Top Cyber Security Jobs

Lead cross-service cybersecurity programs for enterprise cryptographic and trust services (PQC, PKI, secrets management, machine identity). Coordinate engineering teams, manage dependencies, track milestones/risks, analyze architectures, run governance and readiness assessments, and deliver metrics and executive updates to align cryptographic platforms with enterprise initiatives.

Perform technical cybersecurity engineering and A&A tasks: design and embed security controls, run vulnerability scans and remediation, create and review A&A documentation, assess computing environments, maintain baselines/configuration management, coordinate changes, and use COTS/GOTS and custom tools to detect and remediate intrusions across virtualized, cloud, and enclave systems.

Design and maintain canonical data models and pipelines to inventory cryptographic assets and CBOM outputs. Build Power BI dashboards and semantic models, write complex SQL for analytics, ensure data quality and governance, and partner with security, IAM, PKI, and risk teams to support PQC readiness and enterprise risk reporting.

Support and coordinate enterprise cyber risk governance: maintain frameworks, policies, control mappings, taxonomies, and reporting. Facilitate assessments, evidence collection, stakeholder coordination, and reporting to senior management and governance forums, ensuring regulatory and audit traceability.

Lead global strategy and execution for vulnerability management and security configuration across infrastructure, cloud, endpoints, and platforms. Transition to AI-enabled, risk-based prioritization and automated remediation, enforce hardening baselines and continuous compliance, scale a lean team, and deliver executive risk reporting and governance.

Lead an identity-centric workforce security team to design and implement authentication, authorization, access management, and governance solutions across hybrid and cloud environments. Provide technical consultation, drive zero-trust and least-privilege patterns, secure applications (Java/React/mobile), implement protocols (OAuth/OIDC/SAML/MFA), support CIEM, threat modeling, and incident troubleshooting using Sentinel/KQL. Mentor engineers and collaborate with stakeholders to integrate identity, privileged access, and cloud security controls.

Lead cybersecurity efforts: analyze systems, define security requirements, perform network design reviews and security testing, advise on hardware/software security, and coordinate with development teams to ensure IA standards and vulnerability testing are implemented.

Serve as the Cyber Security/Computer and Network Defense Subject Matter Expert, ensuring technical and operational effectiveness of capabilities, coordinating with the COTR and sponsor staff, and providing expert guidance on cyber defense operations.

Provide cyber security engineering support including RMF/A&A guidance, security requirement identification, network design reviews, security testing, review of SRTMs and SSPs, coordination with system developers, and implementation of NIST 800-53 controls to ensure system accreditation.

Provide cloud and security operations support: run Nessus scans; manage McAfee installs and policy updates; configure Splunk forwarders and dashboards; monitor AWS security configurations; support incident response, vulnerability analysis, remediation, and change control activities.

Support IAM strategy and product management by defining requirements, conducting market research, and developing roadmaps. Partner with engineering and stakeholders to translate requirements into user stories, support Agile delivery, coordinate UAT, and track project risks. Strengthen governance, compliance, and IAM controls while producing dashboards, metrics, and executive reporting to improve program performance.

Harden and extend a Chromium-based browser runtime running in microVMs: debug and optimize Chromium builds, implement network isolation and proxy/IP handling, collaborate on unikernel isolation and kernel security, build tooling for binary analysis, crash triage, and vulnerability monitoring, and support secure supply chain and reproducible browser images.

Manage design, operation, and security of enterprise network infrastructure. Configure and maintain Cisco Catalyst and Meraki environments, secure wireless, monitor performance, lead incident response and vulnerability remediation, implement cybersecurity controls and compliance (NIST/ISO/COBIT), run projects, coordinate with citywide cyber partners, and provide technical leadership.

Serve as part-vCISO and account manager: assess client security posture, design and customize security programs mapping controls to infrastructure, liaise with auditors, guide implementations, advise engineering on integrations, and communicate with stakeholders to ensure compliance and operational security.

Maintain and improve security posture for sponsor compute and cloud environments; manage full lifecycle of security accreditation under ICD-503 Rev.4; create and maintain SSPs and security documentation; apply sponsor information system security policies and risk management framework; engage ISSMs for compliance and pursue IC reciprocity for accreditations.

Implement and maintain the organization's risk management framework: perform risk identification, assessment, tracking, third-party supplier risk assessments, document security policies and controls, recommend remediation, report risks to stakeholders, and support security awareness, audits, and continuous improvement.

Design, implement, and support network defense systems across the sponsor's organization. Work on cybersecurity systems and projects responsible for detection, protection, and incident response. Position requires minimum three years relevant experience, a Bachelor's degree, and an active TS/SCI with full-scope polygraph. Located in Herndon, VA with minimal travel.

Provide IT security engineering and integration services, including malicious code detection, intrusion detection, and development/integration of information security tools for government customers. Work requires active TS/SCI with FS poly and a bachelor’s degree.

Provide Special Programs security oversight and compliance for classified environments, implementing NISPOM/DoDM/ICD705/JSIG requirements, developing SOPs and OPSEC plans, managing media control, supporting handling/shipment/storage of classified material, conducting inspections/investigations, and working with subcontractors and government stakeholders. Active clearance and escorting duties possible.

Design, implement, and maintain a cross-platform endpoint security agent (Windows, macOS, Linux) using Go and JavaScript. Build low-level system automation, telemetry collection, secure agent-cloud communication, real-time threat detection, update mechanisms, and monitoring tools. Optimize performance, ensure multi-OS compatibility, and collaborate with security teams on detection rules and compliance checks.

Assess and document security controls, perform risk, vulnerability and business impact assessments, develop test scripts and compliance frameworks, coordinate audits and remediation with business units, and report findings to management while supporting security policy and process development.

Lead security architecture for product lines, perform end-to-end security reviews, drive secure design adoption, prioritize and support remediation of vulnerabilities, develop security blueprints, and liaise with risk, compliance, auditors, regulators, and clients.

Implement and maintain enterprise risk management frameworks and processes. Conduct risk assessments and third-party supplier risk reviews, document security policies and control deficiencies, recommend remediations, report risk status, and provide training and governance support.

Lead cyber security engineer to design, implement, and support data protection (DLP), encryption, API security, and Layer7 API Gateway solutions. Provide L3 production support, HA architecture design, incident response, SIEM integration, automation/DevOps improvements, technical leadership, documentation, and cross-team collaboration for secure, scalable deployments.

Operate vulnerability scanning (Nessus), manage McAfee and Splunk agents/policies, monitor AWS security controls, support incident response and security operations, assist with security hardening (RHEL), application security tasks, and participate in change control and ACI-related security activities.