Top Cyber Security Jobs

Support RMF activities, perform vulnerability scanning and STIG hardening, develop ATO documentation, track POA&Ms, integrate security into development, monitor posture, and assist incident response and audits for GEOINT systems.

Design, build, and maintain secure systems and architectures; develop security standards; perform risk assessments, vulnerability analyses, and incident response; implement identity and access management and encryption; ensure compliance; collaborate with infrastructure, application, and security teams; research and advocate security technologies and controls.

Manage and assist IT and information security projects through initiation, planning, execution, monitoring, and closeout. Track risks, scope, schedule, costs, and quality; coordinate vendor plans and knowledge transfer; support RFP and procurement activities; report project status and ensure regulatory compliance and security testing activities are completed.

Perform computer forensics investigations across Linux, macOS, and Windows systems; work with the SOC to improve incident response processes; validate security and privacy controls and reporting meet standards.

Design and maintain secure GCP architectures and landing zones, translate compliance frameworks into Compliance-as-Code (Terraform/IaC), lead enterprise IAM and key management strategies, architect network security controls and telemetry pipelines, advise on cloud security risks, mentor engineers, and support RMF/ATO processes.

Respond to and investigate cloud security incidents on GCP, tune detections and SOAR playbooks, manage vulnerability scanning and remediations, enforce IAM/VPC Service Controls and encryption, collaborate with DevSecOps to implement Zero Trust and cloud security best practices, and maintain SIEM/SOAR-based monitoring and automation.

Perform technical cyber analysis and development including network reconnaissance, mapping, forensics, packet/traffic analysis, scripting, and briefings. Profile network security posture, document findings, and support cyber operations and penetration-testing activities.

Lead design, implementation, migration, and support of secure network environments. Configure, deploy, monitor, and troubleshoot firewalls, VPNs, routing, and security platforms. Produce design documentation, manage implementations, coordinate teams, perform threat remediation, and report project status.

Design, build, and maintain secure, cloud-native software and microservices on GCP. Deploy and manage GKE clusters, implement IaC and CI/CD pipelines, integrate APIs (including AI/ML outputs), and collaborate with security teams to patch vulnerabilities, monitor systems, and produce technical documentation.

Administer and maintain functional security roles and permissions for PeopleSoft Financials and HCM. Analyze security change requests, assess impact of system changes, support testing, troubleshoot production security issues, ensure compliance with auditors, recommend process improvements, train end users, and document security architecture and controls.

Design and implement data-driven automation for security authorization and continuous RMF monitoring. Build ETL pipelines, process and validate security data, detect anomalies, develop predictive models and dashboards, and support data engineering for scalable security assessments.

Support NAVWAR and PNT superiority by providing modeling and simulation, assessing offensive and defensive NAVWAR capabilities, coordinating with DoD cyber organizations, integrating information into C4 and cyberspace operations, reviewing policies for compliance, and developing tactics and procedures to mitigate vulnerabilities in contested environments.

Monitor, analyze, and respond to cybersecurity alerts; perform vulnerability scans; evaluate network and system security configurations; provide security design, consultation, and governance; conduct complex security analyses for compliance; act as SME and mentor for less-experienced staff; recommend and configure security controls and procedures.

Contract Security Analyst to design, implement, configure, and administer IAM platforms and directory services. Requires architecture and hands-on experience with Sun Identity/OpenSSO, Oracle IAM, OAM, and Sun/Oracle Directory Server. Work on cross-functional teams; experience with criminal justice systems, iterative development, and ITIL is preferred.

Implement and maintain data and digital security controls across network, infrastructure, applications, and databases. Perform firewall engineering, logging/monitoring, alert management, incident handling, vulnerability and configuration management. Support security research, product evaluations, consulting, and project tasks to uphold DDS program requirements and security standards.

Provide 24x7x365 CSOC Tier 3 incident response: contain, eradicate, recover from cyber incidents; perform malware analysis, memory and digital forensics, forensic artifact handling, signature development, adversary attribution, reporting, and coordination with government C-IRT and other stakeholders. Develop scripts/tools, document actions in ticketing and reporting systems, and conduct quality control of Tier 2 work.

Lead Senior ISSO responsible for RMF lifecycle and ATO decisions, leading a team of ISSOs, maintaining SSPs, CM and contingency plans, conducting risk and vulnerability assessments, and ensuring FISMA/NIST/DHS compliance while producing test and program reports and advising senior leadership.

Perform computer forensics investigations on Linux, macOS, and Windows clients/servers per state incident response procedures. Collaborate with SOC to improve and disseminate incident response processes. Validate security and privacy controls and reporting meet standards; analyze SIEM logs and flow data to support incident handling and forensics.

Design, deploy, troubleshoot, and optimize LAN/WAN and secure network topologies. Configure VPNs, firewalls, NAT, load-balancing, and monitoring tools. Collaborate with systems engineers, resolve complex network issues, and support 24/7 operations including hardware deployment worldwide.

Design, implement, and administer security architectures and controls; conduct risk assessments, penetration tests, and forensic analysis; support compliance (SSAE16, FISMA, ISO27001, NERC/CIP); respond to audits and incidents; recommend remediation and disaster recovery actions; lead select security projects and provide hands-on support for SIEM, IDS/IPS, DLP, IAM, vulnerability scanning, and related tools.

Lead strategy and productization of Trend Micro's CNAPP portfolio across AWS, Azure, and GCP. Define roadmap, embed AI/ generative AI into cloud security features, collaborate with R&D to deliver cloud-native solutions, enable field teams, engage customers and executives for requirements, and drive go-to-market positioning and success metrics.

Lead product strategy and roadmap for Identity Security across human, non-human, and AI agent identities. Define identity risk signals, product requirements for discovery, secrets exposure, entitlement governance, and identity graph analysis. Partner with engineering, security research, MSSPs, and hyperscalers to deliver integrations and detections. Engage customers and partners for validation, build business cases, and drive go-to-market, adoption, and partner differentiation.

Implement and operate perimeter and infrastructure security controls (firewalls, IPS/IDS, SIEM, DLP). Support vulnerability assessments, incident response, security monitoring, firewall engineering, SOC procedures, audits (PCI), and security tool evaluation/implementation. Provide advisory and hands-on support to network/infrastructure teams and stakeholders.

Support and operate the company information security program: monitor and tune SIEM and security controls, investigate and remediate incidents, manage vulnerabilities, deploy and administer security applications, assist with compliance reviews and documentation, collaborate with IT teams, and perform onsite deployments and disaster recovery work.

Lead and perform security assessments and technical security reviews for classified and unclassified systems. Validate vulnerability scans, apply NIST SP800-53 and DHS 4300A/B controls, develop testing procedures, RoE, SSPs, SARs, and risk analyses, and coordinate with ISSOs, system owners, and developers to ensure DHS SELC and change management compliance.