Top Cyber Security Jobs

Manage full lifecycle RMF/DIACAP Assessment and Authorization (A&A) activities to achieve ATOs for Department of Commerce systems. Conduct security assessments per NIST 800-53, maintain risk registries, support vulnerability scanning and patching (HBSS/ACAS/IAVM), produce A&A documentation in eMASS, and provide security guidance, configuration management recommendations, and mitigation strategies.

Serve as the on-site security and compliance authority for government production systems. Lead accreditation (RMF/DIACAP), build and maintain SSPs/POA&Ms, validate controls, produce compliance evidence, support audits, and coordinate with engineers across cloud and on-prem environments.

Support Dept. of Commerce ATO efforts by performing full lifecycle RMF/DIACAP assessment and authorization activities, security assessments per NIST 800-53, vulnerability scanning and patch management oversight, risk identification and reporting, configuration management recommendations, technical writing of A&A artifacts, and providing SME guidance for mitigation strategies and security engineering.

Support mission-critical federal operations by overseeing cybersecurity and system security compliance, collaborating with stakeholders, analyzing operational challenges, producing documentation and reports, and driving continuous improvement to maintain operational efficiency and compliance.

Serve as an ISSO supporting RMF/DIACAP A&A lifecycle and ATO attainment for Dept. of Commerce systems. Conduct security assessments per NIST 800-53, manage risk registries, coordinate CM, maintain vulnerability scanning and patch compliance (HBSS/ACAS/IAVM), produce ATO documentation (A&As, STIG/IAVA compliance), and provide mitigation guidance and security engineering expertise.

Serve as the on-site authority for system security and compliance for government customers: support RMF/DIACAP accreditation, implement and validate security controls, produce SSPs/POA&Ms and evidence, run vulnerability scans, collaborate with engineers across cloud and on-prem platforms, and support audits throughout the system lifecycle.

Lead and oversee cybersecurity and system security compliance for mission systems. Collaborate with cross-functional teams, analyze operational challenges, recommend improvements, and produce documentation, reports, and deliverables to support continuous improvement and mission objectives.

Manage full lifecycle RMF/DIACAP Assessment & Authorization (A&A) activities to support DoC systems' Authorization to Operate (ATO). Conduct security assessments per NIST 800-53, maintain risk registries, support vulnerability scanning and patch management (HBSS/ACAS/IAVM), produce A&A documentation in eMASS, and advise on mitigation strategies and configuration management.

Provide administrative support for information security compliance programs (ISO 27001, SOC 2, CMMC). Assist Director of Compliance with audit preparation, evidence collection, documentation management, tracking remediation, scheduling and coordinating meetings, and preparing status updates. Maintain control matrices, evidence folders, calendars, and trackers to keep compliance activities organized and on schedule.

Embedded on-site ISSO responsible for securing and accrediting production systems using RMF/DIACAP, building and maintaining compliance artifacts (SSPs, POA&Ms), coordinating with engineers, running vulnerability scans, and supporting audits across cloud and on-prem environments.

Lead and oversee cybersecurity and system security compliance for mission systems. Collaborate with stakeholders to analyze operational challenges, recommend improvements, produce documentation and reports, and support continuous improvement and operational efficiency for a federal client.

Perform full life-cycle RMF/DIACAP Assessment & Authorization (A&A) activities to support DoC systems achieving ATO. Conduct security assessments per NIST SP 800-53, manage risk registries, provide configuration and vulnerability management guidance (HBSS/ACAS, IAVM), produce A&A documentation (STIG/IAVA, eMASS), and recommend mitigations to leadership.

Lead application security strategy and engineering across the SDLC. Implement and operate DAST/SAST/SCA/IAST/RASP tooling, secure containers/serverless/APIs, drive automation and CI/CD integration, respond to incidents, track metrics, create standards (NIST/OWASP/MITRE), and mentor development teams to improve security posture and developer experience.

Conduct comprehensive assessments of management, operational, and technical security controls for Collateral, SCI, and SAP systems using RMF/JSIG. Produce SARs, initiate POA&Ms, evaluate threats/vulnerabilities, advise ISOs/DAOs/AOs, support authorization decisions, review sanitization and SDLC processes, assist incident response and compliance inspections, and evaluate continuous monitoring and hardware/software impacts.

Lead a team that designs, provisions, automates, and scales multi-cloud offensive security infrastructure and platforms. Establish engineering standards, drive IaC/CI-CD automation, manage environment lifecycle, and oversee intake/backlog, prioritization, metrics, and executive reporting. Partner with offensive security and testing teams to deliver resilient, secure environments and operational dashboards while mentoring staff and improving operational efficiency.

Lead and grow a distributed offensive security program (red team, pen testing, AI-augmented operations). Own strategic roadmaps, approve complex engagements, drive Purple Team collaboration, report to leadership, and continuously improve methodologies, automation, and detection-remediation outcomes.

Serve as principal advisor and day-to-day manager for collateral, SCI, and SAP information system security. Oversee RMF/JSIG authorization, risk assessments, security testing, incident response, configuration management, training, documentation, and ensure authorization and recovery processes for assigned authorization boundaries.

Manage day-to-day security operations for information systems within SAP/SCI environments. Maintain operational security posture, develop and update authorization packages, perform RMF/A&A activities, coordinate configuration changes, conduct continuous monitoring and audits, handle incidents, and support DoD/National Agency cybersecurity and assessment efforts.

Manage day-to-day security operations for classified information systems, maintain authorization packages, conduct continuous monitoring and A&A activities, coordinate configuration changes, handle incident response, ensure documentation and audit logging, and support Collateral, SCI, and SAP security requirements.

Manage day-to-day security operations for classified information systems, maintain authorization documentation, conduct continuous monitoring and periodic reviews, coordinate changes with ISSM/AO, handle incidents, ensure media sanitization, and support A&A and RMF package development for Collateral, SCI, and SAP environments.

Lead technical product delivery for cloud IAM and identity‑based security controls across multi‑cloud environments. Partner with engineering, architecture, and vendors to embed policy-as-code and CI/CD pipeline controls, translate audit and risk needs into technical requirements, manage backlog and agile delivery, provide stakeholder communications, mentor team members, maintain documentation and runbooks, and support production readiness including on‑call duties.

Design and specify hardware security architectures and requirements, perform attack modeling and pre-silicon vulnerability analysis, review RTL and firmware implementations, advise/train teams, support certification and evaluators, interface with customers and product teams, and perform root cause analysis of security defects.

Design, implement, and maintain secure Azure Government cloud architectures; enforce zero-trust and RBAC; configure Azure security controls; automate compliance with IaC and scripting; integrate SIEM/SOAR for monitoring and incident response; conduct vulnerability assessments and manage POA&Ms; support ATO/RMF processes and produce security documentation and SSPs; liaise with mission owners, assessors, and compliance teams to maintain ongoing federal compliance.

Manage and maintain the security posture of information systems within DoD/SAP environments. Duties include authorization package development, configuration/change control, incident handling, audit log review, vulnerability identification and mitigation, security training, and coordination with ISSM/ISO and AO/DAO. Provide day-to-day support for Collateral, SCI, and SAP activities and perform security impact analyses.

Define and drive SoC hardware security architecture and requirements, including HSM, secure boot/Root of Trust, cryptographic IP, and secure key provisioning. Lead threat modeling, vulnerability analysis, and HW/SW co-design to embed security across RTL, DFT, physical design, and firmware. Ensure compliance with cybersecurity and functional safety standards, collaborate cross-functionally, and provide technical leadership for system-level security validation.