Top Cyber Security Jobs

Lead and perform security assessments and technical security reviews for classified and unclassified systems. Validate vulnerability scans, apply NIST SP800-53 and DHS 4300A/B controls, develop testing procedures, RoE, SSPs, SARs, and risk analyses, and coordinate with ISSOs, system owners, and developers to ensure DHS SELC and change management compliance.

Support and operate the company information security program: monitor and tune SIEM and security controls, investigate and remediate incidents, manage vulnerabilities, deploy and administer security applications, assist with compliance reviews and documentation, collaborate with IT teams, and perform onsite deployments and disaster recovery work.

Lead application security efforts: integrate auth/encryption/authorization controls, use SAST/DAST tools to identify and remediate vulnerabilities, educate developers on secure SDLC, and implement compensating controls and firewall rules across web application lifecycles.

Perform security monitoring, vulnerability testing, risk analysis and security assessments. Implement and upgrade security controls, establish protocols and requirements, manage IPS/IDS and other security tools, investigate breaches, and coordinate with vendors to remediate issues.

Implement and maintain perimeter security, firewall engineering, logging/monitoring, alerting, incident handling, vulnerability and configuration management. Support security research, product evaluations, consulting, and project-level security tasks to meet Data & Digital Security program requirements.

Design, implement, and validate anti-scraping defenses through red-team/blue-team testing. Develop bypass strategies, automated adversarial scripts, and conduct Android reverse engineering, packet analysis/tampering, and offensive/defensive drills to protect JD's platforms.

Implement and operate data and digital security controls across network, infrastructure, applications, and databases. Responsibilities include firewall engineering, logging/monitoring, alert management, incident handling, vulnerability and configuration management, security research, product evaluation, and project support to meet program requirements.

Design, implement, and mature SCDHHS information security and compliance solutions (RMF/CMS MARS-E/NIST/HIPAA). Provide hands-on system support, perform audits and third-party assessments, integrate RMF tasks into SDLC, manage vendor/cloud security, and document findings using eGRC, Bizagi, and Atlassian tools while advising leadership on risk mitigation.

Perform vulnerability testing, risk analysis, security assessments, and monitor/analyze network traffic and security events. Implement and upgrade security solutions, establish security protocols and requirements, manage security tools, and coordinate remediation with vendors.

Perform and support agency information security program implementation and compliance with state standards: interview stakeholders, document processes, develop and track implementation plans (POA&M/CAP), assess controls and documentation, provide recommendations, and facilitate status reporting to ensure progress against NIST/FISMA requirements.

Design, implement, and maintain secure system architectures; translate RMF control baselines into implementable security requirements; analyze vulnerability/scanning results and drive remediation; provide security engineering input for cloud, Zero Trust, containerization, and CI/CD; maintain security artifacts and tooling; mentor junior staff and support authorization (RMF) activities to strengthen enterprise security posture.

Design, review, and build security systems for Skydio's cloud and corporate environments. Drive architecture and hands-on engineering for tooling (WAF, vuln management), harden production components, improve monitoring/patching, support identity/auth systems (SSO/SCIM), translate compliance requirements into controls, and participate in on-call rotation.

Perform technical security assessments and design secure networking, computing, and enclave environments. Serve as ISSE on engineering teams to implement IA architectures, support risk analysis and management, enforce trusted relationships, identify security requirements for government data, and recommend system-level mitigation strategies.

Design, evaluate, and secure complex LAN/WAN wired and wireless networks. Conduct site surveys and hardware installations, perform acceptance testing and throughput analyses, develop test harnesses, identify vulnerabilities, and produce system security documentation. Recommend hardware specifications, evaluate COTS/GOTS/GFE, and ensure systems meet government security requirements.

Administer and maintain Tenable Suite (Security Center, Nessus Scanners, Nessus Manager) on Linux, perform vulnerability scans and analysis, prioritize and remediate findings with IT teams, generate reports, monitor alerts and incidents, and provide training and status reporting to stakeholders.

Provide information security architecture and solutions design for SCDHHS, support security and compliance programs (FISMA/RMF, CMS MARS-E, HIPAA), perform hands-on system support, audits and assessments, integrate RMF into SDLC, collaborate with leadership and vendors, and document findings using eGRC, Bizagi, and Atlassian tools.

Build automation and internal tooling to enforce security controls across multi-tenant cloud and corporate environments. Integrate identity and cloud systems, SCIM provisioning, vulnerability scanners, and ticketing systems to automate evidence collection, compliance reporting, remediation, dashboards, and vulnerability management. Contribute to system design, hardening, on-call rotation, and partner with engineering teams on security- significant architectural decisions.

Lead Splunk-based data collection, ingestion, and monitoring efforts. Troubleshoot and remediate system and data issues, deploy/manage Splunk add-ons and forwarders, implement role-based access, produce deployment and accreditation documentation, and ensure compliance with DoD C&A and security guidance.

Design, review, and build security systems for multi-tenant cloud and corporate environments. Develop internal security tooling (WAF, vulnerability management), harden production components, improve monitoring/patching, contribute to authentication/identity (SSO/SCIM), translate compliance controls, and participate in the security on-call rotation.

Assess current security posture, create and implement an information security improvement plan, establish risk management programs and security standards (NIST, FedRAMP, IRS 1075), perform system and network vulnerability audits, manage security solutions, and provide security leadership and guidance across IT teams.

Design and implement Oracle IAM solutions across environments. Configure OAM/OAAM, customize login modules and admin UIs, implement federation, configure roles/policies in OIM, integrate applications via LDAP/database connectors, perform user loads/reconciliation, and provide knowledge transfer to BCA staff.

Design, evaluate, and secure complex network and SIGINT hardware systems. Conduct onsite assessments, lead hardware installations, model solutions, create test interfaces, perform MTBF/MTTR analyses, evaluate LAN/WAN and wired/wireless networks, research COTS/GOTS, produce security documentation, and deliver vulnerability assessments and actionable recommendations.

Design, implement, and maintain secure systems in classified environments by integrating security throughout the SDLC. Lead RMF A&A activities to achieve and maintain ATOs, perform DISA STIG hardening and SCAP vulnerability assessments, automate compliance, support continuous monitoring, and coordinate remediation with development and infrastructure teams. Engage with customer security stakeholders and support incident response and forensic activities.

Serve as first-point escalation for technical and process issues in managed security services. Provide SME support, incident RCA, crisis management, change coordination, trend analysis to reduce incidents, hardware troubleshooting, vendor coordination, and prepare status reports. Participate in stakeholder meetings, drive service improvements, estimate effort for projects, train new team members, and maintain documentation.

Lead end-to-end incident investigations, perform threat hunting across cloud and on-prem environments, translate threat intelligence into defenses, improve SIEM/EDR detections, automate response, and develop IR and hunting playbooks while collaborating with engineering and DevSecOps teams.