Top Cybersecurity Jobs

Lead cybersecurity engineering for NASA space and terrestrial systems: threat modeling, risk assessments, system security requirements, V&V, impact assessments, remediation coordination, and technical briefings to senior leaders.

Perform cyber threat modeling, gap analysis, risk-based assessments and impact assessments for spacecraft and terrestrial systems. Develop system security requirements, provide engineering analysis and technical consultation, coordinate remediation, brief senior leaders, and support avionics/network security using relevant frameworks and tools.

Lead cybersecurity engineering for mission-critical communications systems supporting DoD programs. Assess vulnerabilities and risks, guide RMF/A&A efforts, develop accreditation and risk artifacts, advise stakeholders on policy and mitigation, and mentor teams to strengthen cyber posture for both IT and OT environments.

Design, implement, and maintain cybersecurity architecture for OT networks, performing risk assessments and advocating secure practices across teams.

Support cybersecurity operations and compliance for DoD systems, ensuring security posture and responding to incidents while maintaining documentation.

Design and maintain RMF-aligned enterprise security architectures. Define access control models, integrate security into DevSecOps pipelines, perform threat modeling and risk assessments, support ATO/RMF artifacting (e.g., eMASS), and collaborate with engineering and DevOps teams to embed cloud (Azure) and infrastructure security controls, policies, and documentation.

The Senior Cybersecurity Operations Researcher conducts analytical studies on cybersecurity risks and supports strategic initiatives to enhance national security operations. Responsibilities include collaboration with diverse teams, engaging international stakeholders, and producing technical documentation and publications.

Lead day-to-day cybersecurity operations, manage a security team, and deliver CMMC-focused managed security services. Oversee EDR, SIEM, vulnerability management, identity security, and incident response. Drive compliance with CMMC Level 2, NIST SP 800-171, DFARS, SOC 2, and HIPAA; develop standards, audit readiness, remediation, and governance. Engage with clients at executive level and support business development and security strategy.

Entry-level security role supporting monitoring, alert triage, vulnerability scanning, incident response evidence collection, and GRC/compliance tasks (SOC 2, NIST CSF). Daily use of AI tools, documentation, KnowBe4 campaign support, and close mentorship with growth toward SOCOps or GRC specialization within 12–18 months.

Operate day-to-day security operations in a cloud-first environment: monitor and triage SIEM alerts, perform incident response, build detection rules, manage vulnerability remediation, run penetration testing programs, manage email security and phishing simulations, support DLP and access reviews, produce leadership reports, maintain documentation, and support audits and regulatory requests.

Lead NETGEAR's 24/7 SOC and corporate IT security, run incident response and tabletop exercises, develop detections and threat-hunting, integrate AI-driven analytics and automation, manage vendor/contractor relationships and security budget, and ensure compliance with SOC 2/ISO 27001/GDPR/HIPAA.

Support a 24/7 DoD Cyber Network Defense operation by monitoring alerts, analyzing packet and log data, triaging incidents, integrating threat intelligence into sensors/SIEMs, and coordinating incident response and reporting.

Manage and harden cloud and on-premises environments, deploy and maintain NSM/EDR/MDR/XDR and vulnerability management, perform security reviews and incident response, support compliance in Microsoft GCC High/GovCloud, implement security controls and remediation, configure network/security devices, and document security posture and procedures for internal and external clients.

Design, implement, and automate cybersecurity controls across IaC, PaaS, and containerized mission applications. Integrate security toolchains (SIEM, SAST/DAST/SCA), automate RMF and compliance evidence, harden platforms to STIG/CIS standards, develop Ansible playbooks, and collaborate with DevOps and engineering teams to improve security posture and resilience.

Design, implement, and automate cybersecurity controls for IaC, PaaS, and containerized mission applications. Integrate SIEM/SAST/DAST/SCA toolsets, automate hardening (STIG/SRG/CIS), enable SBOM/RBOM and patch management, write Ansible playbooks, and collaborate across DevOps and engineering teams to improve security posture and continuous delivery.

Design and implement end-to-end cybersecurity architectures for classified, CUI, and unclassified systems supporting DoD/IC. Lead RMF accreditation (SSPs, SARs, POA&Ms), conduct threat modeling and vulnerability assessments, advise on Cross Domain Solutions and zero trust, integrate security into SDLC, and brief senior leadership. Mentor junior staff and provide SME support for classified cybersecurity programs.

Design, implement, and evaluate cybersecurity solutions and controls for DoD information systems. Conduct risk assessments and vulnerability analyses, recommend mitigations, support test plans, ensure compliance with DoD standards, prepare technical documentation, and collaborate with multidisciplinary teams.

Lead and manage the company's cybersecurity program, including strategy, governance, risk guidance, incident response, compliance and audits. Oversee security architecture, budgets, vendor relationships, and security awareness. Monitor emerging technologies, recommend controls, and train/mentor team members to improve security culture and ensure confidentiality, integrity, and availability of systems.

Support the Risk Management Framework lifecycle by developing documentation, conducting assessments, and ensuring compliance with federal standards while working with security tools.

Military-only SkillBridge cybersecurity internship providing hands-on exposure to network security, IAM, SOC/SIEM, endpoint protection, incident response, GRC, threat/vulnerability management, audits, red team/social engineering exercises, and security reporting. Interns attend customer meetings, participate in industry activities, and author three 1,000-word cybersecurity articles. Remote with equipment provided; 90-day minimum.

Lead and operate the enterprise cybersecurity program: define strategy and roadmap, manage a cybersecurity team, integrate security-by-design, oversee IAM, endpoint, cloud, vulnerability management, incident response, audits, compliance, and vendor security. Partner with IT, business leaders, and internal audit to maintain governance, reporting, and continuous improvement.

Lead malware, binary, firmware and source-code analysis to identify vulnerabilities in critical infrastructure and federal networks. Develop automated analysis tools and workflows, mentor staff, write technical reports, shape research direction, pursue program growth and proposals, and collaborate with sponsors to secure and harden operational technology and software assurance capabilities.

Support design, deployment, and maintenance of enterprise identity and directory solutions. Manage Active Directory, GPOs, AD migrations, authentication (Kerberos, NTLM, PIV), SSO/ADFS integrations, PKI, and related services. Develop PowerShell/Visual Basic scripts, troubleshoot directory/authentication issues, perform functional testing, document processes, and collaborate with internal teams and developers to capture requirements and deliver IAM solutions.

Detect, triage, and investigate security alerts and incidents using SIEM and endpoint tools; document findings and remediation; support offensive testing, compliance efforts (PCI, SOX, ISO, HIPAA, NIST), and cross-functional IT teams. Provide off-hours availability and operate within a global hybrid environment.

Lead and execute incident response for DoD directives, conduct forensic investigations, perform post-incident reviews, maintain IR SOPs to NIST/DISA guidance, manage enterprise monitoring/logging, produce leadership reports, and support remediation and capability improvements while providing after-hours investigative support.