Top Cyber Security Jobs

Manage day-to-day security operations for classified information systems, maintain authorization documentation, conduct continuous monitoring and periodic reviews, coordinate changes with ISSM/AO, handle incidents, ensure media sanitization, and support A&A and RMF package development for Collateral, SCI, and SAP environments.

Lead technical product delivery for cloud IAM and identity‑based security controls across multi‑cloud environments. Partner with engineering, architecture, and vendors to embed policy-as-code and CI/CD pipeline controls, translate audit and risk needs into technical requirements, manage backlog and agile delivery, provide stakeholder communications, mentor team members, maintain documentation and runbooks, and support production readiness including on‑call duties.

Design and specify hardware security architectures and requirements, perform attack modeling and pre-silicon vulnerability analysis, review RTL and firmware implementations, advise/train teams, support certification and evaluators, interface with customers and product teams, and perform root cause analysis of security defects.

Design, implement, and maintain secure Azure Government cloud architectures; enforce zero-trust and RBAC; configure Azure security controls; automate compliance with IaC and scripting; integrate SIEM/SOAR for monitoring and incident response; conduct vulnerability assessments and manage POA&Ms; support ATO/RMF processes and produce security documentation and SSPs; liaise with mission owners, assessors, and compliance teams to maintain ongoing federal compliance.

Manage and maintain the security posture of information systems within DoD/SAP environments. Duties include authorization package development, configuration/change control, incident handling, audit log review, vulnerability identification and mitigation, security training, and coordination with ISSM/ISO and AO/DAO. Provide day-to-day support for Collateral, SCI, and SAP activities and perform security impact analyses.

Define and drive SoC hardware security architecture and requirements, including HSM, secure boot/Root of Trust, cryptographic IP, and secure key provisioning. Lead threat modeling, vulnerability analysis, and HW/SW co-design to embed security across RTL, DFT, physical design, and firmware. Ensure compliance with cybersecurity and functional safety standards, collaborate cross-functionally, and provide technical leadership for system-level security validation.

Manage day-to-day security operations for information systems, including authorization packages, configuration management, continuous monitoring, incident handling, audit review, and security training. Support Collateral, SCI, and SAP activities, assess security impacts of changes, assist ISSM/AO with A&A efforts, and implement countermeasures for identified vulnerabilities.

Assess and report on management, operational, and technical security controls for Collateral, SCI, and SAP systems using RMF/JSIG. Produce SARs, POA&Ms, advise AOs/DAOs and stakeholders, evaluate authorization packages, continuous monitoring, SDLC compliance, and incident/support activities. Represent customer on inspections and review sanitization/clearing procedures.

Monitor and analyze classified and unclassified systems for insider threats, misuse, fraud, and security violations. Perform digital forensic evidence collection and analysis, review event logs, prepare incident reports and case evidence, and support special projects while working weekend day shifts at customer sites.

Provide expert multi-discipline security support for Special Access Programs (SAP) and SCI, ensuring compliance with NISPOM, DoD, and ICD policies. Lead policy development, continuous assessment, vulnerability identification, operations security, facility compliance reviews, incident/damage assessments, training, and oversight. Brief senior staff and mentor team members.

Serve as principal advisor for security of collateral, SCI, and SAP information systems. Lead RMF/JSIG authorization, risk assessments, security assessment plans, incident response, configuration management, and training. Maintain authorization documentation, conduct periodic security assessments, coordinate with program/security officials, and mentor cyber team members. Requires DoD security policy expertise and SAP experience.

Serve as principal advisor for information system security across Collateral, SCI, and SAP environments. Oversee RMF/JSIG authorization, risk assessments, security policy and program development, incident response, configuration management, assessments, training, and documentation for authorization boundaries. Provide ISSO duties when needed and coordinate with program/security officials.

Manage day-to-day security operations for classified information systems within DoD/SAP/SCI environments. Develop authorization packages (RMF), assess configuration changes, monitor compliance, handle incidents, maintain security documentation, and coordinate with ISSM/ISO. Support physical/media protection, audits, and security training.

Manage the lifecycle and governance of IT security policies and maintain the policy library. Coordinate stakeholder reviews, ensure framework alignment, and produce clear policy communications. Plan, deploy, and measure targeted security trainings via LMS and microlearning; create supporting visuals and short videos. Track KPIs, support audits, triage policy requests, and continuously improve playbooks and workflows.

Serve as the primary ISSO for enterprise infrastructure across classified domains: manage security lifecycle, maintain ATOs, update authorization packages, run continuous monitoring, develop POA&Ms and waivers, ensure STIG and NIST/FISMA compliance, audit logs, coordinate remediation and secure decommissioning, and collaborate with engineering and system owners to sustain secure operations.

Manage day-to-day security operations for collateral, SCI and SAP systems. Develop and update RMF/A&A authorization packages, perform continuous monitoring, configuration management, incident handling, audits, and security training. Coordinate changes with ISSM/AO, identify vulnerabilities and implement countermeasures, and support DoD/National and contractor A&A efforts.

Design and review product security architectures for hardware and embedded systems. Specify and implement security mechanisms in hardware, firmware, and protocols. Perform attack modeling, pre-silicon vulnerability analysis, side-channel analysis, and root-cause investigations to ensure secure, scalable products.

Manage day-to-day security operations for information systems supporting SAP/DoD environments. Duties include preparing authorization packages, configuration management, incident handling, audit review, vulnerability identification and mitigation, security impact analysis, training, and documentation. Works closely with ISSM, ISO, and AO/DAO and supports Collateral, SCI, and SAP activities.

Design, implement, secure, and troubleshoot wireless networks (Aruba/802.11). Perform CND/vulnerability assessments with Tenable Nessus and DISA STIGs, analyze logs and alerts, conduct RF surveys/heat-maps, manage incidents, enforce CND policies, and lead a small team (3–5) to maintain enclave wireless security.

Engineer and automate DevSecOps security workflows for a continuous ATO pipeline on AWS GovCloud. Integrate and automate security tooling (scans, triage, evidence, continuous monitoring), implement IaC scanning, perform cloud inventory and drift detection, mentor engineers, and produce compliance and ATO artifacts mapped to NIST 800-53/800-171.

Perform IA/security assessments and risk analysis for DoD cloud (MS Azure) systems, support Authorization/Accreditation, design and implement IA architecture and controls, conduct threat hunting and incident detection/response, analyze logs/traffic/telemetry, and brief senior leadership on findings and mitigations.

Provide Tier 3 network security engineering for INSCOM: install, configure, and harden network and security infrastructure; troubleshoot switching, routing, VPNs, and Next-Gen firewalls; manage ACLs and firewall policies; configure F5 BIG-IP (LTM/ASM); perform packet analysis; apply STIGs/NIST hardening; collaborate across teams and support enterprise SDLC.

Senior information security analyst responsible for RMF implementation, system and network vulnerability assessments, STIG/SCAP compliance, POA&M management, security authorization for classified DoD networks, coordinating audits/inspections, and advising leadership on cyber risk and mitigation.

Lead and perform cybersecurity activities for a DoD program: conduct STIG/SCAP-based audits and vulnerability assessments (ACAS, ESS Policy Auditor), manage POA&Ms, apply DoD RMF/NIST controls, maintain accreditation for classified networks, evaluate firewall changes, communicate risk to leadership, and mentor junior staff while coordinating with AFRL/USAF and other agencies.

Monitor and defend a global DCGS enterprise: perform near-real-time network security monitoring, alerting, vulnerability scanning, incident response, threat analysis, compliance tracking, and provide risk recommendations to Authorizing Officials.