Top Cybersecurity Jobs

Audits Windows infrastructure, Active Directory, virtualization, and container platforms for DoD cybersecurity and STIG compliance. Validates patching, authentication, access controls, and secure deployments; supports STIG remediation and ATO documentation. Produces assessment reports and actionable recommendations for DTRA sites as part of a CORA team. The role requires an active Top Secret clearance with SCI eligibility, U.S. citizenship, and 5–10 years of Windows systems engineering or cybersecurity experience.

Conduct Linux STIG compliance reviews, vulnerability scans, remediation validation, and endpoint security assessments using ACAS, Tanium, and Trellix. Review Docker and Kubernetes configurations, support STIG implementation and ATO documentation, and produce assessment reports with prioritized remediation strategies for DTRA systems.

Conduct cybersecurity assessments of network infrastructure, boundary devices, and VoIP systems against DoD STIGs and SRGs. Validate segmentation, ACLs, routing, Zero Trust controls, and least-privilege enforcement; analyze configurations and logs for vulnerabilities; support DTRA sites with remediation, STIG implementation, and ATO preparation; and produce detailed reports with prioritized recommendations. The position supports DTRA’s CORA team in Fort Belvoir, Virginia, with 20% travel and a Top Secret clearance requirement.

The Junior Cyber Analyst will support USCYBERCOM by developing operational plans and coordinating integrated cyber operations, utilizing cybersecurity knowledge to address threats.

Designs and develops enterprise identity and access management architecture across cloud and on-premises environments. Responsibilities include IAM workflows, lifecycle management, identity governance, Zero Trust architecture, APIs, application integrations, automation, documentation, security standards, and incident response. The role collaborates with HRIS, IT, service owners, and business stakeholders to implement scalable identity solutions and secure SaaS integrations.

Owns enterprise cybersecurity strategy, architecture, governance, risk, compliance, incident response, security operations, identity governance, vendor management, and security team development. Advises executives and the board, establishes control frameworks, leads material incidents, protects cloud, corporate IT, mining, data center, OT, and AI environments, and builds a scalable internal security capability.

Conduct advanced threat detection, hunting, incident response, log correlation, malware and network analysis, and SOC capability improvements. Develop detection logic, playbooks, and post-incident reports; map findings to MITRE ATT&CK; support purple-team operations; coordinate remediation with cyber and IT teams; mentor analysts; brief stakeholders; and work rotating shifts in a classified 24/7 SOC environment.

Provides cybersecurity engineering across on-premises, cloud, and hybrid environments. Responsibilities include security architecture, SIEM/SOAR administration, endpoint security ownership, detection engineering, automation, incident response, vulnerability management, compliance support, and security tooling enhancement. The role uses Microsoft Defender, Darktrace, PowerShell, KQL, and related platforms while providing backup infrastructure support for VMware and Veeam. It also maintains documentation, supports audits, participates in on-call response, and coordinates with IT and business stakeholders.

Monitors information systems for threats, vulnerabilities, and breaches; performs risk assessments, STIG compliance reviews, RMF A&A support, POA&M tracking, incident response, audits, and security documentation. The analyst helps develop security policies, verifies remediation, supports compliance reporting, and collaborates with IT teams to integrate security into system operations.

Monitor, investigate, and respond to cybersecurity incidents; administer endpoint, cloud, identity, vulnerability, and data protection technologies; lead incident response and remediation; support compliance, access governance, threat hunting, security awareness, and phishing simulations; and mentor junior cybersecurity professionals.

Designs and implements secure enterprise, application, and cloud architectures for USSTRATCOM mission systems. Responsibilities include cyber forensics, intrusion detection, incident response, vulnerability assessment, network and system security, secure coding, DevSecOps automation, cloud security, identity management, and compliance. The role supports 24/7 IT and network services across classified environments and requires collaboration, documentation, analytical problem-solving, and detailed security operations.

Leads enterprise cybersecurity governance and assurance, including policies, standards, controls, risk management, regulatory compliance, audits, metrics, remediation, and continuous monitoring. Partners with cybersecurity, technology, legal, privacy, risk, engineering, and audit teams to improve control effectiveness and executive visibility. Manages governance transformation, multi-cloud compliance, strategic planning, and a high-performing team while advising senior leaders and driving cross-functional accountability.

Designs and applies cybersecurity engineering practices across the system lifecycle for Navy and DoD mission systems. Responsibilities include threat modeling, vulnerability and attack-path analysis, cyber risk assessment, defensive technology evaluation, mitigation development, and communicating recommendations to multidisciplinary engineering and customer teams. The role requires active DoD Secret clearance and eligibility to obtain TS/SCI clearance.

The Threat Cybersecurity Engineer will administer and optimize EDR, SIEM, and security monitoring tools; investigate threats across endpoint, identity, cloud, application, and network environments; conduct threat hunting; develop MITRE ATT&CK-aligned detections and automated response workflows; manage attack-surface and vulnerability risks; coordinate incident response and recovery; maintain playbooks and metrics; and participate in on-call support.

Conduct enterprise red-team and penetration assessments across applications, networks, endpoints, cloud environments, identity services, IoT, and web applications. Identify and exploit vulnerabilities, evaluate security controls, document technical findings, support remediation, collaborate with reporting and consulting teams, and communicate security risks to technical and non-technical stakeholders. The role also contributes to security research, adversary emulation, and team knowledge sharing.

Conduct enterprise and system-focused penetration tests and red-team assessments across networks, applications, endpoints, cloud environments, identity services, IoT, and web applications. Identify and exploit vulnerabilities, document technical findings, communicate risks, support remediation, collaborate with reporting and consulting teams, and contribute to security research and knowledge sharing.

Leads technical delivery of complex cybersecurity AI deployments from prototype through production adoption. Coordinates engineers, researchers, product teams, and enterprise customers; translates business objectives into delivery plans; manages dependencies, risks, scope, and readiness; maps security workflows; measures value and adoption; and develops reusable implementation patterns. The role requires customer-facing technical leadership, cybersecurity fluency, enterprise deployment experience, and practical knowledge of AI and LLM systems.

Lead high-stakes customer cybersecurity deployments from problem definition through resolution. Build AI security workflows, integrate customer security systems with access controls and human oversight, and develop reusable deployment tools and playbooks. Act as a player-coach, guide deployment strategy, mentor team members, identify risks, and translate field experience into product and research feedback. The role requires production engineering across frontend and backend systems, strong cybersecurity expertise, and up to 50% travel.

Paid summer cybersecurity internship supporting a Security Operations Center. The intern will learn SOC and MDR operations, security event and incident lifecycles, alert triage, detection rules, threat intelligence, automation, and escalation processes. They will assess workflows, identify improvement opportunities, document findings, collaborate with cybersecurity professionals, and present recommendations. The role is hybrid and includes mentorship and practical application of cybersecurity coursework.

Leads defensive cyber operations and oversees cybersecurity teams supporting NGA programs and enterprise systems. Responsibilities include designing and sustaining cybersecurity services, developing strategic plans, assessing risks, conducting Analysis of Alternatives and design studies, writing white papers, improving processes, managing personnel capability gaps, briefing executives, and ensuring DoD compliance and accreditation. The role requires expertise in network security, security technologies, adversarial tactics, cybersecurity frameworks, cloud security, and cyber threat intelligence.

Leads cybersecurity GRC, data privacy, technical risk, regulatory readiness, and third-party risk advisory engagements. Assesses security controls, architectures, identity, cloud, vulnerability management, monitoring, incident response, resilience, and privacy programs. Advises executives, translates technical findings into business risk, develops remediation roadmaps, supports cyber due diligence and post-acquisition initiatives, contributes to business development, and mentors consulting teams.

Provides senior technical and operational leadership across cybersecurity and enterprise IT teams. Responsibilities include governance, risk management, compliance frameworks, vulnerability activities, audits, incident coordination, strategic planning, workforce management, budgeting, investment management, information security, privacy, and cross-functional execution in a federal environment.

Assess cybersecurity posture across DoD mission systems using continuous monitoring data and security tools. Evaluate vulnerabilities, controls, remediation, and monitoring coverage; correlate risks across programs; identify systemic trends; coordinate remediation with engineering and cybersecurity teams; and provide technical recommendations, metrics, briefings, and documentation to leadership and government stakeholders.

Design, implement, integrate, and maintain cybersecurity automation systems and tools. Translate compliance requirements into repeatable workflows, integrate enterprise and cloud systems, and produce traceable audit outputs. Apply expertise in CMMC, NIST, FedRAMP, security controls, SSPs, POA&Ms, evidence collection, and shared responsibility. Work independently on complex problems while mentoring team members. A Public Trust determination and bachelor’s degree are required.

Administer and secure enterprise LAN, WAN, VPN, wireless, and cloud-connected networks. Manage WatchGuard firewalls, site-to-site VPNs, security controls, and network troubleshooting. Operate Rapid7 InsightIDR, including agent deployment, log ingestion, alert investigation, and detection tuning. Investigate cyber threats, remediate vulnerabilities, perform root-cause analysis, and collaborate across teams in a hands-on production environment.