Top Cyber Security Jobs

Provides administrative and technical support for personnel security programs, including investigation requests, fingerprint reviews, adjudication support, position risk assessments, separations, database consistency reviews, and regulatory compliance. Advises stakeholders on personnel security processes, researches laws and policies, maintains procedures and training materials, delivers training, prepares reports, and supports special projects. The role requires proficiency with federal personnel security systems and the ability to obtain Tier 3 Secret access.

Designs and leads cloud and application security solutions across DNS, HTTP servers, microservices, container infrastructure, and CI/CD pipelines. Defines security requirements, controls, encryption, access management, risk assessments, testing standards, and compliance measures. Analyzes security data and risks, integrates network security controls, develops scalable solutions, leads technical working groups, and communicates findings and recommendations to technical stakeholders, customers, and third parties.

Leads AGS information security and data privacy strategy, governance, risk management, policy development, security certifications, incident response, customer security questionnaires, vendor and contract reviews, and regulatory compliance. Oversees security controls, audits, privacy initiatives, staff development, office security requirements, and coordination with parent-company information security teams. Advises executives and stakeholders on emerging threats, frameworks, business impact, and cost-effective security improvements.

Manages security governance, risk, compliance, and control programs for enterprise SaaS and PaaS platforms. Coordinates security initiatives, control frameworks, audits, assessments, exceptions, vendor risk reviews, and continuous monitoring. Partners with IT, security, compliance, business, IAM, data governance teams, and vendors to improve platform security, access controls, data protection, and compliance maturity. Reports risks, metrics, KRIs, and compliance status to leadership while supporting secure adoption across Workday, Salesforce, Snowflake, ServiceNow, and Microsoft 365.

Ensures classified information systems comply with cybersecurity policies, NIST standards, NISPOM, DAAPM, and JSIG requirements. Responsibilities include compliance monitoring, audits, security plan development, security awareness training, violation investigations, configuration management reviews, technical assessments, cybersecurity process integration, documentation, and incident response support. The role is fully onsite in McKinney, Texas and requires an active Secret clearance and U.S. citizenship.

Leads federal IT security controls assessments and program evaluations. Responsibilities include interviewing stakeholders, reviewing security plans, audit logs, configuration and vulnerability scans, testing controls against federal requirements, documenting findings, communicating results to leadership, identifying root causes, developing remediation plans, advising clients, planning assessment activities, and mentoring junior staff.

Develops and maintains defensive cyber countermeasures across enterprise networks. Analyzes security data, trends, incidents, and intelligence to identify threats, tune SIEM rules and signatures, investigate potential compromises, and support incident response. Collaborates with defensive operations, cyber analytics, and incident response teams; validates countermeasures through Purple Team exercises; documents analysis and presents findings in briefings.

Provides physical security and information assurance support for collateral, SCI, and SAP systems. Ensures compliance with DoD and national security guidance, maintains accreditation documentation, manages TEMPEST and TSCM activities, reviews facility construction plans, identifies vulnerabilities, conducts inspections, enforces personnel and device security controls, manages media controls, and supports IA training and corrective actions.

Leads and supports Risk Management Framework and authorization activities for on-premise and cloud systems. Develops SSPs, control matrices, SARs, POA&Ms, and risk acceptance materials; interprets FISMA, NIST, FedRAMP, and OSCAL requirements; coordinates with system owners, ISSOs, IAMs, and assessors; supports continuous authorization, automated evidence validation, GRC workflow modernization, compliance reporting, and Agile release readiness.

Lead system security engineering for program protection, supply chain risk management, and counterfeit prevention across acquisition lifecycle. Develop SCRM/PPIP/CPP plans, conduct vulnerability and criticality analyses, support RMF/SSP/assessment efforts, mentor junior engineers, liaise with suppliers and stakeholders, and support authorization and Agile development.

Leads application and data security engineering across cloud, on-premises, and colocation environments. Develops security policies, standards, testing, vulnerability analysis, WAF and Layer 7 protections, and secure software development practices. Supports incident response and on-call operations, researches emerging threats, mentors engineers, and contributes to security strategy, risk assessments, compliance, and roadmap planning.

Provides Level 3 engineering and operational support for CIAM and IAM platforms. Supports SSO, MFA, passwordless and adaptive authentication, identity federation, directory services, privileged access, cloud identity, application onboarding, troubleshooting, deployments, upgrades, vulnerability remediation, monitoring, automation, and identity modernization. Partners with product, architecture, engineering, and security teams to deliver secure, reliable identity services in a highly regulated environment.

Monitor information systems for cybersecurity events, anomalies, malicious activity, and indicators of compromise. Triage, investigate, evaluate risk, respond to and escalate alerts. Participate in incident response, build monitoring rule sets, monitor threat intelligence feeds, and improve cybersecurity and digital forensics processes and solutions.

Leads the offensive security and penetration testing function across applications, APIs, mobile, cloud, networks, infrastructure, and business services. Manages testing intake, prioritization, delivery quality, reporting, remediation tracking, governance, and continuous improvement. Directly manages and develops penetration testers and offensive security engineers while translating technical findings into business risk. Partners with engineering and infrastructure teams on secure development and remediation, and evaluates AI-enabled and agentic testing capabilities.

Designs, implements, and operates security controls across OCI, Oracle Cloud Applications, and hybrid Oracle environments. Responsibilities include security architecture, cloud workload hardening, identity and access management, vulnerability and compliance programs, incident response, SIEM integration, and security automation. The role also involves cross-functional collaboration, code and design reviews, troubleshooting, documentation, and mentoring junior engineers.

Provide SIEM, SOAR, and security platform engineering support; develop detection content, dashboards, and automations; lead Tier 3 incident investigations and response; create configuration standards and documentation; provision cloud resources with infrastructure-as-code; maintain CI/CD, secrets, and EDR systems; ensure asset hardening and observability across the estate.

Administers personnel security systems and clearance processes, including eAPP submissions, DISS and NBIS management, form review, compliance reporting, security training, visitor access requests, and stakeholder briefings. Provides customer support, coordinates with federal agencies, maintains secure vaults, and monitors clearance actions for personnel requiring access to information or facilities.

Supports hardware assurance for the GBSD defense program by assessing hardware and firmware threats, vulnerabilities, and risks; reviewing security assessments; identifying noncompliance; recommending mitigations; and helping ensure secure system architecture and implementation. The role also supports vulnerability management, supply chain security, counterfeit prevention, program protection, stakeholder communication, technical working groups, and security requirements across complex defense systems.

Build and lead Velotic’s product security program, including secure SDLC practices, security tooling, threat modeling, vulnerability management, security automation, and developer security training. Lead architecture reviews, penetration testing, incident response, compliance activities, customer security assessments, and security champions initiatives. Partner with engineering, product, infrastructure, IT, support, customers, system integrators, and MSSP providers while reporting security metrics and risks to executive leadership.

Protect the firm from web-based threats by designing, implementing, and maintaining web filtering proxies, secure web gateways, and cloud proxy platforms. Develop security policies for web filtering, SSL inspection, DLP, and threat prevention; translate regulatory requirements into technical controls; automate policy management and integrate security tools with SIEM, SOAR, and identity platforms. Support incident response, secure business use cases, scalability, Zero Trust alignment, and leadership reporting on risks and program maturity.

Optimize Microsoft security operations by tuning Sentinel detections, reducing false positives, designing alert and incident-response automation, integrating Defender products and third-party telemetry, improving SOC workflows, and developing investigation playbooks, runbooks, and documentation. This hands-on 3–4 month contract requires strong Sentinel and Defender expertise, advanced KQL, Logic Apps, SOAR automation, SIEM engineering, and security operations optimization experience.

Leads hands-on cybersecurity engineering across infrastructure, platforms, and applications in federal RMF environments. Designs, implements, assesses, and hardens security controls; supports ATOs, continuous monitoring, SSPs, POA&Ms, and vulnerability remediation. Serves as the technical incident-response lead, coordinating alert triage, forensic investigations, remediation, reporting, and runbook development. Collaborates with system owners, architects, developers, operations, and enterprise security teams while guiding junior security personnel.

Provides Level 3 engineering and operational support for CIAM and IAM platforms. Supports SSO, MFA, passwordless, federation, adaptive authentication, cloud and hybrid identity services, privileged access, and Zero Trust controls. Troubleshoots authentication and directory integrations, onboards applications, performs deployments and upgrades, manages vulnerabilities, monitors platform reliability, and drives automation and modernization initiatives across customer and workforce identity environments.

Manages Special Access Program security across personnel, information, physical, technical, and operational areas. Develops access controls, policies, procedures, and training; administers SAP-cleared systems; tracks clearances and billet access; responds to incidents; conducts risk assessments, damage assessments, and compliance activities; and briefs senior defense decision-makers. Supports classified networks and SAP facilities while maintaining security readiness and safeguarding sensitive information.

Build and maintain cloud security improvements across AWS/GCP, Kubernetes, and CI/CD environments. Design detection and response capabilities using SIEM, EDR/MDR, cloud-native detections, and CNAPP tools. Investigate and respond to security incidents end to end, develop detection logic and playbooks, and create security tooling and automations using Python, Terraform, and infrastructure-as-code. The role also supports endpoint security and secure DevOps practices.