Top Cyber Security Jobs

Lead application security strategy and enable secure software development across the SDLC. Perform threat modeling and code reviews, design secure architecture and controls, integrate automated DevSecOps guardrails, mentor teams, and align security with compliance and business goals.

Supports the firm's Information Security department through short- and long-term projects, including security initiative implementation, data input and analysis, process documentation, recordkeeping, meetings, and cross-department collaboration. The intern follows confidentiality requirements, develops business and cybersecurity knowledge, and performs administrative duties under supervision. This is a 10-week, onsite internship for an enrolled undergraduate student entering their sophomore, junior, or senior year.

Own Kikoff’s data security roadmap across AWS, Snowflake, RDS, and internal pipelines. Design and implement encryption, tokenization, least-privilege access, access brokering, row- and column-level controls, audit logging, secure data flows, and AI agent permissions. Partner with Legal and Compliance on privacy and regulatory requirements, threat-model new systems, and create reusable secure engineering patterns. Support data mapping, retention, deletion, and cross-border data controls in a regulated fintech environment.

Conduct information system risk assessments, support RMF and certification processes, evaluate vulnerabilities, maintain security documentation, and recommend mitigations for USTRANSCOM systems. The role applies NIST, DoD, NISP, ICD, and security best practices; develops system security plans and contract deliverables; coordinates with government officials, vendors, and stakeholders; and provides cyber alerts, guidance, and security recommendations.

Leads enterprise cybersecurity programs, advising senior leadership on risk, security posture, budgets, architecture, compliance, continuity of operations, and incident response. Oversees security assessments, audits, remediation plans, procurement risk, policy development, training, monitoring, and implementation of cybersecurity safeguards. Requires a TS/SCI clearance, DoD 8140 certification, and expertise integrating security requirements across technology lifecycles and acquisition processes.

Provides multidisciplinary information assurance and cybersecurity leadership for a Department of Defense client. Responsibilities include supporting vulnerability management, penetration testing, corrective actions, NIST RMF and security control implementation, STIGs, SCAP, IAVAs, FISMA, defensive cyber operations, incident response, reporting, recovery, and complex DoD project management. Requires extensive DoD IA experience, an approved Level 3 cybersecurity certification, and a favorably adjudicated NACI investigation.

Leads enterprise Identity, Credential, and Access Management architecture and application security integration for Defense Logistics Agency mission systems. Defines identity, authentication, authorization, access governance, provisioning, and integration requirements; designs secure architecture patterns; supports application onboarding and modernization; and guides RBAC, privileged access management, and segregation of duties implementations. Provides technical leadership and communicates recommendations to government stakeholders, application owners, engineers, developers, and cybersecurity teams.

Conduct independent assessments of DoD cybersecurity controls, review RMF artifacts, analyze risks, validate controls through eMASS, prepare authorization packages, manage user accounts, and track packages through approval. Provide technical recommendations, identify noncompliance, support POA&M and security plan activities, and communicate findings to senior government officials. The role supports TRANSCOM programs at Scott Air Force Base and requires IAM-III certification and a Secret clearance.

Leads industrial cybersecurity operations as an L2 SOC escalation resource. Monitors SIEM and ICS infrastructure, evaluates incidents, develops SOAR playbooks, performs threat hunting and malware analysis, supports forensics, tunes detection rules, recommends remediation, and mentors SOC analysts. The role requires extensive SOC, incident response, SIEM/SOAR, and security automation experience, including Python, with hybrid work in Duluth, Georgia.

Leads industrial cybersecurity operations across global managed services customers. Responsibilities include SIEM monitoring, SOC escalation, SOAR process and playbook development, incident triage, malware analysis, threat hunting, forensic support, alert tuning, remediation orchestration, and mentoring SOC analysts. The role operates as an L2 SOC escalation layer and supports ICS environments including SCADA, HMI, PLC, and RTU systems.

Lead identity security engineering strategy across user, development, and production environments. Guide IAM architecture, privileged access management, threat detection, adversarial testing, compliance automation, and security-control validation. Mentor engineers, define identity security roadmaps, build automation and proofs of concept, collaborate with business and security leaders, and modernize protective controls using offensive and defensive security expertise.

Responsible for information systems security architecture, engineering, accreditation, and continuous monitoring for ICAM projects. Develops and maintains security plans and RMF artifacts, supports IATT and ATO processes, reviews vulnerabilities and audit logs, coordinates patching, enforces security policies, tracks authorization status, and supports PRIVAC requests. Requires extensive ISSO experience, TS/SCI with polygraph clearance, IAM Level 1 certification, a technical bachelor’s degree or equivalent experience, and relevant cybersecurity certifications.

Lead technical marketing for API, AI agent, and application security by deploying and testing Akamai products, building PoCs, demos, labs, and attack simulations, creating technical content and enablement, validating messaging, and presenting technical briefings while collaborating with product, engineering, and field teams.

Leads enterprise cybersecurity monitoring, threat detection, vulnerability management, SIEM analytics, threat hunting, incident response, and continuous monitoring for federal and DoD-aligned environments. Oversees ACAS/Nessus scanning, STIG validation, patch compliance, detection engineering, threat intelligence, reporting, and remediation coordination. Collaborates with cloud, DevSecOps, ISSO, and engineering teams while mentoring junior analysts and improving security automation.

Monitors SIEM dashboards, correlates logs across security and cloud sources, investigates alerts, assesses threats, performs preliminary incident triage, tunes detection rules, documents findings, and escalates high-risk events. The analyst supports continuous monitoring, SOC playbooks, detection use cases, reporting, and coordination with incident response and engineering teams in a DoD-aligned environment.

Performs application security assessments, secure code reviews, API and CMS security testing, threat modeling, vulnerability analysis, and remediation validation. Integrates SAST, DAST, dependency scanning, secrets management, and security controls into CI/CD pipelines. Advises developers and architects on secure coding, authentication, encryption, and DevSecOps practices while supporting monitoring and incident triage. Requires an active Top Secret clearance, technical bachelor’s degree, seven years of relevant experience, and Security+, CISSP, or CCSP certification.

Designs and implements secure cloud architectures, IL5 controls, STIG-aligned hardening baselines, identity integrations, and cybersecurity controls for federal and DoD-aligned platforms. Performs security assessments, vulnerability analysis, continuous monitoring, secure deployment reviews, audit support, and remediation planning. Requires expertise in AWS, NIST, RMF, PKI, SIEM, and cloud security, along with mentoring junior engineers and documenting technical architectures. The role is fully remote but requires an active Top Secret clearance and substantial security engineering experience.

Supports AWS GovCloud IL5 cybersecurity compliance and security operations. Performs RMF impact analysis, maintains SSPs, POA&Ms, SARs, and control evidence, validates STIGs and cloud configurations, monitors vulnerabilities and logs, supports IL5 migrations, audits, ATO activities, and continuity planning, and documents remediation and compliance findings.

Leads the enterprise information security program, including risk identification, compliance reporting, security policy implementation, technical control definition, and IT risk management. Partners with business units and senior leadership to establish acceptable risk levels, align security practices with organizational requirements, and monitor ongoing control performance. The role also requires supervisory leadership and extensive information security expertise.

Maintains information system security posture for classified federal systems. Responsibilities include implementing security policies, conducting vulnerability and risk assessments, managing system changes, preparing SSPs and authorization documentation, supporting RMF and certification activities, and coordinating with information assurance managers. The role requires extensive federal information security experience, TS/SCI clearance with polygraph, and DoD IAM Level I certification.

Own day-to-day security operations across a hybrid AWS, Azure, and on-premises environment. Responsibilities include alert investigation, vulnerability management, endpoint protection, access reviews, incident response, PCI DSS evidence collection, detection engineering, security awareness training, and on-call support. The role also supports periodic physical security activities at the Long Island data center and coordinates audits, remediation tracking, and compliance documentation.

Support DoD authorization and cybersecurity assessments for ESS and EKC systems. Apply NIST 800-53 controls, DoD STIGs, security control documentation, vulnerability severity assessment, continuous monitoring, and system authorization processes. Collaborate with ISSMs, product management, and development teams on architecture, testing, compliance, and production-ready system delivery.

Leads the design, implementation, and operation of information security controls across systems, networks, endpoints, and cloud environments. Responsibilities include SIEM/MDR, EDR/XDR, SOAR, vulnerability management, PAM, Zero Trust, incident response, data protection, DLP, and cloud security. The role collaborates with IT, Privacy, Compliance, and application teams, mentors engineers, supports security architecture and SDLC practices, and may provide periodic on-call incident response support.

Build and mature the application security program across the SDLC. Manage SAST, DAST, SCA, and IAST tooling; conduct penetration tests and vulnerability assessments; drive remediation; and embed Secure by Design practices. Partner with engineering on threat modeling, secure coding, architecture reviews, and CI/CD integration. Support HIPAA, NIST, and GDPR compliance through audits, reporting, documentation, policies, and cross-functional risk reduction initiatives.

Leads industrial cybersecurity operations within a global managed services SOC. Monitors SIEM and ICS environments, investigates and triages incidents, develops SOAR automation and playbooks, performs threat hunting and malware analysis, supports forensics and root cause analysis, tunes detection rules, recommends remediation, and mentors junior SOC analysts. The role serves as an L2 escalation point and requires expertise in SOC operations, incident response, SIEM, SOAR, and Python-based security automation.