Top Cyber Security Jobs

Lead design, implementation, migration, and support of secure network environments. Configure, deploy, monitor, and troubleshoot firewalls, VPNs, routing, and security platforms. Produce design documentation, manage implementations, coordinate teams, perform threat remediation, and report project status.

Administer and maintain functional security roles and permissions for PeopleSoft Financials and HCM. Analyze security change requests, assess impact of system changes, support testing, troubleshoot production security issues, ensure compliance with auditors, recommend process improvements, train end users, and document security architecture and controls.

Design and implement data-driven automation for security authorization and continuous RMF monitoring. Build ETL pipelines, process and validate security data, detect anomalies, develop predictive models and dashboards, and support data engineering for scalable security assessments.

Implement and maintain data and digital security controls across network, infrastructure, applications, and databases. Perform firewall engineering, logging/monitoring, alert management, incident handling, vulnerability and configuration management. Support security research, product evaluations, consulting, and project tasks to uphold DDS program requirements and security standards.

Monitor, analyze, and respond to cybersecurity alerts; perform vulnerability scans; evaluate network and system security configurations; provide security design, consultation, and governance; conduct complex security analyses for compliance; act as SME and mentor for less-experienced staff; recommend and configure security controls and procedures.

Contract Security Analyst to design, implement, configure, and administer IAM platforms and directory services. Requires architecture and hands-on experience with Sun Identity/OpenSSO, Oracle IAM, OAM, and Sun/Oracle Directory Server. Work on cross-functional teams; experience with criminal justice systems, iterative development, and ITIL is preferred.

Perform computer forensics investigations on Linux, macOS, and Windows clients/servers per state incident response procedures. Collaborate with SOC to improve and disseminate incident response processes. Validate security and privacy controls and reporting meet standards; analyze SIEM logs and flow data to support incident handling and forensics.

Design, implement, and administer security architectures and controls; conduct risk assessments, penetration tests, and forensic analysis; support compliance (SSAE16, FISMA, ISO27001, NERC/CIP); respond to audits and incidents; recommend remediation and disaster recovery actions; lead select security projects and provide hands-on support for SIEM, IDS/IPS, DLP, IAM, vulnerability scanning, and related tools.

Lead and perform security assessments and technical security reviews for classified and unclassified systems. Validate vulnerability scans, apply NIST SP800-53 and DHS 4300A/B controls, develop testing procedures, RoE, SSPs, SARs, and risk analyses, and coordinate with ISSOs, system owners, and developers to ensure DHS SELC and change management compliance.

Implement and operate perimeter and infrastructure security controls (firewalls, IPS/IDS, SIEM, DLP). Support vulnerability assessments, incident response, security monitoring, firewall engineering, SOC procedures, audits (PCI), and security tool evaluation/implementation. Provide advisory and hands-on support to network/infrastructure teams and stakeholders.

Support and operate the company information security program: monitor and tune SIEM and security controls, investigate and remediate incidents, manage vulnerabilities, deploy and administer security applications, assist with compliance reviews and documentation, collaborate with IT teams, and perform onsite deployments and disaster recovery work.

Lead application security efforts: integrate auth/encryption/authorization controls, use SAST/DAST tools to identify and remediate vulnerabilities, educate developers on secure SDLC, and implement compensating controls and firewall rules across web application lifecycles.

Perform security monitoring, vulnerability testing, risk analysis and security assessments. Implement and upgrade security controls, establish protocols and requirements, manage IPS/IDS and other security tools, investigate breaches, and coordinate with vendors to remediate issues.

Implement and maintain perimeter security, firewall engineering, logging/monitoring, alerting, incident handling, vulnerability and configuration management. Support security research, product evaluations, consulting, and project-level security tasks to meet Data & Digital Security program requirements.

Design, implement, and validate anti-scraping defenses through red-team/blue-team testing. Develop bypass strategies, automated adversarial scripts, and conduct Android reverse engineering, packet analysis/tampering, and offensive/defensive drills to protect JD's platforms.

Implement and operate data and digital security controls across network, infrastructure, applications, and databases. Responsibilities include firewall engineering, logging/monitoring, alert management, incident handling, vulnerability and configuration management, security research, product evaluation, and project support to meet program requirements.

Design, implement, and mature SCDHHS information security and compliance solutions (RMF/CMS MARS-E/NIST/HIPAA). Provide hands-on system support, perform audits and third-party assessments, integrate RMF tasks into SDLC, manage vendor/cloud security, and document findings using eGRC, Bizagi, and Atlassian tools while advising leadership on risk mitigation.

Perform vulnerability testing, risk analysis, security assessments, and monitor/analyze network traffic and security events. Implement and upgrade security solutions, establish security protocols and requirements, manage security tools, and coordinate remediation with vendors.

Perform and support agency information security program implementation and compliance with state standards: interview stakeholders, document processes, develop and track implementation plans (POA&M/CAP), assess controls and documentation, provide recommendations, and facilitate status reporting to ensure progress against NIST/FISMA requirements.

Design, review, and build security systems for Skydio's cloud and corporate environments. Drive architecture and hands-on engineering for tooling (WAF, vuln management), harden production components, improve monitoring/patching, support identity/auth systems (SSO/SCIM), translate compliance requirements into controls, and participate in on-call rotation.

Perform technical security assessments and design secure networking, computing, and enclave environments. Serve as ISSE on engineering teams to implement IA architectures, support risk analysis and management, enforce trusted relationships, identify security requirements for government data, and recommend system-level mitigation strategies.

Design, evaluate, and secure complex LAN/WAN wired and wireless networks. Conduct site surveys and hardware installations, perform acceptance testing and throughput analyses, develop test harnesses, identify vulnerabilities, and produce system security documentation. Recommend hardware specifications, evaluate COTS/GOTS/GFE, and ensure systems meet government security requirements.

Administer and maintain Tenable Suite (Security Center, Nessus Scanners, Nessus Manager) on Linux, perform vulnerability scans and analysis, prioritize and remediate findings with IT teams, generate reports, monitor alerts and incidents, and provide training and status reporting to stakeholders.

Provide information security architecture and solutions design for SCDHHS, support security and compliance programs (FISMA/RMF, CMS MARS-E, HIPAA), perform hands-on system support, audits and assessments, integrate RMF into SDLC, collaborate with leadership and vendors, and document findings using eGRC, Bizagi, and Atlassian tools.

Design, review, and build security systems for multi-tenant cloud and corporate environments. Develop internal security tooling (WAF, vulnerability management), harden production components, improve monitoring/patching, contribute to authentication/identity (SSO/SCIM), translate compliance controls, and participate in the security on-call rotation.