Top Cyber Security Jobs

Senior technical responder for application security incidents: lead escalations, analyze attacks and logs, design/implement custom security policies, perform forensics, automate ASR workflows, mentor engineers, and collaborate with customers and cross-functional teams to remediate threats and improve products.

Lead RMF-based cybersecurity compliance and authorization (ATO) activities for DoD systems. Manage security documentation, risk assessments, continuous monitoring, vulnerability scanning, and advise program leadership while ensuring adherence to DoD/NIST policies.

Lead enterprise cybersecurity for Department of the Air Force Financial Management systems: manage RMF lifecycle, maintain authorization artifacts in eMASS/ITIPS, oversee vulnerability and risk management, prepare risk-informed AO decision packages, ensure compliance with DoD/Air Force directives, and mentor ISSOs and engineering staff.

Provide technical security advice and through-life assurance for Thales IS/IT environments. Deliver security reviews, cloud and incident response guidance, compliance to government standards, risk assessments, CoCo assurance, and security requirements for delivery squads. Maintain security documentation and support continual assurance, training, and remediation across on-premises and cloud systems.

Lead RMF lifecycle activities to achieve and maintain ATO: develop SSP/SAR/POA&M, manage eMASS, run continuous monitoring and vulnerability scanning, advise stakeholders, and ensure compliance with federal/DoD security requirements.

Lead and scale Serval's infrastructure security: secure AWS, Kubernetes, container runtimes, and CI/CD; drive IAM, secrets and key management, network segmentation, workload isolation, vulnerability management, image provenance and supply-chain integrity; build and mentor a cloud/platform security team; embed security-by-design and policy-as-code across engineering and product.

Lead corporate security for endpoints, device trust, SaaS posture, workforce identity, and network access. Build teams, automate controls as code, implement allowlisting, binary authorization, 802.1x, and govern OAuth/MFA to enforce least-privilege across the company.

Lead and scale detection and response: design and operate monitoring, triage, investigation, containment, and remediation. Build and mentor teams across observability, detection, and threat intelligence. Create incident playbooks, on-call and escalation processes, tabletop exercises, and embed detection into product and infrastructure.

Manage and optimize enterprise Proofpoint email security for a hybrid M365/on-premises Exchange environment. Configure gateway rules, quarantine workflows, mail relays, and DKIM/SPF/DMARC strategy. Analyze TAP telemetry and threat intelligence, collaborate with SOC to build automated response playbooks, troubleshoot delivery and authentication failures, and communicate platform health and risk to stakeholders.

Lead SAP and Workday security initiatives including Emergency Access/Firefighter redesign, cross-application Segregation of Duties, PAM integration, secure AI (Joule) architecture, access governance, audits, remediation, and stakeholder alignment to meet SOX, GDPR, and compliance requirements.

Lead and grow RSM's public sector cybersecurity practice in Florida by expanding team capabilities, overseeing delivery and training, driving business development, advising clients on security risks and remediation, ensuring regulatory compliance, and meeting revenue goals. Serve as a client-facing leader communicating technical risks to executives and developing go-to-market strategies.

Maintain and enhance legacy enterprise applications: troubleshoot and fix bugs, implement security upgrades, review software design documents, apply SDLC/DevSecOps practices, and advise clients on modernization and hardening.

Lead and execute Oracle ERP security and controls engagements including security assessments, role design, GRC implementations, access management, segregation of duties reviews, and managed security services. Work with clients to perform ITGC/security audits, implement automated controls, develop remediation, and support Oracle implementations and ongoing security operations.

Provide SAP security and controls expertise for risk transformation engagements, including segregation-of-duties assessments, security role design, GRC automation, IT audits, and SAP automated control implementation and testing. Serve clients throughout implementation and operations, communicate status, and support deliverable management.

Lead cybersecurity engineering across system lifecycles for classified DoD, SAP and SCI environments. Integrate security requirements into architecture and design, perform threat modeling and risk assessments, produce engineering artifacts (STIGs, control traceability), support RMF accreditation (JSIG), and integrate secure enclaves (SIPRNet, Type 1 crypto). Collaborate with ISSOs/ISSMs/SCAs and stakeholders to assess compliance and recommend mitigations.

Lead IAM consulting engagements: deliver assessments, architecture design, and implementations across IGA, PAM, access management, and cloud identity. Serve as technical SME for pursuits, scope and price engagements, produce client-ready deliverables, facilitate executive workshops, mentor consultants, and grow the IAM practice through reusable assets and thought leadership.

Designs, implements, and manages policies and procedures for database and software security. Writes and audits Configuration Management (CM) plans and software change procedures; performs design reviews, configuration audits, and baseline status accounting. Implements CM processes in DevSecOps/Agile environments using tools like JIRA, Puppet, Confluence, and GitHub. Mentors team members. TS/SCI required.

Lead design and implementation of secure system and data architectures for national security clients. Use MBSE and SysML V2 to drive identity, access, cloud, and GenAI security solutions, harden systems, guide network design, and advise program teams on modern security techniques to reduce attack surface and meet defense requirements.

Lead delivery and growth of large cybersecurity engagements: define scope, lead teams, shape strategy, implement security frameworks, support sales and thought leadership, and mentor junior staff. Drive client relationships and manage program delivery and outcomes.

Design and evaluate cloud security architectures and documentation (SSPs, contingency and continuity plans). Apply RMF, assess compliance and risks, recommend tools and controls, support accreditation, and collaborate with IC stakeholders to secure on‑prem, cloud, and hybrid systems.

Lead and deliver complex Palo Alto Networks-focused cybersecurity consulting engagements: design security architectures, run workshops and assessments, scope and support pre-sales, develop practice offerings, mentor consultants, and produce thought leadership while ensuring client objectives and quality delivery.

Technical leader responsible for integrating, optimizing, and operationalizing enterprise cloud and security platforms. Drive SIEM ingestion, telemetry and logging strategy, detection alignment, automation, interoperability, and resiliency across EDR/XDR, CNAPP, IDS/IPS, DLP, WAF, firewalls, and AI security. Partner with platform teams, build standards, and develop automation using Python, PowerShell, Go, APIs, and IaC.

Lead and grow WWT's micro-segmentation practice, driving revenue and client engagements across Illumio, Guardicore, and Cisco Secure Workload. Manage a team of consultants, author SOWs, deliver end-to-end segmentation and zero-trust solutions, oversee project delivery, and advise clients on compliance and optimization. Partner with sales, OEMs, and executives to position offerings and ensure successful outcomes.

Monitor, detect, and respond to cyber threats as a Tier 2 SOC analyst. Review logs and tool output, investigate and escalate incidents, assist recovery, combine threat intelligence and event data to identify attacker patterns, recommend improvements, and produce reports while supporting 24/7 operations.

Lead scoping, presales, design, implementation, and optimization of F5 application delivery and security solutions. Act as F5 SME, build SOWs/LOEs, troubleshoot complex deployments, mentor consultants, and develop practice offerings and integrations with SIEM/SOAR/CMDB tools.