Top Cybersecurity Jobs

Leads cybersecurity and AI risk consulting engagements, including maturity assessments, strategic roadmaps, governance, third-party risk, cyber resilience, benchmarking, risk quantification, and executive reporting. Manages scope, schedules, resources, quality, and client relationships while translating technical findings into business recommendations. Supports business development, proposals, engagement scoping, thought leadership, methodology development, and mentoring junior staff. Requires at least four years of cybersecurity, technology risk, or enterprise risk consulting experience.

Provides cybersecurity subject matter expertise and test and evaluation support for Department of War acquisition programs. Reviews acquisition, engineering, and test documentation; assesses cybersecurity risks, test results, resources, and technical risks; supports milestone reviews, integrated product teams, and independent technical risk assessments; develops senior-leader briefings and recommendations; and advises on cybersecurity policy, digital engineering, cloud migration, and data automation initiatives.

The Cybersecurity Engineer designs, implements, and maintains security controls for protecting clinical systems and patient data in a healthcare environment while ensuring compliance with regulations.

Develops, deploys, configures, and maintains network security tools across on-premise and cloud environments supporting NGA networks. Responsibilities include managing IDS/IPS, NDR, packet capture, email security, and network visibility platforms; troubleshooting network protocols; maintaining architectures and inventories; evaluating emerging technologies; recommending upgrades; and briefing leadership. Requires active TS/SCI clearance, DoD cybersecurity certifications, and the ability to obtain a CI polygraph.

Administer and harden cybersecurity controls across hybrid Azure, Microsoft 365, Entra ID, cloud, and on-premises environments. Operate Sentinel and Defender XDR, lead incident response, engineer identity and access controls, manage vulnerability remediation, and implement cloud security improvements. Build automation and infrastructure-as-code using PowerShell, Python, Bicep, ARM, and Terraform. Support compliance evidence, penetration testing, disaster recovery, security architecture, and technical mentoring.

Lead technology operational risk and cybersecurity assessments for CIB Technology. Conduct independent testing and monitoring, identify control gaps, manage risks under the Operational Risk Management Framework, develop KPIs/KRIs, advise 2LoD teams, and drive automated, data-driven testing and remediation across stakeholders.

Provides cybersecurity and RMF support for DoD systems and applications, including security control assessments, ATO package development, vulnerability remediation, audit and compliance activities, executive reporting, and software certification. Serves as a cybersecurity subject matter expert, leads ISSOs, coordinates with senior government and contractor stakeholders, and supports classified and unclassified environments. Travel is required approximately 25% of the time.

Develop and maintain Marine Corps cybersecurity policies, strategies, standards, and governance. Support privacy, PII protection, identity and authentication, PKI, RMF, risk analysis, security assessments, audits, and social media protection reviews. Represent Marine Corps interests in DoD and DON working groups, provide policy guidance to leaders and stakeholders, and recommend corrective actions and long-term cybersecurity improvements. The role requires eligibility for a Secret clearance and applicable DoD cybersecurity certifications.

Supports IT and OT cybersecurity by monitoring networks, investigating security events, documenting configurations and risks, identifying vulnerabilities, performing penetration testing and vulnerability scans, and helping develop security best practices. The intern will work with the OT cybersecurity team, review security software, research threats, and recommend measures to protect systems and information infrastructure.

Monitor and analyze security events across corporate, remote-site, vessel, cloud, and customer environments. Lead incident triage, containment, response, recovery, and documentation; conduct threat hunting and vulnerability management; administer security tools and access controls; coordinate penetration testing and remediation; support cloud and infrastructure security; maintain ISO 27001 compliance, audit evidence, dashboards, policies, and training; and collaborate with IT, NOC, vendors, and customers.

Support the Information Security team by reviewing security alerts, documenting responses, tuning security tools, maintaining event logs, organizing audit evidence, tracking external security reports, and updating compliance software. The intern will complete a summer project such as identifying logging gaps, refreshing incident response documentation, or creating a dashboard. The role provides hands-on exposure to security operations, compliance audits, and tools including Zscaler, CrowdStrike, ThreatLocker, Darktrace, and AlienVault.

Designs and secures edge and hybrid-cloud infrastructure operating in contested, air-gapped, and degraded network environments. Responsibilities include container hardening, threat modeling, vulnerability management, automated provisioning, secrets and PKI lifecycle management, Linux security, and DoD/IC accreditation compliance. The role also contributes to security architecture, embedded Linux hardening, secure software supply chains, and mission-critical infrastructure reliability.

Leads cybersecurity innovation for critical infrastructure and electric power systems. Identifies market and customer needs, develops strategic opportunities, translates them into product requirements, and influences product roadmaps and business cases. Serves as a cybersecurity subject matter expert for OT, ICS, substations, communications networks, security architectures, standards, risk assessment, and controls. Engages customers and industry stakeholders, mentors engineers, supports adoption and growth, and contributes to technical education, intellectual property, and thought leadership.

Supports cybersecurity and privacy consulting engagements across strategy, compliance, cloud security, identity and access management, ethical hacking, threat monitoring, incident management, data protection, and AI security solutions. Contributes to engagement planning, project management, business development, marketing, and thought leadership while collaborating with clients and team members. The role requires strong analytical, technical, communication, problem-solving, and time-management skills, plus the ability to travel and work onsite or at client locations.

Supports cybersecurity and privacy consulting engagements across strategy, privacy compliance, data protection, cloud security, identity and access management, threat monitoring, incident management, ethical hacking, and AI applications. Assists with engagement planning, project management, business development, marketing, and thought leadership. Collaborates with clients and internal teams to connect business strategy, technology, and cybersecurity compliance requirements.

Leads the Security Operations Center, managing SOC personnel, 24/7 coverage, threat detection, incident response, threat hunting, malware analysis, and security tooling. Oversees SIEM and endpoint security optimization, metrics, reporting, compliance, audits, tabletop exercises, and security strategy. Serves as the escalation point for complex incidents and collaborates with IT, compliance, and external partners to strengthen cybersecurity resilience.

Leads defensive cyber operations and cybersecurity engineering across enterprise systems. Designs, implements, and sustains cybersecurity capabilities; oversees subordinate teams; develops strategies, metrics, and resource recommendations; conducts risk assessments, design studies, and Analysis of Alternatives; supports DoD compliance, accreditation, and audits; and briefs executives on cybersecurity posture, capability gaps, and future operations.

Build and operate cybersecurity capabilities in a U.S. government air-gapped classified cloud environment. Responsibilities include vulnerability management, incident response, threat hunting, threat detection, security tool development, customer coordination, and establishing consistent cyber defense practices across environments.

Provides cybersecurity engineering across on-premises, cloud, and hybrid environments. Owns security architecture, SIEM/SOAR security, endpoint protection, detection engineering, automation, vulnerability management, incident response, and CMMC/NIST compliance support. Enhances Microsoft Defender and Darktrace tooling using PowerShell, KQL, and automation workflows. Maintains security documentation and provides backup infrastructure support for VMware and Veeam. Participates in after-hours response and cross-functional IT projects.

Serves as the primary liaison between cybersecurity teams and Department of the Air Force stakeholders. Coordinates risk assessments, incident response communications, policy implementation, cybersecurity awareness, regulatory compliance, threat intelligence, and performance reporting. Supports Active Directory security, OU design, Intune configuration, STIG implementation, vulnerability remediation, and security integration into projects. Requires extensive cybersecurity experience, DoD certification, and a TS/SCI clearance.

Leads security architecture reviews and governance for enterprise services, applications, integrations, and cloud environments. Develops Zero Trust reference architectures, secure-by-design patterns, and DevSecOps guardrails across hybrid and multicloud platforms. Oversees AWS, API, Kubernetes, data, AI, third-party, and integration security; conducts risk assessments and maps controls to security frameworks. Guides incident response, compliance, PAM, remediation, and security strategy while mentoring security and delivery teams.

Audits Windows infrastructure, Active Directory, virtualization, and container platforms for DoD cybersecurity and STIG compliance. Validates patching, authentication, access controls, and secure deployments; supports STIG remediation and ATO documentation. Produces assessment reports and actionable recommendations for DTRA sites as part of a CORA team. The role requires an active Top Secret clearance with SCI eligibility, U.S. citizenship, and 5–10 years of Windows systems engineering or cybersecurity experience.

Conduct Linux STIG compliance reviews, vulnerability scans, remediation validation, and endpoint security assessments using ACAS, Tanium, and Trellix. Review Docker and Kubernetes configurations, support STIG implementation and ATO documentation, and produce assessment reports with prioritized remediation strategies for DTRA systems.

Conduct cybersecurity assessments of network infrastructure, boundary devices, and VoIP systems against DoD STIGs and SRGs. Validate segmentation, ACLs, routing, Zero Trust controls, and least-privilege enforcement; analyze configurations and logs for vulnerabilities; support DTRA sites with remediation, STIG implementation, and ATO preparation; and produce detailed reports with prioritized recommendations. The position supports DTRA’s CORA team in Fort Belvoir, Virginia, with 20% travel and a Top Secret clearance requirement.

The Junior Cyber Analyst will support USCYBERCOM by developing operational plans and coordinating integrated cyber operations, utilizing cybersecurity knowledge to address threats.