Top Cyber Security Jobs

Build and maintain software for public-sector customers while strengthening FSH’s security and compliance posture. The role involves adapting penetration testing and software auditing practices, collaborating with auditors and security vendors, establishing validation frameworks, and automating compliance processes across customized applications. Engineers also gather customer feedback, iterate quickly, and help define engineering culture.

Leads AT&T’s enterprise vulnerability management program using Tenable Security Center, overseeing scanning, asset coverage, finding analysis, remediation, exceptions, reporting, and continuous improvement. Integrates vulnerability data with Xacta 360 and ServiceNow to support POA&M management, continuous monitoring, compliance evidence, and authorization activities. Applies FISMA, NIST RMF, and NIST SP 800-53 requirements while partnering with infrastructure, security operations, compliance, and government stakeholders. The role also provides technical guidance across identity, servers, networks, logging, and cloud security environments.

Provides multidisciplinary security support for Special Access Programs, SCI, and collateral activities. Ensures compliance with NISPOM, DoD, SAP, and related security policies; identifies vulnerabilities and risks; conducts facility compliance reviews and investigations of classified information compromises; develops security procedures and training; tracks corrective actions; briefs personnel; and mentors security team members. Requires extensive regional travel and coordination with government, military, and industry stakeholders.

Build, mature, and support security capabilities across identity and access management, cloud security, vulnerability management, GRC, and incident response. Own security initiatives, evaluate security environments, identify risks, and strengthen the organization’s security posture. Partner with leadership and cross-functional teams to integrate security requirements into projects and technology decisions. This is a fully on-site individual contributor role in Columbus, Ohio.

Designs and improves identity and access management, authentication, privileged access, cloud security, and Zero Trust capabilities. Develops security automation and integrations, evaluates applications and cloud services, and provides hands-on security engineering support for enterprise initiatives. Collaborates with technology and business partners to implement secure identity solutions across organizational systems.

Embed security throughout the software development lifecycle by partnering with engineering teams, designing secure systems, performing code reviews, identifying vulnerabilities, integrating security tooling into CI/CD pipelines, and reducing application risk. The role requires offensive and defensive security expertise, software engineering fundamentals, cloud security knowledge, and strong communication skills.

Designs, implements, and operates security controls across Oracle Cloud and hybrid environments. Responsibilities include cloud security architecture, workload hardening, IAM and identity federation, vulnerability management, compliance programs, SIEM integration, incident response, and security automation. The engineer will use Python, Bash, and Terraform, collaborate with cross-functional teams, conduct design and code reviews, and mentor junior engineers.

Designs and operates security and access-control frameworks across complex SAP landscapes. Responsibilities include SAP role design, user provisioning, segregation-of-duties analysis, GRC Access Control and Process Control administration, audit support, remediation, and securing Fiori, BTP, and cloud SAP applications. The role partners with audit, compliance, and business teams to maintain secure and auditable environments.

Design and operationalize security architecture, governance patterns, and technology guardrails for enterprise AI platforms, agentic systems, cloud, SaaS, and emerging technologies. Create reference architectures, diagrams, threat models, security requirements, standards, and implementation guidance. Partner with engineering, identity, application security, infrastructure, data, risk, and architecture teams to assess designs, facilitate technical reviews, evaluate emerging technologies, and enable secure AI adoption at scale.

Leads enterprise cybersecurity engineering efforts, including security requirements, architecture, system design, development, configuration, and technology evaluations. Guides development teams through systems development lifecycles, translates regulations into security processes, documents security roadmaps, and oversees junior, mid-level, and senior cybersecurity engineers. The role focuses on cloud and on-premises environments, automation, artificial intelligence, and advanced cybersecurity solutions.

Leads enterprise cyber threat intelligence capability development and maturity. Performs advanced collection, OSINT, dark web research, threat actor profiling, structured analysis, and intelligence production. Translates cyber, physical, operational, insider, reputational, and business risks into actionable assessments for Cyber Defense and enterprise leaders. Mentors analysts, supports threat hunting and investigations, engages government and law-enforcement partners, and advises stakeholders through executive briefings and risk assessments.

Leads application security engineering and threat research across cloud and enterprise environments. Partners with development and platform teams on secure SDLC practices, threat modeling, vulnerability analysis, security architecture, automation, incident response, and remediation. Researches emerging threats, implements application and data security controls, supports cloud-native environments, mentors practitioners, communicates findings, and improves security programs through tooling, research, and process innovation.

Manages cloud information-system security for classified Department of War environments at Impact Level 7. Leads RMF and ATO activities, develops SSPs, SARs, and POA&Ms, assesses cloud, container, and AI/ML security risks, and coordinates control assessments and continuous monitoring. Collaborates with architects, developers, and DevSecOps teams to integrate security throughout the SDLC. Requires active Top Secret clearance, extensive cybersecurity and RMF experience, and hands-on cloud security expertise.

Manages and hardens enterprise network security controls across data centers, offices, call centers, and cloud environments. Owns Fortinet platforms, Darktrace NDR, FireMon policy management, VPN access, firewall reviews, SIEM integrations, PCI DSS compliance evidence, incident response, vendor relationships, documentation, and security workstreams for network, data center, and cloud projects.

Drive technical discovery, gap analysis, and security architecture validation for Google Cloud, Google Workspace, and ServiceNow GCC-High ATO modernization. Evaluate environments against NIST SP 800-53 Revision 5, DoD IL-4, and FedRAMP requirements; identify control gaps and risks; validate inherited and shared responsibilities; collect technical evidence; and develop accurate RMF control narratives and reports. The role also performs human validation of AI-assisted technical content and supports cohesive authorization packages.

Leads cybersecurity governance for an enterprise program, organization, system, or enclave. Advises leadership on security posture, risk, cost, compliance, and resource allocation; oversees security architecture, assessments, audits, incident response, remediation, continuity planning, training, procurement, and supply chain risk management. Develops policies, procedures, reports, and cybersecurity requirements while coordinating inspections, authorizations, vulnerability mitigation, and protective measures.

Design, administer, optimize, and support enterprise endpoint security platforms across a global environment. The role develops security baselines, hardening standards, automation workflows, and detection capabilities; investigates security events; supports incident response; evaluates security technologies; and partners with Cyber Operations, Infrastructure, Desktop Engineering, Identity, and DevOps/SecOps teams. Responsibilities include managing EDR, PAM, firewall, device control, API integrations, and security projects while improving overall endpoint security posture.

Designs and manages enterprise network and cybersecurity infrastructure, including routing, switching, VPNs, firewalls, SIEM, vulnerability management, incident response, and security controls. Oversees service providers, vendors, SLAs, circuits, installations, equipment, patching, outages, documentation, compliance, and infrastructure availability. Provides on-site support, approves configurations, leads threat detection and remediation, and manages related projects, budgets, and continuous improvements.

Leads cybersecurity governance, RMF implementation, authorization activities, continuous monitoring, vulnerability management, and DoD compliance for information systems and mission environments. Oversees SSPs, SARs, POA&Ms, security assessments, audits, risk mitigation, and authorization readiness. Coordinates with ISSOs, system owners, engineers, assessors, and government stakeholders while mentoring cybersecurity personnel. Evaluates security risks for cloud, AI, autonomous systems, prototypes, and emerging technologies.

Supports Account Executives and senior engineers in qualifying, positioning, and solutioning Application Security and AI security opportunities. The role involves customer discovery, explaining security risks and architectural tradeoffs, demonstrating solutions, developing proposals and Statements of Work, researching emerging technologies, and participating in sales events. It focuses on DevSecOps, secure SDLC, AppSec, AI security, AI governance, and related technologies, with up to 25% travel.

Designs and implements cybersecurity architectures, requirements, countermeasures, and vulnerability mitigations for FBI information systems and network environments. The role integrates security with cross-domain solutions, develops secure network designs, ensures confidentiality and integrity, and supports FBI-directed vulnerability remediation. Requires a Top Secret clearance, DoD 8140-compliant cybersecurity certification, familiarity with security assessment tools, and substantial education and experience in cybersecurity or a related discipline.

Manages FBI information system security authorization and assessment processes, including security categorization, control baselines, SSP reviews, testing, ATO packages, interconnection agreements, vulnerability and residual-risk reporting, POA&M completion, reauthorization, and system decommissioning. Advises Authorizing Officials and coordinates with system owners and security teams. Requires extensive ISSR and cybersecurity experience, Top Secret clearance, recognized security certification, and willingness to complete a CI polygraph.

Leads enterprise identity, privileged access, network security, segmentation, and Zero Trust programs across corporate, cloud, manufacturing, and operational technology environments. Owns security roadmaps, controls, audits, risk remediation, budgets, vendors, policies, and operational outcomes. Builds and manages technical teams, governs identity and firewall capabilities, supports regulatory readiness, and guides executive decisions on cybersecurity risk and investment.

Designs, develops, and implements cybersecurity architectures, network security controls, vulnerability mitigations, and security-enabled systems supporting the FBI. The role defines information system security requirements, integrates Cross Domain Solutions, develops interface specifications, and ensures hardware, operating systems, applications, and networks meet cybersecurity requirements. Requires Top Secret clearance, CI Poly eligibility, relevant cybersecurity experience, security-tool familiarity, and an approved cybersecurity certification.

Leads enterprise-wide cybersecurity strategy, architecture, governance, and operations. Builds security culture and high-performing teams while overseeing cloud, identity, data, threat, incident response, resilience, and third-party security. Advises executives on cyber risk and investments, advances AI-driven security and responsible AI governance, and demonstrates measurable business value through improved resilience, trust, and innovation enablement.