Top Cyber Security Jobs

Supports information system accreditation, authorization, security operations, and continuous monitoring. Maintains SSPs, SCTMs, CONOPs, test plans, SOPs, and user guides; provides on-site information assurance support; reviews hardware and software changes; manages security configurations and inventories; trains personnel; and develops IA policies and procedures. Requires an active TS/SCI clearance with polygraph and substantial relevant experience.

Supports classified information systems as an ISSO by maintaining RMF security documentation, implementing and assessing security controls, conducting audits and risk analysis, managing continuous monitoring, supporting configuration management, responding to incidents, and preparing for inspections. The role requires an active Top Secret clearance, ability to obtain a CI polygraph, cybersecurity certification, Windows hardening expertise, security tool experience, strong technical writing, on-site work, and occasional after-hours support.

Analyzes security alerts, determines remediation, supports firewall and security policy configuration, maintains security controls for audits, and develops network security processes. The role collaborates with city departments to remediate issues and establish policy and signature rules. It requires network security expertise, experience managing complex networking systems, onsite work, driving a city vehicle, and Philadelphia residency within six months of hire.

Leads a cloud security posture management team responsible for securing AWS, Azure, and GCP environments. Oversees CSPM and CNAPP capabilities, security automation, governance controls, vulnerability remediation, risk assessment, and shift-left DevSecOps practices. Develops technical talent, establishes remediation SLAs and security guardrails, measures program effectiveness, and collaborates with engineering, architecture, security operations, and business stakeholders to reduce cloud risk and improve security outcomes.

Serves as the technical authority for securing mission-critical systems across cloud and on-premises environments. Leads the RMF lifecycle, ATO management, NIST control implementation, vulnerability assessments, POA&M tracking, continuous monitoring, disaster recovery planning, and security-by-design reviews. Collaborates with developers, systems engineers, government stakeholders, SCAs, and DAOs while briefing senior leaders on technical risks. Maintains cybersecurity policies, evaluates system changes, and oversees AWS and Azure security.

Implement and configure SailPoint IdentityIQ and Identity Security Cloud solutions, including identity lifecycle management, access certifications, provisioning, integrations, workflows, rules, and application onboarding. Lead or support IIQ-to-ISC migrations, gather client requirements, create technical documentation, troubleshoot deployments, and support UAT and hypercare. The role also involves client interaction, mentoring junior engineers, and contributing to reusable delivery assets in a remote consulting environment.

Leads enterprise network security architecture across hybrid, multi-cloud, and OT environments. Designs and implements Zero Trust, SASE, ZTNA, segmentation, firewalls, NDR, secure connectivity, encryption, and cloud security controls. Develops automation and policy-as-code, supports incident response, establishes engineering standards and metrics, evaluates emerging technologies, and leads modernization initiatives. Collaborates across Security, Cloud, Infrastructure, Network, and IAM teams while mentoring engineers and influencing enterprise architecture decisions.

Conducts cybersecurity assessments of classified information systems under RMF and JSIG requirements. Evaluates security controls, threats, vulnerabilities, authorization packages, continuous monitoring, and system changes. Prepares Security Assessment Reports and POA&Ms, advises government and authorization officials, supports inspections and cybersecurity incidents, and recommends authorization decisions. The role covers Collateral, SCI, and SAP environments and requires prior ISSO/ISSM experience, a TS/SCI clearance, and willingness to undergo a CI polygraph.

Leads security operations and corporate IT for a healthcare technology company handling PHI. Responsibilities include incident response, application and cloud security, IAM, endpoint management, vendor reviews, security policies, compliance support for HIPAA, SOC 2, and HITRUST, and management of three direct reports. The role also builds AI-driven automation tools and workflows for IT and security operations while partnering with executives, engineers, customers, auditors, and compliance leaders.

Serves as the primary liaison between Information Security and the Private Client Group, translating business needs into security strategies and controls. Advises on regulatory compliance, risk management, audits, incident response, vulnerabilities, policies, disaster recovery, and security projects. Reports business-unit security posture, drives remediation and process improvement, and influences senior leaders to adopt security initiatives. Requires 3–6 years of experience, strong information security knowledge, and preferably CISSP, CISM, CISA, or CRISC certification.

Supports an enterprise information security program through third-party and vendor risk assessments, policy governance, vulnerability remediation, security awareness and phishing campaigns, disaster recovery assessments, litigation holds, eDiscovery, metrics, and security process automation. The role evaluates architectures, manages policy exceptions, collaborates with Legal, Privacy, IT, and external partners, and presents security risks and recommendations to diverse stakeholders.

Monitor, investigate, and respond to global security incidents; lead incident response as an incident commander; develop security alerts, playbooks, automated actions, and escalation workflows; conduct threat hunting and threat intelligence research; improve detection, containment, and post-incident processes; collaborate with stakeholders; and participate in an on-call rotation.

Design and implement secure AWS architectures, manage IAM and AWS security services (GuardDuty, Security Hub, Inspector, Macie, WAF), build IaC security controls (Terraform, CDK Python), perform threat modeling and vulnerability remediation, implement logging/monitoring (CloudTrail, CloudWatch, SIEM), support incident response, automate compliance checks, and collaborate with DevOps to embed security in CI/CD pipelines.

Provides security architecture and advisory guidance for large-scale cloud infrastructure and foundational services. Conducts threat modeling, security design reviews, risk assessments, and vulnerability mitigation throughout the software development lifecycle. Partners with engineering and product teams to implement secure designs, prioritize risk-based initiatives, and improve security roadmaps. Applies expertise in cloud security, identity and access management, network security, secure development practices, and infrastructure protection while influencing stakeholders without direct authority.

Leads the organization’s information security operations strategy, including security operations center detection and response, incident management, threat management, continuous monitoring, insider threat, forensics, and security engineering. Manages cybersecurity teams, tools, third-party services, risk mitigation, roadmaps, KPIs, and executive reporting while aligning security initiatives with business objectives and enterprise architecture.

Secure cloud infrastructure, Kubernetes, containers, data pipelines, identity systems, secrets, CI/CD workflows, and software supply chains. Implement Terraform guardrails, encryption, network segmentation, IAM controls, observability, threat modeling, incident response, red-team exercises, tabletop drills, penetration testing, and compliance controls for creator and AI training data.

Supports IT solution design and implementation, analyzes cybersecurity protocols and recommends improvements, and collaborates with data science teams to analyze data and generate actionable insights. The internship provides hands-on experience, mentorship, professional development, and exposure to aerospace technology. Candidates must be enrolled in a relevant bachelor's or higher degree program, maintain a 3.0 GPA, and graduate in December 2027 or later.

Leads technical direction for Remitly’s Security & Privacy organization while remaining hands-on in software and security engineering. Designs and ships agentic security platforms, automations, and controls across application, infrastructure, identity, privacy, governance, and risk domains. Advises executives and engineering leaders, advances secure design, balances security with business velocity, and mentors engineers. Requires deep expertise in application security, AI development, cloud security, IAM, cryptography, and production-scale software engineering.

Manage FedRAMP and CMMC compliance, support IL6 authorization initiatives, maintain security documentation, map controls to NIST SP 800-53, coordinate audits and assessments, track POA&M items, administer compliance platforms, and provide risk reporting. The role partners with engineering, operations, DevSecOps, federal sales, 3PAOs, government customers, and internal stakeholders to maintain continuous monitoring and regulatory compliance.

Supports multi-cloud security standards across AWS, Azure, and GCP. Manages cloud logging, monitoring, SIEM integrations, and CSPM capabilities; investigates misconfigurations, policy violations, and security gaps; coordinates remediation with engineering and risk teams; and assists with cloud security audits, assessments, and incident response.

Conduct web application security assessments, vulnerability testing, and remediation validation for company and customer-facing applications. Manage application security assets, analyze vulnerabilities, distinguish false positives, and track findings through resolution. Provide secure coding guidance and developer training, prepare assessment documentation, and collaborate with development, infrastructure, security, business, and customer teams to improve application security.

Monitor and investigate security alerts across client environments in a 24/7 security operations center. Analyze threats, identify malicious activity and indicators of compromise, distinguish false positives, support incident response and remediation, develop vulnerability reports, and communicate findings to technical and executive audiences. Participate in shift handoffs and rotating incident triage coverage while collaborating with incident response teams.

Leads threat hunting, detection engineering, incident response, vulnerability management, and security platform ownership across endpoint, identity, network, cloud, application, and SaaS environments. Designs and operates security controls, automates workflows using scripts and APIs, manages incident response and assessments, improves network security, establishes metrics, and supports compliance with NIST, ISO 27001, SOC 2, and financial-services requirements. Mentors junior staff and advises cross-functional teams.

Maintains cybersecurity posture and compliance for classified information systems and networks. Develops security plans, traceability matrices, POA&Ms, and inspection reports; supports ATO, ATC, and RMF activities; conducts assessments and audits; manages vulnerabilities, access controls, documentation, and remediation; and advises security leadership on operational readiness and risk management.

Lead Booz Allen’s Product Security practice, defining standards and solutions while supporting sales and client delivery. Direct product security assessments, testing, hardening, vulnerability management, secure software development, and cybersecurity strategy across the product lifecycle. Lead and develop Product Security Engineers and Architects, advise engineering teams, establish security KPIs and KRIs, present findings, and implement tools and processes for secure-by-design products, including software, embedded systems, and hardware.