Top Cyber Security Jobs

Leads Uber’s highest-severity security incidents from escalation through recovery and remediation. Commands responders, conducts technical investigations, briefs executives, drives post-incident analysis, mentors security teams, and owns a multi-team incident response program. Develops simulations, threat-informed response plans, automation, detection and containment improvements, and AI-assisted investigative workflows with appropriate safeguards.

Maintain application security for business-critical systems by identifying, prioritizing, and remediating vulnerabilities throughout the software development lifecycle. Lead security discussions, advise development teams on secure practices and controls, and perform SAST, DAST, threat modeling, and application security assessments. Use Veracode and Burp Suite, apply OWASP standards, support security pipeline integration, and address emerging threats while meeting federal security and compliance requirements.

Conduct security control assessments across complex technical environments, reviewing documentation, interviewing stakeholders, and performing technical testing. Assess risk and vulnerabilities, validate control effectiveness, identify deficiencies, recommend remediation, and produce reports supporting authorization decisions. Apply NIST SP 800-53 and the Risk Management Framework while evaluating cloud security, network, system, and application controls. Monitor POA&M items and communicate cybersecurity risks to technical and executive audiences.

Designs and develops security solutions, automates Linux configuration and patching, remediates POA&M findings, and supports configuration management, system hardening, security assessments, and RMF documentation. The role works with ISSOs to maintain operational security and supports transitions from IATT to ATO. It requires significant Linux automation and cybersecurity compliance experience, DoD IAT II certification, U.S. citizenship, and Secret clearance with Top Secret/SCI eligibility.

Supports federal information-system security assessments and continuous monitoring under senior supervision. Reviews policies, system documentation, artifacts, and evidence against security controls and applicable frameworks; identifies and documents weaknesses, risks, and remediation recommendations; maintains traceable assessment records; tracks evidence and deadlines; and assists with basic scripting, automation, reporting, and cybersecurity team tools.

Lead enterprise vulnerability management and cyber defense operations across Linux/Red Hat, on-premises, and Azure IL5/IL6 environments. Configure and optimize Tenable Security Center, analyze vulnerabilities, manage POA&Ms, tune threat-detection rules, resolve scanner integrations, and support incident response. Collaborate with engineering, cloud, network, cybersecurity, and leadership teams to maintain secure configurations and compliance with DISA STIGs, NSA guidelines, DoD frameworks, RMF, and NIST 800-53.

Own application security across cloud services, APIs, data pipelines, and edge-deployed applications. Lead threat modeling, secure design reviews, code reviews, vulnerability assessments, and remediation. Build CI/CD security tooling, automation, and secure-by-default developer frameworks while maturing the SDLC, supply-chain security, vulnerability disclosure, and bug bounty processes. Partner with engineering and security operations, provide incident expertise, and deliver developer security training.

Secure the software development lifecycle by configuring application security tooling, leading API, container, and application testing, conducting threat modeling and architecture reviews, and supporting vulnerability management. Develop secure-by-design standards, AI security controls, automation, metrics, documentation, and training. Partner with engineering, cloud, and product teams to improve security coverage, developer experience, and remediation across cloud-native applications.

Owns SIS’s information security program and ISO 27001 certification, including security architecture, control implementation, vulnerability management, incident response, application and vendor assessments, automation, access governance, audit readiness, security questionnaires, policies, metrics, and physical security technology oversight. The role provides senior technical guidance across cloud, identity, endpoint, network, application, and physical security environments while operating within ITIL processes.

Monitors security alerts and network traffic, investigates incidents, performs vulnerability assessments and penetration testing, manages security tools, supports audits and regulatory compliance, documents risks, and promotes security awareness. The role requires collaboration with IT teams, strong knowledge of security technologies and best practices, and occasional after-hours or weekend availability.

Leads advanced security monitoring, incident investigation, risk assessments, and control oversight for financial systems. Supports ITGC and SOX compliance, audits, system implementations, secure design reviews, and remediation activities. Partners with application, infrastructure, governance, and PMO teams while improving security processes, documentation, monitoring, and operational effectiveness. Provides subject-matter expertise, guidance, and escalation support for complex security issues.

Leads cybersecurity strategy and risk posture for the North America Client Group. Oversees cybersecurity uplift programs, coordinates incident management, strengthens security practices, and serves as the liaison between Global Information Security and business stakeholders. The role develops risk-aware solutions, implements privacy and data protection controls, and aligns security priorities with organizational objectives while influencing stakeholders across the company.

Performs technical security assessments and manages system security plans, ATO packages, RMF compliance, security controls, continuous monitoring, vulnerability remediation, POA&Ms, and reauthorization activities. The role coordinates with ISSOs, administrators, security architects, and technology teams; maintains security documentation; evaluates system changes; tests configurations; and supports security operations in a 24/7 federal environment.

Supports DoD Special Access Programs and classified information systems by managing security authorization, risk assessments, RMF/JAFAN compliance, security testing, incident response, configuration management, documentation, inspections, and security training. Advises government program managers on information assurance issues, evaluates threats and vulnerabilities, maintains authorization records, and coordinates system security activities. Requires extensive travel within the assigned area of responsibility and collaboration with military, government, and industry personnel.

Designs, deploys, and optimizes enterprise network security solutions for clients. Leads firewall, SD-WAN, segmentation, secure access, identity, and SASE implementations; resolves critical incidents; performs security assessments; advises technical and executive stakeholders; collaborates across cloud and infrastructure teams; and mentors junior engineers.

Secures enterprise applications, cloud platforms, networks, and infrastructure through security engineering, monitoring, threat detection, vulnerability management, and incident response. Designs security controls, develops security policies and documentation, supports hybrid and air-gapped environments, and mentors technical teams. The role also integrates applications and advanced AI systems, manages data architectures, and applies cybersecurity practices across AWS, Azure, or Google Cloud environments.

Leads cybersecurity engineering, governance, risk, compliance, and privacy activities for federal healthcare systems. Owns security architecture, RMF and ATO processes, vulnerability management, audit readiness, incident response, access controls, encryption, continuous monitoring, and PHI/PII protection. Partners with program, engineering, operations, QA, and CMS stakeholders to maintain compliant services and communicate security status.

Maintains information system security for DoD Special Access Programs. Responsibilities include authorization package management, configuration change analysis, vulnerability identification, audit review, incident and recovery support, security documentation, self-inspections, and coordination with ISSMs and authorizing officials. The role supports collateral, SCI, and SAP environments and requires an active TS/SCI clearance with eligibility for a CI polygraph.

Conducts security control assessments for collateral, SCI, and SAP information systems using RMF and JSIG requirements. Evaluates authorization packages, threats, vulnerabilities, continuous monitoring, system changes, and security documentation. Prepares Security Assessment Reports and POA&Ms, advises government and authorization officials, supports inspections and incidents, and assesses cross-domain solutions and PL3/PL4 environments.

The Information Systems Security Officer maintains the security posture of classified information systems supporting Department of Defense Special Access Programs. Responsibilities include authorization package management, configuration and security impact analysis, vulnerability identification, audit review, incident handling, system inspections, physical and personnel security, documentation, and coordination with ISSMs and authorizing officials. The role requires day-to-day support for Collateral, SCI, and SAP environments.

Provides security and counterintelligence support for Special Access Programs and SCI activities. Responsibilities include regulatory compliance, security policy development, vulnerability and risk assessment, OPSEC and CI training, facility compliance reviews, corrective-action tracking, classified information investigations, and advising government and military leaders. Requires active TS/SCI clearance and the ability to obtain TS/SCI with CI polygraph. The role is onsite in Lorton, Virginia, with 10–25% travel.

Conducts cybersecurity assessments of management, operational, and technical controls for collateral, SCI, and SAP information systems. Evaluates authorization packages, vulnerabilities, threats, security boundaries, continuous monitoring, and compliance with RMF and JSIG. Prepares Security Assessment Reports and POA&Ms, advises authorizing officials, supports inspections and incidents, and recommends authorization decisions and corrective actions.

Leads network security architecture, cybersecurity policy enforcement, risk mitigation, incident escalation, firewall and VPN management, security tool implementation, and compliance activities. Supervises and mentors network security specialists, coordinates investigations and remediation, and oversees security initiatives across Cisco, Juniper, Palo Alto, and Fortinet environments. The role requires onsite presence in Bethesda, Maryland, three to five days weekly.

Leads advanced security monitoring, incident investigation, risk assessments, control oversight, and remediation for financial systems. Supports ITGC and SOX compliance, audits, application and infrastructure implementations, secure design reviews, incident response, and continuous improvement. Partners with technical, governance, PMO, and audit teams while serving as a senior security subject-matter expert and escalation point.

Leads advanced security monitoring, incident investigation, risk assessments, and control oversight for financial systems. Supports ITGC and SOX compliance, system implementations, secure design reviews, audits, documentation, remediation, and regulatory assessments. Partners with application, infrastructure, governance, and PMO teams while serving as a senior escalation point and security subject-matter expert. The role also contributes to continuous improvement, standards development, reporting, and team knowledge sharing.