Top Cyber Security Jobs

AeroVironment is recruiting for upcoming five-year cybersecurity contract opportunities across database engineering, information systems security, software, systems, cloud, testing, administration, web development, and data science. Team members will support defensive cyber operations, critical infrastructure protection, threat detection, containment, mitigation, systems integration, analytics, information sharing, malware analysis, configuration management, and training development. Positions begin in late 2026 or early 2027 and may require U.S. person status or U.S. citizenship under ITAR and contract requirements.

Serves as the endpoint security subject-matter expert for support, Sales Engineering, and Customer Success. Diagnoses complex Windows and macOS endpoint issues, analyzes telemetry and logs, troubleshoots integrations with EDR, DLP, and MDM products, and provides prioritized customer recommendations. Partners with Engineering and QA on defect investigation and validation, maintains lab capabilities, and creates runbooks and documentation. The role also enables field teams to explain endpoint findings and improve customer outcomes.

Serve as the ISSO to translate security policy into technical implementation for classified systems. Support RMF-based A&A, compliance auditing (NISPOM/DAAPM/JSIG/STIGs), vulnerability assessment, SIEM monitoring (e.g., Splunk), and coordinate with ISSM, system admins, and users across system lifecycle to ensure security posture and incident response readiness.

Build and scale internal security systems, analyze security data from logs and endpoints, design detection technologies, assess infrastructure risks, recommend remediation, and execute projects improving intrusion detection, scanning, testing, and response capabilities.

Own Tribe’s corporate security, compliance, AI governance, and client-facing security programs. Lead SOC 2 and future certification efforts, enterprise security reviews, risk management, security controls, incident response, vendor risk, and Trust Center operations. Establish governance for AI agents, assistants, model providers, and subprocessors while partnering with engineering on architecture reviews, threat modeling, secure SDLC, data flows, and production readiness. Translate customer requirements into scalable security controls and operating processes.

Conducts technical security assessments and RMF activities for complex information systems. Develops security assessment plans, authorization packages, system security plans, contingency plans, POA&M reports, and mitigation recommendations. Collaborates with system owners, security officers, developers, and IT operations to categorize systems, assess controls, document risks, and support continuous monitoring. The role requires independent coordination with stakeholders, strong NIST RMF knowledge, and eligibility to obtain and maintain a customer clearance.

Leads complex cybersecurity investigations and incident response, correlates data across endpoint, identity, network, cloud, email, and application sources, and improves detection, automation, remediation, and response processes. The role coordinates significant incidents, communicates risk to clients and stakeholders, reviews analyst work, mentors team members, and owns assigned security platforms or capabilities.

Serve as the senior network-security subject-matter expert for support, sales engineering, and customer success. Review firewall rules, segmentation, controls, and product findings; troubleshoot integrations across enterprise network-security platforms; diagnose issues using packet captures, flow data, logs, and protocol behavior; and provide actionable root-cause guidance. Partner with Engineering and QA on defects and fixes, maintain network test capabilities, and author runbooks and documentation. Coach sales engineers and help harden the product through escalations and feedback.

Supports DoD and Navy Risk Management Framework assessment and authorization activities for enterprise and RDT&E systems. Maintains ATO documentation, security plans, risk assessments, POA&Ms, architecture diagrams, and compliance artifacts. Conducts security control assessments, continuous monitoring, STIG reviews, and risk mitigation using eMASS and related cybersecurity tools. Coordinates with government and contractor stakeholders, tracks action items, provides RMF guidance, and supports cybersecurity training and process improvements.

Conduct technical security assessments and risk assessments for complex information systems under NIST RMF guidelines. Develop security assessment plans, Security Assessment Reports, POA&M reports, authorization packages, system security plans, and contingency plans. Coordinate assessments with system owners, security officers, developers, and IT operations personnel. Support IA RMF and continuous monitoring programs, provide remediation recommendations, and independently manage assessment activities.

Designs, implements, and maintains enterprise network security infrastructure, with emphasis on Palo Alto firewalls, GlobalProtect VPN, hybrid Azure/AWS connectivity, routing, switching, and 802.1X certificate-based access control. Secures wired, wireless, camera, and IoT devices using TLS/PKI authentication; troubleshoots firewall, VPN, wireless, and network issues; manages VLAN segmentation and Ruckus switching; and may support Prisma and CASB initiatives.

Supports cybersecurity risk assessments, security operations, threat detection, vulnerability management, identity and access management, governance, compliance, and incident response. The intern monitors alerts, researches threats, documents findings, prepares security metrics and dashboards, tracks remediation, and collaborates with CISO, technology, infrastructure, development, and risk teams. The role includes structured training, mentorship, and project work focused on protecting financial market infrastructure.

Leads federal IT security controls assessments and program evaluations. Responsibilities include interviewing stakeholders, reviewing security plans, audit logs, configuration and vulnerability scans, testing controls against federal requirements, documenting findings, communicating results to leadership, identifying root causes, developing remediation plans, advising clients, planning assessment activities, and mentoring junior staff.

Develops and maintains defensive cyber countermeasures across enterprise networks. Analyzes security data, trends, incidents, and intelligence to identify threats, tune SIEM rules and signatures, investigate potential compromises, and support incident response. Collaborates with defensive operations, cyber analytics, and incident response teams; validates countermeasures through Purple Team exercises; documents analysis and presents findings in briefings.

Provides physical security and information assurance support for collateral, SCI, and SAP systems. Ensures compliance with DoD and national security guidance, maintains accreditation documentation, manages TEMPEST and TSCM activities, reviews facility construction plans, identifies vulnerabilities, conducts inspections, enforces personnel and device security controls, manages media controls, and supports IA training and corrective actions.

Provide SIEM, SOAR, and security platform engineering support; develop detection content, dashboards, and automations; lead Tier 3 incident investigations and response; create configuration standards and documentation; provision cloud resources with infrastructure-as-code; maintain CI/CD, secrets, and EDR systems; ensure asset hardening and observability across the estate.

Administers personnel security systems and clearance processes, including eAPP submissions, DISS and NBIS management, form review, compliance reporting, security training, visitor access requests, and stakeholder briefings. Provides customer support, coordinates with federal agencies, maintains secure vaults, and monitors clearance actions for personnel requiring access to information or facilities.

Build and lead Velotic’s product security program, including secure SDLC practices, security tooling, threat modeling, vulnerability management, security automation, and developer security training. Lead architecture reviews, penetration testing, incident response, compliance activities, customer security assessments, and security champions initiatives. Partner with engineering, product, infrastructure, IT, support, customers, system integrators, and MSSP providers while reporting security metrics and risks to executive leadership.

Protect the firm from web-based threats by designing, implementing, and maintaining web filtering proxies, secure web gateways, and cloud proxy platforms. Develop security policies for web filtering, SSL inspection, DLP, and threat prevention; translate regulatory requirements into technical controls; automate policy management and integrate security tools with SIEM, SOAR, and identity platforms. Support incident response, secure business use cases, scalability, Zero Trust alignment, and leadership reporting on risks and program maturity.

Build and maintain cloud security improvements across AWS/GCP, Kubernetes, and CI/CD environments. Design detection and response capabilities using SIEM, EDR/MDR, cloud-native detections, and CNAPP tools. Investigate and respond to security incidents end to end, develop detection logic and playbooks, and create security tooling and automations using Python, Terraform, and infrastructure-as-code. The role also supports endpoint security and secure DevOps practices.

Supports Cybersecurity Assurance teams with compliance enforcement, SIEM configuration, security administration, vulnerability management, audits, security checks, automation, documentation, technical writing, and hardware/software reviews. The intern may also assist with Windows and Linux administration, defensive cyber tools, networking, troubleshooting, scripting, compliance auditing, NIST documentation, and STIG-related work.

Lead Fireworks AI’s security operations function, including CrowdStrike deployment, detection engineering, incident response, SOAR workflows, threat intelligence, playbooks, metrics, and cross-functional incident coordination. Build and tune detections, operationalize response processes, run post-incident reviews, and improve coverage against MITRE ATT&CK. The role begins as a hands-on individual contributor and may grow into team leadership, including hiring and expanding 24/7 coverage and capabilities such as cloud detection engineering and red/purple team operations.

Perform IT systems administration, including patching, user management, and ICT security. Analyze system and security event logs, report and assess incidents, conduct security risk assessments and audits, evaluate security control effectiveness, and implement controls to identify and mitigate cybersecurity risks. Support the IT Security Manager and Cyber Security Specialist in maintaining and improving the organization’s security posture.

Protect P&G’s global IT environment from cyber threats through security engineering or analysis. Responsibilities include designing and monitoring security platforms, investigating incidents, responding to threats, assessing vulnerabilities, driving remediation, researching emerging attack techniques, strengthening security controls, and communicating risks to technical and business stakeholders.

Leads security engineering across application, cloud, infrastructure, and on-premises environments. Designs security controls, vulnerability-management processes, patching cycles, image refreshes, cloud guardrails, network isolation, WAF, identity, and secrets-management practices. Prioritizes remediation using CVSS, EPSS, CISA KEV, and SLA-driven metrics. Provides technical direction, reviews fixes, mentors engineers, builds standards and runbooks, and coordinates cross-functional security initiatives globally without direct people-management responsibility.