Top Cyber Security Jobs

Lead product security initiatives across the product lifecycle by integrating security controls into cloud platforms, creating secure design patterns, guiding secure development, and conducting threat modeling, risk assessments, vulnerability assessments, and code reviews. Drive DevSecOps practices, security awareness, policy improvements, and executive reporting while partnering with engineering, architecture, and cross-functional teams.

Leads security governance engineering by translating regulatory, compliance, and security requirements into implementable engineering controls. Partners with Engineering, Product Security, Legal, and Assurance to evaluate control design and operation across applications, platforms, infrastructure, and cloud environments. Develops oversight, control incident management, change enablement, security champion engagement, M&A risk assessments, and executive reporting. Tracks emerging regulations, including AI governance and the EU AI Act, and improves control reliability and enterprise risk visibility.

Lead end-to-end red team and adversary emulation operations across cloud, identity, network, endpoint, hardware, and operational environments. Develop offensive tooling, implants, and tradecraft; direct AI-driven autonomous agents; discover and exploit vulnerabilities; brief executive customers; provide defensive guidance; collaborate with threat intelligence and blue teams; establish operational standards; and mentor security operators.

Leads information assurance and cybersecurity operations for classified Linux and Microsoft systems. Manages RMF and ATO documentation, continuous monitoring, vulnerabilities, POA&Ms, STIG compliance, security controls, incident response, system configuration, and annual inspections. Supports system builds, troubleshooting, software and hardware deployment, Configuration Control Board reviews, and coordination with system owners and program managers. Requires an active TS clearance, CISSP or equivalent certification, and substantial experience with DoD authorization processes.

Supports OCC’s Product and Application Security team by using AI and LLMs to codify secure coding standards, create AI-consumable configuration files, and automate security enforcement in CI/CD pipelines and developer tooling. The intern will collaborate with development teams, assist with vulnerability triage and remediation guidance, and gain hands-on experience across application security, software engineering, and frontier AI.

Manage the day-to-day cybersecurity program, including audits, risk registers, third-party risk assessments, security policies, awareness training, vulnerability remediation, MDM security, incident response exercises, and compliance with HIPAA, HITECH, NIST, and HITRUST frameworks. The role prepares security metrics for leadership, coordinates cross-functional remediation, and supports continuous improvement of healthcare information security controls. It is primarily remote with limited travel.

Supports the security and compliance program by assessing security controls, evaluating compliance with SOC 2, ISO 27001, PCI DSS, HIPAA, and other frameworks, collecting audit evidence, performing control testing, tracking remediation, and reviewing technical documentation. Partners with engineering, security, business teams, and system owners to identify and resolve compliance gaps across cloud and infrastructure environments.

Maintain and secure cloud infrastructure through systems administration, patching, hardening, vulnerability management, and security automation. Develop security tooling, integrate security into CI/CD pipelines, conduct log analysis, threat hunting, and forensic investigations, and support compliance with NIST, ISO 27001, FedRAMP, and SOC 2. Build and deploy operational system images while evaluating emerging threats and improving monitoring and protections.

Leads strategy, engineering, operations, and lifecycle management for enterprise network security and internet infrastructure platforms, including Akamai CDN, DNS, DHCP, WAF, domain management, and certificate services. Manages engineering teams, incident response, service reliability, security risk, modernization, automation, vendors, budgets, and strategic roadmaps. Partners with cybersecurity, cloud, architecture, and application teams to maintain secure, highly available, and scalable internet-facing services.

Analyzes corporate security risks, gathers and interprets complex data, conducts process and gap reviews, and develops reports, metrics, KPIs, and KRIs for senior executives and risk committees. The role identifies emerging intelligence needs, supports fraud monitoring, synthesizes insights for decision-making, and recommends process improvements while handling sensitive information and regulatory requirements.

Leads application and cloud security architecture, threat modeling, secure design reviews, security standards, and developer enablement. Owns SAST, DAST, SCA, WAF, CSPM, container, and Infrastructure as Code security controls. Builds security automation and custom tooling, supports AI security initiatives, and partners with engineering and infrastructure teams to improve application resilience, compliance, and risk remediation.

Monitors and investigates security alerts across SIEM, endpoint, identity, cloud, email, and network environments. Conducts threat hunting, incident response, containment, remediation, vulnerability management, and post-incident reviews. Develops playbooks, automation, integrations, detections, and infrastructure-as-code deployments. Uses and tunes agentic SOC tooling while maintaining human oversight. Coordinates with technical and business teams, participates in a 24/7 on-call rotation, mentors junior engineers, and improves security operations through metrics and continuous improvement.

Build and mature a Cyber Resilience and Assurance program by developing governance frameworks, assessment methodologies, control validation approaches, resilience exercises, attack simulations, metrics, scorecards, and executive reporting. Evaluate security controls across identity, infrastructure, network, cloud, application, and AI environments, analyze attack paths and organizational readiness, and collaborate with business and technology partners on cybersecurity improvements and long-term strategy.

Build and mature a Cyber Resilience and Assurance cybersecurity program. Develop governance frameworks, assessment methodologies, validation approaches, resilience exercises, metrics, scorecards, and executive reporting. Evaluate security controls across identity, infrastructure, network, cloud, applications, and AI environments; conduct threat-informed assessments and attack simulations; analyze attack paths and organizational readiness; and partner with business and technology teams to improve cyber resilience.

Conduct independent security and privacy control assessments for federal information systems across on-premises, cloud, and hybrid environments. Plan assessments, execute NIST SP 800-53A procedures, develop SAPs, SARs, AARs, and POA&Ms, support RMF, FISMA, ATO, ongoing authorization, audits, continuous monitoring, and FedRAMP activities. Collaborate with ISSOs, system owners, engineers, and government stakeholders while maintaining detailed compliance documentation and dashboards.

Provides Tier 2 cybersecurity support through security monitoring, incident response, vulnerability and endpoint management, identity and access management, security awareness training, compliance support, documentation, and reporting. The role investigates phishing, malware, and other incidents; administers Microsoft Defender XDR and related security tools; coordinates remediation; supports MFA and access reviews; and communicates security risks and remediation steps to internal and external stakeholders.

Provides multidisciplinary security support for Special Access Programs, SCI, and classified activities. Ensures compliance with NISPOM, DoD, and SAP policies; assesses vulnerabilities and risks; conducts facility compliance reviews and investigations; tracks corrective actions; develops security procedures and training; briefs personnel; and mentors security staff. Requires 10+ years of related experience, SAP experience, a TS/SCI clearance, and eligibility for TS/SCI with CI polygraph.

Supports Assessment and Authorization and Risk Management Framework activities for Department of Defense weapon-system projects. The role validates security controls, maintains RMF documentation, manages ATO/IATT packages in eMASS, oversees vulnerability management and POA&Ms, reviews STIG compliance, analyzes ACAS scans, and supports incident, contingency, and security planning. The ISSO collaborates with system administrators, government personnel, contractors, and military stakeholders while troubleshooting network security issues and adapting to changing mission requirements.

Leads enterprise security architecture for a large hybrid infrastructure spanning physical data centers and multi-cloud environments. Advises CISO leadership, identifies structural security gaps, develops security roadmaps, leads threat modeling and remediation, and establishes governance standards. The role covers edge and network defense, cloud security, endpoint protection, PKI, certificate lifecycle management, Zero Trust, security intelligence automation, and architectural reviews. Candidates need extensive cybersecurity architecture experience, CCIE and CISSP certifications, and must obtain Public Trust clearance.

Designs, implements, and maintains enterprise security solutions across endpoint, cloud, email, network, and identity domains. Monitors threats, supports incident response, performs remediation and root cause analysis, maintains security configurations and standards, assists with audits and compliance, researches emerging threats, and leads security projects while advising technical and business stakeholders.

Supports information systems security operations for classified DoD and Intelligence Community systems. Maintains RMF authorization, security documentation, compliance assessments, configuration records, access controls, and operational security posture. Monitors events and analyzes logs using Splunk, evaluates vulnerabilities, supports incident response, reviews system changes, and coordinates corrective actions with technical and security teams.

Manage cybersecurity and information assurance for classified systems supporting DoD mission operations. Responsibilities include owning RMF activities, maintaining eMASS authorization packages, implementing STIGs, managing ACAS vulnerability scanning, overseeing continuous monitoring, tracking POA&Ms, coordinating system interconnections, supporting inspections and incident response, and ensuring compliance with DoD security policies and configuration management requirements.

Conduct penetration tests across infrastructure, networks, web and mobile applications, and cloud environments. Perform application and cloud security testing, simulate adversary techniques, develop custom security tools, document vulnerabilities, validate remediation, and support HIPAA, SOC 2, and PCI DSS compliance. Collaborate with engineering and product teams, track emerging threats, and contribute to purple-team exercises, tabletop events, and security training.

Leads research technology and security strategy, architecture, implementation, operations, and continuous improvement. Ensures research environments are secure, compliant, scalable, and aligned with enterprise IT standards. Oversees federal research regulations, infrastructure, cloud platforms, identity and access management, data protection, integrations, incident resolution, and enterprise transformations. Provides executive leadership and drives technical and organizational change.

Deploys and monitors AWS cloud platforms under DoD RMF and JSIG requirements. Develops infrastructure-as-code and configuration-as-code using Ansible and Terraform, operates Splunk security monitoring on Kubernetes, performs vulnerability assessments, and collaborates with engineering and networking teams. Requires DoD network experience, Windows or Linux expertise, Splunk administration, cloud and Kubernetes experience, Security+ or higher certification, and an active TS/SCI clearance.