Top Cyber Security Jobs

Provides multidisciplinary security support for Special Access Programs, SCI, and classified activities. Ensures compliance with NISPOM, DoD, ICD, and SAP requirements; develops security policies and training; assesses vulnerabilities and risks; oversees facility compliance reviews and corrective actions; briefs personnel; supports investigations into classified information compromises; and coordinates security education and awareness programs.

Own security engineering for classified information systems across authorization boundaries, from security architecture through Assessment and Authorization and continuous monitoring. Conduct vulnerability scans, risk analysis, patching, STIG/SRG hardening, configuration reviews, incident response, and remediation. Develop security policies, support cloud security environments, and ensure compliance with RMF, DCSA, DSS, and intelligence-community requirements.

Build and scale a technical security and compliance program across SOC 2, ISO 27001, HIPAA, AI governance, and customer assurance. Translate requirements into technical controls, automate evidence collection and testing, support audits, manage risks and remediation, and partner with Engineering, Infrastructure, IT, and Product. Maintain access, change, logging, vendor-risk, vulnerability, and incident-response controls while supporting FedRAMP and NIST 800-53 initiatives.

Leads industrial and program security operations for classified defense programs. Ensures compliance with NISPOM, DoD requirements, DD Form 254 obligations, and security agreements; analyzes contracts, manages classified material protection, investigates incidents, supports cybersecurity accreditation, prepares audits, assesses subcontractors, and delivers security training. Advises program leaders, government customers, and cross-functional teams while supporting security strategies, events, and field activities. Travel is estimated at 10–20%.

Reviews and assesses classified information systems under the Risk Management Framework, evaluating security plans, controls, compliance, and risk documentation. Conducts security design reviews, threat and risk assessments, site inspections, and incident response support. Develops inputs for POA&Ms, traceability matrices, and risk assessment reports while advising government and technical stakeholders on information security requirements.

Manages cybersecurity compliance programs and projects, including SOX 404 governance, IT controls, NERC-CIP compliance, internal and external audits, risk mitigation, process improvements, and cybersecurity procedures. Coordinates geographically dispersed technical, business, and audit stakeholders while reporting program status and recommending control enhancements.

Develop and integrate cybersecurity features into autonomous vehicle platform software, spanning sensor abstraction, data processing, middleware, embedded systems, and cloud infrastructure. Conduct threat modeling and security architecture analysis, manage product security requirements, guide security governance, and collaborate across hardware, software, safety, performance, algorithms, and cloud teams. Build scalable, performant system software using C++, C, and Python across Linux, QNX, ROS, and real-time environments.

Author high-impact threat intelligence reports, build and refine intelligence pipelines and tooling, translate technical findings into actionable insights, support customer briefings and engagements, collaborate with product and engineering to operationalize intelligence into Defender XDR and Sentinel, and improve analytic tradecraft and scalable delivery of threat intelligence.

Supports enterprise cybersecurity and GRC programs through third-party risk assessments, security testing coordination, corrective action tracking, policy development, compliance support, incident response planning, disaster recovery exercises, and enforcement of technical and administrative controls. Partners with engineering, operations, managed security providers, and internal stakeholders to strengthen security posture across cloud and hybrid environments.

Designs, configures, deploys, tests, and supports secure WAN and LAN networks. Responsibilities include optimizing network performance and data flow, implementing load balancing, VPNs, firewalls, and NAT, monitoring latency, troubleshooting complex issues, supporting mission operations, and coordinating with systems engineering teams. The role also involves deploying hardware, defining requirements, leading large-scale efforts, and working rotating 24/7 shifts.

Lead cybersecurity activities for classified SIPRNet systems under ISSM oversight. Maintain audit-ready documentation, support RMF and authorization processes, analyze logs and vulnerabilities, manage POA&Ms, review access and system changes, coordinate incident response and CSSP activities, and prepare for DCSA and CORA inspections. The role requires collaboration with IT, facilities, industrial security, and cybersecurity stakeholders in an onsite, high-assurance DoD environment.

Supports cybersecurity operations by monitoring alerts, researching threats, configuring security tools, maintaining network and application security controls, and protecting company systems and data. Assists with incident response and disaster recovery planning, provides security guidance, trains employees on security awareness, and performs general IT support as needed.

Develop and manage DevSecOps security services, secure CI/CD pipelines, assess cloud security posture, correlate source-to-cloud vulnerabilities, and automate security controls. The role supports CNAPP configuration, infrastructure-as-code and policy-as-code integration, secure coding standards, vulnerability remediation, cloud workload protection, and enterprise security architecture initiatives across technology and governance teams.

Develop and manage DevSecOps security services, secure CI/CD pipelines, assess cloud security posture, correlate source-code and cloud-workload findings, and automate security controls. Implement CNAPP, CSPM, IaC, and policy-as-code solutions using Terraform or comparable tools. Establish secure coding and cloud security standards aligned with NIST, CIS, and ISO frameworks while producing architecture diagrams and implementation plans.

Develop and manage DevSecOps security services, secure CI/CD pipelines, assess cloud security posture, correlate source-to-cloud vulnerabilities, and automate security controls. The role supports CNAPP, CSPM, infrastructure as code, policy as code, secure coding, cloud workload protection, and vulnerability remediation while contributing to enterprise security standards, architecture, and implementation plans.

Designs, deploys, and secures Microsoft Windows infrastructure for customer environments. Responsibilities include Active Directory and Group Policy management, Windows hardening, RBAC and least-privilege implementation, endpoint protection deployment, security assessments, remediation, patch processes, documentation, and customer knowledge transfer. The role requires extensive Windows security experience and may involve up to 30% travel.

Supports information security compliance by coordinating audits, security assessments, ISO 27001 ISMS maintenance, client security questionnaires, RFP responses, and remediation activities. The role manages compliance deliverables across teams, communicates security controls to clients and stakeholders, identifies control gaps, and improves security and compliance processes.

Implements, administers, and maintains cybersecurity and vulnerability management solutions across enterprise and mission networks. Responsibilities include ACAS/Tenable and endpoint security administration, credentialed vulnerability scanning, remediation coordination, system hardening, patch management, RMF and STIG compliance, security reporting, scripting, incident response support, and collaboration with system, network, and cybersecurity teams. The role is fully onsite, may require occasional after-hours maintenance, and requires a TS/SCI clearance.

Set the strategy and roadmap for AI Security Posture Management discovery and detection. Lead enterprise-wide AI system inventory, identify Shadow AI and policy violations, oversee detection lifecycle development and tuning, establish risk and coverage metrics, collaborate across security and business functions, and build a high-performing AI Security team.

Leads enterprise application security and attack surface management initiatives across cloud-native and DevSecOps environments. Defines security strategy, governance, assessment, vulnerability monitoring, risk metrics, and secure-by-design practices. Integrates automated controls into CI/CD pipelines, evaluates security technologies, validates exploits and mitigations, and aligns policies with regulatory frameworks. Partners with engineering, cloud, DevOps, and leadership teams to reduce risk, improve developer experience, and mature application security capabilities. Provides technical mentorship and drives automation at enterprise scale.

Leads teams designing and deploying AI-driven enterprise and cloud security solutions. Responsibilities include developing machine learning systems, integrating data infrastructure and pipelines, performing advanced modeling and analysis, and building AI applications with Python, Java, and C++. The role involves client engagement, strategic problem-solving, stakeholder validation, coaching, process innovation, and operational excellence while addressing complex cybersecurity and privacy challenges.

Consult on Oracle application security and compliance: analyze client requirements, implement security controls, perform compliance audits, develop policies, guide regulatory adherence, train and manage junior staff, and help clients mitigate risks and protect sensitive data.

Lead client engagements to design and implement security, controls, and compliance within Oracle applications. Manage teams, perform audits, develop governance frameworks, advise on regulatory compliance, and mentor staff to mitigate operational risk and protect sensitive data.

Lead Workday security and compliance initiatives: analyze client needs, implement security controls and compliance programs, oversee integrations, train clients, mentor teams, and manage project quality to mitigate risk and protect sensitive data.

Protect cloud-hosted production systems by managing credentials, secrets, permissions, identity controls, network isolation, and container security. Build threat detection, log analysis, and automated incident response capabilities while establishing secure configuration defaults with infrastructure and software engineering teams. The role owns infrastructure security outcomes and supports a growing technology company as an early security hire.