Top Cyber Security Jobs

Lead the security posture strategy for an NSPM platform: design and maintain posture assessment rule frameworks, map device configurations to compliance standards, define risk scoring, ensure scalable rule execution across heterogeneous network devices, translate emerging threats and regulations into automatable rules, engage customers and stakeholders, and mentor engineers and analysts on posture rule design and compliance mapping.

Lead enterprise cybersecurity and privacy as the CISO/CPO: set strategy, security architecture, incident response, risk management, and privacy programs (DPO duties). Drive cloud, ERP, eCommerce, and AI security controls, ensure compliance (PCI, SOX, data privacy laws), manage audits, cyber insurance, vendor risk, and build the security team to enable secure business growth.

Support DoD cybersecurity programs for PEO STRI: administer RMF activities, vulnerability management, security assessments, accreditation/authorization support, policy development, continuous monitoring, POA&M management, and compliance with DoD/NIST requirements. Collaborate with systems and engineering teams to remediate vulnerabilities and maintain security posture for mission-critical systems.

Own and strengthen Doctronic's security posture for a HIPAA-compliant, SOC 2 Type II environment. Maintain compliance, run audits, perform penetration testing and vulnerability assessments, handle incident response, vendor security reviews, build security automation and monitoring, and partner with engineering to embed security across the SDLC.

Lead and deliver large, complex IT and security projects in a healthcare environment. Manage multi-location delivery teams, define plans and forecasts, enforce PMO processes, report status to executives, and apply information security controls, governance, and stakeholder management to achieve project objectives.

Lead and oversee system security engineering and certification activities for SAP/SCI systems. Chair cybersecurity working groups, assess designs for compliance with NIST/RMF and JSIG, provide risk management and accreditation support, assist program protection planning, and coordinate with approval authorities to obtain Authorization to Operate.

Provide pre-sales technical support and technical account management for Vectra's AI-driven threat detection platform. Lead technical discovery, demos, proofs-of-concept, and solution design; build strong customer and partner relationships; collaborate cross-functionally on deployments, integrations, and product feedback; maintain deep knowledge of security landscape, competitors, and product capabilities. Travel within region as needed.

Manage governance, risk, and compliance for SLED customers: develop and maintain SSPs, POA&Ms, policies, control mappings (NIST/FedRAMP/CJIS/HIPAA), evidence repositories, IRP/BCP, support audits, remediation tracking, and continuous monitoring with cross-functional teams.

Provide cybersecurity SME support for TSA Checkpoint Technologies: RMF/ATO acquisition and authorization activities, security engineering reviews, CCB participation, technical documentation, audits, vulnerability and patch management, and coordination with vendors and senior TSA managers.

Provide physical security and information assurance support for collateral, SCI, and SAP systems. Perform TEMPEST/TSCM activities, reviews for facility construction compliance, author and maintain C&A documentation, enforce personnel and media control policies, conduct inspections, identify vulnerabilities, and support IA training and corrective actions to ensure JSIG, DCID, and JAFAN compliance.

Provide cybersecurity monitoring, auditing, and protection for information systems. Manage IDS, firewalls, antivirus, and deployment tools; perform vulnerability assessments, system audits, incident alerts, and implement security policies and awareness programs.

Lead enterprise and cloud incident response: triage alerts, perform intrusion analysis, collect forensic images, analyze malware, coordinate mitigation with cyber defense teams, produce after-action reports, and publish defensive guidance and knowledge-base content to strengthen security posture.

Senior Tier-3 NOC engineer serving as final technical escalation for major network incidents. Leads RCA, incident recovery, and architecture guidance across multi-vendor environments. Expert in Palo Alto and Zscaler security platforms, packet analysis, automation/IaC, and enterprise routing/segmentation. Mentors junior staff, coordinates vendor escalations, and shapes operational standards to improve stability and observability.

Lead 24/7 NOC and Tier 1 SOC operations, oversee incident response and threat detection, manage staffing and budgets, drive automation and process improvement, support business development and service growth.

Lead hands-on container security across AWS (ECS, EKS) and serverless environments using Wiz for image scanning, runtime visibility, and risk remediation. Implement and mature container security controls, assess vulnerabilities in images and pipelines, automate remediation, partner with platform and engineering teams, leverage AI/ML for threat detection and prioritization, report metrics, and provide training and documentation.

Support ATO documentation and assessment for a cloud-based federal courts modernization program. Coordinate with security, engineering, and PM teams; create Visio diagrams; monitor, test, and troubleshoot IA issues; analyze CND/SIEM logs; assess configurations; implement enterprise security policies and procedures; manage vulnerability tracking and incident documentation; provide AWS cloud security expertise and ensure compliance with NIST, FedRAMP, CIS, and ISO 27001.

Provide day-to-day security operations for information systems within DoD/SAP environments. Develop topologies, prepare and update authorization packages, perform security impact analyses, monitor compliance and audit records, coordinate configuration changes, identify vulnerabilities, and support incident handling, physical/media safeguards, and security training. Work closely with ISSM, ISO, and AO/DAO to maintain operational security posture.

Develop, productionize, and scale AI-enabled application security and software supply chain capabilities. Integrate AI services with AppSec tools, implement SBOM and dependency intelligence, automate secure CI/CD pipelines, and monitor AI security services while partnering with engineering and AppSec teams.

Serve as an ISSM supporting RMF/A&A activities: manage authorization workflows, maintain XACTA system data, review/approve system changes and access, coordinate POA&Ms, ensure configuration management, documentation, SSP compliance, and recovery processes to achieve and sustain ATO.

Conduct comprehensive assessments of management, operational, and technical security controls for Collateral, SCI, and SAP systems using RMF/JSIG. Produce SARs, POA&Ms, advise AOs/ISOs, evaluate threats/vulnerabilities, support authorization decisions, continuous monitoring, SDLC security, incident response, and represent customer on inspection teams.

Lead and enforce security program activities for a federal mission client, coordinate compliance across operations, collaborate with stakeholders, analyze operational challenges, recommend improvements, and produce documentation and reports to support continuous improvement and mission objectives.

Manage full lifecycle RMF/DIACAP Assessment & Authorization activities to support Authorization to Operate (ATO). Conduct security assessments, maintain risk registry, support vulnerability scanning and patch management, produce A&A documentation, and provide technical guidance on mitigation and configuration management.

Embed on-site with U.S. Government customers as the primary authority for system security and compliance. Support RMF/DIACAP accreditation, build and maintain SSPs/POA&Ms, produce evidence using eMASS/Xacta, validate security configurations with engineering teams, run vulnerability scans, and support cloud and on-prem environments (AWS/Azure). Maintain documentation and support audits throughout the system lifecycle. Requires TS/SCI active clearance or eligibility.

Perform full life-cycle RMF/DIACAP Assessment & Authorization (A&A) activities to support DoC systems and ATOs. Conduct security assessments per NIST 800-53, maintain risk registries, recommend mitigations, manage vulnerability scanning and patch compliance (HBSS/ACAS/IAVM), produce ATO documentation and reports (STIG/IAVA), coordinate CM with ISSM/SCA/AO, and provide subject-matter expertise and security engineering guidance.

Lead RMF-based Assessment & Authorization (A&A) activities to achieve ATOs for Department of Commerce systems. Conduct security assessments, manage risk registries, produce A&A documentation, support vulnerability scanning/patching (HBSS/ACAS/IAVM), provide configuration management guidance, and author technical security reports and mitigation strategies.