Top Cyber Security Jobs

Manage enterprise-level vulnerability remediation across multiple areas, coordinating discovery, prioritization, and remediation tracking to reduce security risk and ensure compliance.

Onsite IT Security Analyst to support data center moves, border gateway access, intrusion detection, vulnerability monitoring, and security policy implementation. Backup for SIEM, IDS/IPS, web filtering, and firewall ticket resolution. Conduct risk assessments for network entry points and security zones.

Provide Security Operations for a managed security services environment: incident response, vulnerability scanning and remediation oversight, toolset administration (SIEM, IDS/IPS, scanning tools, malware mitigation), policy and SOP maintenance, automation of security workflows, client audits, training, and SLA management.

Design and implement enterprise data security architectures focused on databases (SQL Server), Databricks, and object storage. Develop encryption, IAM, DLP, IRM/DRM, tokenization, and SecOps controls; secure data pipelines, perform vulnerability assessments, automate security tasks, and maintain policies and documentation while collaborating with development teams.

Lead development and maintenance of enterprise cybersecurity strategy, tools, and processes. Install, monitor, and support security applications (firewalls, EDR, DLP, IDS/IPS, vulnerability scanning), conduct testing, monitor performance, coordinate remediation, provide technical guidance, and participate in 24/7 rotational support while producing metrics and reports to ensure compliance.

Define and document enterprise mobile security requirements and controls (MDM, MAM, encryption, offline storage). Perform mobile security assessments (code review, threat assessment), create security testing standards and checklists, ensure regulatory compliance, and recommend security protocols, tools, and products. Provide mobile security architecture and documentation for Health Net; familiarity with enterprise SSO (OAuth, SAML) preferred.

Protect systems and data by enforcing IT security policies, monitoring for intrusions, investigating incidents, overseeing patch management, collaborating with IT and business groups, and supporting audits and compliance activities across networks, databases, applications, and web services.

Investigate and remediate embedded firmware vulnerabilities, analyze firmware packages and exposed interfaces, support secure boot/firmware signing and update validation, conduct threat modeling and risk assessments, manage vulnerability response workflows, maintain SBOMs and supplier security documentation, ensure compliance with cybersecurity standards, and collaborate with firmware, QA, and compliance teams on security testing and release readiness.

Lead enterprise security operations: secure endpoints, servers, networks and third-party services; manage IAM, vulnerability management, EDR, intrusion detection, and incident response; support pen testing, compliance, audits, physical security, and employee security training while collaborating with engineering, ops, and legal.

Lead detection, response, and remediation of security incidents; maintain and improve security architecture, policies, and controls across cloud and on‑prem environments; manage security technologies (SIEM, IDS/IPS, vulnerability scanning, endpoint, WAF); perform threat hunting, vulnerability management, audits/pen tests response, and security project management; provide technical risk guidance and lead teams.

Assess and remediate security and compliance risks by analyzing test results and vulnerability assessments, developing policies and documentation, coordinating remediation across stakeholders, tracking action plans, and reporting status. Enforce security procedures, conduct gap analyses, and proactively identify vulnerabilities to reduce organizational risk.

Design, assess, and implement cloud and application security solutions (primarily AWS). Identify risks, propose controls, perform architecture reviews, threat modeling, code/penetration testing, author documentation, and assist clients with security troubleshooting and implementation.

Serve as the program's ISSO to implement and enforce information systems security policies, maintain operational security posture, perform day-to-day security operations, evaluate security solutions for classified processing, conduct vulnerability/risk assessments, manage configuration and changes, and prepare SSPs, C&A packages, SRTMs, and RMF-aligned authorization documentation.

Designs and implements network security solutions (firewalls, IDS/IPS, proxies, routers) for client networks. Maintains security hardware/software, conducts packet analysis and routing protocol configuration, investigates incidents, manages security policies, and supports customer change requests and remediation.

Design and implement security for SAP HANA and SAP BusinessObjects landscapes: create and manage HANA DB roles, analytic and object privileges, enforce DB admin controls and password policies, configure BOBJ groups/folder/object-level access, enable SSO with AD/LDAP, handle transport of security objects, and integrate BOBJ security with HANA roles.

Lead and deliver large, complex IT and security projects in a healthcare environment. Manage multi-location delivery teams, define plans and forecasts, enforce PMO processes, report status to executives, and apply information security controls, governance, and stakeholder management to achieve project objectives.

Lead and oversee system security engineering and certification activities for SAP/SCI systems. Chair cybersecurity working groups, assess designs for compliance with NIST/RMF and JSIG, provide risk management and accreditation support, assist program protection planning, and coordinate with approval authorities to obtain Authorization to Operate.

Lead and enforce security program activities for a federal mission client, coordinate compliance across operations, collaborate with stakeholders, analyze operational challenges, recommend improvements, and produce documentation and reports to support continuous improvement and mission objectives.

Manage full lifecycle RMF/DIACAP Assessment & Authorization activities to support Authorization to Operate (ATO). Conduct security assessments, maintain risk registry, support vulnerability scanning and patch management, produce A&A documentation, and provide technical guidance on mitigation and configuration management.

Embed on-site with U.S. Government customers as the primary authority for system security and compliance. Support RMF/DIACAP accreditation, build and maintain SSPs/POA&Ms, produce evidence using eMASS/Xacta, validate security configurations with engineering teams, run vulnerability scans, and support cloud and on-prem environments (AWS/Azure). Maintain documentation and support audits throughout the system lifecycle. Requires TS/SCI active clearance or eligibility.

Lead RMF-based Assessment & Authorization (A&A) activities to achieve ATOs for Department of Commerce systems. Conduct security assessments, manage risk registries, produce A&A documentation, support vulnerability scanning/patching (HBSS/ACAS/IAVM), provide configuration management guidance, and author technical security reports and mitigation strategies.

Perform full life-cycle RMF/DIACAP Assessment & Authorization (A&A) activities to support DoC systems and ATOs. Conduct security assessments per NIST 800-53, maintain risk registries, recommend mitigations, manage vulnerability scanning and patch compliance (HBSS/ACAS/IAVM), produce ATO documentation and reports (STIG/IAVA), coordinate CM with ISSM/SCA/AO, and provide subject-matter expertise and security engineering guidance.

Act as the on-site security authority for U.S. Government customers: manage RMF/DIACAP accreditation, produce SSPs/POA&Ms, validate controls, gather compliance evidence, support audits, and collaborate with engineers to secure systems across AWS, Azure, and on-premises environments using automation and scanning tools.

Lead RMF/DIACAP security assessment and A&A activities to support DoC systems achieving Authorization to Operate. Conduct vulnerability assessments, manage risk registry, produce A&A documentation, advise on mitigation and configuration management, and maintain compliance with NIST and DoC policies.

Perform full life-cycle RMF/DIACAP A&A management to support Department of Commerce systems and achieve ATOs: conduct security assessments per NIST 800.53, manage risk registries, maintain vulnerability scanning and patch compliance (HBSS/ACAS/IAVM), produce A&A documentation (eMASS, STIGs, IAVAs), advise on configuration management and mitigation strategies, and provide subject-matter expertise for security engineering and policy.