Top Cyber Security Jobs

Gather requirements and implement security rules, troubleshoot connectivity, monitor software-defined perimeter solutions, test and deploy software clients, collaborate with vendors, upgrade AWS environments, document procedures, and automate monitoring and manual tasks through scripting.

Develop and operationalize cloud security strategies, technologies, monitoring, alerting, automation, and security operations integrations. Design security infrastructure across cloud environments, interconnect diverse security event sources, support DevOps initiatives, and improve tooling and operational frameworks. The role requires hands-on security engineering experience across network, system, application, authentication, cryptography, vulnerability management, and enterprise cloud technologies.

Performs application and system risk assessments, security audits, policy and procedure development, compliance support, security documentation, and risk communication. Advises business and security stakeholders, helps project teams implement controls addressing regulations such as Sarbanes-Oxley and HIPAA, supports organizational security awareness, and contributes to strategic information risk management initiatives and roadmaps.

Drives day-to-day security operations across identity security, vulnerability management, endpoint protection, and incident response. Manages vulnerability scanning, remediation tracking, Active Directory access hygiene, security alert triage, and PAM improvements. Partners with infrastructure and network teams, uses SIEM and EDR platforms, and develops security runbooks and operational procedures. Preferred expertise includes endpoint security, Tenable or Rapid7, DNS security, Splunk, data classification, and DLP.

Serve as the local ISSO supporting DoD HPCMP: implement and manage RMF, build and maintain ATO packages in eMASS, oversee vulnerability scanning and remediation, validate IA controls, guide patching and hardening (HBSS, Nessus, Tanium, ACAS), deliver training and technical briefings, and perform security assessments against DISA STIGs and related tools.

Design, implement, and maintain secure networking across hybrid and multi-cloud (AWS/Azure/GCP). Build secure architectures for containerized applications, apply segmentation and zero-trust, configure cloud-native network controls, deploy IDS/IPS and monitoring, investigate incidents, remediate vulnerabilities, and automate security policy enforcement using IaC, CI/CD, and Python scripting. Mentor engineers and influence platform security strategy.

Own security strategy and technical controls across AWS, infrastructure as code, software development, identity, SaaS, control systems, and data pipelines. Responsibilities include cloud security, DevSecOps, security monitoring, incident response, access control, endpoint baselines, risk tracking, compliance preparation, and security awareness. The role is the company’s first dedicated security position and requires close partnership with IT and engineering, occasional travel, and after-hours incident response availability.

Owns NIKE’s SAP security strategy, multi-year roadmaps, governance, and compliance framework. Leads SAP security planning, service partner delivery, risk control matrices, GRC risks, segregation-of-duties rules, security patch governance, and regulatory compliance. Partners with SAP, corporate security, finance governance, internal controls, and risk teams to implement secure technology solutions and influence SAP product roadmaps. Requires extensive SAP Security and SAP GRC Access Control experience, strategic leadership, and strong communication skills.

Own external security audits, gap analyses, risk assessments, security frameworks, access management, supplier reviews, and compliance procedures. Lead security improvement projects, incident response, control execution, and onboarding acquired companies. Collaborate across IT and development teams, answer customer security and privacy questions, automate recurring tasks with AI, and support ISO 27001, BSI C5, SOC 2, GDPR, and broader security and compliance initiatives.

Lead cloud security across AWS environments, managing vulnerabilities, misconfigurations, logging, threat detection, incident response, SIEM improvements, and security reviews. Maintain Orca Security and advise CloudOps and IT teams on best practices. Support audits, assess emerging technologies and AI projects, communicate technical risks to leadership, and promote security awareness. The role requires independent leadership, automation, stakeholder collaboration, and experience with AWS security services, containers, Terraform, scripting, DevSecOps, and threat management.

Leads global IT, corporate security, infrastructure, and help desk operations. Owns endpoint management, IAM, Okta, SaaS security, incident response, SIEM monitoring, compliance controls, integrations, onboarding and offboarding automation, collaboration platforms, asset management, vendor reviews, budgets, and IT strategy. Manages and develops a global team while partnering with Engineering, Finance, People, Legal, and executive leadership on security governance, AI enablement, systems integrations, and enterprise technology operations.

Designs and integrates secure information systems, cloud, and defense architectures; leads federal NIST RMF and ATO processes; implements security controls; performs vulnerability, threat, and risk assessments; advises engineering and program teams; and manages continuous monitoring, compliance, audit, and patch-management activities.

Designs and scales security compliance architecture for regulated cloud environments subject to FedRAMP and DoD IL5 requirements. Interprets NIST and related controls, partners with engineering teams on secure solutions, leads audit readiness, conducts gap assessments, addresses control deficiencies, and automates compliance operations. The role serves as a compliance subject matter expert for auditors, assessors, customers, and internal stakeholders.

Oversees personnel security programs by conducting background investigations, adjudicating security clearances, maintaining compliance records, protecting sensitive information, and addressing security risks with internal departments. Requires an active Top Secret/SCI clearance with CI polygraph, a bachelor’s degree or equivalent experience, and at least three years of relevant experience.

Lead product security for industrial automation, embedded, connectivity, software, and cloud products. Drive secure development lifecycle activities, security architecture, threat modeling, risk assessments, vulnerability management, testing, remediation, and regulatory compliance. Partner with engineering, product, quality, legal, and security teams while providing technical guidance and mentorship. Support standards including IEC 62443 and the EU Cyber Resilience Act across the product lifecycle.

Provides senior-level Army RMF and cybersecurity oversight, reviewing authorization packages and validating ATO documentation in eMASS. Evaluates CCIs, SCA-V results, POA&Ms, STIGs, SSPs, system boundaries, inventories, data flows, and vulnerability assessments. Advises centers on achieving DoD authorizations, coordinates RMF workflows, documents compliance with DoD security controls and Army regulations, and supports multiple projects.

Designs and implements enterprise security architectures across networks, cloud, platforms, applications, and data environments. Develops secure architecture documents, models risks, designs controls, assesses current environments, identifies gaps, and creates security maturity roadmaps. Advises stakeholders on security technologies, Zero Trust, data protection, network security, and compliance requirements while partnering with engineering, cloud, platform, and cybersecurity teams. Requires substantial cybersecurity and security architecture experience, enterprise cloud knowledge, and Secret clearance.

Monitor, investigate, triage, and respond to security events across customer environments. The analyst examines endpoint, network, identity, cloud, and log telemetry; supports incident containment and remediation; documents investigations; communicates with customers; escalates high-risk incidents; and improves detection, automation, and security operations processes.

Manages insider threat, security incident response, and risk management programs. Leads personnel, investigations, threat detection, mitigation, stakeholder coordination, compliance, reporting, budgeting, and performance management. Serves as the primary customer interface while ensuring contractual delivery, operational risk reduction, personnel development, and program execution. Supports incident response, policy development, training, business growth, and security-related investigations.

Supports USSF Defensive Cyber Operations by monitoring and analyzing intrusions, identifying malicious activity, executing cyber response, developing countermeasures, and assisting with classified material, personnel security, access control, clearance processing, SAP compliance, and security awareness activities.

Define enterprise IAM architecture and standards across hybrid, multi-cloud, and SaaS environments. Lead authentication, authorization, federation, and identity lifecycle solutions using modern protocols and Zero Trust principles. Influence technical strategy, review designs and code, establish security guardrails, develop roadmaps, and mentor engineers across multiple teams.

Conduct secure design reviews, threat modeling, and security requirement development for Salesforce products and platforms. Partner with product and engineering teams to implement security controls across cloud, microservice, and SaaS environments. Integrate shift-left security practices, triage penetration testing and bug bounty findings, and drive remediation. The role also addresses emerging AI, machine learning, and agent-based security threats, including risks in models, pipelines, and generative AI systems.

Build and maintain custom security tools, middleware, automation, APIs, integrations, dashboards, and security workflows. Integrate identity, endpoint, SIEM, SaaS, and other security platforms using APIs, cloud services, containers, and CI/CD. Translate security policies into secure, code-driven solutions while supporting SOAR, continuous monitoring, compliance, and cross-functional collaboration.

Provides information assurance and cybersecurity risk management for classified systems. Maintains security posture through RMF, evaluates security solutions, manages configuration documentation, prepares SSPs and accreditation packages, supports risk review boards, performs vulnerability and NIST-based risk assessments, and manages POA&Ms. The role is onsite in McLean, Virginia, requires U.S. citizenship, and requires an active TS/SCI clearance with polygraph.

Responsible for cybersecurity and RMF compliance across Defense Stockpile Management Systems. Develops and maintains ATO, ATC, IATT, POA&M, ST&E, audit, and continuous monitoring documentation; conducts vulnerability assessments using STIGs and scanning tools; evaluates system changes and security risks; supports audits and inspections; communicates threats; and provides technical guidance to staff. This is an onsite role at Fort Belvoir requiring an active TS/SCI clearance.