Top Cyber Security Jobs

Leads IT security and infrastructure strategy, operations, risk assessments, incident response, cloud security, vendor management, budgets, standards, and technology projects. Oversees infrastructure across servers, networks, cloud services, manufacturing sites, warehouses, offices, and global IT operations. Manages teams and collaborates with business leaders, vendors, and international IT stakeholders to ensure secure, reliable, scalable, and compliant technology environments.

Manage operational, security, and compliance risks; evaluate controls, oversee risk acceptance and issue lifecycles, and drive remediation. Build automated Python, API, and AI-agent workflows to scale risk operations. Develop risk analytics, KRIs, KPIs, assessment methodologies, and executive reporting while advising stakeholders on security controls, regulatory frameworks, and risk governance.

Manages IT security projects, infrastructure, audits, compliance, security alerts, risk remediation, disaster recovery, and technology integrations. Coordinates with vendors, global IT teams, and local resources while supporting cloud, infrastructure, and workplace technology. Ensures alignment with ISO 27001, HITRUST, ISMS, client requirements, and organizational security policies. The role also provides technical guidance, documentation, training, and support for site expansions and multi-location IT operations.

Conduct enterprise vulnerability assessments, optimize Nessus scanning, prioritize and govern remediation, coordinate patching and retesting, review firewall, endpoint, cloud, IAM, and network security controls, support penetration testing, and produce dashboards, reports, runbooks, and security documentation. The role requires on-site work in Washington, DC three days weekly, after-hours support, periodic local travel, and eligibility for a Tier 2 Public Trust.

Investigate and respond to cybersecurity events across endpoint, network, email, cloud, and other telemetry sources. The analyst will perform alert triage, incident investigation, threat hunting, evidence correlation, documentation, escalation, and containment support. They will also improve detection content, playbooks, workflows, and automation while collaborating with global stakeholders. This 24x7 SOC role requires rotating days, weekends, and holidays, plus continuous learning and operational improvement.

Investigate complex cybersecurity incidents from triage through remediation, correlate evidence across security and cloud telemetry, tune detections, develop playbooks and automation, conduct threat hunting, and improve SOC processes. Serve as a technical escalation point, mentor analysts, document investigations, and communicate findings to technical and business stakeholders. The role supports a 24x7 global SOC with rotating shifts, including weekends and holidays.

Perform automated and manual application security analysis (SAST, SCA, fuzzing, code reviews), integrate and tune security tooling in CI/CD/DevSecOps pipelines, support developers with remediation and secure design, conduct threat modeling, document findings, and stay current on vulnerabilities and mitigation strategies.

Lead the design, implementation, and maintenance of secure IT infrastructure. Harden Windows systems, Active Directory domains, hypervisors, and security configurations; manage PKI and Group Policy; conduct threat monitoring, vulnerability assessments, incident response, and digital forensics. Develop security controls, document breaches, evaluate security technologies, and mentor junior engineers. The role requires an active Secret clearance, ability to obtain Top Secret with SCI eligibility, and occasional travel.

Leads Community Transit’s technology infrastructure and cybersecurity strategy, including networks, data centers, VoIP, security controls, incident response, disaster recovery, compliance, vendors, budgets, and enterprise IT projects. Directs infrastructure and security operations, advises executive leadership, manages cybersecurity incidents, develops technical staff, and establishes standards for resilient and secure technology environments.

Supports U.S. Air Force cyber defense by analyzing network activity, identifying mission-relevant cyber terrain, assessing vulnerabilities, correlating alerts, investigating incidents, and developing risk mitigation and defense strategies. The role conducts trend analysis, maintains system databases, coordinates with cyber defense teams and base subject matter experts, documents incidents, and provides recommendations and courses of action for protecting critical infrastructure.

Provides strategic leadership for enterprise cybersecurity architecture, including cloud, application, network, identity, data, endpoint, AI, and third-party security. Defines security standards, reference architectures, controls, and roadmaps; conducts threat modeling and architecture reviews; supports Zero Trust and secure-by-design initiatives; advises business and technology leaders; and improves compliance, cyber resilience, detection, and risk management across the organization.

Designs and maintains cloud security controls across AWS and Azure, including Terraform and Python automation, posture hardening, and account guardrails. Owns vulnerability management, detection tuning, SIEM and log-ingestion pipelines, container scanning, and incident response participation. Partners with engineering and product teams on architecture, authentication, application security, and code reviews. Supports FedRAMP and other compliance programs through documentation, evidence collection, monitoring, training exercises, and customer security questionnaires.

Leads security architecture across cloud, on-premises, data, APIs, and AI/ML environments. Designs security patterns, standards, and zero-trust architectures; strengthens identity, encryption, threat detection, vulnerability management, SIEM, and incident response capabilities. Partners with development, operations, business, and enterprise architecture teams to align security with business objectives. Secures machine learning models and pipelines against adversarial attacks while supporting regulatory compliance and risk management.

Performs security testing and penetration testing across Honeywell building automation products and partner technologies. Uses application, network, firmware, and hardware security tools to identify vulnerabilities, develop repeatable testing processes, automate assessments, document findings, and recommend remediation. Collaborates with product security, tools, technology, and cross-functional engineering teams while monitoring emerging threats and supporting secure-by-design practices.

Develop and formalize methods to validate reported vulnerabilities and generate/verify safe patches for internal NVIDIA targets. Define correctness, regression, and revalidation standards; produce repeatable, auditable processes and evidence. Apply AI-assisted workflows cautiously, perform bounded applied research on vulnerability classes, and document findings for independent security review.

Build and operate security controls, telemetry, detections, and enforcement for NVIDIA’s large-scale EDA compute, storage, and networking infrastructure across on-premises and multi-cloud environments. Investigate threats, respond to incidents, automate secure configurations and compliance evidence, threat-model infrastructure, and manage security technology lifecycles. The role requires hands-on Linux, networking, programming, infrastructure security, and collaboration with infrastructure and security teams.

Supports the Executive Airlift Communications Network’s RMF and ATO lifecycle by maintaining ITIPS records, eMASS artifacts, security documentation, POA&Ms, vulnerability remediation, continuous monitoring, and authorization activities. Coordinates with ISSMs, ISSOs, SCAs, government engineers, and program leadership while preparing compliance reports and briefings. The role is full-time, on-site at Scott Air Force Base and requires TS/SCI clearance, U.S. citizenship, and DoD IAM Level II certification.

Maintains the operational security posture of classified information systems supporting Collateral, SCI, and SAP environments. Responsibilities include authorization package management, compliance reviews, audit monitoring, configuration change impact analysis, vulnerability identification, incident handling, security documentation, system recovery oversight, and coordination with ISSMs and authorizing officials. The role requires SAP experience, TS/SCI clearance, eligibility for a CI polygraph, and onsite work in Massachusetts.

Conduct security testing and penetration assessments across Honeywell building automation products and partner technologies. Identify security defects, evaluate product security posture, recommend remediation, and help develop repeatable testing processes. Collaborate with tools and technology teams to select, implement, and automate security testing tools, while reporting findings consistently and supporting secure product development.

Provides senior cybersecurity support for complex federal information systems. Leads RMF execution, security control implementation and assessment, compliance documentation, eMASS management, continuous monitoring, vulnerability tracking, and configuration management. Advises system owners, Authorizing Officials, and stakeholders on cybersecurity risks and controls across high-impact environments.

Leads cybersecurity programs for assigned systems and environments, overseeing compliance, risk management, authorization, continuous monitoring, vulnerability management, and audit support. Serves as the primary government interface, manages ISSOs and contractor resources, develops program plans, controls budgets, mitigates risks, and ensures timely, high-quality contract deliverables. Requires federal cybersecurity governance expertise, DoD IAM Level III certification, a bachelor’s degree, substantial related experience, and eligibility for Top Secret/SCI access.

Provides senior cybersecurity support for complex federal information systems. Leads Risk Management Framework execution, security control implementation and assessment, authorization activities, continuous monitoring, vulnerability tracking, and configuration management. Maintains RMF documentation and system security data in eMASS, advises system owners and stakeholders on risk, and coordinates with Authorizing Officials. The role requires classified-information access eligibility, U.S. citizenship, DoD 8570 IAT Level II certification, and substantial related experience.

Leads cybersecurity programs for assigned systems and environments, overseeing governance, risk management, security authorization, continuous monitoring, vulnerability management, compliance, and audit support. Serves as the primary government interface, directs ISSO and contractor activities, manages staffing and resources, oversees program finances and risks, and ensures timely, high-quality contract deliverables. Requires U.S. citizenship, Top Secret/SCI eligibility, DoD 8570 IAM Level III certification, a bachelor’s degree, and extensive cybersecurity or related experience.

Leads federal cybersecurity compliance and authorization activities across the NIST RMF lifecycle. Develops and assesses security controls, authorization packages, POA&Ms, continuous monitoring practices, vulnerability remediation, and architecture reviews. Uses Xacta, ServiceNow, and Tenable to govern risk, compliance, and security evidence. Advises engineering, operations, executives, system owners, and government stakeholders on residual risk, Zero Trust, and secure system changes.

Supports Navy cybersecurity Assessment and Authorization activities by developing and maintaining RMF documentation, SSPs, SARs, and POA&Ms. Manages artifacts and system information in eMASS or MCCAST, supports security reviews and IV&V events, performs continuous monitoring, and helps remediate vulnerabilities under DISA STIG and IAVM requirements. The role requires active Top Secret clearance, DoD RMF expertise, cybersecurity certifications, and experience defending accreditation packages to authorizing officials.