Top Cyber Security Jobs

Leads enterprise cybersecurity governance for Department of the Air Force financial management systems. Oversees the RMF lifecycle, security control implementation, authorization artifacts, vulnerability and risk management, continuous monitoring, and ATO decision packages. Advises authorizing officials, system owners, ISSOs, engineers, and program staff on DoD and Air Force cybersecurity requirements. Coordinates governance briefings, verifies security impacts of system changes, and mentors cybersecurity and engineering personnel.

Monitors and investigates cyber events, conducts risk assessments and compliance audits, manages vulnerabilities and patching, and supports RMF, NIST 800-53, Zero Trust, IAM, cloud security, vendor reviews, and security reporting for a classified satellite terminal program.

Conduct cybersecurity assessments, audits, vulnerability assessments, and control validations for DoD systems. Document findings in eMASS and STIG Viewer, analyze security gaps, recommend mitigations, and provide risk-based authorization recommendations. Coordinate assessment logistics, testing scope, and plans while applying RMF, STIG, NIST, and DoD cybersecurity requirements. This remote role requires approximately 85% CONUS and OCONUS travel and an active DoD Top Secret clearance with SCI eligibility.

Leads cybersecurity engineering and Risk Management Framework execution across mission systems. Performs risk assessments, maintains RMF packages, validates controls, develops malware identification processes, evaluates secure hardware and software, coordinates patching and cybersecurity roadmaps, monitors security events, assesses configuration changes, and supports audits and incident response. The role also guides junior security analysts, participates in secure system design, and may travel domestically and internationally.

Provides system-level cybersecurity support for Department of the Air Force financial management systems. Responsibilities include RMF compliance, security control validation, authorization documentation maintenance, vulnerability tracking, remediation coordination, assessment support, and continuous monitoring. The role collaborates with ISSMs, authorizing officials, engineers, administrators, developers, and program personnel to maintain compliance with Air Force cybersecurity directives.

Leads enterprise cybersecurity governance for Department of the Air Force financial management systems. Oversees the RMF lifecycle, security authorization artifacts, vulnerability and risk management, continuous monitoring, and ATO decision packages. Advises authorizing officials, system owners, ISSOs, engineers, and leadership on DoD and Air Force compliance. Coordinates governance activities, verifies cybersecurity impacts from system changes, and mentors cybersecurity and engineering staff.

Leads application security engineering across web, API, mobile, cloud-native, container, and CI/CD environments. Designs automated security testing and vulnerability-management workflows, performs threat modeling and manual assessments, validates exploitability, and provides remediation guidance. Partners with engineering and cloud teams to embed secure development practices, applies AI-assisted vulnerability analysis, supports cybersecurity incidents, mentors engineers, and drives application security strategy.

Lead systems administrator and Information Systems Security Officer (ISSO) for classified intelligence networks. Provide full lifecycle risk management, enforce security policies, drive vulnerability remediation, support assessment and authorization (RMF), integrate MI systems across classified domains, and deliver rapid cyberspace threat analysis and technical responses to keep systems authorized and mission-ready.

Leads OT/ICS and enterprise cybersecurity architecture for a federal critical-infrastructure modernization program. Responsibilities include requirements development, NERC CIP traceability, market research, RFI and vendor evaluation, lab testing, alternatives analysis, product recommendations, and executive briefings. The role bridges utility operational technology and IT security, covering access control, monitoring, asset management, vulnerability management, SCADA environments, and industrial systems. It is fully remote in the U.S. with up to 25% domestic travel and requires Public Trust eligibility.

Analyzes and remediates security threats using SIEM, EDR/XDR, anti-malware, vulnerability management, and forensic tools. Maintains security controls, policies, vulnerability programs, and reporting; performs assessments, penetration testing, phishing evaluations, and third-party risk reviews. Supports incident response, system hardening, access controls, cloud security, privacy assessments, audits, and security awareness initiatives while coordinating with IT, legal, vendors, and leadership.

Leads data security governance across database monitoring, encryption, certificate and key management, HSM operations, data masking, and cryptographic asset inventory. Manages a security governance team, develops controls and procedures, supports audits and regulatory inquiries, partners cross-functionally, and drives post-quantum cryptography readiness, automation, metrics, service reliability, and operational maturity.

Secure Wiz’s products, CI/CD systems, and production cloud infrastructure through threat modeling, security reviews, vulnerability management, detection and response, cloud and Kubernetes security baselines, policy-as-code, and automation. Partner with engineering, DevOps, operations, and Federal teams to implement scalable security controls, remediate risks, support FedRAMP requirements, and promote secure-by-design development practices.

Owns enterprise architecture and reference designs for security operations technologies, including SIEM, SOAR, security data pipelines, data lakes, AI, and MCP architectures. Establishes integration, detection, logging, and telemetry standards; evaluates security technologies; and aligns Security Operations with cyber defense, infrastructure, cloud, identity, data, and vendor teams. The role is remote and requires travel of approximately 25%.

Designs and scales enterprise security across IAM, corporate SaaS, endpoints, and infrastructure. Responsibilities include automating joiner-mover-leaver workflows, access reviews, zero-trust controls, SaaS security posture management, endpoint protections, vendor risk assessments, and AI-powered security automation. The role partners with IT, Legal, HR, and Compliance on security frameworks, documentation, audits, and strategic roadmap initiatives.

Perform penetration testing, threat modeling, security design reviews, and vulnerability validation across applications, APIs, infrastructure, cloud-native systems, and AI agents. Build AI-powered security automation, identify complex attack paths, and partner with engineering teams to improve security controls and eliminate vulnerability classes. Translate technical findings into actionable guidance and lead complex assessments across organizational boundaries.

Designs, develops, and integrates workforce identity and access management solutions, including RBAC, PBAC, PAM, risk-based access, automated provisioning, and policy-based authorization. Performs software development, testing, IAM product integration, and Level 3 troubleshooting. The role also enhances birthright roles, supports access recertification and lifecycle workflows, ensures security and governance compliance, and mentors junior team members.

Supports Special Access Program personnel security operations, including access requests, employee security guidance, classified material controls, personnel records, database updates, security reporting, inspections, and investigations of security violations. Maintains SAP access databases, badges, and customer security documentation while ensuring compliance with federal and DoD regulations. Provides employee customer service and protects personal information under the Privacy Act.

Defines and implements cloud infrastructure and application security standards, integrates security into DevOps and CI/CD, develops security automation, assesses vulnerabilities and risks, performs penetration testing, guides cloud architecture, and supports secure coding and configuration practices across cloud environments.

The Cloud Security Engineer develops and implements cloud infrastructure and application security standards, integrates security into DevOps and CI/CD processes, automates secure provisioning and deployment, assesses vulnerabilities and risks, performs penetration testing, guides cloud architecture, and maintains secure coding and configuration practices. The role requires experience with public cloud platforms, containers, networking, software-defined networking, automation, Linux, and security tools. It follows a hybrid schedule with four days in-office in Wyoming, MI or Atlanta, GA.

Provides onsite security control assessment, systems engineering, and technical advisory support for NRO satellite, communications, network, and crypto acquisition programs. Conducts independent RMF security control assessments, prepares reports and briefings, reviews acquisition documentation and CDRL deliverables, coordinates stakeholders, and supports program reviews. Requires NRO satellite systems experience, extensive relevant experience, active TS/SCI with polygraph, and domestic travel up to 25%.

Leads cybersecurity strategy and operations for Philadelphia International Airport. Advises executive leadership, directs security architecture and controls, manages security personnel and vendors, develops policies and training, oversees incident response, audits, risk management, compliance, disaster recovery, and business continuity. Requires coordination with government and law enforcement agencies, expertise in NIST and federal cybersecurity regulations, and a CISSP credential.

Manage identity and access provisioning for external clients, including user setup, entitlements, workflow configuration, reconciliation, governance, audit remediation, and security administration. Collaborate with technical and non-technical stakeholders, provide IAM operational support, meet service-level goals, resolve incidents and problems, and contribute to security improvements and efficiency projects.

Supports the Information Security Team by monitoring computing environments for security risks and anomalies, identifying trends and indicators in large datasets, documenting systems and processes, and contributing to cyber resiliency, incident response, and technical implementation initiatives.

Manage secure configurations for more than 200 federal information systems using Security-Focused Configuration Management and NIST 800-128 guidance. Analyze configuration risks and changes, document approved implementations, support audits, develop policies, conduct research and analysis, and produce technical reports, presentations, and white papers. The role requires federal security clearance, cybersecurity project management experience, and compliance with DoD certification requirements.

Designs, integrates, tests, and sustains secure architectures for Navy and Marine Corps systems. Responsibilities include systems security engineering, RMF authorization, vulnerability scanning and remediation, risk assessments, zero-trust implementation, compliance with DoW security standards, and coordination with IT, risk, operations, engineering teams, and OEMs. The role develops mitigation strategies, security plans, and resilient mission systems across the platform lifecycle.