Top Cyber Security Jobs

Lead RMF-based Assessment & Authorization (A&A) activities to achieve ATOs for Department of Commerce systems. Conduct security assessments, manage risk registries, produce A&A documentation, support vulnerability scanning/patching (HBSS/ACAS/IAVM), provide configuration management guidance, and author technical security reports and mitigation strategies.

Act as the on-site security authority for U.S. Government customers: manage RMF/DIACAP accreditation, produce SSPs/POA&Ms, validate controls, gather compliance evidence, support audits, and collaborate with engineers to secure systems across AWS, Azure, and on-premises environments using automation and scanning tools.

Lead RMF/DIACAP security assessment and A&A activities to support DoC systems achieving Authorization to Operate. Conduct vulnerability assessments, manage risk registry, produce A&A documentation, advise on mitigation and configuration management, and maintain compliance with NIST and DoC policies.

Perform full life-cycle RMF/DIACAP A&A management to support Department of Commerce systems and achieve ATOs: conduct security assessments per NIST 800.53, manage risk registries, maintain vulnerability scanning and patch compliance (HBSS/ACAS/IAVM), produce A&A documentation (eMASS, STIGs, IAVAs), advise on configuration management and mitigation strategies, and provide subject-matter expertise for security engineering and policy.

Serve as the on-site security and compliance authority for government production systems. Lead RMF/DIACAP accreditation activities, produce SSPs/POA&Ms, validate security controls, run vulnerability scans, maintain audit evidence, and coordinate with engineering and customer security teams across AWS, Azure, and on-prem environments. Requires TS/SCI or eligibility.

Manage full lifecycle RMF/DIACAP Assessment and Authorization (A&A) activities to achieve ATOs for Department of Commerce systems. Conduct security assessments per NIST 800-53, maintain risk registries, support vulnerability scanning and patching (HBSS/ACAS/IAVM), produce A&A documentation in eMASS, and provide security guidance, configuration management recommendations, and mitigation strategies.

Serve as the on-site security and compliance authority for government production systems. Lead accreditation (RMF/DIACAP), build and maintain SSPs/POA&Ms, validate controls, produce compliance evidence, support audits, and coordinate with engineers across cloud and on-prem environments.

Support Dept. of Commerce ATO efforts by performing full lifecycle RMF/DIACAP assessment and authorization activities, security assessments per NIST 800-53, vulnerability scanning and patch management oversight, risk identification and reporting, configuration management recommendations, technical writing of A&A artifacts, and providing SME guidance for mitigation strategies and security engineering.

Support mission-critical federal operations by overseeing cybersecurity and system security compliance, collaborating with stakeholders, analyzing operational challenges, producing documentation and reports, and driving continuous improvement to maintain operational efficiency and compliance.

Serve as an ISSO supporting RMF/DIACAP A&A lifecycle and ATO attainment for Dept. of Commerce systems. Conduct security assessments per NIST 800-53, manage risk registries, coordinate CM, maintain vulnerability scanning and patch compliance (HBSS/ACAS/IAVM), produce ATO documentation (A&As, STIG/IAVA compliance), and provide mitigation guidance and security engineering expertise.

Serve as the on-site authority for system security and compliance for government customers: support RMF/DIACAP accreditation, implement and validate security controls, produce SSPs/POA&Ms and evidence, run vulnerability scans, collaborate with engineers across cloud and on-prem platforms, and support audits throughout the system lifecycle.

Lead and oversee cybersecurity and system security compliance for mission systems. Collaborate with cross-functional teams, analyze operational challenges, recommend improvements, and produce documentation, reports, and deliverables to support continuous improvement and mission objectives.

Manage full lifecycle RMF/DIACAP Assessment & Authorization (A&A) activities to support DoC systems' Authorization to Operate (ATO). Conduct security assessments per NIST 800-53, maintain risk registries, support vulnerability scanning and patch management (HBSS/ACAS/IAVM), produce A&A documentation in eMASS, and advise on mitigation strategies and configuration management.

Lead and oversee cybersecurity and system security compliance for mission systems. Collaborate with stakeholders to analyze operational challenges, recommend improvements, produce documentation and reports, and support continuous improvement and operational efficiency for a federal client.

Perform full life-cycle RMF/DIACAP Assessment & Authorization (A&A) activities to support DoC systems achieving ATO. Conduct security assessments per NIST SP 800-53, manage risk registries, provide configuration and vulnerability management guidance (HBSS/ACAS, IAVM), produce A&A documentation (STIG/IAVA, eMASS), and recommend mitigations to leadership.

Embedded on-site ISSO responsible for securing and accrediting production systems using RMF/DIACAP, building and maintaining compliance artifacts (SSPs, POA&Ms), coordinating with engineers, running vulnerability scans, and supporting audits across cloud and on-prem environments.

Provide administrative support for information security compliance programs (ISO 27001, SOC 2, CMMC). Assist Director of Compliance with audit preparation, evidence collection, documentation management, tracking remediation, scheduling and coordinating meetings, and preparing status updates. Maintain control matrices, evidence folders, calendars, and trackers to keep compliance activities organized and on schedule.

Design and specify hardware security architectures and requirements, perform attack modeling and pre-silicon vulnerability analysis, review RTL and firmware implementations, advise/train teams, support certification and evaluators, interface with customers and product teams, and perform root cause analysis of security defects.

Define and drive SoC hardware security architecture and requirements, including HSM, secure boot/Root of Trust, cryptographic IP, and secure key provisioning. Lead threat modeling, vulnerability analysis, and HW/SW co-design to embed security across RTL, DFT, physical design, and firmware. Ensure compliance with cybersecurity and functional safety standards, collaborate cross-functionally, and provide technical leadership for system-level security validation.

Manage day-to-day security operations for information systems, including authorization packages, configuration management, continuous monitoring, incident handling, audit review, and security training. Support Collateral, SCI, and SAP activities, assess security impacts of changes, assist ISSM/AO with A&A efforts, and implement countermeasures for identified vulnerabilities.

Assess and report on management, operational, and technical security controls for Collateral, SCI, and SAP systems using RMF/JSIG. Produce SARs, POA&Ms, advise AOs/DAOs and stakeholders, evaluate authorization packages, continuous monitoring, SDLC compliance, and incident/support activities. Represent customer on inspections and review sanitization/clearing procedures.

Manage day-to-day security operations for classified information systems within DoD/SAP/SCI environments. Develop authorization packages (RMF), assess configuration changes, monitor compliance, handle incidents, maintain security documentation, and coordinate with ISSM/ISO. Support physical/media protection, audits, and security training.

Manage day-to-day security operations for collateral, SCI and SAP systems. Develop and update RMF/A&A authorization packages, perform continuous monitoring, configuration management, incident handling, audits, and security training. Coordinate changes with ISSM/AO, identify vulnerabilities and implement countermeasures, and support DoD/National and contractor A&A efforts.

Manage day-to-day security operations for information systems supporting SAP/DoD environments. Duties include preparing authorization packages, configuration management, incident handling, audit review, vulnerability identification and mitigation, security impact analysis, training, and documentation. Works closely with ISSM, ISO, and AO/DAO and supports Collateral, SCI, and SAP activities.

Provide Tier 3 network security engineering for INSCOM: install, configure, and harden network and security infrastructure; troubleshoot switching, routing, VPNs, and Next-Gen firewalls; manage ACLs and firewall policies; configure F5 BIG-IP (LTM/ASM); perform packet analysis; apply STIGs/NIST hardening; collaborate across teams and support enterprise SDLC.