Top Cybersecurity Jobs

Build and mature PDW’s cybersecurity GRC program across enterprise, engineering, manufacturing, and business systems. Translate CMMC, NIST SP 800-171, ISO 27001, ITAR, and customer requirements into controls; manage risk assessments, documentation, evidence, audits, remediation, vulnerability management, and third-party risk. Configure and validate security tools, support incident response, improve endpoint, identity, cloud, network, and monitoring controls, and report security metrics to leadership. The role requires cross-functional collaboration with auditors, customers, vendors, and system owners.

Leads defensive cyber operations and cybersecurity engineering for NGA programs and enterprise systems. Responsibilities include designing and sustaining cybersecurity infrastructure, developing strategies, assessing risks, conducting analysis of alternatives and design studies, authoring white papers, supporting compliance and accreditation, advising leadership, managing personnel and resources, and identifying capability and staffing gaps. The role requires extensive DoD or intelligence community experience, cybersecurity leadership, network security expertise, and TS/SCI clearance.

Supports the firm's Information Security department through short- and long-term projects, including security initiative implementation, data input and analysis, process documentation, recordkeeping, meetings, and cross-department collaboration. The intern follows confidentiality requirements, develops business and cybersecurity knowledge, and performs administrative duties under supervision. This is a 10-week, onsite internship for an enrolled undergraduate student entering their sophomore, junior, or senior year.

Provides cybersecurity defense support for DLA systems, focusing on threat analysis, incident response, security monitoring, detection, and root-cause analysis. The role requires analyzing cybersecurity incidents, using multiple security-tool types, applying defense-in-depth principles, and developing threat detection and incident response scripts or tools with SPL, Python, or PowerShell. A DoD Top Secret clearance and eligibility for IT-I and SCI access are required.

Conduct threat hunting and analyze attacker techniques across operating systems and large datasets. Develop actionable threat intelligence and hunting-operation narratives using Splunk, Python, PowerShell, and MITRE ATT&CK. Support cybersecurity defense operations involving threat analysis, incident response, security monitoring, detection, and protection of Department of Defense systems.

The role involves implementing cybersecurity strategies, conducting risk assessments, maintaining security compliance, and collaborating with teams to secure cloud infrastructure.

Leads cybersecurity at a manufacturing or distribution site by developing security action plans, building awareness, coordinating incident response, supporting governance and risk activities, and implementing controls to protect ICS and SCADA systems. The role requires onsite work five days per week in Wilmer, Texas, collaboration with internal and external partners, and continuous improvement of site security capabilities.

Test and evaluate Department of Defense systems using white-box adversarial methods. Analyze security controls, data flows, filtering capabilities, and access controls under the NIST 800-53 Risk Management Framework. Use Linux scripting, networking, virtualization, and cybersecurity testing techniques to support Air Force clients. The role may involve test plans, technical documentation, penetration testing, vulnerability assessment, and system hardening.

Provides cybersecurity information assurance expertise across acquisition and sustainment programs. Advises DLA organizations on IA architecture, controls, boundary defense, access-control standards, and enterprise IA solutions. Supports IT service strategy, project management, documentation, reporting, and compliance using Microsoft tools. Requires Secret clearance, relevant C&A experience, IT management background, and specified cybersecurity and networking certifications.

Supports Risk Management Framework compliance, cybersecurity operations, continuous monitoring, vulnerability management, and security audits. Develops and maintains ATO/ATC documentation, POA&Ms, SSP artifacts, risk acceptance memos, and compliance reports in eMASS or government tools. Performs security control assessments, log analysis, PPSM activities, privileged-account validation, metrics reporting, and change-management reviews. Supports DoD and USTRANSCOM cybersecurity requirements, including NIST SP 800-171 and DFARS incident-reporting awareness.

Leads DHS CISA cybersecurity tabletop exercise programs, including planning meetings, scenario development, facilitator and participant materials, staffing, facilitation, documentation, CONOPS, SITMANs, exercise control design, and after-action reports. Provides HSEEP and cybersecurity subject matter expertise, coordinates exercise logistics and resources, and manages stakeholder participation and evaluation activities.

Leads the Cyber Engineering organization supporting NGA cybersecurity services and capabilities. Oversees strategy, technical performance, modernization, solution design, integration, operations, and sustainment of complex enterprise cybersecurity systems. Provides expert guidance, resolves complex technical issues, drives innovation, and communicates recommendations to executive and senior customer stakeholders. Requires extensive DoD or IC cybersecurity experience, cloud transition expertise, RMF and NIST knowledge, leadership experience, and TS/SCI clearance with polygraph eligibility.

Leads a nationwide cybersecurity disaster recovery and contingency planning program, including BIA, DRP, ISCP, risk analysis, documentation, exercises, quality assurance, audits, remediation, and executive reporting. Manages geographically dispersed teams and stakeholders while applying federal NIST standards and continuity requirements to improve organizational resilience and recovery readiness.

Monitors networks and security tools, identifies vulnerabilities and anomalies, investigates and responds to incidents, leads remediation, maintains incident response playbooks, supports compliance, evaluates security architecture, and develops information security policies and awareness programs.

Leads Eko’s corporate IT operations and cybersecurity program, including infrastructure, endpoints, identity and access management, security tooling, incident response, risk remediation, and vendor management. Owns SOC 2 audits, compliance obligations, customer security documentation, audit relationships, and executive reporting. Partners with HR, Legal, Sales, Customer Success, Finance, and Product Security while managing the IT budget, technology roadmap, support operations, and internal or outsourced IT teams.

Leads cybersecurity authorization for a cloud-hosted maintenance platform, including RMF/ATO packages, IL4/IL5 controls, CUI protection, NIST SP 800-171 evidence, continuous monitoring, vulnerability management, incident reporting, audit review, and security impact analysis. The role coordinates with mission owners and authorizing officials, supports CMMC assessments, defines OT segmentation, delivers security training, and conducts periodic on-site security walkdowns at Fort Campbell.

Tenure-track Computer Science faculty member specializing in cybersecurity and cyber operations. Responsibilities include conducting high-impact research, publishing scholarly work, securing external funding, developing and teaching cybersecurity courses, mentoring students, collaborating across disciplines, and contributing through university service and leadership. Candidates should address areas such as cyber threat intelligence, digital forensics, cyber resilience, cryptography, AI-enabled security, IoT and cyber-physical systems security, or quantum-resistant cryptography.

Manages information security and operational resilience risks through GRC, policy enforcement, risk assessments, regulatory alignment, risk mitigation, security awareness, and resilience training. Develops executive dashboards and data pipelines to communicate compliance metrics and security trends. Collaborates with business units and external partners, while mentoring GRC analysts and supporting enterprise-wide security policies and procedures.

Supports federal cybersecurity governance, compliance reporting, analytics, and documentation management. Responsibilities include developing Power BI dashboards, validating cybersecurity data, producing recurring status reports, writing and editing technical documentation, conducting Section 508 reviews, maintaining SharePoint content, coordinating policy and control updates, and creating executive briefings and newsletters. The role also supports working groups, collaboration tools, proposal development, and internal reporting initiatives.

Leads cybersecurity and AI risk consulting engagements, including maturity assessments, strategic roadmaps, governance, third-party risk, cyber resilience, benchmarking, risk quantification, and executive reporting. Manages scope, schedules, resources, quality, and client relationships while translating technical findings into business recommendations. Supports business development, proposals, engagement scoping, thought leadership, methodology development, and mentoring junior staff. Requires at least four years of cybersecurity, technology risk, or enterprise risk consulting experience.

Provides cybersecurity subject matter expertise and test and evaluation support for Department of War acquisition programs. Reviews acquisition, engineering, and test documentation; assesses cybersecurity risks, test results, resources, and technical risks; supports milestone reviews, integrated product teams, and independent technical risk assessments; develops senior-leader briefings and recommendations; and advises on cybersecurity policy, digital engineering, cloud migration, and data automation initiatives.

The Cybersecurity Engineer designs, implements, and maintains security controls for protecting clinical systems and patient data in a healthcare environment while ensuring compliance with regulations.

Develops, deploys, configures, and maintains network security tools across on-premise and cloud environments supporting NGA networks. Responsibilities include managing IDS/IPS, NDR, packet capture, email security, and network visibility platforms; troubleshooting network protocols; maintaining architectures and inventories; evaluating emerging technologies; recommending upgrades; and briefing leadership. Requires active TS/SCI clearance, DoD cybersecurity certifications, and the ability to obtain a CI polygraph.

Administer and harden cybersecurity controls across hybrid Azure, Microsoft 365, Entra ID, cloud, and on-premises environments. Operate Sentinel and Defender XDR, lead incident response, engineer identity and access controls, manage vulnerability remediation, and implement cloud security improvements. Build automation and infrastructure-as-code using PowerShell, Python, Bicep, ARM, and Terraform. Support compliance evidence, penetration testing, disaster recovery, security architecture, and technical mentoring.

Lead technology operational risk and cybersecurity assessments for CIB Technology. Conduct independent testing and monitoring, identify control gaps, manage risks under the Operational Risk Management Framework, develop KPIs/KRIs, advise 2LoD teams, and drive automated, data-driven testing and remediation across stakeholders.