Top Cyber Security Jobs

Provides customer-facing presales cybersecurity expertise focused on OT and IoT environments. Advises executives, security teams, and procurement stakeholders; develops security services, sales collateral, use cases, system and network diagrams, and lab demonstrations. Educates sales teams, stays current on security technologies and trends, and supports consultative solution engagements involving industrial protocols, asset visibility, traffic analysis, segmentation, cloud security, and security frameworks.

Safeguard applications, cloud infrastructure, platforms, and organizational data through security engineering, monitoring, incident response, access management, vulnerability remediation, and policy compliance. The role develops recovery plans, operates secure cloud environments, manages COMSEC resources and cryptographic keys, secures websites and transactions, and provides security recommendations to government stakeholders.

Conducts cybersecurity governance, risk, compliance, privacy, third-party risk, audit, and control assessments. Maintains risk registers, corrective-action plans, evidence, policies, and security documentation in Archer GRC and related tools. Applies NIST, VITA, CIS, DoD, CJIS, HIPAA, PCI, FERPA, and FTI requirements. Coordinates audits, remediation, data-sharing reviews, training, executive reporting, incident governance, continuity planning, and emerging technology assessments while advising technical teams, business owners, vendors, and leadership.

Designs and operates Microsoft-focused security controls across cloud, identity, endpoints, data protection, and Microsoft 365. Leads identity and cloud investigations, incident response, threat hunting, detection engineering, privileged-access security, and data-exfiltration prevention. Develops playbooks, automates security workflows, supports post-incident remediation, and partners with legal, privacy, compliance, HR, IT, and security vendors. The role also mentors analysts and provides operational and executive reporting.

Provides Tier 2 cybersecurity support through security monitoring, incident response, vulnerability and endpoint management, identity and access management, security awareness training, compliance support, documentation, and reporting. The role investigates phishing, malware, and other incidents; administers Microsoft Defender XDR and related security tools; coordinates remediation; supports MFA and access reviews; and communicates security risks and remediation steps to internal and external stakeholders.

Serves as the principal security advisor for information systems supporting DoD collateral, SCI, and SAP environments. Leads RMF authorization activities, risk assessments, security policies, assessment plans, incident response, configuration management, vulnerability remediation, security training, and system recovery planning. Maintains authorization documentation, advises government program managers, coordinates with security stakeholders, and mentors cybersecurity personnel. The role requires extensive ISSM or ISSO experience, SAP expertise, current TS/SCI clearance, and the ability to obtain a CI polygraph.

Performs cybersecurity risk management and ISSO activities for a government defense program. Supports ATO, ATC, IATT, RMF, ST&E, audits, vulnerability management, continuous monitoring, POA&M tracking, security control validation, architecture reviews, and risk assessments. Conducts STIG and ACAS audits across Linux, Windows, network, and virtualization environments; evaluates security-related change requests; communicates threats and risks; mentors junior staff; and processes ITSM tickets.

Conduct security audits, RMF control assessments, and continuous monitoring for government IT systems. Review SSPs, POA&Ms, and security evidence; evaluate controls against NIST, DoD, and organizational requirements; analyze system changes and vulnerabilities; recommend remediation; support ATO maintenance; and brief stakeholders on risks and compliance. The role requires onsite work five days per week in Falls Church, Virginia, an active Secret clearance, U.S. citizenship, and less than 10% travel.

Own day-to-day security administration and compliance operations, including access governance, security control maintenance, audit readiness, Vanta administration, evidence management, finding remediation, customer security reviews, and FedRAMP preparation. The role partners with Engineering, SRE, business teams, auditors, and external specialists to improve security workflows, documentation, monitoring, and risk visibility.

Leads global strategy, engineering, deployment, and operations for enterprise PKI, cryptography, and certificate lifecycle management. Oversees certificate authorities, HSMs, key management, automation, compliance, cloud integration, incident response, vendor relationships, and cryptographic risk. Manages security engineering teams and ensures highly available, compliant trust services across cloud, on-premises, and IoT environments.

Supports enterprise cybersecurity governance, risk, compliance, privacy, and security assurance activities. Conducts risk assessments, control reviews, business impact analyses, data classification, vendor risk reviews, audits, and remediation tracking. Maintains risk registers and evidence in Archer GRC, develops policies and reports, supports security awareness, incident and continuity governance, and evaluates emerging technology and AI risks. Advises technical teams, business owners, vendors, auditors, and executives on security and compliance requirements.

Supports federal cybersecurity programs by implementing and monitoring security controls, conducting RMF activities, performing risk and compliance assessments, managing vulnerabilities, and coordinating remediation. The role maintains security documentation, supports audits and authorization activities, monitors security posture, develops metrics and dashboards, and assists with incident response and forensic efforts across classified and unclassified environments.

Embed security throughout the software development lifecycle by partnering with engineering teams, reviewing code, identifying vulnerabilities, and implementing application security improvements. Perform offensive and defensive security activities, integrate SAST, DAST, SCA, and other controls into CI/CD pipelines, assess cloud infrastructure, and advise technical and non-technical stakeholders on secure design, authentication, authorization, and risk reduction.

Develop and deploy enterprise ServiceNow security solutions across Security Operations and Integrated Risk Management. Configure SIR, Vulnerability Response, Configuration Compliance, and CAM modules; build automated workflows and integrations with security tools such as Splunk, Tenable, and Qualys. Develop JavaScript and GlideScripting logic, implement access controls for sensitive data, support NIST RMF requirements, and validate solutions using the Automated Test Framework. Requires active TS/SCI with Polygraph clearance, Security+ certification, and at least five years of technical experience.

Administer and support secure hybrid enterprise environments, including Active Directory, Entra ID, RBAC, identity lifecycle management, Windows Server, Power Platform, mobile access, and privileged accounts. Troubleshoot LAN hardware and software, perform technical diagnostics, resolve operational issues, and provide technical assistance to agency staff. The role supports access management across more than 66,000 user accounts, 4,200 groups, and 300 enterprise applications.

Lead threat and vulnerability management across enterprise endpoints, servers, networks, cloud assets, and potentially SAP environments. Assess vulnerabilities, integrate threat intelligence, prioritize risks, automate detection and remediation workflows, coordinate mitigation with security and technology teams, and report risk to technical and executive stakeholders. The role also optimizes security tools and processes, monitors emerging threats, and mentors junior analysts.

Lead product and infrastructure cybersecurity, vulnerability management, customer and vendor security assurance, regulatory compliance, audits, incident response support, and security reporting for connected healthcare technologies. Partner with engineering, IT, hospital security teams, and external vendors while maintaining controls across the product lifecycle and Azure environments.

Supports enterprise IT security operations by maintaining security applications and controls, managing risk and resilience, developing security procedures, contributing to threat operations and cybersecurity awareness, enforcing policies, and communicating technical security concepts to business and technology stakeholders.

Supports cybersecurity compliance and authorization for systems handling CUI and sensitive information. Maintains CMMC, NIST, DFARS, and related controls; manages SSPs, POA&Ms, risk assessments, evidence, vulnerabilities, audits, access controls, monitoring, and incident response. Reviews vendors and technologies, coordinates remediation, maintains security policies, and collaborates with IT, leadership, assessors, and business stakeholders.

Lead product strategy, roadmap, and delivery for AI-native security experiences. Partner with engineering, security research, design, and data science teams to translate emerging technologies into customer value. Establish operational readiness practices covering release governance, risk management, quality reviews, incident learning, executive readiness, onboarding, adoption, and partner success. Drive complex cross-organizational programs and ensure scalable, reliable launches and measurable customer outcomes.

Design, build, and operate scalable security data platforms and ingestion pipelines. Develop identity management features, troubleshoot distributed production systems, improve reliability and performance, analyze telemetry, and implement automated validation, staged deployments, CI/CD, and AI-assisted engineering practices. Collaborate with engineers, product managers, customers, and cross-functional teams to deliver secure, efficient, cloud-native services.

Conduct original security research with Microsoft Research mentors and fellow doctoral candidates. Investigate secure and trustworthy software and cloud services across systems security, confidential computing, formal verification, zero-knowledge proofs, data-driven security, and agentic security. Build or extend complex software, collaborate with researchers, present findings, and contribute to research and development during a 12-week internship.

Monitor, prioritize, and remediate endpoint vulnerabilities based on risk and business impact. Support elevated privilege management, application allowlisting, endpoint configuration reviews, software risk assessments, security reporting, documentation, and automation. The role partners across technical teams to strengthen endpoint security controls, validate remediation, and stay current on emerging threats and security technologies.

Lead cryptographic security assessments of protocols, libraries, applications, and high-assurance systems. Analyze advanced cryptographic constructions, identify design and implementation weaknesses, validate exploitability, and recommend remediation. Build testing and analysis tools, manage client delivery, write precise technical reports, mentor engineers, contribute to methodologies and services, and support open-source research and technical publications.

Owns the Risk Management Framework lifecycle and cyber assurance program for classified information systems. Ensures regulatory compliance, coordinates audits, builds GRC capabilities, partners with engineering teams to automate security assessment and enforcement, and supports authorization to operate under DoD or DOE boundaries. The role also develops classified-space processes, implements export-control and access restrictions, manages compliance risk, and works with government partners. Requires 3+ years managing cyber assurance for classified networks and eligibility for a DOE Q-level clearance.