Top Cyber Security Jobs

Serve as the Information System Security Officer for a high-visibility DoD program. Implement and enforce RMF-based security controls, perform vulnerability assessments (ACAS, STIGs, SCAP), continuous monitoring, risk analyses, and support ATO documentation (SSPs, POA&Ms). Use SolarWinds or Splunk for monitoring and collaborate across teams to ensure compliance with DISA, NIST, CNSSI, JSIG, and SAP/ICD policies.

Manage program security for classified DoD/IC programs at NAS Fallon: oversee personnel, physical, industrial, and information security; maintain documentation and records; manage access/clearances (PARs, SCI); administer Top Secret accountability; perform inspections/audits, trainings, and document control (JADE, SIMS); coordinate with government security representatives to ensure compliance.

Lead security architecture for SanDisk Flash product lines: define security roadmaps for firmware/hardware, perform threat modeling, specify embedded security solutions, guide verification/validation and compliance (FIPS/Common Criteria), and collaborate with hardware, firmware, and product teams to ensure secure design through productization.

Perform attacker-informed testing of firmware, embedded systems, and storage products using fuzzing, reverse engineering, exploit development, and AI-assisted techniques. Assess exploitability, validate attack paths, build PoC exploits, automate adversarial testing tooling, and collaborate with engineering teams to recommend remediation and improve product security.

Lead cybersecurity for mission-critical DoD systems: develop and enforce policies, manage vulnerability assessments (ACAS, STIGs, SCAP), implement RMF and continuous monitoring, evaluate NIAP/Common Criteria and DISA APL compliance, prepare authorization documentation and MOAs, advise leadership, and mentor junior staff.

Serve as an ISSO for a DoD program: implement and enforce information system security policies, perform vulnerability assessments (ACAS, STIGs, SCAP), implement OS/network STIG configurations, conduct continuous monitoring, risk assessments, and support ATO documentation (SSP, POA&Ms, SOPs). Collaborate on mitigation strategies and prepare certification artifacts for DoD systems, including satellite communications infrastructure.

Serve as the ISSO for a DoD program enforcing security policies and STIG-based configurations, conducting vulnerability assessments (ACAS, SCAP), continuous monitoring (SolarWinds/Splunk), risk analysis, ATO documentation (SSP, POA&Ms), and coordinating mitigation, certification letters, and cross-functional cybersecurity efforts for mission-critical and satellite communication systems.

Work on product AI team combining research and development to create and test security-focused AI use cases. Generate threat data, emulate APT attacks, write Python and shell automation, build repeatable tests, evaluate AI model effectiveness for SOC workflows, and influence engineering priorities through data-driven findings.

Manage the company's end-to-end compliance program: run compliance automation, triage and remediate failing controls, maintain policies and evidence, coordinate external audits, administer Google Workspace and MDM, track risk and lead mitigation with stakeholders.

Execute offensive security engagements (red team, app/cloud assessments), develop custom exploits/payloads and tools, translate field findings into product improvements, integrate AI tooling into workflows, and mentor peers while producing clear, actionable client reports.

Lead and grow a team of offensive security engineers, ensure high-quality red team, application, and cloud security engagements, drive operational metrics (utilization, margin, NPS), integrate field findings into product, champion AI/automation, and support sales and client relationships at executive levels.

Designs and maintains enterprise security architecture and strategies, provides security expertise to IT and business teams, identifies and drives remediation of vulnerabilities, automates triage and prioritization, consults on IT initiatives, and leads incident response, forensics, and security tooling (firewalls, SIEM, PAM, vulnerability management) while producing technical documentation and supporting clinical stakeholders.

Design, deploy, and operate enterprise security tools (SIEM, EDR, IDS/IPS, vulnerability management) across on-prem, hybrid, and cloud environments; develop detections, perform threat hunting and incident response, integrate security controls, and produce operational documentation.

Support RMF processes and system security engineering for government systems. Collaborate with stakeholders to complete security documentation, perform audits, apply NIST 800-53 Rev.5 controls, implement defense-in-depth strategies, ensure STE/STN compliance, and assist in system authorization and assessments.

Lead end-to-end application and product security for a Kubernetes-based multi-tenant platform. Perform deep security reviews of Go services, Kubernetes controllers, and frontends; lead threat modeling; integrate automated security checks into CI; manage vulnerability lifecycle; develop security-related features; and train developers on secure coding and attack vectors.

Maintain and strengthen the security posture of mission systems using RMF and NIST SP 800-53. Manage 8–10 System Security Plans, support continuous monitoring, perform audits, assess controls, assist with reaccreditation, and ensure compliance with STE/STN requirements.

Lead SecOps functions including threat detection, alert triage, incident response, vulnerability and configuration management, endpoint and network security operations, threat hunting, malware analysis, vendor management, and mentoring a team of security analysts to improve detection and response capabilities.

Support RMF lifecycle for classified systems: develop A&A/ATO packages, implement and validate security controls, perform vulnerability and compliance scanning, manage STIG implementation and patch validation, produce RMF artifacts, and participate in continuous monitoring and risk analysis.

Support the full RMF lifecycle for classified systems: develop and maintain authorization packages, conduct security control assessments, track vulnerabilities and remediation, support continuous monitoring, review configurations and scans, collaborate with system owners and administrators, and participate in audits to maintain ATOs and system security.

Lead security data architecture and governance for global security observability. Design and manage data pipelines, lakes/warehouses, and analytics (AI/ML) across SIEM/EDR/DLP sources. Publish standards, onboard applications, produce KPIs/reports, and collaborate with architecture and engineering to deliver a multi-year roadmap and threat-hunting capabilities.

Provide control design guidance and independent control assessments for Cybersecurity GRC. Focus on designing, implementing, and testing security controls across cloud and on-prem systems, manage risk identification/assessment, support governance/KRIs, drive remediation, and produce program-level reporting to stakeholders.

Lead IAM security and technology governance across global implementations. Define standards, drive requirements, manage roadmaps, budgets, application onboarding, integrations, reporting, and stakeholder relationships. Provide technical direction, review solutions, map security frameworks to IAM solutions, and improve processes to strengthen identity and access posture across hybrid-cloud environments.

Lead regional network security engineering: administer and optimize WAN/LAN/Wi‑Fi, troubleshoot complex incidents, implement firewalls/load balancers, automate network tasks, ensure security/compliance, perform capacity planning, document architecture, and collaborate with cross-functional teams and vendors.

Lead enterprise infrastructure and security architecture across cloud, on-prem, and hybrid environments. Define target-state architectures, reusable patterns, and secure landing zones. Partner with cloud, EIS, security, and product teams to prioritize remediation, automate platform capabilities (IaC, CI/CD), improve resilience, and translate regulatory requirements into practical architecture. Mentor architects and guide platform onboarding, tooling, and adoption of AI-enabled automation within governance frameworks.

Design, implement, and operate application and cloud security controls across the SDLC. Integrate security tooling (SAST/DAST/SCA/IaC), secure CI/CD pipelines, run secure code reviews and threat modeling, deploy and manage cloud security posture and CNAPP tooling, and partner with engineering teams to remediate vulnerabilities and build secure, repeatable patterns.