Top Cyber Security Jobs

Assess and document security controls, perform risk, vulnerability and business impact assessments, develop test scripts and compliance frameworks, coordinate audits and remediation with business units, and report findings to management while supporting security policy and process development.

Support ISSO/ISSM teams onsite in a classified environment to assist with system compliance, auditing, security plan development, security sustainment (change/account/media management), investigations of security violations, reporting corrective actions, and delivering information systems security education. Collaborate with facility security, program personnel, and government representatives.

Design and implement Identity & Access Management solutions (RSA SecurID). Lead process architecture, development/configuration, validation, deployment, and project/talent management. Requires extensive travel and strong communication and analytical skills.

Lead definition and delivery of centralized enterprise security services (authentication, authorization, encryption). Gather and prioritize business needs, liaise with stakeholders and vendors, govern service lifecycle, estimate and secure funding for initiatives, and communicate security metrics to senior IT leadership.

Operate vulnerability scanning (Nessus), manage McAfee and Splunk agents/policies, monitor AWS security controls, support incident response and security operations, assist with security hardening (RHEL), application security tasks, and participate in change control and ACI-related security activities.

Define and implement SAP data protection strategy including dynamic masking and entitlement management. Troubleshoot ABAP and masking policies, maintain ABAC policies, audit ABAP code and transports, monitor NextLabs/Pathlock performance, analyze ST22/SM21 dumps, and maintain SOPs and runbooks for compliance remediation.

SkillBridge intern will support onsite classified computing environments, assist ISSO/ISSM with compliance, auditing, security plan development, incident investigation, sustainment activities (change/account/media management), and deliver security education while collaborating with facility, program, and government personnel.

Responsible for assessing and monitoring system compliance, auditing, security plan development, investigating security violations, approving configuration changes, conducting technical and administrative assessments, integrating cybersecurity processes and tools, and producing/updating documentation. Must obtain/maintain IAM Level I equivalent certification (e.g., Security+) within six months if not already held.

Develop, audit, and migrate Zapier automations to use Custom Actions and API Call Actions, reducing static API keys. Ensure workflows are secure, scalable, and documented while collaborating with tech and security teams and optimizing for maintainability.

Manage COMSEC account operations including equipment/key shipment, receipt, tracking, supersession date management, accounting reports, software upgrades, inventories, compliance validations, incident reporting/investigation, and local travel to support program sites.

Lead application security consulting: define business processes, design secure architectures, perform source-code analysis and penetration testing, use Fortify/AppScan/CodeSecure and proxy tools (BurpSuite/Paros/TemperIE). Configure, validate, deploy solutions, manage projects and talent, and support client engagements requiring regular travel.

Perform web and network penetration testing and secure code analysis using tools such as HP Fortify, WebInspect, Nessus, Burp, and IBM AppScan. Apply security frameworks (OWASP, NIST, ISO27001, PCI), analyze security NFRs/metrics, coordinate multiple projects, manage stakeholders, and support global delivery. Mobile security and telco domain experience are a plus.

Design, configure, validate and deploy Identity & Access Management solutions (RSA SecurID). Provide business process consulting, architecture/design, development/configuration, solution evaluation, and project/talent management in a consulting environment with regular travel.

Owner of the site cybersecurity program for classified/controlled systems: lead RMF/JSIG/DAAPM A&A and continuous monitoring, manage vulnerability/patching and SIEM, drive ATOs for SAP/SCI systems, coach ISSOs/ISSEs, interface with DCSA/SAPCO, and ensure audit readiness.

Perform web and network penetration testing and secure code analysis using tools like HP Fortify, WebInspect, Nessus, Burp, and IBM AppScan. Apply security frameworks (OWASP, NIST, ISO27001, PCI), collaborate with stakeholders, coordinate projects, and work within global delivery teams. Mobile security and telco domain knowledge are a plus; relevant security certifications encouraged.

Own integration, configuration, and output quality of security tooling; tune findings to reduce noise; design severity scoring, triage flows, and enrichment; build a security judgment layer; partner with engineering, product, and design; engage with customers; benchmark and contribute to open-source security tooling.

Lead application security activities including static and dynamic code analysis, penetration testing, and use of tools like Fortify, AppScan, CodeSecure, BurpSuite, Paros, and TemperIE. Perform development/configuration, solution validation and deployment, manage projects and talent, and work in a consulting environment requiring regular travel.

Provide onsite technical support and system administration for Windows and Linux virtual and physical desktops. Perform patching, antivirus updates, asset/inventory management, user account administration, documentation, and user training. Collaborate with security engineers to deploy and validate IT/security solutions and support Agile teams while meeting SLAs.

Manage user access, credentials, and routine security operations across business systems. Handle password management, account provisioning/deprovisioning, security ticket resolution, basic monitoring, documentation, and escalate incidents to the Security Director.

Lead infrastructure vulnerability assessment and security management activities, manage Air-Watch MDM and Symantec solutions, perform development/configuration/validation/deployment, provide business process consulting, and manage projects and talent in a consulting environment that requires regular travel.

Lead vulnerability assessment and infrastructure security activities, manage AirWatch MDM and Symantec tools, develop/configure and validate security solutions, perform business process consulting, manage projects and talent, and travel regularly for management consulting engagements.

Design and implement security and privacy improvements across Tailscales codebase. Audit features for vulnerabilities, perform threat modeling and security analysis, drive remediation, and spend at least half your time writing code to build security features, defenses, and tooling.

Design, document, and implement Illumio-based micro-segmentation and firewall solutions; develop operational procedures and security policies; analyze application dependencies and traffic flows; troubleshoot Illumio agents and network performance; automate policy deployment and compliance reporting.

Lead application security activities including security code reviews, vulnerability assessments, tool-based scanning, and consulting product development teams. Manage project delivery, customer relationships, and documentation while aligning work to OWASP/OSSTMM/SANS standards and security best practices. Work requires travel and project management in a consulting environment.

Onsite Senior ISSO responsible for assessing and monitoring system compliance, performing audits, developing security plans, investigating violations, approving configuration changes, conducting technical and administrative assessments, integrating cybersecurity processes/tools, and producing/updating security documentation. Must adhere to NIST, RMF, JSIG, DAAPM, and NISPOM requirements and support classified DoD environments.