Top Cyber Security Jobs

Support cybersecurity operations for classified systems at Joint Base Pearl Harbor Hickam. Manage the RMF lifecycle, eMASS authorization packages, STIG compliance, vulnerability and patch management, continuous monitoring, configuration management, inspections, interconnection requests, POA&Ms, and security incident response. Coordinate across stakeholders and provide security guidance for mission-critical systems supporting thousands of users.

Lead and execute red team operations against Azure and Microsoft services to discover and exploit vulnerabilities, prototype offensive tools, analyze data for breach points, collaborate with blue teams to improve defenses, and advocate for security improvements across the company.

Maintains and develops cybersecurity infrastructure across networks, servers, workstations, applications, and cloud environments. Responsibilities include firewall administration, vulnerability scanning, SIEM and intrusion detection, security architecture, access auditing, SOX and PCI compliance, policy development, disaster recovery planning, security monitoring, and security awareness training. The role also leads concurrent projects, evaluates security products, collaborates with IT teams, and mentors security administrators and contractors.

Provides multidisciplinary security support for Special Access Programs, SCI, and collateral activities. Responsibilities include enforcing NISPOM, DoD, and SAP security policies; identifying vulnerabilities and risks; supporting Operations Security; conducting facility compliance reviews; delivering security briefings and education; overseeing corrective actions; and investigating potential loss or compromise of classified information. Requires an active TS/SCI clearance and willingness to obtain a CI polygraph.

Designs, implements, and maintains cybersecurity infrastructure across networks, servers, workstations, applications, and cloud environments. Responsibilities include firewall administration, security monitoring, vulnerability scanning, intrusion detection, access auditing, compliance documentation, security architecture, policy development, disaster recovery planning, and incident prevention. The role also evaluates security products, leads concurrent projects, collaborates with IT teams, mentors security staff, and develops security awareness materials.

Supports continuous monitoring and authorization of multiple classified information systems. Responsibilities include maintaining security authorization documentation, managing configuration baselines and system changes, conducting audits and continuous monitoring, handling incidents, assessing vulnerabilities with STIG, SCAP, and Nessus, enforcing access requirements, supporting recovery processes, and coordinating with ISSMs and authorization officials. The role also mentors junior ISSOs and may assume ISSM responsibilities when needed.

Implements and supports enterprise network security solutions, including SD-WAN, firewalls, secure web gateways, and WAFs. Designs network security architectures, manages vendors, performs infrastructure upgrades, troubleshoots incidents, conducts risk assessments and cyber investigations, supports forensic research, and recommends corrective actions. The role also monitors security effectiveness and resolves network security infrastructure issues.

Conduct internal and external network, web application, API, mobile, cloud, social engineering, and wireless penetration tests. Advise clients on security and compliance, simulate cyberattacks, generate assessment reports, support engagement scoping and remediation, improve testing methodologies, manage escalations, and mentor junior staff while meeting delivery and utilization targets.

Own infrastructure security remediation and patch compliance across Windows, Linux, cloud, on-premises, network, and certificate assets. Plan and execute monthly, zero-day, and out-of-band patching with canary testing, change controls, maintenance windows, and rollback procedures. Operate enterprise security and ITSM tooling, coordinate vendors, manage certificate lifecycles, publish compliance and audit reports, and lead security-infrastructure governance meetings.

Defines enterprise technology strategy, architecture standards, security controls, and multi-year roadmaps across AWS, Azure, GCP, GitHub Enterprise, AI platforms, and infrastructure. Leads cloud governance, migration, modernization, FinOps, developer platform management, AI governance, and security architecture initiatives. Advises executives, ensures compliance and risk alignment, drives operational excellence, and mentors architects and engineers.

Administers Microsoft Defender services for a DoD customer, monitoring endpoint security, EDR, NGAV, attack-surface reduction, cloud protection, SIEM integrations, cross-platform controls, WDAC, DLP, compliance reporting, and security dashboards. Escalates anomalies, maintains policies and procedures, investigates alerts, and supports Windows, Linux, and mobile-device protection. Requires cybersecurity experience, Microsoft security expertise, DoD compliance knowledge, Security+ certification, and an active Secret clearance.

Lead cloud security initiatives across AWS, Azure, and GCP by partnering with SRE, architecture, and app teams. Implement secure-by-design controls, monitor and improve cloud posture, support compliance, threat detection, incident response and forensics, mentor junior engineers, and integrate new security technologies into networking cloud environments.

Designs, develops, and operates encryption, tokenization, and key management platforms that protect sensitive data. Leads secure, scalable architecture and production implementation, ensuring high availability, disaster recovery, observability, compliance, and auditability. Partners with security, compliance, governance, product, and application teams; applies cryptography standards; mentors engineers; and improves platform performance, cost efficiency, reliability, and developer experience. Requires strong software engineering, cloud, SRE, cryptography, stateful systems, CI/CD, and infrastructure-as-code expertise.

Owns federal system authorization, security posture, and remediation for CBP systems. ISSOs manage authorization decisions, control implementation, POA&Ms, security reviews, and documentation. Security engineers harden, monitor, and remediate systems, develop secure configurations and tooling, and address findings at their root causes. Leads oversee security engineering standards and accountability. The role requires collaboration with network, cloud, deployment, and government security teams in a documentation-heavy RMF environment.

Partner with sales leadership and cross-functional stakeholders to drive billed revenue growth for Microsoft 365 E5. Monitor revenue performance, improve pipeline health, perform root-cause analysis, generate data-driven insights, and translate strategy into execution plans. Lead governance, cadence, and operational improvements to scale best practices and accelerate sales execution across regions.

Support authorization and accreditation of classified Azure Government systems by developing A&A packages, SSPs, POA&Ms, and ATO documentation. Manage security controls, continuous monitoring, auditing, logging, vulnerabilities, and compliance across Azure security services. Guide SIEM/SOAR integrations, remediation, DevSecOps security, control evidence collection, assessments, and federal authorization processes. Coordinate with technical teams, mission owners, assessors, and authorizing officials while maintaining NIST, DoD, and CIS compliance.

Define, build, secure, and operate Front’s internal software platform across AWS and Snowflake. Establish engineering standards, infrastructure-as-code, CI/CD, observability, secrets management, vulnerability controls, RBAC, security monitoring, DLP, incident response, compliance support, and AI client integrations. Partner with engineering, data, GTM Systems, IAM, Enterprise Security, and Legal while enabling self-service deployment and maintaining reliable internal infrastructure.

Administer and maintain IT security applications and systems, implement security procedures, support threat operations, enforce policies, promote cybersecurity awareness, and communicate security concepts to technical and business stakeholders.

Lead Cyber Security Operations Center activities, including shift-level leadership, alert triage, prioritization, event escalation, quality control, and threat assessment. Improve runbooks, standard operating procedures, automation, and orchestration while monitoring emerging threats and supporting cyber resiliency. Collaborate with technical and business stakeholders, validate escalations, document events, and mentor junior analysts.

Provides onsite cybersecurity engineering for classified defense intelligence systems. Responsibilities include supporting DIA authorization and accreditation under RMF, obtaining IATT, ATC, and ATO approvals, designing secure systems and physical controls, configuring and validating security tools, developing test plans, analyzing scan results, remediating vulnerabilities, and supporting incident response. The role requires advanced Windows and Linux administration, security tool expertise, IAT Level 2 compliance, and a TS/SCI clearance with polygraph.

Two-year rotational program for graduating students to design, build, and enhance secure applications, systems, controls, automations, and infrastructure. Participants gain experience in secure software development, DevSecOps, identity and access management, vulnerability remediation, and cybersecurity while collaborating across engineering and security teams. The program emphasizes leadership development, Agile delivery, project ownership, mentorship, and cross-functional communication.

Two-year rotational program for graduating students supporting cybersecurity and operational risk identification, threat and vulnerability analysis, control strengthening, reporting, and risk-informed decision-making. Participants rotate across cybersecurity operations, threat intelligence, risk management, and identity and access management teams while developing analytical, leadership, and collaboration skills through hands-on projects, capstones, and mentorship.

The Information Security Architect develops enterprise security architectures, standards, reference patterns, and secure design practices. They advise application, infrastructure, product, DevOps, and technology teams; conduct architecture reviews and threat modeling; integrate security controls and GRC requirements; evaluate emerging technologies; support vendor assessments; and advance security strategy and roadmaps. The role requires strong cross-functional influence, communication, technical analysis, and the ability to translate business needs into scalable, secure solutions.

Supports container and cloud security activities by identifying vulnerabilities and misconfigurations, assessing security controls, assisting remediation, monitoring alerts, supporting audits and regulatory requests, and researching emerging threats. The role collaborates with vulnerability management, cloud security, engineering, and technology teams; administers tools including Aqua, Wiz, Qualys, and CrowdStrike; contributes to CI/CD and software supply chain security; and provides technical documentation, consultation, and operational support.

Develop and lead enterprise security architecture across on-premises, cloud, and containerized environments. Establish security standards, roadmaps, hardening practices, and AI security controls; review architectures, guide implementations, evaluate security tools, and mitigate technology risks. Advise business and engineering stakeholders, oversee proof-of-concepts and integrations, monitor security effectiveness, and address emerging cyber threats through threat intelligence and strategic risk management.