Top Cybersecurity Jobs

Lead product cybersecurity across medical devices, connected technologies, digital solutions, and software. Define security requirements, maintain threat models and risk registers, lead vulnerability and penetration testing, integrate automated security tools, mature secure development practices, support incident response, and provide technical leadership to regulators, customers, auditors, and security researchers. Collaborate across IT, R&D, compliance, and other business teams.

Leads and supervises complex technology audits, including planning, risk assessment, control testing, issue identification, remediation validation, and audit reporting. Oversees multiple concurrent audits and issue validations, coaches junior auditors, manages stakeholder communications, and advises management on cybersecurity, information security, IAM, technology governance, and resiliency risks. Supports enterprise audit initiatives, regulatory compliance, process improvements, and control governance.

Ten-week paid internship supporting vulnerability management and cybersecurity initiatives. Responsibilities include conducting research, analyzing data, contributing to project deliverables, developing recommendations, collaborating with cross-functional teams, and presenting results to leadership. The intern will learn organizational processes and technologies while supporting business objectives, compliance requirements, and member-focused solutions.

Participate in a 10-week internship supporting the Security Operations Center. Responsibilities include analyzing security operations metrics, reviewing security tool rules and configurations, evaluating security documentation and procedures, creating security reports, and assisting with ongoing cybersecurity projects. The role requires collaboration, analytical problem-solving, communication skills, and current enrollment in a bachelor's degree program.

Supports the Defense Logistics Agency’s cyber defense mission by analyzing and implementing cybersecurity policies, procedures, and processes. Applies DoD cybersecurity policy requirements and provides specialized expertise across cybersecurity operations. The role requires seven years of cybersecurity policy experience and maintaining CSSP Analyst certification for CERT team members. A DoD Top Secret clearance and eligibility for IT-I Critical Sensitive/Tier 5 are required.

Supports DoD cybersecurity connection approval and risk management activities. Responsibilities include reviewing RMF authorization packages, network connection packages, security agreements, and compliance documentation; maintaining approval databases and metrics; developing SOPs, policies, and governance materials; performing quality assurance; advising stakeholders on cybersecurity risks and DoD/DISA policy; and tracking connection expirations and action items.

Participate in a paid 10-week internship developing secure applications and systems, implementing security controls, identifying vulnerabilities, and creating security automation tools. Collaborate with engineering, security, and platform teams in Agile environments while gaining experience in secure software development, cybersecurity, design, development, and testing. Receive mentorship, coaching, and leadership development throughout the program.

Leads IT governance, cybersecurity risk and compliance, audit readiness, technology integration, and cross-functional planning. Establishes governance frameworks, manages risk assessments and reporting, coordinates audits and remediation, oversees performance metrics, and aligns cybersecurity, infrastructure, data, AI, architecture, and business technology teams. The role also supports budgeting, contracts, workforce planning, change management, executive communications, and board-level reporting.

Supports USAF base-level cyber defense by analyzing network alerts, incidents, vulnerabilities, threats, and mission-relevant terrain in cyberspace. Performs functional mission analysis, event correlation, trend analysis, risk assessment, incident documentation, and defense planning across classified and unclassified networks. Coordinates with cyber defense staff and local subject matter experts, develops mitigation strategies, maintains security databases, and provides recommendations for policies and courses of action.

Leads enterprise IT audit, advisory, risk assessment, compliance, and technology control activities. Manages audit staff, coordinates risk-based audit planning, evaluates cybersecurity and technology risks, develops audit reports, advises senior leadership, and presents findings to executive management and audit committees. Ensures alignment with IIA, ISACA, regulatory, privacy, and corporate standards while driving improvements across healthcare technology environments.

Leads and supports 24/7 Public Key Infrastructure operations for Army cybersecurity missions. Manages Registration Authorities, credentialing, token issuance and revocation, compliance, training for Trusted Agents, process consistency, repositories, SharePoint sites, and worldwide sustainment. Collaborates with cybersecurity stakeholders and service providers while providing PKI planning, design, engineering, integration, and operational support.

Deliver strategic cybersecurity advisory engagements, assess and mature security and incident response programs, develop exercise scenarios, and produce reports, presentations, recommendations, and findings for customer management. The role also identifies emerging cybersecurity trends, contributes to thought leadership and methodologies, and supports multiple concurrent projects. Candidates independently perform strategic analysis, communicate effectively with stakeholders, use AI technologies to improve workflows and decisions, and travel to client engagements up to 30%.

An 11-week Cybersecurity and Technology Audit internship supporting internal control audits. Responsibilities include interviewing personnel, performing audit testwork, analyzing results, communicating issues, and participating in IT risk assessments and control evaluations. The role offers real-world audit experience and potential future career opportunities.

Leads cybersecurity GRC activities, including risk assessment, compliance controls, security framework implementation, audit coordination, security awareness, and risk mitigation. Evaluates high-risk systems and applications, advises asset owners on control effectiveness, and supports regulatory compliance. Requires 5–7+ years of cybersecurity experience, relevant certifications, and regular in-office attendance.

Supports enterprise technology risk management through control testing, risk and control assessments, ITGC evaluations, audit support, exception management, regulatory compliance, and ongoing control monitoring. The role assesses applications, platforms, infrastructure, cloud environments, access management, cybersecurity, and resiliency controls while preparing management reporting and communicating risk programs to auditors, regulators, and internal partners.

Serves as the technical authority for cybersecurity architecture across a critical federal government program. Designs and maintains secure network, SD-WAN, cloud, telecommunications, and enterprise architectures; integrates security requirements throughout the development lifecycle; and supports federal authorization activities. Advises leadership, coordinates across technical and operational organizations, manages security risks and requirements, and contributes to governance, monitoring, compliance, and ATO documentation.

Lead product security for regulated medical device software, integrating security across the development lifecycle. Conduct threat modeling, risk and vulnerability assessments, security architecture reviews, penetration testing, code reviews, incident response, vendor assessments, and compliance activities. Support secure boot, communications, updates, access controls, and data protection. Collaborate with Agile scrum teams, document security practices, promote security awareness, and contribute to product security strategy for current and next-generation devices.

Lead full enterprise sales cycles for deepfake/AI-detection platform across regulated industries. Prospect, close, and expand accounts in financial services, government, and insurance. Engage senior stakeholders (CISOs, fraud, risk, compliance), manage technical validation and legal/procurement processes, and collaborate with Solutions Engineering, Product, Marketing, and Customer Success to ensure successful deployments and renewals.

Leads Privacy by Design across connected medical devices and supporting systems. Responsibilities include privacy risk assessments, DPIAs, compliance documentation, regulatory evidence, incident investigations, corrective actions, privacy incident response, stakeholder consultation, and alignment with product security engineering. The role mentors professionals and advances privacy governance, training, metrics, and continuous improvement while ensuring compliance with global privacy laws and medical device standards.

Leads automotive and embedded-systems cybersecurity consulting engagements, developing ISO/SAE 21434 and ISO 24089 processes, templates, risk analyses, cybersecurity concepts, verification documents, and assessment reports. Guides clients in secure software design, coding, testing, and compliance with UN Regulations 155 and 156. Responsibilities also include client program leadership, proposals and business development, standards participation, technical guidance, and occasional travel to client sites.

Supports cybersecurity architecture, RMF compliance, Assessment and Authorization, Continuous Monitoring, vulnerability remediation, incident response, and security oversight for defense systems. Develops security architecture and design documents, prepares ATO and IATT packages, maintains evidence documentation, evaluates system changes and risks, implements security controls, and advises stakeholders on DoD information assurance standards. The role is onsite at Fort Belvoir, Virginia, requires an active Secret clearance, and supports systems across multiple classification environments.

Leads cybersecurity incident response as an Incident Commander, coordinating cross-functional teams, investigating threats, analyzing root cause and impact, and communicating with senior leadership. Drives incident response program maturity through improved playbooks, processes, training, metrics, detection capabilities, and after-action reviews. Also leads vulnerability management, security assessments, threat intelligence, analyst development, and response to complex threats including ransomware, insider attacks, data exfiltration, and cloud compromise.

Leads federal cybersecurity audit readiness, OIG liaison activities, RMF governance, and enterprise GRC strategy. Coordinates OIG audits, validates technical evidence, manages findings and remediation, and translates cloud environments into defensible compliance documentation. Establishes common-control inheritance, Continuous Monitoring workflows, GRC platform logic, federal reporting standards, and governance guidelines. Reviews SSPs, SARs, and POA&Ms, conducts readiness assessments, interprets OMB, NIST, and CISA requirements, and briefs executives on compliance risks and remediation progress.

Analyze system vulnerabilities and attack techniques across hardware, software, personnel, procedures, logistics, and physical security. Assess impacts on supported missions, develop operational countermeasures, and produce reports, briefings, and analytical perspectives on actual and potential attacks. The role requires extensive vulnerability analysis, penetration testing, or computer forensics experience, a relevant technical degree, and TS/SCI clearance with polygraph.

Performs cyber resiliency analysis for tactical Software Defined Radio waveforms and supports system security engineering, RMF implementation, technical reviews, documentation, and stakeholder collaboration. Researches cybersecurity methodologies, maintains analysis processes, develops reports and white papers, updates SOPs, and coordinates with vendors and DoD organizations. The role requires knowledge of cybersecurity, electronic and technology protection, RF communications, SDRs, waveforms, and DoD security practices.