Top Cyber Security Jobs

Lead RMF lifecycle for DoD IT systems to achieve and maintain ATO; develop and maintain RMF documentation (SSP, SAR, POA&M); manage eMASS; run continuous monitoring and vulnerability scanning; coordinate with system owners, Authorizing Officials, and stakeholders; ensure compliance with federal and customer security requirements and protect sensitive information.

Design, implement, validate, and maintain standardized endpoint security baselines across Intune, MECM, and Jamf Pro for Windows and macOS. Configure Defender, BitLocker/FileVault, ASR rules, Conditional Access, and compliance policies; test and rollout baselines, perform impact assessments, troubleshoot policy conflicts, document procedures, and collaborate with cybersecurity, RMF/ISSO, and engineering teams to meet federal security requirements.

Lead RMF-based cybersecurity compliance and authorization activities for DoD systems. Manage ATO lifecycle, maintain authorization packages, perform risk assessments and continuous monitoring, advise leadership, and oversee program management including staffing, budgeting, subcontractor coordination, and deliverable quality.

Designs, deploys, and optimizes AI-driven security workflows and agents (using Microsoft Copilot tools) to automate threat detection, incident response, and alert enrichment. Develops prompts and automations for threat hunting, triage, compliance reporting, creates dashboards (Splunk, Sentinel), maintains runbooks/SOPs, participates in on-call rotations, and collaborates with SOC, engineering, and GRC teams.

Lead and manage enterprise security operations, incident response, SIEM/MDR monitoring, endpoint protection, patch and vulnerability management, threat intelligence, staff supervision, and security controls across the university health system.

Performs technical security and risk assessments of computing environments; develops, implements, and updates IA/security policies and controls; integrates IA across systems; manages access verification and enterprise application security workflows; investigates and supports resolution of security incidents; interfaces with IT and campus departments to embed security best practices throughout the program life cycle.

Lead and develop a university-wide information security program, oversee ISO and assurance staff, manage incident response, ensure regulatory compliance (FERPA, HIPAA, GDPR, etc.), coordinate external audits, advise on secure cloud/zero-trust architecture, manage security vendors, and promote campus cybersecurity awareness.

Support and improve application security by implementing and operating SAST/DAST, API and container security solutions; triage and resolve security issues; collaborate with dev and product teams; participate in on-call rotation; drive projects to completion and integrate security into DevSecOps practices.

Lead and develop a security incident detection and response team, oversee SIEM engineering, threat hunting, digital forensics, incident triage/investigation and response. Develop IR plans, playbooks, metrics, coordinate cross-functional response, and report trends to executive leadership while improving detection and response capabilities.

Provide operational support, implementation, and strategic development of IAM solutions (PAM, SSO, IGA, CIAM, MFA, AD). Configure and tune tools, drive automation, mentor junior engineers, participate in on-call rotation, troubleshoot access incidents, and ensure alignment with security best practices and compliance.

Lead product security strategy and team for a software-defined vehicle platform. Embed secure-by-design practices across firmware, cloud, OTA, and AI/autonomy stacks; run vulnerability management, PSIRT, red team and bug bounty programs; secure supply chain and third-party vendors; and present security posture to executives and standards bodies.

Lead product security activities for vehicle and cloud products: perform ECU- and feature-level threat assessments and risk analyses, derive security requirements, develop and run manual and automated security tests on SIL/HIL setups, validate fixes, and produce UN R155/CSMS-compliant documentation to support homologation. Collaborate with software, security architecture, and GRC teams to define controls and risk treatments and ensure security validation across the product lifecycle.

Lead design, implementation, and continuous improvement of IAM solutions (PAM, SSO, IGA, CIAM, MFA, AD). Configure and integrate IAM tools, automate user lifecycle, support governance/compliance, mentor engineers, lead projects, participate in on-call rotation, and drive security posture improvements.

Supervise the IT Security Team; develop and implement security controls, services, and tools; monitor networks and investigate breaches; report security events; provide cybersecurity training; collaborate with IT leadership; be on-call 24/7 and support emergency management activities. CJIS background check required.

Define and decompose product security requirements, develop and run manual and automated security validation tests (functional and abuse tests) at vehicle, system, sub-system and ECU levels using SIL/HIL. Build test cases in multiple languages, document results for compliance (UN R155, ISO 21434), triage findings, collaborate with development teams to recommend and validate fixes, and align documentation with CSMS and GRC processes.

Own corporate IT operations and security: onboarding/offboarding, device and endpoint management, identity and access, networking, SaaS administration, vulnerability management, incident response, and GRC/compliance programs while scaling processes and tooling.

Provide entry-level cybersecurity engineering support for a NAVSEA program office: assist implementing security measures, monitor system posture, support documentation and compliance, and help implement cyber controls under supervision for classified programs.

Serve as the Information Systems Security Officer for classified end-user IT systems: execute RMF authorization and reaccreditation, maintain SSPs/POA&Ms and other security documentation, monitor and remediate compliance gaps, support configuration and identity management, evaluate security solutions for classified processing, and collaborate with ISSMs, engineers, and leadership to reduce risk and maintain operational readiness in a 24x7 mission environment.

Manage and optimize the SIEM/SOAR platform: ingest/normalize logs, build integrations and automation, tune detections, support SOC investigations, create dashboards/reports, and improve platform performance and data fidelity.

Monitor security tools, investigate and document incidents, perform vulnerability scanning and remediation tracking, support risk assessments and regulatory compliance, maintain security controls and policies, assist BCP/DR testing, and prepare security reporting and audit evidence.

Support RMF and cyber compliance for a NAVSEA program office: implement security controls, perform vulnerability scanning and control validation, document security posture, and coordinate remediation with system and software teams.

Lead ISSO responsible for securing classified systems: configuration management, forensic evidence preservation, security assessments and A&A, incident detection/remediation, policy compliance with NRO/IC/DoD, and mentoring Level 1/2 ISSOs. Must operate independently and coordinate with government and contractor stakeholders.

Ensure privileged access controls meet IAM standards across platforms; partner with governance to measure and report controls; define PAM requirements for technology partners; apply PAM best practices and modernization efforts; identify and remediate PAM risks; educate stakeholders; support audits and provide senior management reporting to reduce sustained risk.

Design, deploy, and automate network security controls across enterprise, cloud, and retail edge environments. Implement ZTNA, NGFWs, microsegmentation, and firewall policy-as-code. Integrate identity and authentication frameworks, triage security events, produce documentation and RCAs, mentor engineers, and participate in on-call rotation to maintain resilient security posture.

Lead end-to-end program management for a broad security platform portfolio, coordinating cross-functional stakeholders, tracking deliverables and KPIs, driving alignment without direct authority, supporting onboarding and platform transitions, and proactively surfacing and resolving risks while maintaining program rhythms and leadership reporting.