Top Cyber Security Jobs

Manage FedRAMP and CMMC compliance, support IL6 authorization initiatives, maintain security documentation, map controls to NIST SP 800-53, coordinate audits and assessments, track POA&M items, administer compliance platforms, and provide risk reporting. The role partners with engineering, operations, DevSecOps, federal sales, 3PAOs, government customers, and internal stakeholders to maintain continuous monitoring and regulatory compliance.

Supports multi-cloud security standards across AWS, Azure, and GCP. Manages cloud logging, monitoring, SIEM integrations, and CSPM capabilities; investigates misconfigurations, policy violations, and security gaps; coordinates remediation with engineering and risk teams; and assists with cloud security audits, assessments, and incident response.

Conduct web application security assessments, vulnerability testing, and remediation validation for company and customer-facing applications. Manage application security assets, analyze vulnerabilities, distinguish false positives, and track findings through resolution. Provide secure coding guidance and developer training, prepare assessment documentation, and collaborate with development, infrastructure, security, business, and customer teams to improve application security.

Monitor and investigate security alerts across client environments in a 24/7 security operations center. Analyze threats, identify malicious activity and indicators of compromise, distinguish false positives, support incident response and remediation, develop vulnerability reports, and communicate findings to technical and executive audiences. Participate in shift handoffs and rotating incident triage coverage while collaborating with incident response teams.

Leads threat hunting, detection engineering, incident response, vulnerability management, and security platform ownership across endpoint, identity, network, cloud, application, and SaaS environments. Designs and operates security controls, automates workflows using scripts and APIs, manages incident response and assessments, improves network security, establishes metrics, and supports compliance with NIST, ISO 27001, SOC 2, and financial-services requirements. Mentors junior staff and advises cross-functional teams.

Maintains cybersecurity posture and compliance for classified information systems and networks. Develops security plans, traceability matrices, POA&Ms, and inspection reports; supports ATO, ATC, and RMF activities; conducts assessments and audits; manages vulnerabilities, access controls, documentation, and remediation; and advises security leadership on operational readiness and risk management.

Lead Booz Allen’s Product Security practice, defining standards and solutions while supporting sales and client delivery. Direct product security assessments, testing, hardening, vulnerability management, secure software development, and cybersecurity strategy across the product lifecycle. Lead and develop Product Security Engineers and Architects, advise engineering teams, establish security KPIs and KRIs, present findings, and implement tools and processes for secure-by-design products, including software, embedded systems, and hardware.

Conduct hypothesis-driven threat hunts across endpoint, identity, network, cloud, and Kubernetes telemetry. Correlate logs, investigate attacker behaviors, document reproducible findings, and translate results into detections, playbooks, hardening tasks, and engineering priorities. Support incident response, purple-team simulations, detection tuning, and SOAR automation while mapping activity to MITRE ATT&CK. The role requires strong SIEM query, operating system, investigative, communication, and prioritization skills.

Oversee cybersecurity compliance, authorization, and operations for assigned information systems. Coordinate with DCSA personnel, maintain security policies and safeguards, manage POA&Ms, track system authorizations and vulnerabilities, support security vulnerability assessments, and ensure compliance with NISPOM, JSIG, DAAPM, and customer-specific regulations. The role requires IAM Level III certification, extensive cybersecurity compliance experience, leadership or program management experience, U.S. citizenship, and an active Secret clearance.

Manage the organization’s governance, risk, and compliance program across security frameworks, privacy regulations, audits, risk assessments, policies, vendor reviews, remediation plans, and compliance reporting. Partner with cross-functional teams and senior stakeholders, track security metrics, address audit findings, and maintain alignment with financial services and real estate technology requirements.

Supports cybersecurity and systems security engineering for U.S. Navy afloat and undersea platforms. Responsibilities include designing and assessing security solutions, analyzing vulnerabilities, conducting security testing, mitigating risks, applying RMF and NIST guidance, reviewing system architectures, and supporting accreditation and cyber readiness. The role collaborates with technical stakeholders across integration, operations, sustainment, and lifecycle activities for maritime and autonomous systems.

Designs, develops, and maintains SOAR and agentic AI security automations for SOC triage and response. Builds Python tools, APIs, integrations, workflows, guardrails, and evaluation processes across SIEM, EDR, threat intelligence, case management, and ITSM platforms. Partners with detection engineering, administers case-management workflows, applies Git-based engineering and CI/CD practices, measures automation effectiveness, and creates technical documentation and runbooks.

Operates and improves the reliability, security, performance, and resilience of mission-critical DoD systems. Responsibilities include monitoring, automation, incident response, root-cause analysis, infrastructure provisioning, CI/CD support, vulnerability remediation, system hardening, backup and disaster recovery, documentation, and cross-functional coordination. The role requires on-site support in Rhode Island, occasional travel, and after-hours or on-call availability.

Administer and secure Linux servers in a mission-critical DoD environment. Responsibilities include installation, configuration, patching, monitoring, troubleshooting, access management, STIG hardening, vulnerability remediation, backups, incident response, automation, documentation, and cross-functional coordination. The role is full-time onsite in Middletown, Rhode Island, includes occasional travel, and may require after-hours support.

Lead enterprise vulnerability management using Tenable and Nessus platforms, including scanning architecture, asset discovery, risk prioritization, remediation tracking, reporting, and process documentation. Partner with infrastructure, application, executive, and vendor teams to reduce security risk. Support incident response, security projects, FISMA and FedRAMP compliance, security policies, and assessment and authorization activities in a hybrid federal environment.

Lead and scale multiple product security engineering teams while defining security strategy, secure SDLC standards, identity and authentication capabilities, vulnerability management, DevSecOps tooling, cloud security, privacy by design, and threat modeling. Partner across engineering, product, legal, compliance, and enterprise security; mentor leaders and staff-level contributors; and foster a collaborative culture focused on secure, reliable software delivery.

Build and mature WHOOP’s Security Architecture practice by establishing governance, standards, reference architectures, and reusable security patterns. Provide architectural guidance across application, cloud, infrastructure, API, identity, networking, AI, and enterprise systems. Lead threat modeling and architecture reviews, assess vendor security, translate compliance requirements into engineering controls, mentor teams, document guidance, and advise leaders on security strategy and risk-based decisions.

Leads enterprise Security Engineering and Security Operations strategy, teams, technical standards, roadmaps, and measurable outcomes. Oversees detection and response, incident readiness, security automation, identity, cloud, endpoint, SaaS, data protection, and AI security. Manages significant incidents, security partners, organizational design, hiring, and cross-functional collaboration while developing managers, engineers, and analysts. Partners with the CISO to strengthen security posture and operational performance in a sensitive-data technology environment.

Designs and improves enterprise security across endpoints, SaaS, identity, infrastructure-as-code, AI applications, and corporate networks. Responsibilities include Terraform and GitOps automation, endpoint lifecycle security, AI and MCP governance, third-party risk assessments, threat modeling, detection and response collaboration, and security control assessments. The role requires strong Python or Go skills, endpoint and identity expertise, macOS security experience, and the ability to communicate and guide distributed engineering teams.

Secure Compass’s enterprise endpoints, SaaS applications, identity systems, office networks, and AI tooling. The role modernizes endpoint management, builds Terraform and GitOps automation, manages identity and security controls, evaluates third-party and AI risks, supports detection and response, conducts threat modeling, and guides engineering teams toward stronger security practices.

Designs and improves enterprise security across endpoints, SaaS, identity, infrastructure-as-code, AI applications, and corporate networks. Responsibilities include modernizing endpoint management, automating secure deployment and patching, managing Terraform and GitOps workflows, governing AI and MCP security, assessing third-party risks, supporting detection and response, threat modeling, and guiding engineering teams toward stronger security practices.

Secure Compass’s enterprise technology environment across endpoints, SaaS, identity, networks, AI applications, and infrastructure. The role modernizes endpoint management, develops Terraform and GitOps automation, manages AI and MCP security controls, assesses third-party risk, supports detection and response, and conducts threat modeling and security assessments. The engineer also guides development teams, improves compliance and auditability, and helps protect a distributed workforce.

Leads and coordinates security and operational incident response for infrastructure, platforms, hosting, and customer environments. Serves as incident commander, manages escalations and communications, facilitates bridge calls and post-mortems, analyzes incident trends, maintains response procedures, and tracks corrective actions. Partners with technical and leadership teams to improve incident management maturity, accountability, governance, reporting, and operational transparency during high-severity events.

Support the USMS COMSEC program by updating COMSEC devices, tracking equipment and cryptographic material through KMI and DIAS, shipping and receiving materials, providing administrative support, and reporting weekly accomplishments. The role requires an active Top Secret clearance with SCI eligibility, U.S. citizenship, a bachelor’s degree, and at least five years of COMSEC device, equipment tracking, and COMSEC material logistics experience.

Supports cybersecurity engineering for avionics and government systems by assessing risks, developing requirements and controls, designing security architectures, applying NIST controls and STIGs, and supporting certification efforts. The role requires systems thinking, Linux and scripting experience, Cross Domain Solution knowledge, and eligibility for a security clearance. Desired qualifications include C, C++, Java, and Python experience, RMF familiarity, and willingness to travel up to 10%.