Top Cyber Security Jobs

Supports federal technology programs by designing and implementing information security policies, conducting audits and risk assessments, evaluating compliance, managing security assets, and advising leadership on cybersecurity and systems security. The role collaborates with government leaders, facility managers, software teams, and security offices; communicates risks and initiatives; and helps improve security processes across applications, facilities, and infrastructure.

Lead complex security investigations across endpoint, identity, cloud, email, SaaS, and network environments. Own incidents through containment, remediation coordination, documentation, and post-incident review. Tune detections, queries, dashboards, workflows, and SOAR playbooks; improve SOC metrics, threat coverage, alert fidelity, and response processes. Partner on vulnerability and cloud-risk remediation, participate in global on-call rotation, use approved AI capabilities responsibly, and mentor analysts.

Designs, implements, and owns security frameworks and features for Okta’s identity services. The role develops application and distributed-system security solutions, influences security roadmaps, promotes best practices, conducts security-focused code reviews, troubleshoots production issues, and mentors engineers. Responsibilities include addressing cryptography, authentication, authorization, secrets management, cloud security, post-quantum cryptography, and agentic AI security while collaborating across engineering, security, and product organizations.

Lead Uber’s Detection Engineering organization and set the global strategy, roadmap, and execution for threat detection. Own detection coverage, content, platforms, latency, signal fidelity, and AI/ML adoption across corporate, production, and cloud environments. Partner with security response, threat intelligence, infrastructure, and product teams; manage vendors and build-versus-buy decisions; and hire, develop, and retain senior security and software engineering leaders.

Manages user access, provisioning, identity lifecycle processes, and data entitlements across enterprise platforms. Investigates access issues, supports joiner-mover-leaver activities, applies RBAC and least-privilege principles, coordinates with application and data owners, and maintains security documentation. The role also trains junior staff, supports risk mitigation, contributes to process improvements and automation, and provides global operational coverage.

Supports security operations through alert monitoring, incident triage, evidence collection, log analysis, phishing investigations, vulnerability management, identity and access reviews, audits, compliance documentation, and security awareness activities. The role collaborates with IT and business teams to remediate vulnerabilities, maintain operational records, escalate incidents, and improve defensive processes across endpoint, cloud, network, identity, and application environments.

Provides technical leadership for enterprise AI security, designing secure AI platform architectures, vetting frameworks, identity and posture management for AI agents, and preventative security guardrails. The role requires building scalable security systems with Python, Go, or Java, managing infrastructure as code, addressing cloud and container security, mentoring engineers, and advising leadership on AI security risks.

Hands-on cybersecurity manager responsible for operating and improving security tools and processes across cloud, network, endpoint, identity, email, and application environments. Investigates alerts, manages vulnerabilities, responds to incidents, administers access controls, strengthens security configurations, maintains documentation, supports audits and awareness activities, coordinates vendors, and reports security metrics to IT leadership. Occasional after-hours work and travel may be required.

Researches attacks against microelectronic devices and develops hardware security controls for tamper-protected microcontrollers, FPGAs, ASICs, and related IP. Analyzes secure architectures, performs side-channel and glitching assessments, documents findings, supports technical requirements, prepares research papers and briefings, and collaborates with DoD partners and vendors. The role is conducted onsite in a microelectronics security laboratory and requires an active Secret clearance with progression to Top Secret.

Leads cybersecurity engineering and defensive cyberspace operations for DoD mission systems. Oversees 24/7 monitoring, incident response, threat hunting, vulnerability management, forensics, detection engineering, RMF activities, and cyber threat emulation. Guides multidisciplinary teams, develops Elastic dashboards and analytics, manages documentation and compliance, and strengthens cyber defense capabilities across classified and unclassified environments.

Leads cybersecurity engineering and defensive operations for a DoD Cybersecurity Service Provider. Oversees incident response, threat hunting, vulnerability management, digital forensics, threat emulation, detection engineering, RMF compliance, and 24/7 monitoring. Provides technical leadership, develops Elastic dashboards and analytics, manages cyber documentation and reporting, and ensures mission operations meet CSSP standards and response timelines. The role is onsite in Huntsville, Alabama, with limited telework and less than 10% travel.

Leads enterprise application security across applications, APIs, and SaaS platforms. Responsibilities include threat modeling, security architecture reviews, manual code reviews, Checkmarx-based SAST and SCA, DAST, API security, CI/CD integration, vulnerability remediation, AI-assisted SDLC workflows, incident response support, developer coaching, and risk reporting. The role requires secure coding expertise, knowledge of application security standards, and experience with regulated financial services.

Leads the hospital-wide cybersecurity program and serves as HIPAA Security Officer. Establishes security strategy, governance, risk management, vulnerability remediation, identity and access controls, incident response, breach remediation, vendor assessments, security standards, compliance reporting, and organization-wide security awareness training. Chairs the security committee and advises executive audit and compliance boards.

Lead engineering-driven enterprise data protection and DLP capabilities across cloud, SaaS, endpoint, email, collaboration, and web environments. Build automated policy-as-code workflows, CI/CD pipelines, reusable controls, integrations, detection logic, and operational health checks. Partner with technical, compliance, privacy, legal, and business teams to improve data protection effectiveness. Investigate events, reduce false positives, establish governance standards, and define metrics demonstrating risk reduction and operational maturity.

Leads a team engineering data security products and controls across DLP, data discovery, classification, and data access. Sets technical direction, contributes to architecture and code, and owns delivery, reliability, automation, and production support. Develops policy-as-code workflows, detection logic, control lifecycle automation, integrations, testing, and deployment pipelines while translating complex data security requirements into scalable solutions and measurable risk reduction.

Leads complex digital forensics and cyber investigations, including insider threat, DLP, malware, and security incidents. Conducts evidence collection and analysis across operating systems, networks, mobile devices, and cloud environments; prepares reports for HR, Legal, Ethics, and Security stakeholders; maintains forensic policies, procedures, tools, and chain-of-custody practices; supports remediation and lessons learned; and provides technical leadership, mentoring, and cross-functional guidance.

Leads the Risk Management Framework process for intelligence community systems, develops security plans and architectures, configures cybersecurity solutions, manages compliance artifacts in XACTA and ServiceNow, performs vulnerability and risk analyses, supports application security assessments and asset onboarding, reviews DISA STIGs, and presents technical information to customers. The role requires active TS/SCI clearance with polygraph, extensive DoD cybersecurity experience, security certifications, Linux expertise, and knowledge of government security standards and assessment tools.

Develops and implements cybersecurity solutions for classified and unclassified Navy systems. Responsibilities include network architecture, firewall and switch configuration, vulnerability mitigation, system hardening, STIG application, security monitoring, Linux and Windows administration, virtualization, and RMF/ATO support. The engineer analyzes logs, recommends network and code improvements, supports design reviews, and collaborates with systems engineers, software developers, and cybersecurity teams.

Serve as a technical security escalation resource across JMARK and client environments. Investigate and coordinate incident response, manage vulnerabilities and patching, administer SIEM and other security platforms, monitor threats, and improve detection and security controls. Provide guidance on Cisco networking, firewalls, segmentation, and secure infrastructure while supporting security product evaluations, remediation tracking, documentation, and security education.

Monitors and responds to security alerts, investigates vulnerabilities and incidents, supports audits, GRC, access management, vendor security reviews, patching, system upgrades, and disaster recovery testing. The analyst administers security platforms, troubleshoots applications and infrastructure, assists with compliance and access reviews, documents investigations, and supports security improvements under senior staff guidance.

Supports AWS cloud security environments by designing, deploying, integrating, monitoring, and maintaining cloud infrastructure. Responsibilities include infrastructure-as-code development with CloudFormation, environment configuration, security remediation, automation, system integration, stakeholder requirement analysis, technical documentation, and maintaining secure production and development environments. The role is onsite in Bethesda, Maryland, requires an active TS/SCI clearance with polygraph, and may include occasional after-hours on-call support.

Maintains information system security posture and supports authorization, certification, accreditation, and continuous monitoring activities. Prepares SSPs, risk assessments, C&A packages, and inspection documentation; conducts vulnerability assessments and tracks remediation. Advises development and technical teams on SecOps, IRM/CAM, ATO, and security requirements. Coordinates inspections, system testing, stakeholder communications, and security initiatives across government and contractor environments.

Leads cybersecurity development and automation teams, setting strategy and delivery priorities for secure applications, AI-enabled workflows, integrations, and enterprise security automation. Oversees architecture, governance, auditability, operational resilience, stakeholder alignment, and delivery across vulnerability management, threat response, control validation, and security operations. Recruits and develops technical talent while establishing responsible AI engineering practices and scalable automation capabilities in a regulated environment.

Leads enterprise security platform engineering and operations, including zero-trust, SASE/SSE, network security, vulnerability management, SaaS protection, web security, AI gateway controls, and ServiceNow integrations. Manages security engineering teams, establishes technical standards and operating models, oversees platform health and lifecycle management, supports audits and regulatory requirements, evaluates tools and investments, and communicates risk, control effectiveness, and operational outcomes to senior stakeholders.

Administers vulnerability and secure-configuration scanning for databases, servers, cloud environments, and containers. Assesses vulnerabilities using CVSS, analyzes exploit exposure, provides remediation guidance, validates security controls, and partners with system owners, cloud security, application security, and penetration-testing teams. The role also maintains runbooks, documents procedures, validates reporting data, and develops process metrics while supporting SOC 2, PCI-DSS, and HiTrust compliance requirements.