Top Cyber Security Jobs

Monitor, diagnose, and resolve security events and incidents across networks, servers, endpoints, and cloud applications. Conduct vulnerability assessments, security audits, and reviews; investigate root causes; recommend mitigation strategies; improve security operations through automation; develop and monitor policies and controls; provide cybersecurity expertise, user support, training, and vendor coordination.

Designs and governs enterprise security architecture across cloud, private cloud, colocation, networking, virtualization, identity, endpoints, applications, and data environments. Develops standards, reference designs, roadmaps, and security controls; leads threat modeling, risk assessments, technology evaluations, and architecture reviews. Partners with engineering, infrastructure, compliance, operations, and customers to address risks, support audits and incident response, and translate regulatory requirements into scalable technical solutions.

Lead end-to-end execution of a 12+ initiative product security program, managing cross-team dependencies, vendor procurement, BAU security operations, and executive reporting. Maintain roadmap and tracking in Jira/Confluence, drive procurement/POCs, produce executive-ready metrics, and establish program cadence to ensure timely remediation and predictable delivery.

Leads day-to-day security operations for assigned systems, including security alert and log triage, vulnerability and compliance scanning, STIG validation, IAM access reviews, remediation coordination, and evidence maintenance. Validates corrective actions, tracks recurring findings and remediation aging, supports change-control assessments, and provides technical security posture inputs to ISSM and government reporting. The role requires TS/SCI with polygraph clearance and IAM Tier I certification within six months.

Supports and maintains cybersecurity infrastructure for casino gaming systems, payment data, guest information, and IoT devices. Responsibilities include managing EDR, firewalls, network segmentation, NetFlow, identity-based access, SIEM and vulnerability tools; supporting PCI DSS, GLI, and regulatory compliance; monitoring incidents with a managed SOC; conducting assessments; assisting with response, audits, vendor risk, security training, system integration, documentation, and on-call coverage.

The Systems Engineer will identify, evaluate, triage, document, and support remediation of application-security vulnerabilities. Responsibilities include partnering with software-development teams, applying SAST, DAST, dependency and software-supply-chain security practices, integrating automated scanning into CI/CD workflows, and verifying remediation. The role may support GitLab, Artifactory, OpenShift, Kubernetes, containerized applications, and restricted or classified environments.

Coordinates information security projects, manages access controls, vulnerabilities, risks, and security incidents. Conducts security awareness campaigns and phishing simulations, monitors systems for threats, supports incident response, prepares security metrics, and maintains security policies and procedures. The role collaborates across departments to remediate findings, ensure regulatory compliance, and improve organizational security.

Engineer and modernize privileged access management across on-premises and cloud environments. Responsibilities include designing PAM solutions, supporting CyberArk or StrongDM, integrating ServiceNow and Azure, troubleshooting complex authentication issues, providing Tier 3 support, responding to incidents, remediating vulnerabilities, defining PAM standards and governance, and improving resiliency. Preferred experience includes machine identities, automated PAM administration, infrastructure-as-code, legacy platform modernization, migrations, recovery testing, and relevant security certifications.

Develop and evaluate cloud security architectures for Intelligence Community systems. Assess security documentation, compliance, risk thresholds, software assurance, and RMF requirements across on-premises, cloud, and hybrid environments. Support validation, assessment, accreditation, and troubleshooting activities; recommend security tools and capabilities; and collaborate with clients and technical teams in an Agile environment.

Analyzes software code and integrates security practices throughout the software development lifecycle. Develops software and scripts, performs testing, documents defects and security findings, reviews design documents and requirements, and applies secure development standards. The role uses static and dynamic assessment tools, supports DevSecOps and compliance processes, and may guide junior employees. A Secret clearance and high school diploma or GED are required.

Designs, deploys, configures, and monitors enterprise network security architecture for DHS USCIS systems. Responsibilities include threat modeling, SIEM integration, vulnerability management, security product evaluations, firewall and network device hardening, micro-segmentation, automated remediation, configuration management, security documentation, and continuous monitoring. The role supports security solution deployment across the OSI model and requires collaboration with federal stakeholders throughout the systems lifecycle.

Operates and improves enterprise cybersecurity across endpoints, identities, networks, cloud services, applications, email, and security platforms. Responsibilities include monitoring, incident response, vulnerability management, endpoint and identity administration, firewall and cloud security, application and email protection, compliance support, awareness training, reporting, documentation, and cross-functional remediation coordination.

Leads enterprise IT security governance and risk remediation across complex financial services and insurance application portfolios. Responsibilities include identity and access remediation, vulnerability and patch governance, MFA compliance, policy exception management, application lifecycle risk, executive reporting, audit support, and escalation of overdue or non-compliant actions. The role partners with application, infrastructure, production support, and senior leadership teams to drive timely remediation and maintain audit-ready evidence.

Designs, implements, and manages security controls across AWS, Azure, and GCP environments. Leads cloud architecture reviews, technical risk assessments, secure solution design, and compliance remediation. Automates security governance using Infrastructure as Code and Policy as Code, integrates security into CI/CD pipelines, evaluates cloud security solutions, and partners with DevOps, architecture, application, infrastructure, and risk teams to secure cloud-native systems.

Designs and executes application security practices across product and platform engineering teams. Responsibilities include integrating SAST, DAST, SCA, secret, IaC, API, mobile, container, and cloud-native security into CI/CD; conducting secure design reviews, threat modeling, code reviews, and testing; building automation, guardrails, policy-as-code, release risk gates, secure coding standards, SBOM processes, and vulnerability disclosure workflows.

Supervises business systems analysts, coordinates assignments and project plans, and leads business process analysis. Maintains information security policies, manages cybersecurity incident responses, delivers security awareness training, and verifies compliance with state and federal requirements. Serves as a liaison between business users and application developers while coordinating IRS, NITC, and Auditor of Public Accounts compliance activities.

Supports and improves Identity and Access Management operations, including SailPoint IIQ workflows, rules, tasks, forms, integrations, monitoring, incident remediation, patching, reporting, risk assessment, root cause analysis, and documentation. Partners with help desk and business stakeholders, supports automation and platform upgrades, and participates in 24x7x365 on-call coverage.

Provides senior cybersecurity engineering and assessment expertise for government systems across classified and unclassified environments. Responsibilities include vulnerability analysis, security testing, risk determination, remediation planning, RMF and ATO documentation, policy development, continuous monitoring, architecture reviews, and security control assessments. The role coordinates with ISSOs, system owners, and engineering teams, develops assessment methodologies, supports security capability implementation, and briefs leadership on findings and cybersecurity activities.

Leads cybersecurity engineering, SOC support, vulnerability and risk analysis, security assessments, hands-on testing, and secure Azure solution implementation. Develops SOC procedures, evaluates architectures and security documentation, creates testing methodologies, analyzes alerts, and recommends mitigations. Implements Azure Zero Trust controls, including identity hardening, micro-segmentation, Conditional Access, continuous monitoring, least privilege, governance, secure landing zones, AKS, Azure Policy, and Entra ID. Requires coordination across cybersecurity teams and communication with leadership.

Designs, deploys, and manages enterprise PKI infrastructure and certificate lifecycles. Automates PKI processes, integrates solutions with Active Directory, identity, PAM, infrastructure, and DevOps platforms, and enforces certificate security policies. Monitors compliance and infrastructure health, troubleshoots certificate and encryption issues, and provides documentation, guidance, and training. The role supports secure classified networks for U.S. Government operations and requires on-site work in Phoenix with business travel as needed.

Supports classified information-system security compliance, auditing, security-plan development, security training, and sustainment activities. The ISSO investigates security violations, documents corrective and preventive actions, manages hardware and software changes, accounts, media protection, and file transfers, and collaborates with security teams, program staff, and government representatives. The role requires adherence to NISPOM, DAAPM, JSIG, RMF, and related cybersecurity policies, with an active Secret clearance and certification such as Security+ required.

Drives cybersecurity awareness across the organization through training programs, phishing simulations, educational content, and awareness campaigns. The role delivers virtual and in-person training, develops communications materials, analyzes program metrics, reports results, maintains SharePoint resources, and collaborates with IT, Communications, HR, and business stakeholders to improve security culture and employee resilience against cyber threats.

Designs and implements cybersecurity solutions for products, critical assets, and customer data. Develops Agentic AI workflows, automates Product Cyber processes, integrates security services into software development lifecycles, and supports certificate issuance and product-element signing at large scale. The role collaborates with development and operations teams while addressing vulnerabilities, mitigation strategies, compliance, product security, PKI, system integration, SSDLC, and DevSecOps practices.

Leads Ferguson’s enterprise Security Engineering function, including vulnerability management, DevSecOps, penetration testing, application and cloud security, endpoint and email protection, edge security, configuration management, and security tooling. Builds and develops technical teams, establishes roadmaps and metrics, prioritizes risk-based remediation, oversees vendors and service operations, and communicates security posture and investment needs to executives and technology partners.

Designs, deploys, and optimizes enterprise data protection across Microsoft 365, endpoints, cloud applications, SaaS platforms, and network egress points. Manages DLP, data classification, Microsoft Defender, Sentinel, Varonis, and DSPM capabilities; investigates incidents, reduces false positives, assesses data exposure, and drives remediation. Develops data handling standards, automation, documentation, reporting, and security metrics while partnering with IT, Legal, Compliance, and business data owners.