Top Cyber Security Jobs

Administers vulnerability and secure-configuration scanning for databases, servers, cloud environments, and containers. Assesses vulnerabilities using CVSS, analyzes exploit exposure, provides remediation guidance, validates security controls, and partners with system owners, cloud security, application security, and penetration-testing teams. The role also maintains runbooks, documents procedures, validates reporting data, and develops process metrics while supporting SOC 2, PCI-DSS, and HiTrust compliance requirements.

Lead technical pre-sales activities for Upwind’s cloud security platform, including customer discovery, solution design, product demonstrations, technical guidance, and proof-of-concept engagements. Collaborate with sales and product teams, translate technical concepts for non-technical audiences, and provide customer insights to support deal closure and product development.

Manages security activities for designated program offices, integrating security into business capture, proposals, and program execution. Oversees NISP activities, classified-program compliance, contractual security documentation, security classification guides, secure-area administration, employee training, and regulatory procedures. Coordinates with government agencies, customers, suppliers, leadership, program teams, and business development to interpret requirements, resolve compliance issues, and tailor security programs to organizational needs.

Maintains information system security for DoD Special Access Programs, including authorization packages, continuous monitoring, configuration management, audit reviews, incident handling, vulnerability remediation, security documentation, and compliance assessments. Supports collateral, SCI, and SAP environments while coordinating with ISSMs, authorizing officials, and government and contractor organizations. The role is onsite in Ogden, Utah, requires an active TS/SCI clearance, eligibility for TS/SCI with CI polygraph, and 10–25% travel.

Designs, integrates, assesses, and maintains security controls for classified DoD information systems, including Collateral, SCI, and SAP environments. Leads security engineering and cybersecurity teams, supports RMF and JSIG authorization, performs risk assessments, develops STIGs and test procedures, integrates monitoring and SIEM tools, and mitigates system threats throughout the lifecycle. The role also provides technical leadership, incident response support, operational procedures, and guidance to architects and developers.

Oversee cybersecurity compliance, assessments, configuration management, documentation, and operations for classified information systems. Conduct recurring reviews against DoD, NIST, customer, and company requirements; mentor ISSOs; integrate security processes and tools; provide technical guidance and training; and support risk management and authorization activities. The role is fully onsite in Andover, Massachusetts, with 10–20% intermittent travel to other Raytheon locations.

Leads enterprise information security engineering and governance in partnership with the CISO. Manages security teams, threat and vulnerability programs, incidents, audits, compliance, vendors, budgets, security architecture, technical controls, testing, risk treatment, and disaster recovery activities. Develops policies, metrics, security projects, and regulatory support while aligning security requirements with business and IT architecture.

The Senior Security Engineer architects, implements, and supports enterprise security capabilities across vulnerability management, cloud security, identity, endpoint, application security, and security architecture. The role leads security initiatives, resolves complex platform issues, develops automation and AI-assisted workflows, establishes documentation and reporting standards, and mentors security engineers and analysts while partnering across infrastructure, application, network, cloud, and security teams.

Owns product strategy and roadmap for cloud and platform security products. Leads stakeholder discovery, customer engagement, engineering prioritization, agile delivery, dependency and risk management, and alignment with enterprise strategy. The role requires technical product management experience, cloud delivery expertise, strong communication, cross-functional influence, and the ability to measure product performance. Desired experience includes workload and platform security, Kubernetes, data platforms, developer ecosystems, AI, and regulated industries.

Own end-to-end security engineering for pharmacy robots, including threat modeling, design reviews, device identity, key custody, penetration testing, vulnerability management, incident response, cloud security posture, customer security reviews, and HIPAA-related controls. Build and review code across Rust, TypeScript, and Python while partnering with on-machine, cloud, and operating-system engineering teams. Maintain evidence-backed security practices and track findings through remediation.

Design and implement logging and alerting systems across endpoints, infrastructure, networks, and cloud environments. Build automation for threat hunting and incident response, investigate and triage security events, lead incident response efforts, and develop threat intelligence on advanced adversary tactics. The role also requires secure, scalable software development using Python or Go and expertise across operating systems, Kubernetes, and cloud platforms.

Develop and operate detection and response capabilities across enterprise, cloud, and product environments. Responsibilities include building detections-as-code, triaging alerts, leading incident response and forensic investigations, threat hunting, automating workflows, maintaining SIEM and security data pipelines, developing AI-enabled security tooling, and participating in on-call rotations. The role also involves threat intelligence collaboration, security engineering mentorship, and continuous improvement of detection and response systems.

Build and maintain detection and response capabilities across enterprise, cloud, and product environments. Responsibilities include developing detections-as-code, triaging alerts, investigating and responding to incidents, conducting digital forensics and threat hunting, automating workflows, building security tooling, supporting SIEM and security data lake pipelines, developing AI-driven security systems, participating in on-call rotations, and mentoring engineers.

Build and maintain detection and response capabilities across enterprise, cloud, and product environments. Responsibilities include developing detections-as-code, triaging alerts, investigating and responding to incidents, conducting digital forensics and threat hunting, automating workflows, building security tooling, supporting SIEM and security data lake pipelines, developing AI-enabled security systems, participating in on-call rotations, and mentoring engineers.

Supports cybersecurity governance and compliance across cloud and on-premises environments. Responsibilities include maintaining policies, validating security controls and vulnerability findings, preparing audit evidence, tracking remediation, conducting risk assessments, supporting access governance, and communicating security posture to leadership. The role also supports CMMC readiness, security awareness, incident documentation, and coordination with IT, Engineering, Program Management, and security leadership. An active Secret clearance must be obtained and maintained.

Leads the company’s information security operations and reports to the CISO. Oversees SIEM, threat detection, vulnerability management, penetration testing, incident response, SOC 2 Type II compliance, third-party risk, security awareness, cloud and endpoint security, and regulatory cybersecurity coordination. Manages security policies, breach readiness, tabletop exercises, KPIs, audits, and emerging technology evaluations while partnering with IT, infrastructure, compliance, regulators, and executive leadership.

Respond to and resolve cybersecurity incidents, prevent recurrence, and develop innovative solutions for complex security operations challenges. Apply intelligence-driven defense, Cyber Kill Chain, and MITRE ATT&CK methodologies. Analyze security operations data, mentor or supervise personnel, and support SOC, incident response, and cyber network operations. The role requires a Top Secret clearance and substantial information technology or intelligence operations experience.

Designs, deploys, troubleshoots, and supports enterprise network and security infrastructure, including routing, switching, firewalls, wireless, cloud networking, VPNs, and data center services. The role analyzes operational incidents, implements remediation, maintains documentation, communicates with management, supports roadmap decisions, and participates in on-call rotations. It requires extensive experience with multi-vendor network security technologies, cloud platforms, and customer-facing technical work.

Build and operate identity and access management services protecting Slack infrastructure and AI agents. Responsibilities include developing AWS and Kubernetes services, extending agent authentication and authorization controls, automating access management, improving operational reliability through monitoring and SLOs, collaborating across Identity, Security, and Infrastructure teams, and participating in code and design reviews.

Perform DFIR-focused threat hunting, investigation, and threat intelligence development. Analyze attacker TTPs, enrich intelligence with detection guidance, produce briefings and security recommendations, and integrate investigation best practices into Microsoft tooling.

Leads cybersecurity for contractor-operated DoD systems at AUTEC, managing RMF authorization, eMASS packages, ATOs, continuous monitoring, vulnerability remediation, incident response, compliance inspections, access controls, policies, and government reporting. Supervises ISSOs and cybersecurity technicians, advises engineering teams on secure system design, and coordinates with Navy assessors and government cybersecurity stakeholders. The role is fully on-site in West Palm Beach, with occasional work and travel to Andros Island, The Bahamas.

Administers and optimizes enterprise vulnerability management and endpoint security across Windows, Linux, virtual, and classified environments. Performs ACAS/Nessus scanning, Tanium endpoint assessment, Trellix security analysis, risk-based remediation prioritization, STIG hardening, exception evaluation, and cybersecurity reporting. Supports incident response, threat hunting, endpoint containment, RMF and authorization activities, POA&M documentation, and security-control assessments. Advises technical teams and leadership on cybersecurity risks, remediation strategies, security standards, and enterprise security improvements.

Leads implementation, administration, and support of enterprise Cisco ISE and network access control solutions. Designs authentication, authorization, device profiling, posture assessment, guest access, network segmentation, and Zero Trust capabilities across wired, wireless, VPN, and cloud environments. Troubleshoots complex access and certificate issues, manages integrations and lifecycle activities, develops automation, supports cybersecurity projects, establishes standards and controls, partners with infrastructure teams and vendors, and mentors junior engineers.

Owns cybersecurity authorization and continuous monitoring for DoD information systems. Manages the RMF lifecycle, develops and maintains eMASS authorization packages, oversees controls and POA&Ms, coordinates with AOs, AODRs, and assessors, supervises ISSOs, supports audits, and communicates security posture and risks to senior stakeholders.

Conducts independent security controls assessments for federal information systems using NIST 800-53 Revision 5 and the NIST Risk Management Framework. Develops assessment plans, leads stakeholder interviews and testing, manages evidence, supports ATO documentation, and provides recommendations to improve security posture. The role requires federal government assessment experience, U.S. citizenship, and eligibility for Public Trust or Suitability Determination.