Top Cyber Security Jobs

Serve as the ISSO for USMS P30: perform RMF A&A activities, develop and maintain security artifacts (SSP, POA&M), conduct NIST 800-53A control assessments, CSAM-based assessment planning, continuous monitoring, incident response support, risk analysis, and remediation tracking to ensure DOJ compliance.

Own and administer enterprise WAN/LAN/wireless and multi-vendor firewalls across on-prem and cloud, ensure network performance and 99% uptime, manage GCP org governance, support CMMC Level 2 and SOC 2 audit readiness, resolve Tier 2+ network incidents, maintain network documentation, and contribute to automation and hybrid cloud networking solutions.

Design, build, and maintain secure software and FSHs compliance posture for public-sector customers. Adapt security practices, work with auditors, create frameworks with engineers, present security posture to customers, iterate on product, and help define engineering culture.

Lead and own the end-to-end cybersecurity program: achieve and maintain DoD ATO (RMF), embed security automation into CI/CD, run vulnerability scanning and remediation, harden microservices and containers, produce eMASS artifacts, and report risk and progress to leadership.

Lead architecture and execution of detection and response capabilities across AWS and broader infrastructure. Build AI-augmented detection/triage pipelines, design SIEM/SOAR ingestion and alerting frameworks, drive incident response for high-impact events, close detection gaps, mentor engineers, and set team standards for responsible AI usage.

Support information systems security for a federal customer: perform RMF tasks, security audits, monitor network traffic, detect/respond to incidents, manage system ATO processes, mentor staff, and assist senior ISSOs with cyber research and secure data transfers.

Implement, configure, monitor, and manage cybersecurity tools and infrastructure, handle incident response and vulnerability mitigation, maintain asset lifecycle and documentation, ensure change control and SLA compliance, support projects and provide escalation for complex security issues.

Lead and execute offensive cyber operations including red team engagements, network exploitation, malware analysis, and tool development. Produce client briefings, mentor junior operators, and improve operational tooling and efficiency.

Support IC missions by implementing and enforcing information systems security policies and NIST RMF controls. Prepare and maintain SSPs, SRTMs, C&A packages; perform vulnerability and risk assessments; manage configuration and day-to-day security operations; evaluate security solutions for classified processing; administer authentication mechanisms and maintain operational IA posture.

Lead and execute offensive cyber operations including red team engagements, network exploitation, malware analysis, and tool development. Provide written and oral client briefings, mentor junior operators, and create scripts to improve operational efficiency.

Perform technical security assessments, design and integrate IA architectures and secure networking/enclave environments, support security planning, risk analysis, and trusted relationships. Work with HPC systems (Red Hat/CentOS/SUSE), parallel file systems (Lustre, GPFS), high-speed interconnects (Infiniband, Slingshot), transition systems to operations, and support HPC/ABS SRE sustainment activities for IC missions.

Conduct offensive security assessments and red team operations to identify network and system vulnerabilities; perform malware and packet analysis; develop scripts and tools; deliver written and oral briefings to clients and management; and train and mentor junior operators.

Conduct offensive cyber operations, red team and penetration tests, network exploitation, malware analysis, and tool development. Analyze network/system weaknesses, brief clients and management, and train junior operators to improve operational tradecraft and efficiency.

Build and own Corporate IT and security for a research org: design endpoint/device management, implement Zero-Trust IAM, secure communications and email, enable secure collaboration with external AI labs, and turn compliance into research enabler while remaining a hands-on operator.

Design and operate secure research infrastructure for multi-cloud, high-compute AI workstreams. Harden CI/CD and IaC, implement supply-chain protections (SBOM, signing), sandbox automated agents with least privilege, enforce zero-trust segmentation and data protection, and enable compliance to support partnerships with frontier model providers.

Senior network/security engineer responsible for Palo Alto firewall and Panorama administration, proxy engineering, DLP and SCM integration, packet-level troubleshooting (tcpdump/Wireshark), SIEM log correlation (Splunk/ELK), Zero Trust network design, and ensuring IRS/NIST boundary protection compliance. Leads firewall normalization, Panorama 12.x integration with Strata Cloud Manager, and DLP plugin upgrades.

Support and manage information system security posture: implement/enforce policies, perform vulnerability and risk assessments, manage configuration and changes, prepare SSPs/C&A/SRTMs, support NIST RMF authorization, evaluate security solutions for classified processing, oversee contractor ISSOs, and liaise with stakeholders.

Protect Lambda's AI cloud by building and tuning SIEM/EDR detections, responding to incidents, hardening production systems, reviewing architectures and code, and shipping security tooling (Python/Go). Partner across engineering teams to mature detection, incident response, and automation for AI-specific threats.

Perform NIST-based security control assessments and risk assessments, develop and review System Security Plans (SSP), produce SAR/RAR and POA&Ms, support SA&A (C&A) and contingency planning, and liaise with system owners and executives. Provide clear written and verbal deliverables and operate independently on security assessment tasks.

Design, deploy, and manage cybersecurity tools and monitoring across IT environments. Lead evaluations, proofs-of-concept, and integration of security technologies. Support incident response, forensics, vulnerability assessments, documentation, and security policy development. Train infrastructure staff and coordinate with Corporate Security.

Support and manage information assurance for systems/enclaves: implement and enforce security policies, perform RMF-based authorization activities, conduct vulnerability/risk assessments, manage configuration and changes, prepare SSP/C&A/SRTM documentation, evaluate security solutions for classified processing, and provide day-to-day security operations and oversight.

Extract security data from NRC systems and produce routine and ad-hoc security reports (counts/types of attacks, patch metrics, security matrix) to support security monitoring and stakeholder reporting.

Pull security-related data from NRC systems, produce regular and ad-hoc security reports (attack counts/types, patching metrics), maintain security matrices, and deliver analysis to stakeholders.

Senior security leader partnering with North America P&C business and technology teams to align security strategy with business priorities, drive remediation and secure-by-design adoption, build a remediation Center of Excellence, improve governance and metrics, and accelerate risk reduction across a federated technology landscape.

Lead Information Systems Security Engineer responsible for designing, building, and sustaining DSCA's security automation architecture in AWS. Translate RMF/NIST/DISA STIG regulatory requirements into Policy-as-Code and automated operational code. Serve as lead technical authority for enterprise-level cloud security engineering, configuration management, compliance validation, and orchestration.