Top Cyber Security Jobs

Maintains information system security postures, performs day-to-day security operations, assesses vulnerabilities and risks, manages configuration and system changes, and prepares security authorization documentation. Supports certification and accreditation under NISCAP and DIACAP, evaluates solutions for classified information processing, and enforces information assurance policies. Requires seven years of SE/ISSO experience, IAM Level I or higher certification, a bachelor’s degree or equivalent experience, and an active TS/SCI clearance with current polygraph.

Leads vulnerability remediation and cybersecurity risk management for federal information systems. Oversees RMF lifecycle activities, system categorization, security controls, assessments, authorization documentation, continuous monitoring, incident response, audit support, and compliance reporting. Supervises security professionals, advises stakeholders and leadership, supports DOJ and Intelligence Community data calls, and drives security process improvements. Requires an active TS/SCI clearance and ability to obtain a polygraph.

Twelve-week cybersecurity internship supporting research and analysis of cybersecurity exposure topics. Responsibilities include collecting and reviewing data, documenting findings, creating technical and non-technical summaries, collaborating on issue identification and tracking, following security and privacy procedures, and presenting an end-of-program project. Candidates must be enrolled in an accredited degree program with graduation expected December 2027 or later.

Designs, implements, administers, and troubleshoots F5 BIG-IP and inline break-and-inspect proxy solutions within DoD enterprise and cloud architectures. Configures TLS and mutual TLS, applies cryptographic and PKI standards, resolves issues with DoD stakeholders, and supports secure modernization of legacy and new applications. The role requires a Secret clearance and familiarity with federal compliance standards, Linux or UNIX, networking, and cloud environments.

Designs, implements, integrates, and maintains Elastic-based cybersecurity systems and automation. Manages large-scale log ingestion, parsing, enrichment, normalization, ECS mapping, index lifecycle policies, data streams, dashboards, detections, alerts, and case workflows. Supports government SOC and SIEM operations, optimizes AWS and endpoint telemetry, and applies AI/ML techniques to security analytics. The role addresses complex cyber problems, develops innovative solutions, operates independently, and mentors or supervises employees.

Supports cybersecurity and software projects through application development, DevSecOps, cloud integration, vulnerability assessments, security monitoring, incident response documentation, secure configuration, and technical troubleshooting. The intern helps maintain security architectures, runbooks, and playbooks; tracks findings through remediation; collaborates with IT and engineering teams; and presents project results.

The Senior ISSO monitors and assesses information-system compliance, conducts audits and technical assessments, develops security plans and documentation, investigates security violations, reviews configuration-management requests, and supports cybersecurity process and tool implementation. The role requires collaboration with the ISSM and adherence to NIST, NISPOM, DAAPM, JSIG, RMF, and related government directives. The position is fully onsite in Tucson and requires an active Secret clearance and U.S. citizenship.

Governs enterprise security baselines across on-premises, cloud, and hybrid environments. Conducts automated configuration compliance assessments, monitors configuration drift, manages exceptions, supports audits, develops compliance metrics and reporting, and drives risk-based remediation. Partners with infrastructure, cloud, application, engineering, vulnerability management, threat intelligence, and security teams to reduce exposure and improve security posture through automation and standards-based controls.

Leads NVIDIA’s Infrastructure Security Engineering organization for EDA clusters. Builds and operates security controls across compute, storage, and networking in on-premises and multi-cloud environments while preserving performance for long-running workloads. Owns the technical roadmap, security technology lifecycle, automation, instrumentation, compliance evidence, and cross-functional execution. Develops secure-by-default infrastructure and leads teams responsible for scalable enforcement, observability, mitigation, and security outcomes.

Manages cyber communications and security awareness programs, including security messaging, emergency alerts, phishing simulations, workforce education, SharePoint administration, metrics, compliance, and behavior-change initiatives. Leads analysts, coordinates with Cyber Security and Corporate Communications, develops annual program plans, tracks outcomes, and reports to executive leadership. The role requires strong communication, analytical, organizational, people-management, and cybersecurity experience in a remote, regulated healthcare environment.

Serves as the principal security advisor for information systems, supporting RMF accreditation, authorization documentation, configuration management, vulnerability assessments, STIG and SCAP compliance, audits, incident response planning, and continuous monitoring. The role maintains security records, tracks hardware and software lifecycle risks, coordinates system security reviews, develops remediation actions, and briefs executive and IPT leadership. It requires an active TS clearance with SAP eligibility, DoD IAT Level III certification, and 8–10 years of DoD or IC security experience.

Maintain and interpret cybersecurity compliance standards (NERC CIP, NIST, ISO, etc.), administer internal control systems, support audits, investigate non-compliance, design corrective actions, and identify automation opportunities while collaborating with plant teams and stakeholders.

Designs and maintains security controls across AWS and hybrid cloud environments. Responsibilities include cloud security architecture, IAM and least-privilege access, posture management, vulnerability remediation, security monitoring, Infrastructure-as-Code automation, secure guardrails, incident support, and compliance mapping. The role partners with infrastructure, DevOps, engineering, IAM, and security teams to embed scalable, automated protections into cloud platforms and applications.

Lead and develop the Security team while owning the company-wide security and compliance program. Responsibilities include managing SOC 2, PCI DSS, GDPR/CCPA, audits, policies, vendor risk, security awareness, and customer security communications. The role also provides technical direction for security tooling, cloud security, identity and access management, application security, vulnerability management, architecture reviews, and threat modeling.

Designs, implements, maintains, and improves corporate information security technologies, including firewalls, proxies, logging, IDS/IPS, and related systems. Evaluates security risks, recommends solutions, develops policies and standards, monitors system performance and anomalies, supports disaster recovery, documents systems, and coordinates vendors and service agreements. The role also consults with IS teams, supports security projects, and contributes to compliance and governance initiatives.

Designs, deploys, configures, monitors, and troubleshoots Cisco ISE for AAA, RADIUS/TACACS+, wired and wireless 802.1X, endpoint profiling, posture checks, and certificate-based authentication. Supports migration from ForeScout CounterACT, integrates ISE with Active Directory, LDAP, Cisco 9800 controllers, and PKI, and improves Zero Trust access controls. Performs health checks, upgrades, root-cause analysis, documentation, cross-team coordination, and mentoring while working onsite in Suitland, Maryland.

Supports cybersecurity and systems security engineering for mission-critical NC3 and weapon systems. Responsibilities include RMF authorization and accreditation, security requirements, architecture reviews, threat assessment, risk mitigation, cybersecurity strategy, vulnerability scanning, DevSecOps security reviews, contingency planning, and compliance with DoD and Air Force requirements. The role requires collaboration with government, contractor, vendor, and program management teams.

Implements and supports security data ingestion pipelines across applications, cloud services, infrastructure, security tools, and business systems. Develops transformations, parsing, normalization, enrichment, masking, validation, and delivery workflows. Troubleshoots data quality and pipeline issues, documents architectures and data flows, coordinates with client stakeholders, and supports SIEM, detection, investigation, observability, and automation use cases. Requires data engineering experience, scripting, query languages, integration knowledge, and strong client communication.

Designs and secures RHEL systems in an HPC SAP environment. Responsibilities include applying JSIG and RMF requirements, developing authorization artifacts, conducting command-line security assessments, validating configurations, managing POA&Ms, performing continuous monitoring, executing remediation plans, supporting recovery, and leading incident response. The role collaborates with engineering and system administration teams to integrate security controls into system designs and production releases.

Leads enterprise data protection initiatives, including data classification, DLP policy management, eDiscovery support, insider threat investigations, and data governance. Uses behavioral analytics, audit logs, SIEM, UEBA, and forensic tools to identify misuse and leakage. Develops security controls, incident response playbooks, and compliance updates while collaborating with Legal, HR, and Compliance. Participates in threat-hunting and red, blue, and purple team exercises. Requires five-plus years of relevant experience and eligibility for a Top Secret clearance.

The Application Security Engineer will define and validate security controls for a high-traffic digital news platform. Responsibilities include threat modeling, architecture reviews, authentication and authorization assessment, API and integration security, secrets management, vulnerability and penetration testing coordination, encryption validation, security monitoring, GDPR privacy engineering, vendor assessments, and remediation documentation.

Supports cybersecurity engineering initiatives across enterprise infrastructure, including operating system and network hardening, security tool monitoring, zero trust architecture, automation, threat modeling, cloud security, regulatory compliance, and secure development practices. The intern will assist with security assessments, technology evaluations, audit preparation, and documentation while collaborating with security engineers and cross-functional teams.

Lead product security initiatives for cloud, AI, and enterprise platforms. Responsibilities include threat modeling, security architecture reviews, identifying systemic weaknesses, developing secure-by-design guidance and reference architectures, advising engineering and product leaders, leveraging AI and automation for scalable security assessments, investigating emerging attack paths, mentoring teams, and improving security review methodologies and tooling.

Lead strategy and roadmap for Agentic Identity Management (AIM), validate product-market fit, drive commercialization and adoption, partner cross-functionally, mentor product teams, and measure product and business success.

Lead architecture and implementation of AI-security products, define technical direction, drive cross-team initiatives, design secure scalable backend systems, and address systemic risks while remaining hands-on in coding, prototyping, and debugging.