability prioritization). Integrate LLMs, build data pipelines with vector databases, implement MLOps and cloud AI deployments, enforce safety/compliance guardrails, and optimize workflows for automated remediation.

Lead design and implementation of enterprise IAM capabilities (IGA, AM, PAM). Build SSO/MFA, RBAC/ABAC, lifecycle provisioning/deprovisioning, privileged account management, integrations with cloud and on‑prem, scripting automation, directory services management, and IAM monitoring and incident response.

Lead cloud-focused GRC activities across multicloud and hybrid environments: assess cloud architectures, audit cloud controls, quantify cyber risk, produce executive reports, support regulatory compliance and remediation, and influence cloud security strategy and metrics.

Lead the security architecture and implementation for an enterprise AI platform: secure cloud infrastructure, data protection, IAM, tenant isolation, and GenAI workflows. Embed security into CI/CD, IaC, containers, secrets management, and operations. Design secure customer deployment patterns, support enterprise security reviews, and partner on compliance (SOC 2, ISO 27001, SSPA) while personally implementing critical security capabilities and guiding cross-functional engineering teams.

Serve as a technical AppSec expert to identify, validate, and reduce application security risk via SAST/DAST/SCA and manual testing, threat modeling, secure design reviews, CI/CD tool integration, remediation validation, and security enablement across development teams.

Design and build cloud-native security governance and platform capabilities for AWS-based infrastructure. Implement automated security auditing, threat detection, access control, host and container security, and collaborate with engineering and operations to embed and improve platform security posture.

Senior privacy consultant to design and implement privacy technology and governance. Lead OneTrust platform configuration, privacy assessments (ROPA, PIA, PTA, DSAR), data discovery, classification, mapping, and privacy-by-design. Translate privacy requirements into technical solution architectures and Azure integrations (Data Lake, Data Factory, Databricks, SQL), build workflows, dashboards, reports, and operational procedures, and implement data protection controls (masking, encryption, retention).

Implements and enforces enterprise security policies, participates in incident response (CSIRT), evaluates technologies, conducts risk and compliance assessments, supports vulnerability and continuous monitoring, implements secure baselines (SCCM/Group Policy/PowerShell), and advises on security architecture while educating staff.