Top Cyber Security Jobs

Leads enterprise security architecture for a large hybrid infrastructure spanning physical data centers and multi-cloud environments. Advises CISO leadership, identifies structural security gaps, develops security roadmaps, leads threat modeling and remediation, and establishes governance standards. The role covers edge and network defense, cloud security, endpoint protection, PKI, certificate lifecycle management, Zero Trust, security intelligence automation, and architectural reviews. Candidates need extensive cybersecurity architecture experience, CCIE and CISSP certifications, and must obtain Public Trust clearance.

Designs, implements, and maintains enterprise security solutions across endpoint, cloud, email, network, and identity domains. Monitors threats, supports incident response, performs remediation and root cause analysis, maintains security configurations and standards, assists with audits and compliance, researches emerging threats, and leads security projects while advising technical and business stakeholders.

Supports information systems security operations for classified DoD and Intelligence Community systems. Maintains RMF authorization, security documentation, compliance assessments, configuration records, access controls, and operational security posture. Monitors events and analyzes logs using Splunk, evaluates vulnerabilities, supports incident response, reviews system changes, and coordinates corrective actions with technical and security teams.

Manage cybersecurity and information assurance for classified systems supporting DoD mission operations. Responsibilities include owning RMF activities, maintaining eMASS authorization packages, implementing STIGs, managing ACAS vulnerability scanning, overseeing continuous monitoring, tracking POA&Ms, coordinating system interconnections, supporting inspections and incident response, and ensuring compliance with DoD security policies and configuration management requirements.

Conduct penetration tests across infrastructure, networks, web and mobile applications, and cloud environments. Perform application and cloud security testing, simulate adversary techniques, develop custom security tools, document vulnerabilities, validate remediation, and support HIPAA, SOC 2, and PCI DSS compliance. Collaborate with engineering and product teams, track emerging threats, and contribute to purple-team exercises, tabletop events, and security training.

Leads research technology and security strategy, architecture, implementation, operations, and continuous improvement. Ensures research environments are secure, compliant, scalable, and aligned with enterprise IT standards. Oversees federal research regulations, infrastructure, cloud platforms, identity and access management, data protection, integrations, incident resolution, and enterprise transformations. Provides executive leadership and drives technical and organizational change.

Deploys and monitors AWS cloud platforms under DoD RMF and JSIG requirements. Develops infrastructure-as-code and configuration-as-code using Ansible and Terraform, operates Splunk security monitoring on Kubernetes, performs vulnerability assessments, and collaborates with engineering and networking teams. Requires DoD network experience, Windows or Linux expertise, Splunk administration, cloud and Kubernetes experience, Security+ or higher certification, and an active TS/SCI clearance.

Supports implementation and operation of data access controls in a Databricks Lakehouse environment. Manages Unity Catalog permissions, tagging, masking, filtering, and security controls as code with Terraform. Partners with data engineers, administrators, and platform teams to align access controls, support audits, document access models, and guide engineers on tagging and access requests.

Design and build Python-based static, binary, and mobile application analysis capabilities for an AI-driven penetration testing platform. Develop instrumentation and testing infrastructure for real devices, automate reverse engineering techniques, evaluate analysis quality, and collaborate with security researchers. The role requires expertise in reverse engineering, mobile internals, program analysis, and production software engineering, with remote work based in the Washington, DC metro area and periodic client-site work.

Lead Finalsite’s security program, team, roadmap, SOC 2 Type 2 attestation, incident response, vulnerability management, vendor risk, customer security reviews, and secure engineering practices. Partner with the CISO, SRE, engineering, legal, support, and customer-facing teams to manage risk, maintain policies and controls, improve cloud and application security, assess AI-related risks, and communicate security posture to executives, auditors, and customers.

Maintains and supports information security systems, applications, and procedures. Conducts security audits, monitors network traffic, investigates incidents, implements security controls, recommends countermeasures, documents breaches, and trains staff on information security. The role also supports system upgrades and ensures compliance with relevant regulatory requirements and industry standards.

The Information Systems Security Engineer integrates cybersecurity into system architectures across the lifecycle. Responsibilities include engineering and validating RMF security controls, conducting vulnerability and risk assessments, developing security documentation and authorization artifacts, supporting continuous monitoring, establishing secure baselines, evaluating system changes, and collaborating with engineering and government stakeholders. The role supports defense and classified environments, secure cloud and enterprise IT systems, DevSecOps, Zero Trust, and cybersecurity compliance.

Leads the separation of infrastructure and security operations from CBIZ, establishing standalone cloud, network, end-user computing, service desk, telecommunications, and security capabilities. Owns infrastructure strategy, carve-out execution, TSAs, resiliency, zero trust, security operations, safe AI enablement, SOC 2 controls, vendor and MSP/MSSP management, service metrics, team leadership, and operating budgets.

Supports the U.S. Air Force by analyzing cyber activities, identifying mission-relevant terrain, assessing vulnerabilities, correlating network events, validating alerts, documenting incidents, and developing cyber defense strategies. The role conducts threat analysis, trend reporting, risk assessments, policy recommendations, and coordination with base and enterprise cyber defense teams. It requires an active Top Secret clearance with SCI eligibility, IAT Level II certification, a relevant bachelor’s degree, and five years of cybersecurity and Functional Mission Analysis experience.

Provide IT and cybersecurity administration and advanced technical support across Tribal locations. Maintain servers, networks, endpoints, MFA, backups, firewalls, VPNs, camera and access control systems. Implement security initiatives, monitor performance, troubleshoot issues, assist projects, and ensure confidentiality and compliance with Tribal policies and sensitive system access requirements.

The Software Security Engineer embeds security throughout the software development lifecycle, conducts secure code reviews, identifies vulnerabilities, and partners with engineering teams to reduce application risk. Responsibilities include using SAST, DAST, SCA, and CI/CD security tooling; assessing authentication, authorization, cryptography, and cloud controls; developing security automation; and communicating findings to technical and non-technical stakeholders. Preferred experience includes offensive security, red-team operations, bug bounties, CVEs, AI/LLM security, and regulated industries.

Leads cloud and enterprise security architecture, security operations, incident response, threat hunting, detection engineering, automation, and security investigations. Designs Azure security solutions using Microsoft Sentinel, Defender, and related services; develops PowerShell and API integrations; evaluates AI-assisted security workflows; creates standards and documentation; leads technical projects; communicates risks; and mentors security team members.

Design, implement, and maintain cloud security controls across Azure, hybrid, and on-prem environments. Manage IAM, RBAC, PIM, and CI/CD security; monitor posture with Sentinel and Defender; run vulnerability and risk assessments; support incident response and remediation; enforce policies aligned to NIST, SOC 2, and CIS; drive data protection.

Oversee Cybersecurity Service Operations for a government customer, serving as the primary liaison and leading governance, risk management, incident response, vulnerability management, insider threat, digital forensics, identity, data, and endpoint security activities. The role develops policies and guidance, ensures compliance with federal and DoD standards, directs cybersecurity teams, coordinates incident remediation, and briefs senior government stakeholders.

Leads enterprise security strategy, transformation, governance, operating model design, portfolio management, regulatory readiness, and executive communications. Partners with senior technology and business leaders to reduce risk, mature cybersecurity programs, enable cloud and AI adoption, and oversee initiatives spanning IAM, vulnerability management, privacy, resilience, and technology risk. Builds performance metrics, reporting capabilities, change management practices, and organizational security capabilities while advising executives and boards.

Research advanced endpoint attacks and attacker TTPs, analyze security telemetry, develop detection logic and protection signals, and design capabilities to prevent and disrupt sophisticated threats in near real time. The role applies deep security expertise to improve protection coverage and resilience, with preferred experience in offensive security research, digital forensics, programming, security publications, and low-level operating system security.

Strengthen application security and DevSecOps practices by deploying and tuning SAST, DAST, and IAST tools; conducting threat modeling; integrating security controls into CI/CD pipelines; interpreting vulnerabilities; improving security automation; and collaborating with engineering stakeholders to prioritize remediation and establish application security metrics.

Strengthen application security and DevSecOps practices by deploying and tuning SAST, DAST, and IAST tools, conducting threat modeling, and integrating security controls into CI/CD pipelines. Analyze scan results, prioritize meaningful vulnerabilities, develop security automation, establish application security metrics, and collaborate with engineering stakeholders to improve secure coding practices. The role requires experience with software development, cloud application security, AWS, infrastructure-as-code, APIs, authentication, authorization, and secrets management.

Strengthen application security and DevSecOps practices by deploying and tuning SAST, DAST, and IAST tools; conducting threat modeling; integrating security controls into CI/CD pipelines; interpreting scan results; prioritizing meaningful vulnerabilities; developing security automation; and collaborating with engineering stakeholders to improve secure development practices and security metrics.

Strengthen application security and DevSecOps practices by deploying and tuning SAST, DAST, and IAST tools, conducting threat modeling, integrating security controls into CI/CD pipelines, and prioritizing remediation of high-risk vulnerabilities. The role partners with engineering teams, develops security automation, establishes application security metrics, and communicates risks to technical and nontechnical stakeholders. Responsibilities also include supporting AWS cloud application security, secure coding, infrastructure-as-code security, and maintaining documentation.