Top Cyber Security Jobs

Leads federal information security, privacy, and GRC activities across the RMF lifecycle, including ATOs, continuous monitoring, risk assessments, authorization packages, remediation, incident response, contingency planning, privacy compliance, audits, and stakeholder advising. The role requires managing multiple initiatives, producing audit-ready documentation, and ensuring compliance with FISMA, NIST, OMB, CJIS, and federal privacy requirements.

Conduct security control assessments for federal information systems across RMF assessment, authorization, and monitoring activities. Develop assessment plans, test cases, findings, recommendations, and risk analyses; review vulnerability, penetration testing, and configuration scan results; assess residual risk and false positives; and produce Security Assessment Reports and authorization briefings. Collaborate with technical teams, system owners, and stakeholders while ensuring compliance with FISMA, NIST, and agency requirements.

Lead insider risk detection engineering and investigations using EDR/XDR, UEBA, SIEM, and SOAR tools. Refine detection rules, reduce alert noise, close coverage gaps, manage investigations, develop playbooks, document evidence, mentor analysts, and collaborate discreetly with HR, Legal, business leaders, and executives. The role also requires investigative workflow automation using Python or JavaScript and ownership of scalable security processes.

Monitors and investigates Tier-2 security events across corporate IT and OT/ICS environments, including SCADA systems. Tunes detections, performs forensic analysis, manages vulnerabilities, supports penetration testing, and coordinates remediation. Maintains MFA, SSO, access reviews, security documentation, audit evidence, and compliance activities aligned with NIST, TSA, C2M2, and NERC CIP. The role also supports incident response, tabletop exercises, awareness training, disaster recovery, and security on-call operations.

Lead product and application security strategy for the Endor Labs platform. Build scalable security tooling and automation, validate and remediate vulnerabilities, prevent insecure code merges, and apply LLMs and AI agents to security workflows. Conduct threat modeling and secure design reviews, secure CI/CD and build systems, influence product roadmaps, and collaborate with engineering, product, customers, and security stakeholders.

Leads the enterprise information security program, including security strategy, governance, risk management, compliance, incident response, business continuity, disaster recovery, third-party risk, audits, metrics, and executive reporting. The role manages security initiatives, vendors, and teams while advising leadership on threats and promoting organizational security awareness.

Supports F-16 program security for the Air Force by protecting classified information, personnel, facilities, systems, critical program information, and weapon-system technology. Responsibilities include security compliance, SAPF administration, clearance tracking, COMSEC accountability, system vulnerability assessments, program protection planning, ATO support, OPSEC, threat and criticality analysis, contractor security requirements, and domestic and international site surveys. The role advises program offices, develops security documentation, evaluates classified systems, and recommends risk-based countermeasures.

Designs and operates cloud security guardrails across AWS, GCP, and Azure. Responsibilities include secure architecture, IAM, network segmentation, encryption, secrets management, IaC and CI/CD security, automation, CSPM, logging, detection, incident response, and compliance evidence. The role requires hands-on DevOps or platform experience, production security across multiple cloud providers, coding and scripting, Terraform or OpenTofu, and strong collaboration with engineering teams.

Perform information systems security and risk management activities, including vulnerability assessments, STIG mapping, POA&M development, RMF accreditation documentation, vulnerability management, incident reporting, and security control implementation. Use ACAS, HBSS, eMASS, and other security tools to support system authorization and compliance. Communicate technical security risks and mitigation strategies to engineers, teams, and senior leadership.

Designs, implements, and administers F5 BIG-IP and inline break-and-inspect proxy solutions supporting DoD enterprise and cloud architectures. Configures and troubleshoots TLS and mutual TLS, applies cryptographic and PKI standards, and resolves architecture issues with DoD clients and stakeholders. The role requires Secret clearance, a high school diploma or GED, and up to 25% travel to CONUS and OCONUS locations.

Maintain cybersecurity and compliance for classified Air Force information systems. Responsibilities include developing SOPs, SSPs, and ATO documentation; conducting DISA STIG security scans; managing audit logs, system changes, media controls, and security documentation; evaluating technologies; and supporting application development, network implementation, systems integration, and the ISSM. The role requires an active Secret clearance and may assume ISSM responsibilities.

Designs and maintains network, cloud, firewall, SASE, and CASB security controls; conducts threat hunting, detection engineering, incident response, and forensic analysis; administers Microsoft Purview data governance, DLP, and eDiscovery; and manages business continuity and disaster recovery planning and exercises. Partners with legal, compliance, leadership, and business teams to address security risks and regulatory requirements.

Audits security controls, STIG configurations, and vulnerability scans; supports RMF, A&A, cyber testing, continuous monitoring, ATO requirements, POA&M maintenance, and VRAM reporting. Troubleshoots scanning issues, validates compliance, analyzes vulnerabilities, filters false positives, prepares compliance reports, and briefs stakeholders. Requires expertise with Windows, Linux, virtualization, ACAS/Tenable Nessus, SCAP, STIG Viewer, eMASSter, and VRAM, plus Security+ CE certification and Top Secret clearance eligibility.

Own Playlist’s technical GRC architecture across multiple compliance frameworks, including PCI DSS, SOC, ISO 27001, HITRUST, and NIST. Design unified control mappings, maintain the Master Control List, manage control and evidence lifecycles, automate evidence collection, and translate requirements into engineering guidance. Build AI-powered GRC workflows for risk quantification, vendor assessment, and compliance monitoring while partnering with Engineering, Legal, Finance, and auditors.

The ISSO supports cybersecurity authorization and compliance for classified information systems across on-premises and cloud environments. Responsibilities include applying JSIG and RMF, maintaining security plans and assessment artifacts, conducting continuous monitoring and audits, managing configuration changes, analyzing security impacts, and reporting incidents. The role requires extensive DoD cybersecurity experience, an active Top Secret/SCI clearance, IAM certification, and onsite work in Colorado Springs.

Implements and improves enterprise cybersecurity across on-premises and cloud environments. Responsibilities include identity and access controls, security control implementation, vulnerability management, incident response, SIEM and threat monitoring, risk metrics, security architecture evaluations, and executive reporting. The engineer collaborates with infrastructure, application, IT, and business teams to integrate secure configurations, strengthen resilience, evaluate emerging threats, and support continuous improvement of SRM’s cybersecurity program.

Deploys, monitors, maintains, and supports enterprise security systems and controls. Responsibilities include administering VPN, Active Directory, firewalls, DLP, IDS, endpoint security, and vulnerability scanning; preparing security reports; supporting vendor assessments; designing security workflows; resolving security violations; and conducting security reviews and risk assessments. The analyst communicates with business teams, IT staff, vendors, senior management, and regulators while supporting a secure healthcare technology environment.

Serve as a customer-facing data security expert supporting presales engagements, consulting with executive and technical stakeholders, educating sales teams, developing security offerings and collateral, creating lab use cases, and assisting with professional services statements of work. The role requires expertise in cybersecurity frameworks, data security technologies, solution selling, and major security platforms. It is remote within the TOLA region and involves up to 20% travel.

Provides customer-facing presales expertise for OT/IoT cybersecurity solutions. Collaborates with executives, security teams, procurement, and sales; develops security services, use cases, collateral, presentations, and demonstrations. Advises on industrial protocols, traffic analysis, asset visibility, segmentation, cloud security, and security frameworks. Requires strong communication, documentation, relationship-building, and problem-solving skills, along with technical cybersecurity experience and travel to company, partner, and customer events.

Provides customer-facing presales cybersecurity expertise, including cloud security architecture assessments, solution design, technical presentations, demonstrations, proof-of-concept support, and proposal development. The role supports sales teams, collaborates with technology partners, delivers internal security training, creates technical documentation and statements of work, and transitions closed opportunities to delivery teams. Focus areas include CNAPP, identity governance, hybrid cloud security, endpoint protection, data protection, and security operations.

Serve as a customer-facing OT/IoT cybersecurity expert supporting consultative security engagements and presales activities. Collaborate with executives, security teams, procurement, and sales; develop cybersecurity services, use cases, demos, sales collateral, system diagrams, and training. Apply expertise in industrial protocols, traffic analysis, asset visibility, segmentation, cloud security, and security frameworks. The remote role requires residence in the TOLA region, travel to events, and strong presentation, communication, documentation, and relationship-building skills.

Provides customer-facing presales cybersecurity expertise focused on email security. Leads discovery sessions, assesses security architectures, designs solution proposals, delivers demonstrations and technical presentations, supports proofs of concept, enables sales teams, collaborates with vendors, and ensures successful handoff to delivery teams.

Monitors SOC dashboards and security tools, triages alerts, analyzes logs, reviews vulnerability scan results, documents incidents, and escalates complex threats. Collaborates with IT and system administration teams during investigations and remediation. The role requires foundational networking, operating systems, and cybersecurity knowledge, strong attention to detail, and clear written and verbal communication.

Provides acquisition security management support for SOF maritime programs, including security classification guides, operations security, program protection, information security, and classification management. Drafts, reviews, and updates security documentation; coordinates with program managers, government stakeholders, industry partners, SOCOM security organizations, and intelligence branches; and ensures compliance with Department of War, SOCOM, and SOF AT&L regulations. This is an on-site role at MacDill Air Force Base requiring U.S. citizenship, TS/SCI eligibility, at least 10 years of related experience, and up to 25% travel.

Design and guide security architecture for NVIDIA networking firmware and embedded subsystems. Responsibilities include threat modeling, analyzing firmware and hardware interactions, defining lifecycle security features, translating threats into requirements, partnering with hardware architects, and driving secure firmware development practices such as memory-safe C, static analysis, and fuzzing. The role requires expertise in firmware security, authorization models, cryptography, secure boot, attestation, and embedded systems.