Top Cybersecurity Jobs

Engineer cybersecurity for Navy control systems and platform IT supporting an electronic warfare system. Responsibilities include integrating security clients on Red Hat Enterprise Linux servers, writing Linux scripts, hardening Linux and Windows systems, conducting security scans, patching third-party software, managing vulnerabilities, and performing verification testing. The role is fully on-site in Syracuse, NY and requires U.S. citizenship and an active Department of Defense Secret clearance.

Lead and manage multiple cybersecurity risk workstreams including risk assessments, HVA oversight, and risk governance. Advise on federal cybersecurity frameworks, produce policies/SOPs, perform QA/QC on deliverables, present findings to technical and executive audiences, and coordinate with federal partners to ensure compliance with CISA, OMB, and NIST guidance.

Designs, implements, automates, and maintains cybersecurity controls across strategic enterprise platforms, including cloud, SaaS, PaaS, and AI environments. Conducts security assessments, validates controls, monitors security posture, investigates gaps, and drives remediation. Integrates security into CI/CD and platform delivery, develops controls-as-code, improves resilience, and supports governance and compliance readiness. Partners with platform, engineering, architecture, and product teams to enable secure adoption and operational efficiency.

Provides senior leadership for enterprise IT governance, cybersecurity, privacy, workforce planning, budgeting, investment management, and digital accessibility. Oversees contractor personnel, cybersecurity risk assessments, audits, vulnerability testing, incident response coordination, third-party security, and compliance frameworks. Coordinates technical teams, manages dependencies and resources, supports strategic planning, and delivers executive-level risk and decision support to government and contractor leadership.

Summer cybersecurity intern supporting information security, cloud vulnerability, IT PMO, business analysis, data management, reporting, automation, and digital transformation initiatives. Responsibilities include researching, gathering data, maintaining databases and spreadsheets, collaborating on projects, protecting sensitive information, attending training, and presenting program learnings. The role may involve administrative tasks, travel between operating locations, and work in office or operations environments.

Leads enterprise vulnerability management across data centers, endpoints, multi-cloud, AI workloads, and manufacturing environments. The role prioritizes exposures using threat intelligence, exploitability, asset criticality, business context, and attack-path analysis. Responsibilities include vulnerability scanning, remediation governance, patch coordination, exception management, automation, dashboards, intelligence workflows, 0-day response, stakeholder influence, and mentoring. The engineer partners with infrastructure, cloud, application, SOC, and incident response teams to reduce organizational risk and mature cybersecurity capabilities.

Leads Morgan Stanley’s global internal audit strategy for cybersecurity, information security, and cyber resilience across the Firm and banking entities. Directs risk-based coverage of AI, digital assets, quantum readiness, cloud, identity, network, data, incident response, resilience, and third-party security. Evaluates controls against regulatory and industry frameworks, oversees findings and remediation, advises senior management, regulators, the Board, and Audit Committee, and manages and develops a global audit team.

Performs cybersecurity operations across alert monitoring, incident response, threat hunting, vulnerability management, detection engineering, identity security, and regulatory compliance. The role administers security tools, investigates suspicious activity, coordinates containment and remediation, supports NERC CIP-008 and CIP-015 activities, maintains audit evidence, and partners with technical and business stakeholders. Participation in on-call coverage, security assessments, projects, vendor reviews, and periodic industry travel is required.

Leads complex cybersecurity incident investigations across cloud and on-premises environments. Directs investigative priorities, coordinates threat hunters and technical specialists, communicates findings and response recommendations to executive customers, and balances containment with recovery and evidence preservation. Conducts threat research, develops analytical automation, improves data quality, mentors colleagues, and contributes to technical publications and presentations.

Own the IT infrastructure and cybersecurity function for a classified site. Responsibilities include infrastructure lifecycle management, incident response, security policy enforcement, RMF and accreditation execution, vendor and budget management, customer integration, and direct leadership of IT and cyber personnel. The role requires hands-on troubleshooting, executive risk briefings, inspection readiness, and alignment with federal classified-system frameworks.

Serves as the senior technical authority for complex cybersecurity investigations, incident response, threat intelligence, threat hunting, vulnerability analysis, penetration testing, detection engineering, and audit support. Leads high-impact investigations, develops detection and analytical content, evaluates vulnerabilities and attack paths, improves operational standards, mentors junior analysts, supports security platforms and automation, and communicates technical findings to stakeholders. The role is a senior individual contributor without direct personnel-management responsibility.

Leads enterprise cybersecurity risk analysis, risk and threat modeling, cyber risk quantification, metrics reporting, and executive presentations. Evaluates exceptions, audit findings, controls, policies, asset inventories, and emerging threats across cloud, access, application, vendor, data, and infrastructure security. Manages risk projects end to end, identifies control and process gaps, recommends policy enhancements, and influences technical and business teams to mitigate risk.

Investigates and responds to high-severity cybersecurity incidents across identification, containment, eradication, recovery, and lessons learned. Performs endpoint, network, and cloud forensics; malware analysis; threat hunting; and root-cause assessments. Documents findings, presents reports, collaborates with technical and business teams, improves detection content and response playbooks, and supports automation and AI capabilities within the incident response program.

Supports Air Force cybersecurity programs by installing and maintaining ACAS vulnerability-management tools, scheduling scans, analyzing vulnerabilities, and directing STIG-based hardening. Performs DoD compliance assessments, RMF and authorization documentation, incident reporting, root-cause analysis, corrective action planning, and POA&M maintenance. Collaborates with system administrators on remediation and supports ACAS server and database administration across classified networks.

Leads cybersecurity detection engineering by designing, deploying, and optimizing SIEM, EDR, SOAR, and AI-driven detection systems. Develops detection rules, automated remediation playbooks, and multi-agent security solutions; integrates threat intelligence and incident response; performs attack simulations and purple teaming; manages log ingestion and data lakes; and ensures compliance with security standards. Provides technical leadership, mentorship, documentation, stakeholder collaboration, and occasional off-hours support.

Leads cybersecurity investigations and engagements for major law firms, financial institutions, and corporations. Responsibilities include incident analysis, threat identification, intelligence collection, insider threat analysis, security operations, forensic investigations, penetration testing, client reporting, consultant management, methodology development, proposal enhancement, and service strategy. The role requires hands-on cybersecurity expertise, strong analytical and communication skills, subcontractor oversight, and travel to clients and company offices.

Support enterprise cybersecurity by deploying and configuring BigID for data discovery, classification, and protection across cloud and hybrid environments. Build and tune DLP classifiers, automate workflows with Python, analyze scan results, recommend remediation, and support compliance with GDPR, CCPA, and NIST. Collaborate with cybersecurity and cross-functional teams in a Cyber Fusion Center, mature data protection programs, train stakeholders, and address data exfiltration risks.

Supports Air Force cybersecurity operations by installing and maintaining ACAS components, conducting Nessus vulnerability scans, analyzing findings, enforcing DISA STIG hardening, and assessing compliance. The role generates security and remediation reports, supports ACAS servers and databases, manages incident reporting and root-cause analysis, develops corrective action plans, and maintains POA&Ms. It also contributes to RMF, A&A, cloud security, access control, and collaboration with technical and government stakeholders.

Leads complex cloud security investigations across Microsoft Azure and Microsoft 365, serving as the senior escalation point for incident response. Develops playbooks, cloud detections, alerts, and repeatable response processes; mentors responders; performs forensic analysis using Microsoft security telemetry; and participates in on-call support. The role also requires stakeholder communication, technical documentation, automation, threat hunting, and continuous improvement of cloud incident response operations.

Develops and tracks compliance with AFRL cybersecurity architecture, strategy, plans, and policies. Provides cybersecurity support, systems and network engineering, enterprise architecture design, policy compliance monitoring, reporting, SharePoint administration, pilot project management, and customer support to AFRL technical directorates. Occasional travel may be required.

Maintains cybersecurity operations and security posture for an Air Force logistics system. Integrates cybersecurity throughout the system lifecycle, maintains authorization and compliance documentation, monitors security events and configuration changes, evaluates security controls, reports cybersecurity impacts, and supports training and certification of ISSOs and privileged users. The role is onsite at Gunter Maxwell AFB and requires advanced ISSM certification, significant professional experience, U.S. citizenship, and eligibility for a Secret clearance.

Manages school cybersecurity initiatives, including monitoring alerts, vulnerability remediation, incident response, identity and access management, security awareness, and compliance. Evaluates emerging and instructional technologies, trains faculty, supports enterprise applications, assists with integrations and workflow automation, coordinates vendors, maintains technology documentation and inventories, and participates in technology implementations.

Supports federal cybersecurity compliance and operations for NICHD systems, including FISMA authorization, RMF and ATO activities, NIST control assessments, authorization documentation, vulnerability management, continuous monitoring, incident response, remediation tracking, audit readiness, and stakeholder coordination. The role maintains security evidence and CSAM records, investigates alerts, supports containment and recovery, and translates operational findings into risk-management and compliance actions.

Lead cybersecurity policy, compliance, information assurance, and security architecture for enterprise cloud applications in DoD environments. Manage RMF workflows and the full ATO lifecycle, develop federal security documentation, implement DevSecOps and NIST 800-53 controls, evaluate cloud configurations and risks, and guide cross-functional teams and senior government stakeholders. The role requires hands-on eMASS experience, DoD security framework expertise, an IAT Level II certification, and an active Secret clearance.

Lead cybersecurity policy, compliance, information assurance, and DevSecOps implementation for enterprise cloud applications in DoD environments. Manage the complete RMF and ATO lifecycle, develop security documentation, implement NIST 800-53 controls, evaluate cloud architectures and configurations, and use eMASS to manage compliance workflows and artifacts. Provide architectural guidance, risk mitigation strategies, and stakeholder coordination with senior Department and Service-level officials.