Top Cyber Security Jobs

Support RMF/A&A efforts to achieve ATOs, act as liaison to ISSOs, administer security toolsets on Windows and RHEL, run SCAP/STIG scans, track patches and vulnerabilities, lead POA&M and PTI/PTT activities, support continuous monitoring, and assist incident response and IA training.

Investigate and remediate embedded firmware vulnerabilities, analyze firmware packages and exposed interfaces, support secure boot/firmware signing and update validation, conduct threat modeling and risk assessments, manage vulnerability response workflows, maintain SBOMs and supplier security documentation, ensure compliance with cybersecurity standards, and collaborate with firmware, QA, and compliance teams on security testing and release readiness.

Lead enterprise security operations: secure endpoints, servers, networks and third-party services; manage IAM, vulnerability management, EDR, intrusion detection, and incident response; support pen testing, compliance, audits, physical security, and employee security training while collaborating with engineering, ops, and legal.

Lead FedRAMP, SOC 2, and ISO 27001 compliance efforts by hardening AWS and Kubernetes infrastructure, implementing security controls, automating evidence collection, improving CI/CD security, and collaborating with security, legal, and engineering teams to support regulated customers.

Lead design, build, and operation of security infrastructure protecting ground stations, cloud, and corporate systems. Own SIEM, EDR, UEBA, firewall and VPN/ZTNA operations, DLP controls, Okta administration, IaC and automation, and mentor a growing security engineering team. Drive detection engineering, incident response playbooks, compliance alignment (CMMC/NIST/FedRAMP), and partner cross-functionally to embed security across on-prem and GovCloud/GCC environments.

Lead detection, response, and remediation of security incidents; maintain and improve security architecture, policies, and controls across cloud and on‑prem environments; manage security technologies (SIEM, IDS/IPS, vulnerability scanning, endpoint, WAF); perform threat hunting, vulnerability management, audits/pen tests response, and security project management; provide technical risk guidance and lead teams.

Assess and remediate security and compliance risks by analyzing test results and vulnerability assessments, developing policies and documentation, coordinating remediation across stakeholders, tracking action plans, and reporting status. Enforce security procedures, conduct gap analyses, and proactively identify vulnerabilities to reduce organizational risk.

Build and operate Okta's Security Posture Management program: aggregate and automate ingestion, prioritization, tracking, and remediation across cloud and SaaS tooling. Implement DevSecOps practices, secrets rotation, agentic automation and AI-driven analysis, configure scanners (Snyk, Semgrep, Qualys), collaborate with SRE and engineering, and produce dashboards and executive reporting to drive ownership and measurable risk reduction.

Design, assess, and implement cloud and application security solutions (primarily AWS). Identify risks, propose controls, perform architecture reviews, threat modeling, code/penetration testing, author documentation, and assist clients with security troubleshooting and implementation.

Serve as the program's ISSO to implement and enforce information systems security policies, maintain operational security posture, perform day-to-day security operations, evaluate security solutions for classified processing, conduct vulnerability/risk assessments, manage configuration and changes, and prepare SSPs, C&A packages, SRTMs, and RMF-aligned authorization documentation.

Lead application security for Dynamics 365, Azure, and IFS ERP: design RBAC, run assessments, threat model, integrate SAST/DAST into CI/CD, automate provisioning, guide secure SDLC practices, respond to incidents, and support compliance and audits.

Designs and implements network security solutions (firewalls, IDS/IPS, proxies, routers) for client networks. Maintains security hardware/software, conducts packet analysis and routing protocol configuration, investigates incidents, manages security policies, and supports customer change requests and remediation.

Own end-to-end network security across enterprise, on‑prem, cloud, and vessel communications. Design firewalls, segmentation, VPN/ZTNA, AWS VPC controls, and cryptographic key management for constrained maritime links. Improve observability (flow logs, telemetry), support a NOC, and automate segmentation/configuration via scripting and infrastructure-as-code.

Design and implement security for SAP HANA and SAP BusinessObjects landscapes: create and manage HANA DB roles, analytic and object privileges, enforce DB admin controls and password policies, configure BOBJ groups/folder/object-level access, enable SSO with AD/LDAP, handle transport of security objects, and integrate BOBJ security with HANA roles.

Support and maintain enterprise security controls and tools, investigate security events, manage tickets and remediation, perform threat and vulnerability assessments, maintain Microsoft security platform (Azure Conditional Access, Intune, Defender), assist auditors, develop security documentation and awareness, mentor analysts, and support deployment of data-loss prevention and remote access solutions.

Lead the security posture strategy for an NSPM platform: design and maintain posture assessment rule frameworks, map device configurations to compliance standards, define risk scoring, ensure scalable rule execution across heterogeneous network devices, translate emerging threats and regulations into automatable rules, engage customers and stakeholders, and mentor engineers and analysts on posture rule design and compliance mapping.

Serve as primary security partner for assigned business units, embedding security by design across products and platforms, leading risk assessments, overseeing tooling and remediation, advising on architecture, and reporting security metrics to leadership.

Support DoD cybersecurity programs for PEO STRI: administer RMF activities, vulnerability management, security assessments, accreditation/authorization support, policy development, continuous monitoring, POA&M management, and compliance with DoD/NIST requirements. Collaborate with systems and engineering teams to remediate vulnerabilities and maintain security posture for mission-critical systems.

Support and administer identity and privileged access management across Entra ID, Active Directory, CyberArk and connected applications. Manage JML lifecycle, user access reviews, provisioning, deprovisioning, and access certifications. Drive compliance, audit readiness, remediation of access risks, and identity automation while partnering with HR, IT, security, application owners, and business stakeholders.

Lead and deliver large, complex IT and security projects in a healthcare environment. Manage multi-location delivery teams, define plans and forecasts, enforce PMO processes, report status to executives, and apply information security controls, governance, and stakeholder management to achieve project objectives.

Lead and oversee system security engineering and certification activities for SAP/SCI systems. Chair cybersecurity working groups, assess designs for compliance with NIST/RMF and JSIG, provide risk management and accreditation support, assist program protection planning, and coordinate with approval authorities to obtain Authorization to Operate.

Lead enterprise cybersecurity and privacy as the CISO/CPO: set strategy, security architecture, incident response, risk management, and privacy programs (DPO duties). Drive cloud, ERP, eCommerce, and AI security controls, ensure compliance (PCI, SOX, data privacy laws), manage audits, cyber insurance, vendor risk, and build the security team to enable secure business growth.

Own and strengthen Doctronic's security posture for a HIPAA-compliant, SOC 2 Type II environment. Maintain compliance, run audits, perform penetration testing and vulnerability assessments, handle incident response, vendor security reviews, build security automation and monitoring, and partner with engineering to embed security across the SDLC.

Provide pre-sales technical support and technical account management for Vectra's AI-driven threat detection platform. Lead technical discovery, demos, proofs-of-concept, and solution design; build strong customer and partner relationships; collaborate cross-functionally on deployments, integrations, and product feedback; maintain deep knowledge of security landscape, competitors, and product capabilities. Travel within region as needed.

Provide cybersecurity SME support for TSA Checkpoint Technologies: RMF/ATO acquisition and authorization activities, security engineering reviews, CCB participation, technical documentation, audits, vulnerability and patch management, and coordination with vendors and senior TSA managers.