Top Cyber Security Jobs

Designs, deploys, hardens, and secures Microsoft Windows infrastructure supporting air traffic control systems. Responsibilities include Windows Server and workstation administration, Active Directory and Group Policy management, security architecture, vulnerability assessments, penetration testing, endpoint protection, RBAC, system hardening, remediation, documentation, and customer technical guidance. The role also leads security and deployment teams and ensures compliance with applicable security frameworks and regulations.

Conducts independent assessments of management, operational, and technical security controls for IT systems and networks. Plans authorization reviews, evaluates security documentation and risk, identifies architecture gaps, supports Risk Management Framework activities, verifies control implementation, manages remediation plans, and ensures cybersecurity requirements and compliance processes are properly documented and maintained. Requires a bachelor’s degree, TS/SCI clearance, and an approved DoD 8140 certification.

Lead and execute IT SOX and SOC testing (ITGC, ITAC, SDLC), coordinate remediation with control owners, perform risk assessments, provide IT audit consulting, and support audit readiness and control framework improvements across US and Europe.

Own FAR.AI’s internal IT and security function, including accounts, devices, identity and access management, onboarding, offboarding, office networking, support, endpoint hardening, data protection, governance, and vendor risk. The role will remediate security gaps using threat modeling, automate self-service infrastructure, partner across teams, communicate and manage change, and hire and lead an IT Coordinator.

The Senior ISSO monitors and assesses information-system compliance, conducts audits and technical assessments, develops security plans, investigates violations, reviews configuration changes, implements cybersecurity processes and tools, and maintains security documentation. The role supports NIST, NISPOM, DAAPM, JSIG, and RMF compliance in a classified defense environment. It requires onsite work in Aurora, Colorado, an active TS/SCI clearance, U.S. citizenship, and a Security+ or equivalent IAM Level I certification within six months if not already held.

Lead design, development, testing, and integration of secure firmware and platform security features. Architect secure boot, hardware root-of-trust, key management, and cryptographic solutions. Drive cross-functional initiatives, review designs and code, mentor engineers, and evaluate emerging security technologies for integration into products.

Build identity verification and fraud detection systems that analyze candidate data, correlate risk signals, and identify fraudulent or state-sponsored activity. Develop high-availability data pipelines and real-time guardrails for security teams. Prototype and scale fraud detection solutions, collaborate with security, platform, and data teams, write technical designs, debug production systems, and participate in software development lifecycle practices.

Serve as an ISSO supporting Air Force weapons program: manage ATO packages, maintain eMASS records, execute continuous monitoring, implement NIST SP 800-53 controls and DISA STIGs, use ACAS for vulnerability scanning, draft SSPs and POA&Ms, and handle USAF/DoW incident reporting within the RMF lifecycle.

Supports the information security program by engineering and maintaining security technologies, identity and access controls, monitoring capabilities, cloud and network protections, and defensive processes. Responsibilities include security architecture, risk assessments, audit and compliance support, incident response, security automation, control documentation, and collaboration with IT, business, and third-party stakeholders. The role requires 5+ years of cybersecurity or related experience, with expertise in identity security, endpoint protection, SIEM, cloud security, and regulated environments preferred.

Provides hands-on cybersecurity engineering and operational support for AWS services, enterprise networks, cloud infrastructure, and mission integrations. Responsibilities include risk assessment and remediation, vulnerability management, incident response, security-control validation, continuous compliance, network and cloud monitoring, configuration management, and technical documentation. Supports firewalls, identity systems, CI/CD security, DevSecOps tooling, and secure federal mission environments. Requires a Secret clearance with Top Secret eligibility and quarterly travel to Charleston or Stafford.

Designs and validates secure system architectures for mission-critical enterprise IT environments. Responsibilities include integrating RMF and security controls, developing A&A and ATO documentation, conducting risk assessments and threat modeling, applying STIGs and hardened configurations, testing controls, designing SIEM monitoring, supporting incident response, and advising leadership. The role requires collaboration across engineering, development, administration, and cybersecurity teams, with all work performed onsite in Springfield, Virginia.

Designs and validates cybersecurity architectures for distributed tactical-edge and enterprise systems operating in low-bandwidth, intermittent, and degraded environments. Responsibilities include security control implementation, RMF and ATO documentation, threat modeling, vulnerability assessment, hardening, monitoring, incident response support, and secure lifecycle integration. The role requires collaboration with engineering, operations, and leadership teams and provides on-site support in Springfield, Virginia.

Responsible for securing federal IT systems through NIST RMF, FISMA compliance, continuous monitoring, vulnerability remediation, audit support, security documentation, configuration management, and SIEM log reviews. The role develops SSPs, contingency plans, POA&Ms, and risk waivers; supports certification and accreditation activities; communicates security risks to technical and management stakeholders; and ensures compliance with DHS, CBP, and DoD STIG requirements.

Leads modernization of the Department of State COMSEC operations team, transforming 24/7 monitoring into automated, proactive operations. Oversees cryptographic infrastructure, PQC and crypto-agility adoption, OTNK scaling, HAIPE and NGLD deployments, vulnerability management, secure logistics, testing, and compliance. Manages multidisciplinary engineering, security, audit, logistics, and data teams while aligning solutions with NSA CNSA 2.0 and NIST standards.

Provides security support for OUSW(R&E), including personnel and physical security processing, access control, clearance records, classification guidance, DISS queries, security briefings, and continuity of operations planning. Supports CAC, courier card, account access, visit authorization, indoctrination, debriefing, and security records. Advises personnel on clearance issues, alarms, locks, and GSA containers while coordinating with senior government executives.

Operates and secures application vulnerability assessment platforms in Azure and AKS. Manages Kubernetes infrastructure, container images, system administration, CI/CD pipelines, infrastructure automation, security controls, monitoring, backups, and disaster recovery. Troubleshoots application, network, database, and infrastructure issues; coordinates upgrades and change activities; maintains documentation and runbooks; and supports highly available vulnerability assessment services. Requires strong Azure, Kubernetes, DevOps, infrastructure-as-code, compliance, and technical writing expertise.

Leads cybersecurity professionals implementing the Risk Management Framework for federal IT systems. Oversees system categorization, security control selection and assessment, authorization documentation, continuous monitoring, risk analysis, remediation, incident response, audit support, and stakeholder training. Advises leadership on cybersecurity risks and compliance while maintaining alignment with NIST guidance and DoD requirements.

Support federal cybersecurity programs by implementing and assessing NIST security controls, managing RMF and eMASS authorization activities, maintaining SSPs and ATO artifacts, tracking POA&Ms, coordinating STIG remediation, conducting risk assessments, monitoring incidents, and communicating security requirements. The role requires extensive ISSO experience, advanced cybersecurity certification or education, security tool familiarity, and an active TS/SCI clearance with the ability to obtain a polygraph.

Senior Information Systems Security Officer supporting federal cloud cybersecurity programs. Responsibilities include system categorization, security control selection and implementation, control assessments, RMF authorization documentation, continuous monitoring, risk analysis, incident response, remediation, audits, security training, and leadership reporting. Requires extensive ISSO experience in cleared environments, advanced cybersecurity and cloud certifications, familiarity with security tools, and an active TS/SCI clearance with ability to obtain a polygraph.

Advise and lead cybersecurity risk management activities for cloud and federal systems, including system categorization, security control selection, implementation oversight, assessments, authorization documentation, continuous monitoring, incident response, remediation, audits, and stakeholder training. Maintain compliance with RMF, NIST guidance, and DoD requirements while reporting security risks and improvement opportunities to leadership.

Lead cybersecurity compliance and authorization activities for federal systems. Implement and assess NIST security controls, manage RMF v5 workflows and eMASS documentation, develop SSP and ATO artifacts, track POA&Ms, coordinate STIG remediation, conduct risk assessments, monitor incidents, and communicate security requirements across technical and nontechnical teams.

Assesses and continuously monitors cybersecurity controls across federal systems, reviews authorization documentation, and guides RMF activities. Advises on system categorization, control selection, implementation, assessment, remediation, risk analysis, incident response, and audit support. Coordinates with system owners, ISSEs, and ISSOs; prepares authorization documentation; reports risks and metrics to leadership; and provides cybersecurity guidance and training. Requires an active TS/SCI clearance and the ability to obtain a polygraph.

Assesses and documents cybersecurity controls across the Risk Management Framework lifecycle. Reviews system evidence, guides categorization and control selection, oversees assessments and continuous monitoring, prepares authorization risk documentation, and advises stakeholders on remediation, incident response, audits, and compliance. Coordinates with system owners, ISSEs, and ISSOs while reporting security risks and improvement opportunities to leadership.

Designs and presents Qualys security solutions for federal enterprise customers, supporting technical sales engagements, proofs of concept, architecture workshops, compliance programs, and post-sale deployment health checks. Advises customers on vulnerability, asset, patch, cloud, application, and threat security while partnering with sales, product, marketing, and strategic partners. Authors technical content, enables field teams, and travels to customer locations at least 30% of the time.

Lead development of security enforcement integrations that warn or block unsafe AI artifact installations, serve sanitized alternatives, and record audit events. Build reliable event-driven backend systems with queues, webhooks, idempotency, retries, back-pressure, approval flows, dry runs, audit logs, and rollback mechanisms. Integrate third-party security, infrastructure, and identity APIs, with potential future work on fleet-wide revocation controls and security platform integrations.