Top Cyber Security Jobs

Build and secure CI/CD pipelines by integrating SAST, DAST, SCA, container scanning, and infrastructure-as-code security controls. Secure cloud, container, and Kubernetes environments; develop automation; maintain pipeline security tooling; and support vulnerability remediation, compliance, audits, and documentation. Collaborate with development, QA, operations, customer, and security teams to promote secure software delivery and coding practices in government and regulated environments.

The Information Security Analyst administers network security solutions, applies security patches, performs vulnerability and penetration testing, monitors and responds through enterprise SIEM, and develops disaster recovery plans. The role configures security systems, supports network and perimeter security, conducts remote support, documents and escalates issues, and helps maintain HIPAA, NIST, ISO, SSAE 16, and CMMC compliance. Candidates must demonstrate strong troubleshooting, communication, organization, prioritization, and teamwork skills.

Leads global Cyber and Information Security internal audits, risk assessments, issue validation, governance reporting, and audit delivery. Manages audit professionals, budgets, recruiting, and development while advising business leaders on technology risks and change initiatives. Reviews complex audits, identifies control issues, recommends practical interventions, and partners with senior executives, regulators, and security stakeholders. Applies audit standards, NIST frameworks, analytical judgment, and subject matter expertise across infrastructure, applications, and banking technologies.

Leads cybersecurity consulting engagements for large, complex organizations, overseeing project delivery, client relationships, security strategy, governance, risk management, proposals, statements of work, and business development. Provides thought leadership, advises senior stakeholders, guides cybersecurity solutions and emerging-threat initiatives, supports sales growth, and mentors junior team members. Travel up to 25% is required.

Designs and implements secure cloud architectures for mission-critical Air Force systems. Evaluates RMF and NIST compliance, manages DevSecOps security scanning, hardens systems and containers, protects secrets, documents network and data flows, evaluates cloud services, and develops infrastructure as code using CloudFormation or Terraform. The role also supports security tools, government information assurance requirements, and mentorship of cloud security professionals.

Administer and monitor enterprise network security infrastructure, including firewalls, endpoint protection, VPNs, certificates, vulnerability management, and security controls. Investigate incidents, remediate threats, support network infrastructure, maintain documentation, and coordinate with internal teams and managed security providers. The role also supports change management, lifecycle upgrades, disaster recovery, compliance, after-hours maintenance, and technical escalations.

Leads security operations, including SOC performance, incident command, detection and response tooling, AI-agent oversight, MSP relationships, and 24x7 coverage. Manages cyber defense engineers, analysts, and an eight-person contractor SOC pod; develops SecOps roadmaps, oversees SIEM, EDR, and SOAR quality, coordinates major incidents, and partners on agentic security capabilities. Provides coaching, performance management, and career development while driving measurable security improvements.

Administer enterprise identity lifecycle, governance, access provisioning, RBAC, PAM, and Microsoft Entra environments. Resolve Tier 2/3 IAM incidents, support IGA implementations, automate provisioning with PowerShell and Python, configure SSO, and secure privileged access. The role collaborates with stakeholders, designs access certifications and role architecture, leads small-to-medium identity projects, documents procedures, mentors junior analysts, and participates in an on-call rotation.

Lead security architecture for Lambda’s AI cloud infrastructure, focusing on data protection, platform security, encryption, key management, DLP, confidential computing, zero-trust access, tenant isolation, and Kubernetes or GPU platform hardening. The role includes threat modeling, security design reviews, Python or Go prototyping, AI-enabled security automation, vendor risk assessment, technical documentation, cross-functional roadmap alignment, and mentoring engineering teams.

Performs initial response and triage for security incidents, classifies alerts using MITRE categories, distinguishes true from false positives, escalates significant compromises, communicates with clients when needed, and maintains alert-process documentation. The role requires SOC experience and cybersecurity certifications, with preferred experience in ServiceNow and managed service provider environments.

Designs end-to-end enterprise solutions and reference architectures across applications, APIs, data platforms, identity, security, AI, and cloud infrastructure. Leads architecture standards, technology evaluations, proofs of concept, technical decisions, and cross-functional collaboration with engineering, security, CloudOps, and IT teams. Ensures designs meet business, regulatory, security, and continuity requirements while mentoring engineering teams and promoting scalable, reliable, cost-effective solutions.

Lead security data architecture and governance for global security observability. Design and manage data pipelines, lakes/warehouses, and analytics (AI/ML) across SIEM/EDR/DLP sources. Publish standards, onboard applications, produce KPIs/reports, and collaborate with architecture and engineering to deliver a multi-year roadmap and threat-hunting capabilities.

Perform advanced security monitoring, threat hunting, incident investigation, and triage across endpoint, server, and network environments. Analyze SIEM and endpoint data, identify indicators of attack and compromise, map customer use cases to MITRE ATT&CK, scope incidents, provide recommendations, maintain documentation, and participate in an after-hours incident-controller rotation.

Designs, implements, and maintains enterprise security controls across network, cloud, endpoint, and identity environments. Engineers firewalls, IDS/IPS, secure web gateways, segmentation, IAM, cloud security configurations, logging pipelines, and detection integrations. The role also hardens infrastructure, validates assessment findings, owns security platforms, evaluates new technologies, develops standards and runbooks, and partners with Cyber Defense, Infrastructure, Application, and business teams on secure architecture, compliance, and risk reduction.

Manage on-site and deployable COMSEC equipment and classified voice and data systems for a Pacific Warfighting Center. Responsibilities include deploying and troubleshooting ECVoIP and DRSN systems, performing key transfers, maintaining encryptors, managing COMSEC accountability and training, coordinating key inventory and destruction, supporting procurement, and collaborating with DoD and defense organizations on classified communications requirements.

Supports cybersecurity data automation, RMF compliance, and sustainment analysis for a portfolio of systems. Develops dashboards, reports, data models, metrics, and documentation using Microsoft tools. Reviews eMASS packages, maintains cybersecurity controls, supports vulnerability remediation, and ensures security requirements are incorporated into system designs. Collaborates with distributed teams and stakeholders while analyzing complex cybersecurity datasets.

Provides technical expertise, installation, troubleshooting, sustainment, training, and customer support for VSAT satellite systems, Cisco networks, and deployable DoD C5ISR communications environments. The role requires extensive experience with Cisco routing and switching, satellite and RF communications, encryption devices, LAN/WAN networks, systems integration, testing, maintenance, and lifecycle sustainment. Candidates must hold a Secret clearance, support potential deployments, and demonstrate leadership across C5ISR requirements, testing, training, or operational support.

Lead enterprise-wide security compliance and regulatory authorization initiatives across global cloud environments. Architect unified control frameworks, map controls to federal, defense, international, and commercial standards, manage audits and assessments, coordinate evidence and remediation, and communicate compliance risks to executives, government stakeholders, assessors, and defense agencies. Drive continuous monitoring and recurring audit readiness across multiple compliance lifecycles.

Owns the design, operation, security, and continuous improvement of enterprise cryptographic infrastructure, including PKI, HSMs, key management, certificate lifecycle automation, and cloud cryptographic services. Leads signing ceremonies, compliance efforts, post-quantum cryptography planning, cryptographic policy development, and CBOM maintenance. Partners with security, infrastructure, and compliance teams on audits, risk assessments, and incident response while mentoring engineers and guiding the technical roadmap.

Conducts information system security engineering for a Naval Information Warfare Center program, including defining security requirements and integrating controls into technology components. Supports system design reviews, cybersecurity assessments, and RMF activities across hardware and software development. Requires cybersecurity experience, IA certification, U.S. citizenship, and Top Secret/SCI clearance. Travel is approximately 20% for security assessments.

Leads local product security across manufacturing and supply chain operations, protecting intellectual property and physical products from leaks, theft, counterfeiting, and unauthorized access. Responsibilities include risk assessments, security system management, threat monitoring, investigations, incident response, policy enforcement, audits, metrics, partner compliance, and security awareness. The role collaborates with Group Product Security, Legal, law enforcement, subcontractors, and internal teams.

Conduct operational testing and evaluation of AI/ML systems to identify vulnerabilities and AI-assisted attack risks. Review agency cyber defenses, recommend protective solutions, develop testing SOPs, and deliver actionable findings and remediation steps within 20 business days. The role requires substantial AI/ML security assessment experience and an active Secret clearance.

Perform cybersecurity assessments, vulnerability evaluations, compliance audits, and Risk Management Framework accreditation activities for mission-critical systems. Develop security plans, POA&Ms, certification documentation, and ST&E reports; monitor corrective actions and support continuous authorization. Apply NIST, CNSS, NISPOM, DCID, NSM-8, and Zero Trust concepts while collaborating with engineers, administrators, operators, and government stakeholders. Use vulnerability, monitoring, and documentation tools to identify risks, validate controls, and maintain system authorization.

Perform cybersecurity assessments, vulnerability evaluations, compliance audits, and Risk Management Framework activities for mission-critical systems. Support certification and accreditation, security testing, POA&M management, security documentation, continuous monitoring, risk mitigation, and government policy implementation. Analyze security requirements, coordinate audits and corrective actions, and use tools including Nessus, Rapid7, Splunk, and Xacta. The role requires active TS/SCI clearance with polygraph and extensive cybersecurity experience.

Builds and operates security controls, tooling, detection content, and automation across cloud and corporate environments. Responsibilities include SIEM/SOAR administration, log onboarding, endpoint security, cloud configuration and hardening, identity and access controls, Kubernetes security, secrets management, vulnerability remediation, incident investigation, audit support, and technical documentation. The role provides remediation guidance, improves detection quality, supports resilience exercises, and maintains auditable, version-controlled security configurations in a regulated healthcare environment.