Top Cyber Security Jobs

Leads Trace3’s Security Solutions practice, developing go-to-market strategy, security offerings, AI-enabled services, presales execution, partner relationships, and complex client engagements. Owns revenue, gross profit, forecasting, pipeline, and operating-plan performance. Advises executive leadership, supports assessments and proof-of-concepts, communicates with technical and executive audiences, and leads, coaches, and develops practice teams.

Maintains system security posture and authorization by managing RMF documentation, ATO packages, NIST 800-53 and FedRAMP control evidence, POA&Ms, continuous monitoring, assessments, audits, security baselines, and risk reporting. Coordinates with ISSMs, security teams, DevSecOps, clients, and stakeholders to remediate findings and maintain federal compliance.

Conducts comprehensive security control assessments for Collateral, SCI, and SAP information systems using RMF and JSIG methodologies. Evaluates authorization packages, threats, vulnerabilities, continuous monitoring, system changes, hardware, software, and SDLC compliance. Advises system owners, security officers, and authorizing officials; prepares Security Assessment Reports and POA&Ms; supports inspections and cybersecurity incidents; and recommends authorization decisions and corrective actions.

Conduct security control assessments for Collateral, SCI, and SAP information systems using RMF and JSIG. Evaluate security controls, threats, vulnerabilities, authorization packages, system changes, hardware, software, and continuous monitoring plans. Prepare Security Assessment Reports and POA&Ms, advise government and authorization officials, support inspections and cybersecurity incidents, and recommend authorization decisions and corrective actions.

Leads Sentinel System Security Engineering supply chain risk management across hardware, software, firmware, suppliers, and services. Develops and executes SCRM plans, assesses and mitigates risks, flows security requirements to suppliers, prevents counterfeit components and tampering, and integrates threats, obsolescence, and DMSMS considerations. Manages engineering resources, budgets, schedules, earned value, technical reviews, staffing, performance evaluations, and team development while coordinating with program, procurement, quality, configuration management, and customer stakeholders.

Leads the cybersecurity operations program, overseeing monitoring, incident response, vulnerability management, threat intelligence, endpoint security, identity protection, and security controls. Manages security technologies, vendors, incident playbooks, compliance support, dashboards, and on-call processes while protecting regulated healthcare and financial information. Partners with IT, compliance, legal, privacy, risk, and executive teams, and leads and develops security operations personnel.

Implements and improves security controls across cloud, endpoint, network, identity, and application environments. Manages security technologies, investigates alerts and incidents, develops detections and response workflows, performs vulnerability management, and supports penetration testing. The role secures Azure and AWS environments, assists with IAM and CI/CD security, analyzes logs and forensic evidence, and supports compliance audits involving HIPAA, HITRUST, SOC 2, and PCI-DSS. It partners with technical and GRC teams to remediate risks and maintain security documentation.

Leads Generac’s enterprise-wide product security strategy across connected energy products, software, and digital services. Establishes IEC 62443-based governance and secure development lifecycle practices, including threat modeling, secure coding, security testing, SBOM, vulnerability management, and certification readiness. Builds product security incident response and coordinated vulnerability disclosure capabilities, manages global regulatory compliance, and advises executives, boards, customers, auditors, and regulators. Builds and develops a high-performing product security organization while embedding security champions across engineering teams.

Designs, governs, and improves secure enterprise architectures across cloud, hybrid, and on-premises environments in a regulated financial setting. Responsibilities include threat modeling, security design reviews, architecture risk assessments, shift-left security integration, encryption and PKI strategy, HSM and key management oversight, certificate lifecycle automation, regulatory compliance, audits, and control validation. The role collaborates with engineering, infrastructure, legal, risk, product, and business teams to translate security risks into actionable architectural requirements.

Manages security activities for designated programs, integrating security into business capture, proposals, and program execution. Oversees NISP compliance, classified-program regulations, contractual security documentation, Security Classification Guides, secure-area administration, training, recordkeeping, and policy development. Coordinates with government agencies, customers, suppliers, program protection teams, leadership, and business development. Reviews requirements, resolves compliance conflicts, and develops security infrastructure supporting defense and engineering programs.

Own Watcher’s product security posture, including identity and access management, cloud and infrastructure security, endpoint management, incident response, vendor assessments, and security standards. Lead security projects, customer security questionnaires, whitepapers, penetration-test support, and incident communications. Partner with customers and product teams to understand enterprise security needs, shape the security roadmap, and prioritize controls for coding-agent deployments handling sensitive data.

Leads security engineering and the full RMF and ATO lifecycle for mission-critical cloud and on-premises systems. Implements NIST controls, manages POA&Ms, vulnerability assessments, patching, continuous monitoring, contingency planning, and security inspections. Reviews technical changes, oversees AWS and Azure security, authors cybersecurity documentation, and briefs risks to stakeholders while coordinating with developers, systems engineers, SCAs, and DAOs.

Supports the cybersecurity team through vulnerability data analysis, phishing and social engineering campaigns, ethical hacking, threat monitoring, identity and access management, tabletop exercises, cyber strategy development, privacy, and data protection. The 10-week hybrid internship provides practical cybersecurity experience and professional development in Raleigh, North Carolina.

Leads information security policy, systems security teams, risk assessments, vulnerability analyses, incident response, security projects, compliance activities, and executive security reporting. The role manages A&A and continuous monitoring for classified USAF systems, implements security technologies, mentors staff, and collaborates across functions to strengthen the organization’s security posture. It requires extensive IT security experience, relevant certifications, and an active Top Secret clearance with SCI eligibility.

Own federal security and compliance workstreams for a FedRAMP High program, including control implementation, evidence collection, continuous monitoring, vulnerability remediation, risk tracking, audit readiness, authorization artifacts, and customer assurance. Partner with technical and business teams to close remediation items and support compliance-as-code using machine-readable artifacts, automation, validation, and document generation.

Leads digital forensics investigations supporting cybersecurity incidents, legal matters, compliance reviews, and employee misconduct inquiries. Collects, preserves, analyzes, and documents evidence across enterprise systems while maintaining chain of custody. Performs forensic triage, root-cause analysis, timeline reconstruction, and artifact analysis; supports incident response and prepares defensible reports. Partners with Legal, HR, Compliance, and Audit, evaluates forensic methods and tools, provides expert testimony when needed, and mentors junior analysts.

Own Connexure’s information security program, including strategy, policies, risk management, security architecture, tooling, SOC 2 and HITRUST certification oversight, client and vendor due diligence, AI governance, and incident response. Lead the Security Analyst, manage security vendors, partner with Engineering, Sales, Legal, and executives, and report security posture and material risks to leadership and the board.

Design, implement, maintain, and support cybersecurity tools and platforms, including EDR, DLP, web proxy, messaging security, vulnerability management, and identity and access management. Develop security playbooks and troubleshooting documentation, assist with incident response, collaborate across teams, and improve the confidentiality, integrity, and availability of systems and data.

Designs, implements, maintains, and supports information security tools and platforms protecting systems, networks, and data. Performs security engineering, operations, vulnerability management, incident management, threat intelligence, threat hunting, and cyber threat analytics. Manages EDR, DLP, web proxy, messaging, vulnerability management, and identity-access tools; develops playbooks and troubleshooting documentation; and assists with incident response while collaborating cross-functionally to improve security posture.

The Senior ISSO monitors and assesses information-system compliance, conducts audits and technical assessments, develops security plans, investigates security violations, and documents corrective actions. The role reviews configuration-management requests, implements cybersecurity processes and tools, supports security documentation and technical writing, and provides security education. Work is fully onsite in Dulles, Virginia, supporting classified defense environments and compliance with NIST, NISPOM, DAAPM, JSIG, RMF, STIG, and related government requirements.

Serves as the technical authority for corporate security engineering, detection infrastructure, threat visibility, and security strategy. Builds alerting and automation, manages endpoint, identity, data exposure, phishing, vulnerability, and DLP risks, and establishes scalable workflows for triage, escalation, reporting, and incident response. Partners with IT leadership, conducts threat hunting and security assessments, develops executive metrics, and leads strategic global security initiatives.

Provide fractional cybersecurity advisory and hands-on operations for hedge funds and family offices: conduct assessments, run vulnerability management and incident response, implement policies and controls, monitor logs and network traffic, test BCDR plans, advise on vendor selection, and report KPIs and remediation plans.

Serve as a fractional CISO advising alternative asset firms and family offices on building, maintaining, and operating full cybersecurity programs. Provide hands-on leadership, risk assessment, policy and controls development, and program execution on project-based engagements.

Designs and develops secure cloud-native integration services, APIs, and automation supporting access management, encryption, security platforms, and hybrid cloud environments. Builds containerized applications with Kubernetes, CI/CD, Infrastructure as Code, and DevSecOps practices. Contributes to security architecture, risk assessments, vulnerability response, incident planning, technical escalations, reporting, and merger and acquisition initiatives while serving as a senior information security subject matter expert.

Designs, builds, and operates enterprise security platforms including SIEM, EDR, IAM, and CSPM. Owns logging and detection pipelines, incident response tooling, vulnerability integrations, cloud security guardrails, identity workflows, and network and endpoint controls. Translates compliance frameworks into technical controls, supports audits, evaluates security technologies, mentors team members, and participates in on-call support.