Top Cyber Security Jobs

Monitor and analyze threat intelligence and alerts, conduct threat hunting and vulnerability assessments, support incident response and firewall/email/endpoint security monitoring, prepare intelligence reports, and collaborate with IT and physical security to maintain compliance and improve security posture.

Support information security and vendor risk management activities: perform due diligence for vendor assurance, track mitigation progress, contribute to policy and controls, report metrics, and assist security, risk, and compliance initiatives across the enterprise.

Design, administer, and harden Okta-based identity architecture and SSO integrations; implement RBAC and access governance; manage cross-platform MDM and OS hardening; integrate identity telemetry with SIEM; implement privileged access and secrets controls; support compliance (CMMC, FedRAMP, NIST, ITAR) and audit evidence collection.

Provide administrative and data management support for risk analysis: maintain secure review records, collate and analyze threat data, produce written and oral risk reports and briefings, track actions in automated systems, handle classified materials per DoD procedures, and assist senior analysts and proposal efforts.

Lead day-to-day security operations including incident triage, escalation, containment and remediation. Manage and maintain EDR, NDR, SIEM, SOAR and other security tools; implement automation and repeatable processes; lead incident investigations; support threat hunting, vulnerability management, penetration testing, GRC, and client onboarding. At Manager level, lead and mentor security analysts, develop metrics/reporting, coordinate vendors, and occasionally travel to client sites and events.

Manage and mature identity security posture by continuously discovering identity exposures, prioritizing and orchestrating remediation, producing audit-ready evidence and metrics, integrating ISPM with tooling, and advising stakeholders to reduce identity attack paths and privileged access risk across enterprise systems.

Install, configure, maintain and troubleshoot network security devices (LAN/WAN/MAN). Test and modify security configurations, provide consulting to state agencies, fulfill service-desk work orders, and maintain device OS/app security. Requires hands-on experience with Cisco ASA 5500-X and/or Juniper MAG and SRX devices. Must pass background check, be on-call and available onsite within 30 minutes, work flexible hours, and meet physical and driving requirements.

Provide Tier 2 network security support for shared firewall environments: configure and maintain Cisco, Juniper, and Fortinet firewalls; perform code upgrades, VPN setup, MACD, performance and rule analysis; validate designs, recommend minor architecture changes, and troubleshoot end-to-end network and application connectivity with 24x7 production support.

Lead a team delivering authentication, API, and web security platforms. Drive structured intake and workflow transformation (ServiceNow), define SLAs, track delivery metrics, and partner with digital and application teams to implement secure, scalable IAM solutions (IBM Verify/ISVA, DataPower, Okta/Keycloak/PingFederate).

Design and lead secure software development lifecycle practices; integrate security tools (SAST/DAST/SCA) into CI/CD and artifactory; collaborate with DevOps and engineering to prioritize and remediate software vulnerabilities.

Lead software security for robotics product lines: write and review code, maintain security policies and incident plans, drive ISO27001 and SOC2 compliance, work with auditors and customers, mentor developers, and implement DevOps/SecOps practices.

Lead research and development of large-scale threat detection capabilities, analyze emerging attacks and adversary TTPs, build research systems (APT simulation, CTI, security knowledge graph), and collaborate with data scientists to apply agentic AI/ML for security detection workflows.

Lead enterprise AppSec and DevSecOps strategy, secure software architecture, and compliance (CMMC, NIST, ISO). Drive secure SDLC, CI/CD integration, cloud/container security, vulnerability management, software supply chain integrity, and report security posture to executives while managing AppSec and DevSecOps teams.

Lead cloud security engineering by designing and automating scalable controls, building safe-by-default tooling, conducting security assessments and threat modeling, responding to incidents, and partnering with engineering teams to remediate vulnerabilities and secure cloud infrastructure.

Provide onsite IT security support including troubleshooting firewalls, IDS/IPS, web filters, SIEM and endpoint security. Conduct risk assessments, intrusion detection, network analysis, implement vulnerability monitoring, and help create/enforce security policies. Support web access duties related to the Affordable Care Act and act as backup for related security tools.

Design, implement, and operate security platforms (firewalls, IDS/IPS, SIEM, MDM). Perform vulnerability assessments, monitor and analyze security logs, drive remediation, enforce security policies, and evaluate new security technologies.

Lead and scale application security across engineering: implement automated SAST/DAST/SCA testing in CI/CD, administer GHAS, perform pentests and vulnerability management, threat model designs, secure cloud-native workloads (AWS), and drive secure coding practices and training.

Design, implement and maintain network security solutions (firewalls, IDS/IPS, proxies). Investigate compromises, manage security policies, support remediation, troubleshoot complex network and connectivity issues, and produce process documentation.

Work with development teams to identify, assess, and remediate application security vulnerabilities; perform risk-based assessments and penetration tests using static and dynamic tools; integrate security tooling (including AI-driven code analysis) into CI/CD; review commits/PRs and architecture changes; provide training and risk reporting; research new attack vectors and consult on secure designs.

Lead Oracle Identity and Access Management implementations: consult on business processes and architecture, develop/lead Oracle IDAM work, integrate Active Directory, manage SDLC deployments, perform identity administration, reconciliation and reporting, handle environment migrations and audit log retention, and coordinate stakeholders and offshore teams.

Lead security strategy, operations, and GRC across corporate and customer-facing transit systems. Drive security architecture, incident response (incident commander), threat intelligence, tabletop exercises, vendor risk management, and compliance across PCI DSS, SOC 2, and ISO 27001. Serve as primary auditor contact and communicate risk to leadership.

Design, deploy, and operate enterprise information security systems across systems, networks, procedures, and operations. Collaborate with staff and the SOC to enhance data collection/correlation, identify gaps, develop prevention/detection/mitigation solutions, produce installation and operational documentation, train agency personnel on security processes, and administer security services as part of a team.

Advise cloud, IAM, and engineering teams on secure configurations, architecture reviews, CSPM remediation, logging/monitoring, and incident response for primarily Azure (plus AWS/GCP). Support audits, documentation, ISO27017 activities, and participate in on-call security rotations.

Lead design and implementation of scalable cloud security controls and automated guardrails. Build security-as-a-service tooling, perform assessments and threat modeling, support incident investigations, and partner with engineering teams to deploy security improvements and third-party/AI tool assessments.

Design, architect, and implement cloud security solutions on AWS; set cloud security strategy and governance; act as SME for security tools; integrate and maintain security tooling, KPIs, and operational processes; collaborate with infrastructure teams to deploy and support security controls.