Top Cyber Security Jobs

Lead RMF/DIACAP security assessment and A&A activities to support DoC systems achieving Authorization to Operate. Conduct vulnerability assessments, manage risk registry, produce A&A documentation, advise on mitigation and configuration management, and maintain compliance with NIST and DoC policies.

Perform full life-cycle RMF/DIACAP A&A management to support Department of Commerce systems and achieve ATOs: conduct security assessments per NIST 800.53, manage risk registries, maintain vulnerability scanning and patch compliance (HBSS/ACAS/IAVM), produce A&A documentation (eMASS, STIGs, IAVAs), advise on configuration management and mitigation strategies, and provide subject-matter expertise for security engineering and policy.

Serve as the on-site security and compliance authority for government production systems. Lead RMF/DIACAP accreditation activities, produce SSPs/POA&Ms, validate security controls, run vulnerability scans, maintain audit evidence, and coordinate with engineering and customer security teams across AWS, Azure, and on-prem environments. Requires TS/SCI or eligibility.

Manage full lifecycle RMF/DIACAP Assessment and Authorization (A&A) activities to achieve ATOs for Department of Commerce systems. Conduct security assessments per NIST 800-53, maintain risk registries, support vulnerability scanning and patching (HBSS/ACAS/IAVM), produce A&A documentation in eMASS, and provide security guidance, configuration management recommendations, and mitigation strategies.

Serve as the on-site security and compliance authority for government production systems. Lead accreditation (RMF/DIACAP), build and maintain SSPs/POA&Ms, validate controls, produce compliance evidence, support audits, and coordinate with engineers across cloud and on-prem environments.

Support Dept. of Commerce ATO efforts by performing full lifecycle RMF/DIACAP assessment and authorization activities, security assessments per NIST 800-53, vulnerability scanning and patch management oversight, risk identification and reporting, configuration management recommendations, technical writing of A&A artifacts, and providing SME guidance for mitigation strategies and security engineering.

Support mission-critical federal operations by overseeing cybersecurity and system security compliance, collaborating with stakeholders, analyzing operational challenges, producing documentation and reports, and driving continuous improvement to maintain operational efficiency and compliance.

Serve as an ISSO supporting RMF/DIACAP A&A lifecycle and ATO attainment for Dept. of Commerce systems. Conduct security assessments per NIST 800-53, manage risk registries, coordinate CM, maintain vulnerability scanning and patch compliance (HBSS/ACAS/IAVM), produce ATO documentation (A&As, STIG/IAVA compliance), and provide mitigation guidance and security engineering expertise.

Serve as the on-site authority for system security and compliance for government customers: support RMF/DIACAP accreditation, implement and validate security controls, produce SSPs/POA&Ms and evidence, run vulnerability scans, collaborate with engineers across cloud and on-prem platforms, and support audits throughout the system lifecycle.

Lead and oversee cybersecurity and system security compliance for mission systems. Collaborate with cross-functional teams, analyze operational challenges, recommend improvements, and produce documentation, reports, and deliverables to support continuous improvement and mission objectives.

Manage full lifecycle RMF/DIACAP Assessment & Authorization (A&A) activities to support DoC systems' Authorization to Operate (ATO). Conduct security assessments per NIST 800-53, maintain risk registries, support vulnerability scanning and patch management (HBSS/ACAS/IAVM), produce A&A documentation in eMASS, and advise on mitigation strategies and configuration management.

Embedded on-site ISSO responsible for securing and accrediting production systems using RMF/DIACAP, building and maintaining compliance artifacts (SSPs, POA&Ms), coordinating with engineers, running vulnerability scans, and supporting audits across cloud and on-prem environments.

Lead and oversee cybersecurity and system security compliance for mission systems. Collaborate with stakeholders to analyze operational challenges, recommend improvements, produce documentation and reports, and support continuous improvement and operational efficiency for a federal client.

Perform full life-cycle RMF/DIACAP Assessment & Authorization (A&A) activities to support DoC systems achieving ATO. Conduct security assessments per NIST SP 800-53, manage risk registries, provide configuration and vulnerability management guidance (HBSS/ACAS, IAVM), produce A&A documentation (STIG/IAVA, eMASS), and recommend mitigations to leadership.

Provide administrative support for information security compliance programs (ISO 27001, SOC 2, CMMC). Assist Director of Compliance with audit preparation, evidence collection, documentation management, tracking remediation, scheduling and coordinating meetings, and preparing status updates. Maintain control matrices, evidence folders, calendars, and trackers to keep compliance activities organized and on schedule.

Design and specify hardware security architectures and requirements, perform attack modeling and pre-silicon vulnerability analysis, review RTL and firmware implementations, advise/train teams, support certification and evaluators, interface with customers and product teams, and perform root cause analysis of security defects.

Define and drive SoC hardware security architecture and requirements, including HSM, secure boot/Root of Trust, cryptographic IP, and secure key provisioning. Lead threat modeling, vulnerability analysis, and HW/SW co-design to embed security across RTL, DFT, physical design, and firmware. Ensure compliance with cybersecurity and functional safety standards, collaborate cross-functionally, and provide technical leadership for system-level security validation.

Lead modernization of a global Third-Party Risk Management (TPRM) program by shifting from questionnaire-centric assessments to a data-driven model using technical validation, automation, continuous monitoring, and AI. Partner with Procurement, Legal, Privacy, and Supply Chain to standardize contracts and controls, maintain centralized third-party inventories, report risks to senior leadership, and build a high-performing TPRM team while overseeing advanced technical assessments for critical suppliers.

Manage PCI/security compliance for retail POS environments: govern programs, oversee IRM deliverables, validate encryption/security testing, document designs and operations, review technical configurations, verify vendor PCI implementations, and coordinate with Trustwave.

Provide design, deployment, and operational support for network security (firewalls, VPN, IPS). Configure and maintain Cisco ASAs and Checkpoint/Solaris firewalls, perform vulnerability and intrusion work, manage NAT and SSL VPNs, update IPS signatures, produce technical documentation, and participate in on-call rotation and after-hours support.

Plan and implement security solutions across business integrations and healthcare acquisitions. Configure and test hardware, coordinate deployments and vendor product procurement, ensure corporate compliance, and provide security consulting across multiple IT projects. Support off-hours deployments and site testing as needed.

Lead implementation of a Cyber Security Operations Center (SOC) and SIEM platform. Manage project schedule (MS Project), scorecards, coordinate infrastructure teams, ensure ordering/installation, run cross-team meetings, and drive timely hand-offs. Requires strong IT and project leadership experience; PMP preferred.

Senior PeopleSoft Security Administrator responsible for administering PeopleSoft Campus Solutions 9.0 security: managing roles, permissions, access provisioning, audits, compliance, troubleshooting, and coordinating with IT and business stakeholders to support implementations and upgrades.

Lead design and implementation of embedded device security across firmware, OS, and cloud interfaces. Perform threat modeling, architect hardware-backed identity and secure key management, implement TrustZone/TEE/kernel solutions, integrate biometric sensor security, and apply secure SDLC and vulnerability management practices across multi-disciplinary teams.

Lead and execute network and information security operations: install and maintain security software, develop disaster recovery and business continuity plans, troubleshoot virtual infrastructure issues, deploy global infrastructure securely, and produce actionable security reporting and processes to protect networks and data.