Top Cybersecurity Jobs

Leads medical device software cybersecurity verification and validation, including test strategy, automation, traceability, metrics, root cause analysis, regulatory compliance, and audit readiness. Coordinates cross-functional testing, mentors engineers, evaluates tools, and develops security regression, negative, abuse-case, and automated test suites. The role requires expert Python skills, technical leadership, and experience with secure development, DevSecOps, security testing tools, and medical device standards.

Secures cloud-hosted IT system architecture and design, ensuring DoD compliance and requirements. Reviews cloud security policies, supports secure deployments, advises on threat detection and response, contributes to authorization-to-operate efforts, and guides cybersecurity vulnerability assessments for cloud environments.

Performs defensive cyber operations and security engineering using SIEM, SOAR, EDR/XDR, vulnerability management, network segmentation, and incident response workflows. Conducts threat hunting, analyzes telemetry and logs, develops MITRE ATT&CK-aligned detection, reduces alert noise, supports containment and recovery, and contributes to compliance reporting and operational coordination in mission-critical environments.

Manages cybersecurity programs for classified information systems, including continuous monitoring, security assessments, compliance, risk management, Assessment and Authorization, Security Test and Evaluation, and security documentation. Leads audits, control reviews, policy implementation, corrective actions, and government accreditation activities. The role is full-time onsite in Aurora, Colorado, requires an active Top Secret/SCI clearance with CI polygraph, IAM Level II certification, and eligibility for Special Programs access.

Lead cybersecurity research and development efforts spanning offensive cyber, systems security engineering, formal methods, and security software. Develop and prototype new security technologies, manage technical execution, mentor contributors, support customer relationships and business development, and contribute to research programs and technical marketing. The role requires strong computing expertise, research experience, leadership in capture activities, and eligibility for a Top Secret clearance.

Leads cybersecurity research and development, prototypes security technologies, manages technical execution, supports business development and customer relationships, mentors researchers, and shares results with industry. Focus areas include offensive cyber, systems security engineering, formal methods, and security software. The role requires strong computing expertise, research experience, leadership in capture activities, and the ability to obtain a Top Secret clearance.

Provide cybersecurity consulting and technical expertise by developing security incident automations and designing SOAR orchestrations. Collaborate with security SMEs, engineers, vendors, and project stakeholders to implement innovative solutions in a fast-paced environment. The role requires Python development, scripting, COTS integration, API experience, and familiarity with cybersecurity platforms and cloud or container technologies.

Provides cybersecurity consulting and technical expertise to design and implement security automations and orchestrations. Develops incident-response automations, integrates commercial off-the-shelf software, consumes and develops APIs, and collaborates with security engineers, vendors, subject-matter experts, and project stakeholders. The role is onsite in Northern Virginia and supports security operations teams in fast-paced environments.

Provide cybersecurity consulting and technical expertise by developing security automations and orchestrations for incident response. Collaborate with subject matter experts, engineers, vendors, and project stakeholders to design and implement innovative security solutions in a fast-paced client delivery environment. The role focuses on SOAR development, cybersecurity platform integration, API usage, scripting, and software development.

Own identity, endpoint, network, and security engineering for a distributed robotics company operating in a CMMC 2.0 Level 2 environment. Responsibilities include securing Microsoft and Google environments, managing devices and networks, implementing zero-trust access, maintaining DNS and email authentication, conducting audits, developing NIST 800-171-aligned standards and incident response runbooks, establishing AI tooling guardrails, managing vendors, and handling hardware logistics.

Supports cybersecurity consulting projects involving infrastructure and application security, vulnerability scanning, penetration testing, forensic investigations, incident findings, security documentation, and client workshops. The role also includes client relationship development, proposal writing, and sales-cycle participation. Candidates need IT operations experience, relevant technical exposure, strong communication skills, a degree or progress toward one, occasional travel availability, and U.S. citizenship.

Develop and maintain enterprise cybersecurity strategy, roadmaps, target-state architectures, and security standards. Advise executives and technical teams on cloud, data, AI, application, infrastructure, identity, privacy, and regulatory security. Lead secure AI strategy and governance, assess emerging threats and technologies, guide cybersecurity investments, and support transformation, modernization, and acquisition initiatives.

Leads cybersecurity engineering, RMF authorization, vulnerability management, system security documentation, architecture security, risk assessments, and classified information protection for Air Force systems. Supports ATO/ATC, continuous monitoring, eMASS administration, ACAS scanning, STIG implementation, cross-domain solutions, policy development, acquisition security, and cybersecurity training. Advises government leadership and coordinates with government and commercial stakeholders to achieve compliance and mission objectives.

Supports cybersecurity for C-130 and other aeronautical systems at the Air Force Life Cycle Management Center. Advises the ISSM, develops cybersecurity strategies and RMF artifacts, supports IATT and ATO authorization, reviews program documentation, analyzes system components and vulnerabilities, identifies risks and safeguards, and verifies cybersecurity controls and mitigations. Requires aircraft or weapon-system experience, a Secret clearance, U.S. citizenship, and occasional travel.

Performs risk-based cybersecurity control assessments, technical validation, configuration reviews, vulnerability and exploitability testing, attack-path analysis, and audit support. The role uses GRC and continuous-control-monitoring processes to automate evidence collection, track remediation, develop risk metrics, and improve reporting. Partners with cybersecurity, technology, risk, audit, and business teams to translate technical findings into practical remediation and strengthen cyber resilience.

Provide cybersecurity expertise for mission-critical enterprise systems by evaluating security controls, conducting vulnerability assessments and threat modeling, and recommending risk mitigation. Ensure alignment with NIST, ISO 27001, GDPR, and DoD RMF requirements. Collaborate with engineering and leadership to integrate secure development practices, review security tool outputs, mentor teams, and present assessment findings. The role supports government and defense-related environments and requires eligibility for TS/SCI clearance and a CI polygraph.

Provide independent assurance and advisory services over technology, cybersecurity, data, cloud, AI, and business transformation initiatives. Plan and execute audits (risk assessment, scoping, testing, reporting), evaluate ITGCs and automated controls, and use data analytics, automation, and AI tools to improve audit effectiveness and communicate findings to stakeholders.

Serves as the strategic bridge between Cybersecurity and IT Infrastructure teams and the Digital organization. Advises senior leaders, communicates security and infrastructure risks, reports on program progress, defines cybersecurity requirements, coordinates third-party risk assessments, supports transformation initiatives, promotes security policies, and partners with Compliance, Legal, and IT teams to deliver secure, scalable infrastructure.

Designs and develops secure systems and architectures for U.S. Navy missions. Responsibilities include analyzing engineering and security requirements, hardening systems, reducing attack surfaces, applying secure coding and operating-system security practices, evaluating architectures against adversary threats, and implementing cybersecurity countermeasures across system lifecycles.

The CISO will develop and manage the Bank's information security programs, ensuring compliance and protecting customer data while mitigating risks. They will also lead a security team, oversee third-party risk, and promote a culture of security awareness across the organization.

The Sr. Manager of Information Risk & Controls drives the risk management evolution by leading risk identification, developing frameworks, and collaborating with teams across Invesco.

Conduct mixed-method behavioral research on cybersecurity, privacy, artificial intelligence, risk, trust, and human behavior. Design and lead interviews, focus groups, surveys, and experiments; analyze quantitative and qualitative data; publish findings; support grant proposals; mentor student researchers; manage project milestones; and disseminate results with interdisciplinary and international collaborators.

Lead Citi’s enterprise Insider Threat program within the Cybersecurity Fusion Center. Responsibilities include defining strategy, managing and developing multidisciplinary teams, implementing data-centric detection and response processes, applying AI and advanced analytics, integrating behavioral and technical indicators, advising senior stakeholders, coordinating governance and risk controls, and engaging industry and government partners. The role requires extensive cybersecurity leadership, insider threat expertise, incident response experience, and the ability to drive global transformation.

Lead the development and execution of Citi’s enterprise insider threat program. Responsibilities include strategic planning, AI-driven threat detection, data-centric process implementation, threat triage and response, stakeholder engagement, governance, risk management, metrics, reporting, and incident response support. The role partners with cybersecurity, legal, HR, compliance, risk, technology teams, industry peers, vendors, and government agencies while helping drive organizational transformation and mentor team members.

Leads cybersecurity integration for newly acquired sites, including security assessments, firewall and VPN deployment, network segmentation, Zero Trust and Entra ID configuration, EDR and SIEM onboarding, email security, vendor coordination, documentation, and operational handoff. The role independently owns security architecture from assessment through steady-state transition, with approximately 75–80% travel to domestic and international acquisition sites and occasional after-hours or weekend cutovers.