Top Cyber Security Jobs

Leads Risk Management Framework activities for intelligence-community systems, including security documentation, compliance operations, risk analysis, application assessments, secure architecture, vulnerability assessment, and ATO/ATC support. Uses XACTA, ServiceNow, Nessus, ACAS, and SCAP while collaborating with engineering teams and presenting technical information to customers. Requires an active TS/SCI with Polygraph, substantial DoD cybersecurity experience, and advanced IAM certification.

Administers Workday and multi-platform HR security, including role-based access, security configuration, access reviews, governance, audit support, and remediation. Evaluates routine and elevated access requests, enforces least-privilege standards, analyzes security and audit trends, maintains governance documentation, and recommends policy and process improvements. Collaborates with HR, IT, Legal, Compliance, and business stakeholders while protecting confidential employee data.

Lead Risk Management Framework activities for intelligence community customers, including developing security plans, managing compliance artifacts in XACTA and ServiceNow, conducting risk analyses, completing DISA STIGs, supporting application security assessments, and implementing cybersecurity solutions. The role requires collaboration with engineering teams, customer presentations, and Tier 2/3 support. Candidates need an active TS/SCI clearance with polygraph, substantial DoD cybersecurity experience, IAM and IAT certifications, Linux expertise, and knowledge of NIST, DISA, A&A, and vulnerability assessment processes.

Leads the transition and lifecycle management of Intelligence Community Cross Domain Solution RMF authorization packages into Xacta. Develops and maintains security documentation, evaluates controls against NIST and IC requirements, manages remediation and continuous monitoring, coordinates with government and cybersecurity stakeholders, and provides knowledge transfer. The role is on-site at CNMOC Headquarters and requires active TS/SCI clearance.

Designs and operates secure-by-default controls for Oracle Cloud Infrastructure and broader hybrid cloud environments. Responsibilities include implementing policy-as-code guardrails, IAM and least-privilege controls, detection and response integrations, vulnerability and misconfiguration management, incident response, remediation tracking, and security KPI reporting. The engineer partners with platform, product, infrastructure, and security teams to advance cloud security strategy and automation.

Designs, implements, administers, and troubleshoots F5 BIG-IP and inline break-and-inspect proxy solutions within DoD enterprise and cloud architectures. Configures TLS and mutual TLS, applies cryptographic and PKI standards, resolves issues with DoD stakeholders, and supports secure modernization of legacy and new applications. The role requires a Secret clearance and familiarity with federal compliance standards, Linux or UNIX, networking, and cloud environments.

Designs, implements, and administers F5 BIG-IP and proxy-based security solutions within DoD enterprise and cloud architectures. Troubleshoots TLS and mutual TLS, supports AWS cloud environments, and works with DoD clients and stakeholders on enterprise architecture issues. Applies knowledge of cryptography, PKI, hashing, networking, federal compliance standards, and Linux or UNIX systems. Requires Secret clearance and at least a high school diploma or GED.

Designs, implements, and administers F5 BIG-IP and proxy-based break-and-inspect solutions within DoD enterprise and cloud architectures. Troubleshoots TLS and mutual TLS configurations, supports AWS and hybrid cloud environments, and resolves architecture issues with DoD clients and stakeholders. Applies knowledge of cryptography, PKI, federal compliance standards, Linux or UNIX systems, and networking protocols while supporting national security missions.

Support security-focused configuration management for more than 200 federal information systems. Responsibilities include identifying secure configurations, assessing security risks and configuration changes, documenting approvals, conducting research and analysis, preparing technical reports, developing policy, planning configuration management, and supporting IT security audits. The role requires an active Top Secret clearance, U.S. citizenship, cybersecurity experience, and the ability to obtain a DoD 8140 certification.

Design and build cloud security tooling, automation, and AI-enabled threat-hunting capabilities. Perform threat modeling, incident response, security research, architecture reviews, and detection engineering. Develop SIEM and SOAR integrations, automate security processes, address AI-related threats using MITRE ATLAS, and contribute to multi-year security roadmaps. Collaborate across engineering and business teams, prioritize security improvements, support on-call operations, and mentor team members.

10.5-week summer internship in KeyBank's Enterprise Security Services. Interns support fraud, physical security, security portfolio, or business management teams performing data analysis, project and process support, security education, and reporting. Training includes security tools and business software, with mentorship and potential post-graduation rotational placement consideration.

10.5-week cybersecurity internship providing hands-on experience with information security teams. Interns support detection, analysis, and operational projects, use security and analytics tools, analyze transaction data for suspicious activity, receive mentoring and training, and may be considered for a post-graduate rotational analyst program.

Lead application security and DevSecOps initiatives by managing the security backlog, mentoring engineers, testing web and AI applications, and integrating security into CI/CD pipelines. Architect secure build processes, software supply chain controls, SBOM workflows, artifact signing, dependency management, threat modeling, secrets management, and container hardening. Collaborate with development teams to support secure, compliant software delivery in federal environments.

Designs, implements, and maintains security controls across Azure, GCP, and AWS environments. Manages cloud IAM, security posture, vulnerability remediation, policies, guardrails, and infrastructure security. Partners with engineering and DevOps teams on CI/CD and infrastructure-as-code security, conducts assessments, supports cloud incident response, develops SOC detection content, and documents security architectures. Requires three or more years of cloud security experience across at least two major cloud platforms.

Assesses clients’ operational technology security posture across manufacturing, energy, utilities, and critical infrastructure. Conducts stakeholder interviews, reviews OT documentation, evaluates environments against cybersecurity frameworks and regulations, develops maturity assessments and remediation roadmaps, and presents findings to technical teams and executives. Advises on OT security governance, policies, procedures, risk management, and compliance while supporting broader cyber risk advisory engagements.

Lead RMF execution and authorization efforts for classified cloud and AI-integrated systems. Develop and maintain SSPs, SARs, POA&Ms, and continuous monitoring documentation; assess NIST, DoD, CNSS, FedRAMP, cloud, container, and AI security controls. Conduct architecture reviews, threat modeling, vulnerability assessments, risk analysis, and security control assessments while coordinating with architects, developers, DevSecOps teams, customers, and third-party assessors.

Lead incident response for Azure Security Operations: manage and grow a SOC-focused engineering team, drive detection and response capability improvements, partner across engineering and product, apply automation and AI, communicate risk to executives, and hire and retain top security talent to protect Microsoft’s cloud at hyperscale.

Lead design and implementation of deploy-time policy-as-code controls across AWS, Azure, and GCP using OPA/Rego and Regula; translate baselines into enforceable Terraform-integrated policies; build reusable libraries, testing strategies, and CI/CD enforcement; lead and mentor a team delivering secure IaC and pipeline controls at enterprise scale.

Supports enterprise network security engineering initiatives, including Cisco ISE and Cisco SNA deployments, access control, authentication, threat visibility, testing, troubleshooting, and system implementations. The role develops security requirements, analyzes network behavior, manages deployment processes, identifies risks, and partners with technical and business stakeholders across a global enterprise network.

Leads cybersecurity monitoring, incident response, forensic investigations, vulnerability assessments, penetration testing, threat hunting, and remediation planning. Analyzes SIEM, EDR, DLP, and email security alerts to identify intrusions, lateral movement, persistence, and advanced threats. Supports cybersecurity policy, technology, risk management, and compliance activities. The role requires after-hours on-call availability and is performed in a hybrid setting.

Serves as the senior technical authority for enterprise cybersecurity architecture and engineering supporting a federal VA program. Leads security architecture reviews, threat modeling, risk and gap analyses, modernization, governance, requirements traceability, and secure implementation across cloud, health IT, network, data, identity, and emerging technologies. Advises government and technical leadership, guides multidisciplinary teams, develops architectural standards and recommendations, supports A&A and ATO activities, presents executive briefings, reviews deliverables, and mentors cybersecurity personnel.

Leads the university’s information security architecture and engineering strategy, including cloud, network, application, endpoint, data, identity, and AI security. Directs modernization through zero trust, DevSecOps, infrastructure-as-code, automation, and AI-enabled security. Builds and manages security architecture and engineering teams, establishes enterprise reference architecture, oversees technology selection, develops strategic roadmaps and business cases, manages security initiatives, and advises executive leadership on emerging risks and AI security.

Designs, deploys, operates, and maintains endpoint security solutions across workstations, servers, VDI, and mobile devices. Responsibilities include managing CrowdStrike Falcon, Symantec DLP, Skyhigh, and Zscaler technologies; monitoring telemetry and sensor health; troubleshooting endpoint issues; executing upgrades and migrations; supporting SIEM/SOAR integrations, malware coverage, automation, documentation, and security roadmap initiatives.

Leads the organization’s information security program, including security team management, policy development, risk assessment, vulnerability remediation, network and security tool oversight, incident response, compliance monitoring, employee training, and third-party vendor risk management. Advises leadership on cybersecurity posture and ensures security requirements align with IT objectives, regulatory obligations, business continuity plans, and organizational policies.

Designs and maintains security architectures, access controls, identity governance, segregation-of-duties policies, and SAP role administration across public-cloud SAP environments. Implements IAM, SSO, MFA, provisioning, vulnerability monitoring, compliance controls, and HANA security. Supports SAP security incident investigations and remediation while collaborating with cloud, SAP functional, GRC, and integration teams. The hybrid Dearborn role requires occasional travel to suppliers, test houses, and customer sites.