Top Cyber Security Jobs

Provide Security Operations for a managed security services environment: incident response, vulnerability scanning and remediation oversight, toolset administration (SIEM, IDS/IPS, scanning tools, malware mitigation), policy and SOP maintenance, automation of security workflows, client audits, training, and SLA management.

Define and document enterprise mobile security requirements and controls (MDM, MAM, encryption, offline storage). Perform mobile security assessments (code review, threat assessment), create security testing standards and checklists, ensure regulatory compliance, and recommend security protocols, tools, and products. Provide mobile security architecture and documentation for Health Net; familiarity with enterprise SSO (OAuth, SAML) preferred.

Lead development and maintenance of enterprise cybersecurity strategy, tools, and processes. Install, monitor, and support security applications (firewalls, EDR, DLP, IDS/IPS, vulnerability scanning), conduct testing, monitor performance, coordinate remediation, provide technical guidance, and participate in 24/7 rotational support while producing metrics and reports to ensure compliance.

Protect systems and data by enforcing IT security policies, monitoring for intrusions, investigating incidents, overseeing patch management, collaborating with IT and business groups, and supporting audits and compliance activities across networks, databases, applications, and web services.

Protect County sites, data centers, and infrastructure by administering physical and cyber security technologies, performing audits and risk assessments, supporting incident remediation, ensuring CJIS/FIPS compliance, testing network controls, and delivering end-user security training.

Investigate and remediate embedded firmware vulnerabilities, analyze firmware packages and exposed interfaces, support secure boot/firmware signing and update validation, conduct threat modeling and risk assessments, manage vulnerability response workflows, maintain SBOMs and supplier security documentation, ensure compliance with cybersecurity standards, and collaborate with firmware, QA, and compliance teams on security testing and release readiness.

Lead enterprise security operations: secure endpoints, servers, networks and third-party services; manage IAM, vulnerability management, EDR, intrusion detection, and incident response; support pen testing, compliance, audits, physical security, and employee security training while collaborating with engineering, ops, and legal.

Lead design, build, and operation of security infrastructure protecting ground stations, cloud, and corporate systems. Own SIEM, EDR, UEBA, firewall and VPN/ZTNA operations, DLP controls, Okta administration, IaC and automation, and mentor a growing security engineering team. Drive detection engineering, incident response playbooks, compliance alignment (CMMC/NIST/FedRAMP), and partner cross-functionally to embed security across on-prem and GovCloud/GCC environments.

Lead detection, response, and remediation of security incidents; maintain and improve security architecture, policies, and controls across cloud and on‑prem environments; manage security technologies (SIEM, IDS/IPS, vulnerability scanning, endpoint, WAF); perform threat hunting, vulnerability management, audits/pen tests response, and security project management; provide technical risk guidance and lead teams.

Assess and remediate security and compliance risks by analyzing test results and vulnerability assessments, developing policies and documentation, coordinating remediation across stakeholders, tracking action plans, and reporting status. Enforce security procedures, conduct gap analyses, and proactively identify vulnerabilities to reduce organizational risk.

Serve as the program's ISSO to implement and enforce information systems security policies, maintain operational security posture, perform day-to-day security operations, evaluate security solutions for classified processing, conduct vulnerability/risk assessments, manage configuration and changes, and prepare SSPs, C&A packages, SRTMs, and RMF-aligned authorization documentation.

Design, assess, and implement cloud and application security solutions (primarily AWS). Identify risks, propose controls, perform architecture reviews, threat modeling, code/penetration testing, author documentation, and assist clients with security troubleshooting and implementation.

Designs and implements network security solutions (firewalls, IDS/IPS, proxies, routers) for client networks. Maintains security hardware/software, conducts packet analysis and routing protocol configuration, investigates incidents, manages security policies, and supports customer change requests and remediation.

Lead and deliver large, complex IT and security projects in a healthcare environment. Manage multi-location delivery teams, define plans and forecasts, enforce PMO processes, report status to executives, and apply information security controls, governance, and stakeholder management to achieve project objectives.

Design and implement security for SAP HANA and SAP BusinessObjects landscapes: create and manage HANA DB roles, analytic and object privileges, enforce DB admin controls and password policies, configure BOBJ groups/folder/object-level access, enable SSO with AD/LDAP, handle transport of security objects, and integrate BOBJ security with HANA roles.

Lead and oversee system security engineering and certification activities for SAP/SCI systems. Chair cybersecurity working groups, assess designs for compliance with NIST/RMF and JSIG, provide risk management and accreditation support, assist program protection planning, and coordinate with approval authorities to obtain Authorization to Operate.

Lead the security posture strategy for an NSPM platform: design and maintain posture assessment rule frameworks, map device configurations to compliance standards, define risk scoring, ensure scalable rule execution across heterogeneous network devices, translate emerging threats and regulations into automatable rules, engage customers and stakeholders, and mentor engineers and analysts on posture rule design and compliance mapping.

Own and strengthen Doctronic's security posture for a HIPAA-compliant, SOC 2 Type II environment. Maintain compliance, run audits, perform penetration testing and vulnerability assessments, handle incident response, vendor security reviews, build security automation and monitoring, and partner with engineering to embed security across the SDLC.

Senior Tier-3 NOC engineer serving as final technical escalation for major network incidents. Leads RCA, incident recovery, and architecture guidance across multi-vendor environments. Expert in Palo Alto and Zscaler security platforms, packet analysis, automation/IaC, and enterprise routing/segmentation. Mentors junior staff, coordinates vendor escalations, and shapes operational standards to improve stability and observability.

Serve as a Principal SOC Analyst supporting federal cyber missions. Requires 5+ years experience, technical training or degree, required IAT II/CSSP/GMON/SCCU certifications, active Top Secret/SCI clearance and ability to obtain a polygraph. Work onsite supporting SOC operations, threat monitoring, and incident response.

Support mission-critical security operations: lead security program activities, enforce policies, coordinate compliance, collaborate with stakeholders, analyze challenges, and produce documentation and reports to improve operational efficiency.

Lead and enforce security program activities for a federal mission client, coordinate compliance across operations, collaborate with stakeholders, analyze operational challenges, recommend improvements, and produce documentation and reports to support continuous improvement and mission objectives.

Manage full lifecycle RMF/DIACAP Assessment & Authorization activities to support Authorization to Operate (ATO). Conduct security assessments, maintain risk registry, support vulnerability scanning and patch management, produce A&A documentation, and provide technical guidance on mitigation and configuration management.

Embed on-site with U.S. Government customers as the primary authority for system security and compliance. Support RMF/DIACAP accreditation, build and maintain SSPs/POA&Ms, produce evidence using eMASS/Xacta, validate security configurations with engineering teams, run vulnerability scans, and support cloud and on-prem environments (AWS/Azure). Maintain documentation and support audits throughout the system lifecycle. Requires TS/SCI active clearance or eligibility.

Perform full life-cycle RMF/DIACAP Assessment & Authorization (A&A) activities to support DoC systems and ATOs. Conduct security assessments per NIST 800-53, maintain risk registries, recommend mitigations, manage vulnerability scanning and patch compliance (HBSS/ACAS/IAVM), produce ATO documentation and reports (STIG/IAVA), coordinate CM with ISSM/SCA/AO, and provide subject-matter expertise and security engineering guidance.