Top Cyber Security Jobs

Performs information security assessments of third-party service providers. Reviews security documentation and evidence, evaluates controls and risks against bank requirements, identifies and escalates gaps, documents assessment workpapers, supports remediation, and manages relationships with vendors and internal stakeholders. Requires knowledge of information security, IT compliance, risk management, business continuity, and industry frameworks, with travel up to 10–15%.

Leads Blue Yonder’s security compliance team and end-to-end audit lifecycle across a multi-product, multi-cloud SaaS environment. Responsibilities include managing ISO, SOC, SOX/ITGC, privacy, business continuity, and AI management certifications; coordinating auditors; rationalizing controls; maturing continuous compliance through automation and GRC tooling; partnering with technical, legal, finance, and customer teams; executive reporting; and developing compliance staff.

Supports cybersecurity posture assessments, RMF and ATO execution, continuous monitoring, and DoD/IC system authorization. Assesses security controls, reviews system security plans and architectures, documents authorization packages, identifies vulnerabilities, recommends corrective actions, and guides system hardening and risk mitigation. Requires active TS/SCI clearance, U.S. citizenship, extensive experience with NIST, CNSSI, FISMA, Windows, Linux, networking, and security accreditation processes.

Own data security posture management, classification, labeling, and protection initiatives across traditional data stores and AI/ML environments. Implement DSPM tools, define scanning patterns, integrate classification results with security systems, monitor risks, report security metrics, and advise on governance and data security strategies. Partner with privacy, IAM, engineering, legal, governance, analytics, and AI teams to enforce regulatory, privacy, retention, and data usage controls, including generative AI guardrails.

Lead the engineering modernization of enterprise data protection and DLP capabilities across cloud, SaaS, endpoints, email, and collaboration platforms. Build automated Policy-as-Code workflows, CI/CD pipelines, reusable controls, integrations, detection logic, guardrails, and operational metrics. Partner with technical, compliance, privacy, legal, and business teams to improve security effectiveness, reduce false positives, automate governance, investigate events, and demonstrate measurable risk reduction.

Leads the design and implementation of secure IT infrastructure, performs security monitoring and threat analysis, enforces security controls, evaluates security technologies, manages patching and vulnerability scanning, and maintains continuous system security. Provides guidance to stakeholders, manages security projects, mentors junior engineers, and participates in incident-response on-call rotations.

Leads and supports offensive security consulting engagements, including network, web application, wireless, social engineering, red team, and purple team testing. Evaluates controls and security configurations, performs cybersecurity assessments, recommends remediation, and presents findings to technical and executive stakeholders. Supports client program execution, metrics, issue remediation, and continuous improvement. Mentors junior consultants and contributes to cybersecurity practice development, methodology innovation, and thought leadership.

Leads client engagements focused on application security and DevSecOps transformation. Configures application security testing tools in CI/CD pipelines, supports vulnerability triage, conducts maturity assessments using BSIMM and NIST SSDF, and develops multi-year strategic roadmaps. Facilitates executive workshops, presents recommendations to security and engineering leaders, creates maturity models and dashboards, and contributes to thought leadership on secure software governance.

Lead the maturation of Ontic’s AWS cloud security program by designing and automating security controls, integrating security into CI/CD workflows, improving cloud monitoring and detection, and developing continuous evidence collection for FedRAMP and other compliance initiatives. Partner with Engineering and DevOps teams on secure architecture, cloud best practices, regulated SaaS environments, and measurable security improvements.

Lead pre-sales security architecture engagements by designing and validating defense-in-depth solutions across hybrid, cloud, application, identity, endpoint, network, and data environments. Conduct security assessments, create remediation roadmaps, integrate security platforms, and support DevSecOps, SOC, detection engineering, incident response, compliance, and risk programs. Collaborate with sales, engineering, clients, and executive stakeholders to communicate technical trade-offs and deliver scalable enterprise security strategies.

The Information Systems Security Officer will support cybersecurity risk management and Risk Management Framework activities, including system authorization, security documentation, SSPs, POA&Ms, control identification, audit reviews, security testing, vulnerability analysis, and mitigation planning. The role also supports cloud security, enterprise system and hypervisor configuration, Linux and virtual platforms, policy development, and communication of security posture to executives. The position is onsite in McLean, Virginia, requires an active TS/SCI clearance with polygraph, and involves less than 10% travel.

Designs and delivers security solutions for enterprise information systems and network architectures. Ensures classified systems meet information assurance requirements through RMF authorization and accreditation, including IATT, ATC, and ATO. Develops security designs and test plans, analyzes scans and findings, prioritizes remediation, and implements corrective measures. Supports security tools and collaborates with clients on technical requirements. Requires expertise in Windows, Linux, cloud or DevOpsSec, ACAS, Trellix, Splunk, STIGs, and classified systems.

Provides cybersecurity engineering, governance, risk, and compliance support for Cross Domain Solutions. Consults with customers and system owners on policies, threats, vulnerabilities, and risk mitigation; supports service requests, technical meetings, CDS inventory, file type reviews, risk assessments, and government policy implementation. Requires strong systems engineering, triage, problem-solving, communication, and customer relationship skills, with possible team or task leadership responsibilities.

Implements and assesses cybersecurity controls across information systems, ensuring compliance with NIST, federal, DoD, and agency standards. Develops security documentation, contingency and disaster recovery plans, mitigation strategies, and audit artifacts. Supports cyber defense operations involving intrusion detection, security event monitoring, data spillage response, and incident response. Requires Secret clearance, a bachelor’s degree, CISSP certification, and at least three years of cybersecurity experience.

Maintains the security posture of DoD information systems supporting Collateral, SCI, and SAP environments. Responsibilities include developing RMF authorization packages, continuous monitoring, configuration management, vulnerability identification, incident handling, audit review, system recovery, compliance inspections, and security training. The ISSO coordinates with ISSMs, authorizing officials, and government and contractor organizations to support assessment and authorization activities.

Detects, investigates, and responds to cybersecurity events as part of the CSIRT. Responsibilities include analyzing network and operating-system logs, interpreting forensic data, performing eDiscovery, leading investigations and projects, serving as incident commander for minor incidents, mentoring junior staff, improving processes, and participating in on-call coverage and occasional travel.

Lead product security across design, production, supply chain, and distribution. Implement security policies and controls, conduct risk assessments, audit physical and digital systems, monitor threats, manage investigations and incident response, and coordinate with internal teams, subcontractors, legal authorities, and external agencies. Develop security metrics, improve organizational security culture, and serve as the local expert for product security matters.

Manage and maintain the company’s ISO 27001 and ISMS program, including policies, document control, risk registers, control ownership, audits, corrective actions, evidence collection, GRC administration, compliance calendars, metrics, and executive reporting. Coordinate with security, IT, operations, auditors, vendors, and business stakeholders. Support incident response, business continuity, disaster recovery, crisis management, and continual improvement while ensuring physical and digital security systems meet applicable standards.

Designs, implements, administers, and improves enterprise cybersecurity controls across endpoints, identities, cloud, email, networks, and applications. Investigates incidents, leads vulnerability management, performs architecture reviews and risk assessments, supports audits and compliance, and develops security standards, playbooks, documentation, and automation. Provides technical leadership and mentoring while aligning security practices with HIPAA, HITRUST, NIST, PCI DSS, and related requirements.

Leads DLP security operations across endpoint, network, SaaS, and cloud environments. Responsibilities include deploying and tuning DLP controls, investigating data exfiltration incidents, developing data classification policies, automating alert response playbooks, threat hunting for anomalous data movement, managing incident remediation, and tracking DLP effectiveness metrics. The role also supports incident response and vulnerability management and partners with stakeholders to balance security, usability, and regulatory requirements.

Supports the Lead ISSO in managing cybersecurity and Risk Management Framework activities for C-17 training systems. Responsibilities include vulnerability scanning, security audits, risk analysis, eMASS control monitoring, accreditation documentation, incident response, continuous monitoring, secure configuration, disaster recovery, compliance reporting, security awareness, and stakeholder coordination. The role requires frequent travel to customer and site locations and collaboration with government, contractor, engineering, maintenance, and aircraft support teams.

Design, develop, and maintain secure Linux endpoint privilege-management capabilities across Rust, C, and .NET. Build kernel-facing agents, PAM modules, privileged services, authentication and authorization workflows, systemd services, and Linux packages. Troubleshoot low-level security and execution issues involving permissions, SELinux, AppArmor, and race conditions. Collaborate with engineering and QA teams on architecture, testing, production support, and cross-platform functionality while using AI-assisted development tools.

Supports cybersecurity and Risk Management Framework activities for C-17 training systems. Performs vulnerability assessments, compliance scans, audits, risk analyses, incident response, continuous monitoring, and accreditation documentation. Maintains security authorization packages, integrates controls into sustainment activities, provides secure configuration guidance, and coordinates with engineering, operations, government, and contractor stakeholders. Frequent travel to customer and site locations is required.

Supports the Lead ISSO in managing cybersecurity and RMF activities for C-17 training systems. Responsibilities include vulnerability scanning, security audits, risk analysis, eMASS control monitoring, authorization documentation, incident response, continuous monitoring, secure configuration, sustainment cybersecurity, disaster recovery, reporting, and stakeholder coordination. The role requires frequent domestic and international travel to customer and site locations and eligibility for a DoD personal security clearance.

Supports cybersecurity and Risk Management Framework activities for C-17 training systems. Responsibilities include vulnerability scanning, security audits, risk analysis, eMASS control monitoring, accreditation documentation, incident response, continuous monitoring, secure configuration, disaster recovery, reporting, training, and coordination with government, contractor, engineering, maintenance, and aircraft support teams. The role requires frequent domestic and international travel and eligibility for a DoD personal security clearance.