Top Cyber Security Jobs

Lead technical product delivery for cloud IAM and identity‑based security controls across multi‑cloud environments. Partner with engineering, architecture, and vendors to embed policy-as-code and CI/CD pipeline controls, translate audit and risk needs into technical requirements, manage backlog and agile delivery, provide stakeholder communications, mentor team members, maintain documentation and runbooks, and support production readiness including on‑call duties.

Design and specify hardware security architectures and requirements, perform attack modeling and pre-silicon vulnerability analysis, review RTL and firmware implementations, advise/train teams, support certification and evaluators, interface with customers and product teams, and perform root cause analysis of security defects.

Manage and maintain the security posture of information systems within DoD/SAP environments. Duties include authorization package development, configuration/change control, incident handling, audit log review, vulnerability identification and mitigation, security training, and coordination with ISSM/ISO and AO/DAO. Provide day-to-day support for Collateral, SCI, and SAP activities and perform security impact analyses.

Define and drive SoC hardware security architecture and requirements, including HSM, secure boot/Root of Trust, cryptographic IP, and secure key provisioning. Lead threat modeling, vulnerability analysis, and HW/SW co-design to embed security across RTL, DFT, physical design, and firmware. Ensure compliance with cybersecurity and functional safety standards, collaborate cross-functionally, and provide technical leadership for system-level security validation.

Manage day-to-day security operations for information systems, including authorization packages, configuration management, continuous monitoring, incident handling, audit review, and security training. Support Collateral, SCI, and SAP activities, assess security impacts of changes, assist ISSM/AO with A&A efforts, and implement countermeasures for identified vulnerabilities.

Assess and report on management, operational, and technical security controls for Collateral, SCI, and SAP systems using RMF/JSIG. Produce SARs, POA&Ms, advise AOs/DAOs and stakeholders, evaluate authorization packages, continuous monitoring, SDLC compliance, and incident/support activities. Represent customer on inspections and review sanitization/clearing procedures.

Provide expert multi-discipline security support for Special Access Programs (SAP) and SCI, ensuring compliance with NISPOM, DoD, and ICD policies. Lead policy development, continuous assessment, vulnerability identification, operations security, facility compliance reviews, incident/damage assessments, training, and oversight. Brief senior staff and mentor team members.

Monitor and analyze classified and unclassified systems for insider threats, misuse, fraud, and security violations. Perform digital forensic evidence collection and analysis, review event logs, prepare incident reports and case evidence, and support special projects while working weekend day shifts at customer sites.

Serve as principal advisor for information system security across Collateral, SCI, and SAP environments. Oversee RMF/JSIG authorization, risk assessments, security policy and program development, incident response, configuration management, assessments, training, and documentation for authorization boundaries. Provide ISSO duties when needed and coordinate with program/security officials.

Manage day-to-day security operations for classified information systems within DoD/SAP/SCI environments. Develop authorization packages (RMF), assess configuration changes, monitor compliance, handle incidents, maintain security documentation, and coordinate with ISSM/ISO. Support physical/media protection, audits, and security training.

Manage the lifecycle and governance of IT security policies and maintain the policy library. Coordinate stakeholder reviews, ensure framework alignment, and produce clear policy communications. Plan, deploy, and measure targeted security trainings via LMS and microlearning; create supporting visuals and short videos. Track KPIs, support audits, triage policy requests, and continuously improve playbooks and workflows.

Serve as the primary ISSO for enterprise infrastructure across classified domains: manage security lifecycle, maintain ATOs, update authorization packages, run continuous monitoring, develop POA&Ms and waivers, ensure STIG and NIST/FISMA compliance, audit logs, coordinate remediation and secure decommissioning, and collaborate with engineering and system owners to sustain secure operations.

Manage day-to-day security operations for collateral, SCI and SAP systems. Develop and update RMF/A&A authorization packages, perform continuous monitoring, configuration management, incident handling, audits, and security training. Coordinate changes with ISSM/AO, identify vulnerabilities and implement countermeasures, and support DoD/National and contractor A&A efforts.

Design and review product security architectures for hardware and embedded systems. Specify and implement security mechanisms in hardware, firmware, and protocols. Perform attack modeling, pre-silicon vulnerability analysis, side-channel analysis, and root-cause investigations to ensure secure, scalable products.

Manage day-to-day security operations for information systems supporting SAP/DoD environments. Duties include preparing authorization packages, configuration management, incident handling, audit review, vulnerability identification and mitigation, security impact analysis, training, and documentation. Works closely with ISSM, ISO, and AO/DAO and supports Collateral, SCI, and SAP activities.

Engineer and automate DevSecOps security workflows for a continuous ATO pipeline on AWS GovCloud. Integrate and automate security tooling (scans, triage, evidence, continuous monitoring), implement IaC scanning, perform cloud inventory and drift detection, mentor engineers, and produce compliance and ATO artifacts mapped to NIST 800-53/800-171.

Perform IA/security assessments and risk analysis for DoD cloud (MS Azure) systems, support Authorization/Accreditation, design and implement IA architecture and controls, conduct threat hunting and incident detection/response, analyze logs/traffic/telemetry, and brief senior leadership on findings and mitigations.

Provide Tier 3 network security engineering for INSCOM: install, configure, and harden network and security infrastructure; troubleshoot switching, routing, VPNs, and Next-Gen firewalls; manage ACLs and firewall policies; configure F5 BIG-IP (LTM/ASM); perform packet analysis; apply STIGs/NIST hardening; collaborate across teams and support enterprise SDLC.

Lead and perform cybersecurity activities for a DoD program: conduct STIG/SCAP-based audits and vulnerability assessments (ACAS, ESS Policy Auditor), manage POA&Ms, apply DoD RMF/NIST controls, maintain accreditation for classified networks, evaluate firewall changes, communicate risk to leadership, and mentor junior staff while coordinating with AFRL/USAF and other agencies.

Monitor and defend a global DCGS enterprise: perform near-real-time network security monitoring, alerting, vulnerability scanning, incident response, threat analysis, compliance tracking, and provide risk recommendations to Authorizing Officials.

Lead modernization of a global Third-Party Risk Management (TPRM) program by shifting from questionnaire-centric assessments to a data-driven model using technical validation, automation, continuous monitoring, and AI. Partner with Procurement, Legal, Privacy, and Supply Chain to standardize contracts and controls, maintain centralized third-party inventories, report risks to senior leadership, and build a high-performing TPRM team while overseeing advanced technical assessments for critical suppliers.

Manage PCI/security compliance for retail POS environments: govern programs, oversee IRM deliverables, validate encryption/security testing, document designs and operations, review technical configurations, verify vendor PCI implementations, and coordinate with Trustwave.

Provide design, deployment, and operational support for network security (firewalls, VPN, IPS). Configure and maintain Cisco ASAs and Checkpoint/Solaris firewalls, perform vulnerability and intrusion work, manage NAT and SSL VPNs, update IPS signatures, produce technical documentation, and participate in on-call rotation and after-hours support.

Plan and implement security solutions across business integrations and healthcare acquisitions. Configure and test hardware, coordinate deployments and vendor product procurement, ensure corporate compliance, and provide security consulting across multiple IT projects. Support off-hours deployments and site testing as needed.

Lead implementation of a Cyber Security Operations Center (SOC) and SIEM platform. Manage project schedule (MS Project), scorecards, coordinate infrastructure teams, ensure ordering/installation, run cross-team meetings, and drive timely hand-offs. Requires strong IT and project leadership experience; PMP preferred.