Top Cyber Security Jobs

Design, implement, and mature SCDHHS information security and compliance solutions (RMF/CMS MARS-E/NIST/HIPAA). Provide hands-on system support, perform audits and third-party assessments, integrate RMF tasks into SDLC, manage vendor/cloud security, and document findings using eGRC, Bizagi, and Atlassian tools while advising leadership on risk mitigation.

Perform vulnerability testing, risk analysis, security assessments, and monitor/analyze network traffic and security events. Implement and upgrade security solutions, establish security protocols and requirements, manage security tools, and coordinate remediation with vendors.

Perform and support agency information security program implementation and compliance with state standards: interview stakeholders, document processes, develop and track implementation plans (POA&M/CAP), assess controls and documentation, provide recommendations, and facilitate status reporting to ensure progress against NIST/FISMA requirements.

Design, review, and build security systems for Skydio's cloud and corporate environments. Drive architecture and hands-on engineering for tooling (WAF, vuln management), harden production components, improve monitoring/patching, support identity/auth systems (SSO/SCIM), translate compliance requirements into controls, and participate in on-call rotation.

Perform technical security assessments and design secure networking, computing, and enclave environments. Serve as ISSE on engineering teams to implement IA architectures, support risk analysis and management, enforce trusted relationships, identify security requirements for government data, and recommend system-level mitigation strategies.

Administer and maintain Tenable Suite (Security Center, Nessus Scanners, Nessus Manager) on Linux, perform vulnerability scans and analysis, prioritize and remediate findings with IT teams, generate reports, monitor alerts and incidents, and provide training and status reporting to stakeholders.

Design, evaluate, and secure complex LAN/WAN wired and wireless networks. Conduct site surveys and hardware installations, perform acceptance testing and throughput analyses, develop test harnesses, identify vulnerabilities, and produce system security documentation. Recommend hardware specifications, evaluate COTS/GOTS/GFE, and ensure systems meet government security requirements.

Assess current security posture, create and implement an information security improvement plan, establish risk management programs and security standards (NIST, FedRAMP, IRS 1075), perform system and network vulnerability audits, manage security solutions, and provide security leadership and guidance across IT teams.

Design and implement Oracle IAM solutions across environments. Configure OAM/OAAM, customize login modules and admin UIs, implement federation, configure roles/policies in OIM, integrate applications via LDAP/database connectors, perform user loads/reconciliation, and provide knowledge transfer to BCA staff.

Provide information security architecture and solutions design for SCDHHS, support security and compliance programs (FISMA/RMF, CMS MARS-E, HIPAA), perform hands-on system support, audits and assessments, integrate RMF into SDLC, collaborate with leadership and vendors, and document findings using eGRC, Bizagi, and Atlassian tools.

Design, review, and build security systems for multi-tenant cloud and corporate environments. Develop internal security tooling (WAF, vulnerability management), harden production components, improve monitoring/patching, contribute to authentication/identity (SSO/SCIM), translate compliance controls, and participate in the security on-call rotation.

Design, evaluate, and secure complex network and SIGINT hardware systems. Conduct onsite assessments, lead hardware installations, model solutions, create test interfaces, perform MTBF/MTTR analyses, evaluate LAN/WAN and wired/wireless networks, research COTS/GOTS, produce security documentation, and deliver vulnerability assessments and actionable recommendations.

Serve as first-point escalation for technical and process issues in managed security services. Provide SME support, incident RCA, crisis management, change coordination, trend analysis to reduce incidents, hardware troubleshooting, vendor coordination, and prepare status reports. Participate in stakeholder meetings, drive service improvements, estimate effort for projects, train new team members, and maintain documentation.

Lead PeopleSoft security for public-sector deployments: design and maintain security across instances, customize enterprise single sign-on, and lead full lifecycle PeopleSoft upgrades/implementations while ensuring accessibility compliance.

Monitor and tune SIEM alerts, manage vulnerability scanning and remediation, support endpoint/email/network security, perform threat hunting and incident response, and support SOC 2 and NIST CSF compliance. Collaborate with IT and engineering, maintain security policies, conduct risk assessments, and prepare security reporting for management.

Design, build, and scale HSM-backed cryptographic and key-management services for large-scale cloud environments. Implement PKI, TLS, client-side encryption, TEEs, and Confidential VMs. Integrate identity (OAuth/SAML/Keycloak) and secure Google Workspace services. Ensure cryptographic lifecycle, compliance (FIPS), high availability, and support secure deployments across cloud APIs, OS, and hardware.

Implement and design IAM solutions, gather requirements, configure SSO/SAML integrations (customer and internal), troubleshoot authentication issues, document designs, and support adoption of authentication technologies.

Design, implement, and document Identity and Access Management solutions and SSO/SAML integrations. Gather requirements, configure PoC/dev environments, resolve authentication issues, ensure platform stability under load, coach teams, and research new authentication technologies while supporting internal users and stakeholders.

Design, evaluate, and secure complex LAN/WAN and SIGINT hardware systems. Conduct onsite assessments, lead hardware installations, model and test solutions, perform MTBF/MTTR analyses, analyze vulnerabilities, evaluate architectures, research COTS/GOTS, optimize wired and wireless networks, develop security documentation, and ensure compliance with government security requirements.

Provide systems engineering and programmatic support to the U.S. Navy FMS directorate, both on-site and off-site. Oversee system security solution development and compliance with TIG and Anti-Tamper frameworks, support risk management, develop and review SEPs/SEMPs and vendor AT plans, produce technical briefs and correspondence, and maintain program schedules.

Provide ICS/OT cybersecurity consulting focused on networking, architecture, and policy development. Perform assessments and support asset, vulnerability, risk, and patch management programs. Develop policies, plans, procedures, and assessments aligned with IT/OT standards (ISO 27001/27002, ISA/IEC 62443, NERC CIP). Work independently with clients, often onsite in Minnesota, with significant travel as required.

Designs and implements cloud security and compliance controls (AWS/IaC), performs risk assessments and vulnerability management, supports audits (SOC2, ISO, GDPR), integrates controls into DevOps workflows with Terraform and Docker, and collaborates with compliance and engineering teams to remediate gaps and maintain secure, compliant infrastructure.

Design and maintain secure endpoint baselines using Intune/Group Policy, triage security alerts, deploy conditional access and MFA, manage EDR/firewall policies, automate with PowerShell, ensure compliance through audits and documentation, and coordinate with IT to reduce risk.

Manage and govern one or more IT portfolios, aligning projects to strategic priorities, balancing capacity and demand, budgeting and resource planning, monitoring portfolio health, overseeing program/project managers, managing change control and risk, and reporting portfolio performance to executive leadership.

Design, implement, and monitor secure on‑prem and cloud/hybrid systems; enforce NIST 800‑53 controls and SSPs for ATO; perform vulnerability scanning/remediation, log aggregation and SIEM correlation, incident response, IAM enforcement, and produce audit-ready security documentation.