Top Cyber Security Jobs

Supports information assurance programs for intelligence-community systems and enclaves. Responsibilities include implementing security policies, conducting technical security assessments, identifying vulnerabilities and compliance gaps, performing risk analysis and management, recommending system-level mitigations, and managing security-related configuration changes. The role requires extensive ISSO/ISSE experience, hardened operating system expertise, PL3–PL5 solution experience, DCID 6/3 documentation knowledge, CISSP certification, and an active TS/SCI clearance with current polygraph.

Assess and document cybersecurity controls across federal information systems, coordinate remediation with system stakeholders, and oversee RMF activities throughout the system authorization lifecycle. Guide categorization, control selection, implementation, assessment, continuous monitoring, risk documentation, audit support, and incident response. Serve as a senior technical cybersecurity advisor, communicate risks and metrics to leadership, and provide security guidance and training while maintaining alignment with NIST and DoD requirements.

Supports cybersecurity operations across information systems by implementing and monitoring security controls, conducting vulnerability assessments and audits, responding to incidents, maintaining accreditation documentation, and integrating security into DevSecOps and CI/CD pipelines. Provides technical guidance, security training, compliance support, and risk management assistance while coordinating with system owners, cybersecurity leadership, and technical teams.

Maintains security infrastructure, firewalls, PKI, access controls, vulnerability management, incident response, compliance documentation, and threat detection systems. Uses AI-powered SIEM, EDR, UEBA, and SOAR tools to automate security operations and identify emerging threats. Develops policies based on NIST, FISMA, PCI, PII, and CJIS requirements; performs risk assessments, system hardening, and security training. Collaborates with IT teams and evaluates AI/ML security, privacy, and supply chain risks.

Designs, deploys, secures, and operates OCI cloud security solutions and integrates audit, logging, monitoring, and telemetry with enterprise SIEM platforms. Develops secure log-collection architectures, validates data integrity and coverage, troubleshoots ingestion and mapping issues, and creates architecture diagrams, test plans, dashboards, runbooks, and stakeholder communications. Supports secure cloud onboarding, authorization, and ongoing operations in mission-focused environments.

Design and implement secure architectures across systems, networks, servers, and cloud. Deliver end-to-end security projects, validate client architectures, identify gaps, implement identity, threat protection, data protection, SIEM/XDR, and cloud security solutions, and produce comprehensive documentation and knowledge transfer.

Designs and leads enterprise cybersecurity architecture across network, cloud, endpoint, identity, and data environments. Develops security strategies, governance frameworks, and controls; conducts risk assessments, vulnerability management, penetration testing, and incident response. Oversees security tool integration, regulatory compliance, third-party risk, and secure development practices. Provides technical leadership, mentoring, and cross-functional guidance to protect business-critical systems and minimize cyber risk.

Administer and secure SAP landscapes across S/4HANA, Fiori, BTP, and related systems. Design roles and authorizations, manage SAP GRC Access Control, integrate identity management, resolve security issues, conduct audits, and enforce security standards. The role supports secure deployments and upgrades while ensuring compliance, risk management, and resilience. An active DoD Secret clearance and 8+ years of SAP Security experience are required.

Designs and scales network security systems, real-time algorithms, and automated defenses against bot attacks and DDoS threats. Processes network telemetry using streaming and machine learning technologies, automates cloud and edge security controls with Terraform, improves monitoring and resilience, responds to incidents, conducts technical reviews, develops runbooks, and mentors engineers.

Lead enterprise vulnerability management and security configuration programs. Analyze vulnerabilities, assess business risk, develop remediation and mitigation strategies, manage exceptions, and engineer automated configuration compliance capabilities. Partner with infrastructure, cloud, application, engineering, and security teams to improve cyber risk visibility and security posture. Serve as a subject matter expert, technical escalation point, and mentor while translating complex findings into actionable recommendations for technical and business stakeholders.

Supports federal cybersecurity compliance and continuous Authority to Operate for NDBC systems. Responsibilities include maintaining RMF artifacts, leading audits and authorization processes, conducting vulnerability scans and security impact analyses, applying DISA STIGs and CIS Benchmarks, monitoring logs and SIEM dashboards, mitigating threats, and communicating security risks to technical teams and leadership.

Architect, deploy, configure, administer, and maintain Splunk instances for clients and internal teams. Develop security use cases, configure alerts, evaluate and prioritize security data sources, and guide log collection and forwarding to SIEM platforms. Collaborate with clients, SOC analysts, and project coordinators, participate in project meetings, and support a rotating on-call schedule.

Build and operate infrastructure security platforms centered on workload identity, service-to-service authentication, authorization, and short-lived credentials. Replace static secrets with identity-based systems, develop identity-authenticated proxies and APIs, and unify authorization policy management. Partner with platform and application teams to drive adoption, migrate legacy systems, and ensure reliable production infrastructure with strong developer experience.

Lead secure design and code reviews, conduct penetration testing and code audits, build secure-by-default systems, improve security tooling and vulnerability management, operate responsible disclosure programs, remediate production vulnerabilities, and address customer security concerns. The role partners closely with engineering teams and requires strong coding, risk assessment, offensive security, and security communication skills.

Manages cybersecurity programs for DoD Special Access Program information systems. Oversees RMF authorization, risk assessments, security documentation, configuration management, vulnerability and incident response, training, external system coordination, and recovery processes. Advises government customers and authorizing officials while ensuring compliance with JSIG, SAP, SCI, and collateral security requirements. May perform ISSO duties when needed.

Leads enterprise cybersecurity architecture, strategy, standards, roadmaps, and solution implementation. Evaluates security technologies and vendors, defines requirements for cloud, IAM, APIs, IoT, Zero Trust, PCI, SOX, and NIST-aligned initiatives, and provides technical leadership on security projects. Partners with architecture and IT teams, supports risk reduction and policy development, participates in PCI activities, and mentors cybersecurity professionals.

Leads enterprise cybersecurity architecture by defining security visions, standards, policies, roadmaps, and strategic solutions. Partners with architecture, engineering, IT, and project teams on cloud, IAM, API, Zero Trust, IoT, PCI, SOX, and NIST-aligned initiatives. Oversees technology and vendor evaluations, security requirements, risk reduction, policy development, and security awareness programs. Serves as lead engineer on key security projects while mentoring cybersecurity architects, engineers, and analysts.

Serve as a field sales engineering expert for Upwind’s cloud security platform. Partner with sales to understand customer needs, tailor technical solutions, provide guidance throughout the sales cycle, lead proof-of-concept engagements, and relay customer insights to product development. The role requires cloud security expertise, strong communication skills, and experience with AWS, Azure, or Google Cloud. Terraform, Kubernetes, and container experience are advantageous.

Manages Stamford Health’s security operations and cybersecurity team, overseeing defensive capabilities, endpoint and perimeter security, vulnerability management, incident response, forensics, risk mitigation, compliance, and security control maturity across on-premises and cloud environments. Partners with IT and business leaders on secure-by-design initiatives, develops policies and procedures, monitors performance metrics, manages security projects, and mentors cybersecurity architects, engineers, and analysts.

Application Security Interns gain hands-on experience in IT and financial services while supporting measurement reporting, technical problem-solving, secure software development, and application security initiatives. The role includes learning from experienced professionals, shadowing team members, applying cybersecurity concepts, and developing skills related to DevSecOps, OWASP Top 10 vulnerabilities, secure coding, and security tools.

Leads end-to-end security architecture for distributed storage platforms and AI-driven workloads. Responsibilities include threat modeling, SSDLC, IAM integration, RBAC and ABAC authorization, encryption and key management, multi-tenant isolation, secure APIs and protocols, observability, anomaly detection, compliance, and cross-functional technical leadership. The role partners with storage, protocol, control-plane, and platform engineering teams while mentoring engineers and influencing secure system design.

Provides security engineering and architecture expertise for FedRAMP authorization and continuous monitoring. Reviews cloud service provider architectures, security controls, authorization packages, assessment reports, vulnerabilities, and compliance documentation against NIST, FedRAMP, FISMA, RMF, and agency requirements. Leads vendor interviews, identifies technical and documentation gaps, advises government program leads and CISOs on risk posture, and supports secure, compliant, resilient system design.

Manages information system security for DoD Collateral, SCI, and SAP environments. Oversees RMF and JAFAN authorization processes, risk assessments, security testing, documentation, incident response, configuration management, inspections, and security training. Advises government program managers, maintains authorization records, evaluates vulnerabilities, coordinates technical security activities, and mentors team members. Requires extensive regional travel and support for classified systems.

Performs IT general controls testing, control design and effectiveness assessments, financial systems security assessments, benchmarking, remediation planning, and compliance evaluations. Supports NIST, DHS, OMB, DISA, and federal internal-control requirements while collaborating with technical teams and stakeholders. Reports security risks and mitigation strategies, assists with annual ITGC scoping, and supports related assessments and authorizations to operate.

Provides senior cybersecurity engineering support across system lifecycles, implementing DoD RMF and Zero Trust controls. Performs ACAS vulnerability assessments, remediation validation, continuous monitoring, Azure security architecture, Azure Policy administration, and Defender for Cloud security posture management. Develops Xacta automation and Infrastructure as Code workflows for evidence collection, compliance validation, and continuous authorization. Collaborates with cloud, DevSecOps, architecture, and security teams while supporting assessments and authorization activities.