Top Cyber Security Jobs

Lead cybersecurity diligence, integration, and operational security efforts for acquisitions, investments, and subsidiaries. Assess cyber maturity and risks across cloud, on-premises, identity, endpoint, SaaS, and engineering environments. Build automation, integrations, security tooling, and telemetry workflows; deploy security services; and support incident response, containment, remediation, and recovery. Partner with security, IT, legal, privacy, corporate development, and business stakeholders while communicating technical risk and improving security resilience.

Monitor and investigate cybersecurity alerts, logs, incidents, and platform health across endpoint, network, and backup systems. The analyst will support gaming operations, maintain runbooks and audit documentation, develop monitoring automation, track security metrics, coordinate vendors, assist compliance efforts, and communicate risks and outcomes to leadership in a regulated 24/7 environment.

Drive application security by running SAST/SCA, threat modeling, vulnerability management, and remediation. Advise on secure architecture, train engineers, support pentests/bug bounties, and administer AWS Control Tower and IAM. Innovate with AI to improve AppSec tooling and practices.

Designs and integrates cybersecurity across defense system life cycles, supporting RMF authorization, eMASS packages, ATO activities, vulnerability management, STIG compliance, POA&Ms, continuous monitoring, configuration control, incident response, and program protection. The role develops cybersecurity requirements and acquisition documentation, evaluates system risks, supports cryptography and supply-chain security, maintains ITIPS and FISMA records, and advises program leadership on authorization and remediation decisions in classified environments.

Supports the IT Governance, Risk, and Compliance program through security risk assessments, policy administration, audit readiness, control validation, evidence collection, remediation tracking, regulatory compliance monitoring, and third-party risk reviews. The role maps controls to frameworks including HIPAA, SOC 2, NIST, CIS, CMS, and URAC; maintains risk registers and governance documentation; and partners with technical and business teams to address vulnerabilities, control gaps, and compliance requirements.

Supports DoD and Air Force cybersecurity compliance for mission-critical information systems. Responsibilities include RMF authorization activities, eMASS artifact management, vulnerability assessments, STIG/SRG implementation, security audits, incident response support, access control documentation, system security design, and operational security posture management. The role requires an active Secret clearance, U.S. citizenship, IAT Level II certification, and related cybersecurity experience.

Conduct research, design, development, and demonstrations of advanced network security prototypes for government customers. Build secure networking, cyber defense, virtualization, cloud, container, and experimentation environments. Develop software and automation, analyze network traffic, troubleshoot prototypes, and document technical findings. Collaborate with government leadership and technical teams in classified and unclassified R&D environments to shape research direction and integrate prototypes into larger platforms.

Own day-to-day security operations for a complex HPC environment across multiple security domains. Execute RMF activities, maintain authorization artifacts and ATO posture, manage continuous monitoring, vulnerability remediation, configuration compliance, access governance, and incident response. Review security-relevant changes, support assessments, translate security requirements into implementation guidance, and coordinate with engineering, subcontractor, and customer teams.

Provides senior technical leadership for secure multi-enclave network and system architectures supporting government customers. Designs and secures SDN-enabled environments, implements segmentation and access controls, performs risk analysis and compliance activities, troubleshoots network security issues, develops security documentation, and supports trusted interconnections across classification boundaries. Requires extensive DoD/IC experience, advanced network security expertise, CCNA certification, CCNP progress, and an active TS/SCI clearance with current polygraph.

Leads security operations for complex government HPC systems, including RMF execution, ATO and reauthorization efforts, continuous monitoring, authorization artifacts, vulnerability remediation, access governance, incident response, and risk reporting. Mentors ISSOs, advises engineering teams, coordinates with customers and subcontractors, and maintains authorization readiness across the system lifecycle.

Designs and manages TrustPoint’s IT infrastructure, AWS cloud environments, networks, developer platforms, CI/CD pipelines, containers, and automation. Leads security operations, vulnerability management, incident response, monitoring, documentation, and compliance programs. Owns CMMC readiness, NIST controls, FedRAMP-aligned practices, AWS GovCloud, CUI and export-controlled environments, and future classified-system infrastructure. Supports developer productivity, disaster recovery, asset management, and secure field systems.

Supports secure-by-design practices across medical device software platforms. Responsibilities include threat modeling, architecture reviews, vulnerability assessments, security testing, patch release processes, risk assessments, and integrating cybersecurity into CI/CD and DevSecOps workflows. The role partners with software engineering, quality, regulatory, and risk teams to maintain product security and compliance throughout the software development lifecycle.

Designs, configures, and operates ServiceNow Security Operations and Vulnerability Response capabilities. Builds vulnerability lifecycle workflows, risk-based prioritization models, dashboards, and SLA monitoring. Integrates scanners and security tools such as Qualys, Tenable, Rapid7, Defender, and CrowdStrike through APIs. Uses CMDB, Discovery, and Service Mapping to improve asset context and vulnerability correlation. Supports remediation coordination, incident investigations, governance, reporting, documentation, and continuous improvement for client exposure management programs.

Deploys and operates Axonius Asset Cloud for cyber asset management, exposure management, and risk-based vulnerability prioritization. Builds integrations, unified asset inventories, correlation models, dashboards, and automated remediation workflows. Supports CNAPP and cloud security operations, vulnerability remediation tracking, platform maintenance, scripting, API integrations, and client engagements. Requires cybersecurity engineering experience, Axonius or comparable CAASM expertise, vulnerability management knowledge, and automation skills.

Designs and secures complex networking, computing, and enclave environments for mission-critical government cybersecurity infrastructure. Responsibilities include integrating information assurance architectures, assessing vulnerabilities and risks, developing mitigation strategies, defining security requirements, establishing trusted system relationships, and embedding security throughout the engineering lifecycle. The role collaborates with government customers, engineers, and architects and requires an active TS/SCI clearance with polygraph and CISSP certification.

Maintains security and accreditation for classified information systems by enforcing security policies, developing SSPs and authorization documentation, assessing vulnerabilities and system changes, managing security configurations, administering authentication, and coordinating compliance activities with technical teams and government stakeholders. Level 3 personnel also oversee ISSOs and support ISSM responsibilities.

Supports classified information systems security for RTX’s Government Security Compliance team. Works with the FSO and ISSM to implement NIST, DoD, NISPOM, DAAG, JSIG, RMF, and company security requirements. Performs vulnerability assessment and mitigation, security compliance, technical consultation, STIG implementation, incident response, and classified network security activities. Requires an active Secret clearance and will develop into a Special Access Program ISSO role.

Leads enterprise security architecture strategy, standards, reference architectures, and requirements across cloud adoption and technology modernization. Assesses security controls, recommends remediation, evaluates emerging security technologies, and advises on designs and configurations. Partners with business and technical leaders, communicates risks, mentors architects, and drives enterprise security initiatives. Requires extensive cybersecurity and architecture experience, cloud expertise, security certifications, and willingness to travel.

Supports secure DoD cloud systems by monitoring cybersecurity posture, assessing vulnerabilities, maintaining RMF and ATO documentation, validating STIG compliance, coordinating system changes, and assisting the ISSM. The role performs continuous monitoring, risk analysis, audit review, incident handling, access verification, and remediation tracking. It also collaborates with engineering, DevOps, and IT teams on cloud security, Zero Trust requirements, and security controls for classified systems.

Supports third-party risk management and corporate security compliance by reviewing vendor requests, maintaining NERC CIP controls, analyzing regulatory requirements, tracking compliance metrics, and preparing reports. The role administers OneTrust and Kaseware workflows, updates policies and procedures, coordinates audits and regulatory meetings, monitors regulatory changes, and helps improve compliance processes and documentation.

Designs and operates security controls for AWS multi-account environments, including IAM, networking, encryption, secrets, infrastructure-as-code, CI/CD, policy-as-code, vulnerability management, telemetry, and incident response. Partners with engineering, DevOps, architecture, MLOps, IT, GRC, and audit teams to create secure platform patterns, golden paths, guardrails, documentation, and compliance evidence. Mentors engineers and improves cloud security without slowing delivery.

Supports DoD cybersecurity operations, RMF activities, vulnerability management, compliance assessments, continuous monitoring, and authorization efforts. Maintains POA&Ms, eMASS packages, security documentation, controls, audit records, and cybersecurity metrics. Collaborates with engineering, systems administration, cybersecurity teams, and government stakeholders to remediate vulnerabilities and protect mission-critical information systems.

Leads cybersecurity operations and RMF authorization activities for enterprise DoD information systems. Responsibilities include vulnerability management, POA&M remediation, security control validation, compliance assessments, continuous monitoring, audit preparation, cybersecurity reporting, policy development, and ATO/IATT lifecycle support. The role advises government and technical stakeholders, strengthens security posture, supports regulatory compliance, integrates cybersecurity into continuity planning, and mentors junior personnel.

Leads security governance, risk, and compliance programs, including risk assessments, control design, vulnerability management, third-party risk, business continuity, and issues management. Measures and communicates risk, authors policies and reporting, challenges stakeholders, supports audit and regulatory readiness, mentors analysts, and advises leadership on risk acceptance and treatment.

Leads regional enterprise security sales by serving as a cloud security expert, shaping opportunities, advising account teams, managing executive relationships, and orchestrating technical teams and partners. Conducts architecture reviews, demos, proof-of-concepts, pilots, ROI/TCO analyses, and consultative engagements to promote Microsoft security solutions, Zero Trust adoption, and customer business outcomes.