Top Cyber Security Jobs

Leads cybersecurity authorization and compliance activities for Army intelligence systems. Develops and maintains IATT and ATO packages in eMASS, assesses NIST 800-53 controls, identifies compliance gaps and risks, supports remediation and continuous monitoring, and coordinates with system owners, ISSOs, engineers, vendors, and government stakeholders. The role requires onsite work in a classified SCIF and active TS/SCI clearance.

Build and lead development of a scalable AI security platform, including foundational services, APIs, libraries, SDKs, and guardrails for AI-powered security capabilities. Design secure, reliable distributed systems with identity, authentication, authorization, encryption, and data protection controls. Partner across security and engineering teams, improve platform performance and developer experience, and guide the architecture and technical direction of the platform.

Protects regional IT and OT environments through security monitoring, incident response, vulnerability management, risk assessments, penetration-test remediation, compliance audits, and executive reporting. Owns cybersecurity tools, controls, playbooks, and compliance initiatives while partnering with global teams, third-party SOC providers, and business stakeholders. The role requires onsite work, cross-functional influence, and occasional international travel supporting cybersecurity standards including ISO 27001, TISAX, NIST, CMMC, and IATF 16949.

Design and implement enterprise security architecture aligned with NIST, ISO 27001, and CIS standards. Build security data aggregation, normalization, and automation pipelines using VBScript, Python, and PowerShell. Lead tooling rationalization initiatives, consolidate security telemetry, reduce operational costs, and establish enterprise monitoring and incident response programs with detection, escalation, and investigation procedures.

Support cybersecurity authorization and compliance for Army intelligence systems by executing RMF activities, managing eMASS security authorization packages, assessing NIST 800-53 controls, and supporting IATTs, ATOs, continuous monitoring, remediation, and risk assessments. Coordinate with system owners, engineers, vendors, and government stakeholders while working onsite in a classified SCIF environment.

Conduct RMF and cybersecurity authorization activities for Army intelligence systems. Develop and maintain IATT and ATO packages in eMASS, assess NIST 800-53 controls, identify compliance gaps and risks, support remediation and continuous monitoring, and coordinate with system owners, engineers, vendors, and government stakeholders in a classified SCIF environment.

Support Army cybersecurity authorization and compliance by developing and maintaining eMASS security packages throughout the RMF and ATO lifecycle. Assess NIST 800-53 controls, review evidence and risks, identify deficiencies, coordinate remediation, support continuous monitoring, and communicate security posture to government stakeholders. The role requires onsite work in a classified SCIF and collaboration with system owners, ISSOs, engineers, vendors, and authorization decision authorities.

Reviews and assesses RMF authorization evidence for classified information systems, including security plans, control matrices, monitoring plans, and incident response documentation. Evaluates technical compliance, conducts security design and threat-risk assessments, contributes to POA&Ms and risk reports, performs site visits, inspects security control implementations, and supports incident response activities. The role requires extensive RMF, NIST 800-53, operating system, virtualization, cloud, and information assurance experience.

Administers security architectures, compliance requirements, program protection plans, classification guidance, and security documentation for classified defense technology programs. The role supports risk management, public release reviews, DD 254 preparation, intelligence requests, leadership briefings, and coordination across contractors, government customers, and remote locations. Frequent travel is required, along with an active TS/SCI clearance and U.S. citizenship.

Leads and performs NIST-aligned cybersecurity control assessments, including planning, control testing, evidence evaluation, stakeholder interviews, findings review, and results presentation. Coordinates assessors, mentors team members, enforces standardized methodologies, supports quality assurance, and communicates risks to executive and board-level audiences. The role is primarily remote with periodic client-site travel.

Conduct application security assessments across web, API, and mobile systems; perform SAST, DAST, SCA, manual reviews, threat modeling, and vendor security assessments. Prioritize vulnerabilities, guide developers on remediation and secure coding, integrate automated scanning into CI/CD pipelines, and maintain application security standards, documentation, and training.

Leads security compliance for a FedRAMP-authorized cloud environment. Maintains the ATO, coordinates continuous monitoring, assessments, audits, penetration testing, risk reviews, POA&M remediation, security documentation, and NIST control implementation. Partners with engineering, DevOps, cloud operations, compliance, and government stakeholders to support incident response, secure system changes, cloud deployments, and audit readiness.

Performs system security engineering throughout the acquisition and development lifecycle. Responsibilities include program protection, supply chain risk and vulnerability assessments, counterfeit parts prevention, criticality analysis, security planning, vulnerability mitigation, supplier oversight, authorization support, technical documentation, and leadership of cybersecurity activities. The role requires U.S. Government security engineering experience, RMF expertise, a qualifying DoD certification, and an active Secret clearance.

Lead Leap’s security and compliance program, including HITRUST certification, SOC 2 Type II audits, HIPAA controls, policy development, vendor risk reviews, security questionnaires, and client security engagements. Build a prioritized security roadmap, advise Engineering on GCP and data-stack controls, manage an external security partner, and report security posture and compliance risks to leadership.

Monitors, investigates, and responds to security events and vulnerabilities across company systems and networks. The role analyzes alerts and logs, supports incident response, conducts vulnerability scanning and remediation tracking, manages cybersecurity tools, researches security solutions, maintains incident and risk management processes, and prepares investigation and incident reports. It also partners with operational, development, and deployment teams to identify information security violations and improve secure system practices.

Lead cybersecurity architecture, implementation, assessments, risk analysis, incident response, and security lifecycle integration. Own Honeywell’s CMMC compliance program, including CUI asset governance, evidence management, NIST-to-FedRAMP CRM mapping, CMMC operating processes, remediation tracking, and stakeholder coordination. Mentor cybersecurity professionals and advise technical and nontechnical stakeholders on emerging threats and mitigation strategies.

Lead CMMC compliance and cybersecurity architecture efforts, including CUI asset governance, evidence management, CRM development, NIST and FedRAMP mapping, remediation tracking, security assessments, risk analysis, incident response, and secure development integration. Mentor cybersecurity professionals and collaborate with internal and external stakeholders to implement protections for critical systems and information.

Assess cloud, network, infrastructure, and application designs against security and compliance requirements. Translate requirements into technical specifications, security blueprints, and engineering guardrails. Support compliance programs, control assessments, and audits, investigate security risks, define remediation, and improve security-control adoption through AI and automation.

Designs, implements, and administers F5 BIG-IP solutions within DoD cloud and on-premises environments. Supports enterprise architecture modernization, troubleshoots issues with DoD clients and stakeholders, and applies cryptography, PKI, TLS, mTLS, and federal compliance standards. The role supports national security missions and requires Secret clearance.

The ISSO coordinates RMF authorization and reauthorization activities, guides system owners on data categorization, eMASS and DITPR registration, security controls, and compliance. Responsibilities include reviewing security plans, managing POA&Ms, assessing risk acceptance, conducting ACAS and SCAP scans, reviewing STIGs, performing vulnerability analysis, supporting continuous monitoring, and writing SSPs. The role requires extensive Microsoft technical experience, active Top Secret clearance with SCI eligibility, DoD 8570 IAM certification, a bachelor’s degree, and at least 10 years of experience.

Serve as the primary technical security engineer for a DoD system, managing ACAS and SCAP vulnerability scans, STIG compliance, patching, POA&M remediation, incident response, system documentation, and NIST RMF compliance. Collaborate with the ISSO, maintain security and configuration records, investigate alerts, and use PowerShell, Python, or Bash to automate security and compliance activities.

Manages the IT and Security team, including helpdesk workflows, project roadmaps, compliance automation, access management, authentication standards, disaster recovery, vendor relationships, and enterprise system rollouts. Partners with product, engineering, and business leaders on security initiatives and complex technical changes. Maintains audit-ready security processes while overseeing remote IT operations, cloud security, identity tools, and technology spend.

Performs cybersecurity audits and compliance assessments for complex information systems, applications, and industrial control environments. Develops RMF and FISMA documentation, evaluates vulnerabilities, STIG compliance, certification results, and security controls, and tracks remediation activities. Ensures adherence to Federal, DOD, and DLA policies while recommending technical and procedural improvements. The role also supports IA certification and accreditation, vulnerability analysis, and IT management activities using Microsoft tools and eMASS.

Lead and build the company’s information security program while initially owning IT operations. Responsibilities include protecting source code and hardware designs, securing developer infrastructure and software supply chains, managing identity and access, incident response, NIST 800-171 and CMMC compliance, export-control technical safeguards, AI and data governance, device management, networking, and IT scaling. The role is hands-on and partners closely with engineering, legal, compliance, vendors, and leadership.

Owns end-to-end security engineering, including risk identification, secure-by-default libraries, least-privilege guardrails, developer machine hardening, supply-chain security, and identity and authentication protections. Partners with compliance to implement effective controls for healthcare requirements such as HIPAA and HITRUST. The role requires production software engineering and security expertise, with broad autonomy in a fully remote environment.