Top Cyber Security Jobs

Maintains and develops cybersecurity infrastructure across networks, servers, workstations, applications, and cloud environments. Responsibilities include firewall administration, vulnerability scanning, SIEM and intrusion detection, security architecture, access auditing, SOX and PCI compliance, policy development, disaster recovery planning, security monitoring, and security awareness training. The role also leads concurrent projects, evaluates security products, collaborates with IT teams, and mentors security administrators and contractors.

Provides multidisciplinary security support for Special Access Programs, SCI, and collateral activities. Responsibilities include enforcing NISPOM, DoD, and SAP security policies; identifying vulnerabilities and risks; supporting Operations Security; conducting facility compliance reviews; delivering security briefings and education; overseeing corrective actions; and investigating potential loss or compromise of classified information. Requires an active TS/SCI clearance and willingness to obtain a CI polygraph.

Designs, implements, and maintains cybersecurity infrastructure across networks, servers, workstations, applications, and cloud environments. Responsibilities include firewall administration, security monitoring, vulnerability scanning, intrusion detection, access auditing, compliance documentation, security architecture, policy development, disaster recovery planning, and incident prevention. The role also evaluates security products, leads concurrent projects, collaborates with IT teams, mentors security staff, and develops security awareness materials.

Supports continuous monitoring and authorization of multiple classified information systems. Responsibilities include maintaining security authorization documentation, managing configuration baselines and system changes, conducting audits and continuous monitoring, handling incidents, assessing vulnerabilities with STIG, SCAP, and Nessus, enforcing access requirements, supporting recovery processes, and coordinating with ISSMs and authorization officials. The role also mentors junior ISSOs and may assume ISSM responsibilities when needed.

Lead cloud security initiatives across AWS, Azure, and GCP by partnering with SRE, architecture, and app teams. Implement secure-by-design controls, monitor and improve cloud posture, support compliance, threat detection, incident response and forensics, mentor junior engineers, and integrate new security technologies into networking cloud environments.

Designs, develops, and operates encryption, tokenization, and key management platforms that protect sensitive data. Leads secure, scalable architecture and production implementation, ensuring high availability, disaster recovery, observability, compliance, and auditability. Partners with security, compliance, governance, product, and application teams; applies cryptography standards; mentors engineers; and improves platform performance, cost efficiency, reliability, and developer experience. Requires strong software engineering, cloud, SRE, cryptography, stateful systems, CI/CD, and infrastructure-as-code expertise.

Owns federal system authorization, security posture, and remediation for CBP systems. ISSOs manage authorization decisions, control implementation, POA&Ms, security reviews, and documentation. Security engineers harden, monitor, and remediate systems, develop secure configurations and tooling, and address findings at their root causes. Leads oversee security engineering standards and accountability. The role requires collaboration with network, cloud, deployment, and government security teams in a documentation-heavy RMF environment.

Lead Cyber Security Operations Center activities, including shift-level leadership, alert triage, prioritization, event escalation, quality control, and threat assessment. Improve runbooks, standard operating procedures, automation, and orchestration while monitoring emerging threats and supporting cyber resiliency. Collaborate with technical and business stakeholders, validate escalations, document events, and mentor junior analysts.

Two-year rotational program for graduating students supporting cybersecurity and operational risk identification, threat and vulnerability analysis, control strengthening, reporting, and risk-informed decision-making. Participants rotate across cybersecurity operations, threat intelligence, risk management, and identity and access management teams while developing analytical, leadership, and collaboration skills through hands-on projects, capstones, and mentorship.

Two-year rotational program for graduating students to design, build, and enhance secure applications, systems, controls, automations, and infrastructure. Participants gain experience in secure software development, DevSecOps, identity and access management, vulnerability remediation, and cybersecurity while collaborating across engineering and security teams. The program emphasizes leadership development, Agile delivery, project ownership, mentorship, and cross-functional communication.

Develop and lead enterprise security architecture across on-premises, cloud, and containerized environments. Establish security standards, roadmaps, hardening practices, and AI security controls; review architectures, guide implementations, evaluate security tools, and mitigate technology risks. Advise business and engineering stakeholders, oversee proof-of-concepts and integrations, monitor security effectiveness, and address emerging cyber threats through threat intelligence and strategic risk management.

Supports client engagements focused on cryptographic risk, post-quantum readiness, encryption modernization, PKI, and key lifecycle management. Responsibilities include cryptographic asset discovery, inventory development, risk analysis, PKI and TLS assessments, PQC migration planning, remediation tracking, standards alignment, client workshops, documentation, and presenting findings to technical stakeholders.

Supports senior ISSOs and the ISSM in implementing and enforcing information systems security policies for systems processing classified information. Evaluates security solutions, maintains operational information assurance posture, manages configuration records for hardware and software, and prepares security documentation. The role requires an active TS/SCI with Polygraph clearance, IAM Level 1 certification, ten years of ISSO experience, relevant technical knowledge, and a bachelor's degree or equivalent additional experience.

Assesses and documents security controls for regulated university research, audits IT systems, identifies and closes risks, and manages compliance with CMMC, NIST 800-171, and HIPAA. The role develops policies, procedures, System Security Plans, training, and evidence; leads compliance projects and continuous monitoring; evaluates third-party risks; advises researchers and stakeholders; and supports security operations and incident response for research systems.

Support high-severity cyber and product security incident response across cloud, corporate, application, and customer-facing environments. Coordinate incident workstreams, communications, stakeholder engagement, containment, recovery, documentation, and post-incident reviews. Develop AI security incident response capabilities, support threat hunting and investigations, improve detection and response metrics, conduct tabletop exercises, and advance automation and resilience across hybrid multicloud environments.

Supports Information System Security Officers and Managers in classified computing environments. Assists with compliance, audits, security plan development, security awareness, investigations, corrective-action reporting, account and media protection, hardware and software change management, and file transfers. Collaborates with facility security teams, program personnel, and government representatives while following NISPOM, DAAPM, JSIG, and related cybersecurity requirements.

Manages cybersecurity risk, authorization, compliance, audits, inspections, continuous monitoring, and security documentation for classified information systems. Leads RMF and JSIG authorization activities, coordinates with government assessors and authorizing officials, investigates security violations, manages POA&M closure, reviews configuration changes, and communicates risks to program managers and senior leadership. The role supports SAP environments and ensures alignment with NIST, NISPOM, customer directives, and contractual security requirements.

Identify and mitigate security risks across IoT devices and infrastructure through penetration testing, firmware extraction, reverse engineering, vulnerability research, threat modeling, and security assessments. Document findings, policies, and procedures; manage security solution deployment; triage externally reported issues; drive remediation; and collaborate with infrastructure, application, product, and other stakeholders to reduce security and privacy risks.

Lead Information Security projects from initiation through closure, managing schedules, budgets, risks, resources, dependencies, governance, and executive reporting. Coordinate cybersecurity, infrastructure, cloud, networking, application, procurement, legal, and business teams. Oversee portfolio intake, prioritization, capacity planning, policy maintenance, purchase orders, vendor expenditures, and project metrics. Support PMO governance and ensure initiatives align with organizational security objectives and cybersecurity frameworks.

Protect enterprise systems and networks by assessing security architecture, implementing security solutions, validating vulnerabilities, responding to incidents, and monitoring cyber risk metrics. The role supports cloud, endpoint, identity, and application security across hybrid environments; recommends remediation, updates procedures, contributes to resiliency planning, and trains junior security personnel. Regular onsite attendance is required for secure system access, collaboration, operational meetings, and sensitive technical work.

Design and enforce secure application and platform architectures, define reusable security patterns, embed security into SDLC/DevSecOps, perform threat modeling and risk remediation, advise engineering teams, and ensure compliance with SOX/HIPAA and security frameworks.

Design and enforce secure application and platform architectures, integrate security into SDLC and DevSecOps, advise engineering teams, perform threat modeling, define reusable security patterns and controls, ensure compliance (SOX/HIPAA), and research and implement security technologies.

Design and drive secure-by-design application and platform architectures, define reusable security patterns and controls, advise engineering teams on secure SDLC practices, lead threat modeling and remediation, integrate DevSecOps and cloud/container security, and ensure compliance with SOX/HIPAA and corporate security frameworks.

Design and evangelize secure application and platform architectures, embed security into SDLC, define reusable security patterns, conduct threat modeling, advise development/DevOps teams, enforce controls and compliance (SOX/HIPAA), and research and implement security technologies and mitigations.

Design and embed application and platform security architecture across software lifecycles. Define reusable security patterns, advise development and DevOps teams, perform threat modeling, guide secure implementations, research and recommend security technologies, and ensure compliance with SOX/HIPAA and enterprise frameworks.