Top Cybersecurity Jobs

Provides cybersecurity engineering and ISSO support for Air Force command-and-control systems. Responsibilities include RMF authorization activities, STIG compliance, access control, vulnerability and incident remediation, security documentation, configuration management, risk assessments, system design reviews, and coordination with government stakeholders. The role supports DoD cybersecurity policies, cloud infrastructure security, DevSecOps practices, and classified-system requirements.

Performs defensive cyber operations and security engineering using SIEM, SOAR, EDR/XDR, vulnerability management, network segmentation, and incident response workflows. Conducts threat hunting, analyzes telemetry and logs, develops MITRE ATT&CK-aligned detection, reduces alert noise, supports containment and recovery, and contributes to compliance reporting and operational coordination in mission-critical environments.

Perform defensive cyber operations and security engineering using SIEM, SOAR, EDR/XDR, vulnerability management, network segmentation, and incident response workflows. Improve security visibility, reduce alert noise, accelerate containment and recovery, conduct threat hunting and MITRE ATT&CK-aligned detection, and support secure operations, continuous compliance, reporting, and coordination in mission-critical environments.

Develops and implements cybersecurity architecture, controls, and hardened solutions for DoD systems. Performs vulnerability scanning, risk assessments, security control assessments, remediation, Fortify analysis, threat detection, and event correlation. Supports RMF activities and IATO/ATO authorization while ensuring compliance with DoD policies, STIGs, and cybersecurity directives. Collaborates with technical teams and senior stakeholders to secure hybrid systems and AI/ML networks.

Operate cybersecurity controls across corporate, cloud, and SaaS environments; support ISO 27001 and SOC 2 compliance, GRC administration, access reviews, incident response, vulnerability management, vendor risk, audit evidence, and security awareness programs.

Monitors, analyzes, investigates, and responds to cybersecurity events and reports. Supports incident monitoring, operational security, risk assessments, control selection, vendor security reviews, vulnerability and anomaly identification, and network security documentation. The role also handles security inquiries and collaborates across teams while ensuring eligibility for required U.S. export-control authorizations.

Manages cybersecurity programs for classified information systems, including continuous monitoring, security assessments, compliance, risk management, Assessment and Authorization, Security Test and Evaluation, and security documentation. Leads audits, control reviews, policy implementation, corrective actions, and government accreditation activities. The role is full-time onsite in Aurora, Colorado, requires an active Top Secret/SCI clearance with CI polygraph, IAM Level II certification, and eligibility for Special Programs access.

Conduct information system security research, analysis, assessments, compliance audits, vulnerability assessments, and continuous monitoring in cleared environments. Develop RMF procedures and security documentation, manage media and cross-domain data transfers, monitor corrective actions, support system accreditation and certification, investigate security violations, and advise on government information security policies and best practices.

Advise clients on cybersecurity strategy, governance, risk, and compliance across long-term engagements. Develop security roadmaps, translate technical risks for executives and boards, align programs with major frameworks, and guide policy, architecture, and tooling decisions. Manage client relationships, support incident readiness and tabletop exercises, validate remediation with technical teams, mentor junior staff, and improve advisory methodologies. Travel may reach 65%.

Owns configuration, tuning, health, and operational effectiveness of enterprise security platforms across multiple client environments. Responsibilities include detection engineering, SIEM onboarding, vulnerability remediation, incident leadership, cloud and Microsoft security administration, AI system controls, automation, vendor management, root cause analysis, documentation, client reporting, and mentoring junior engineers.

The Cybersecurity Analyst conducts threat analysis, digital forensics, threat hunting, and intelligence gathering. Responsibilities include monitoring EDR and SIEM environments, managing cloud application security, auditing IAM controls, identifying malware and phishing threats, monitoring network hardware patching, supporting compliance with CJIS and PII requirements, documenting security conditions, and recommending remediation. The role also requires communication, reporting, cybersecurity best-practice implementation, and project management.

Lead cybersecurity research and development efforts spanning offensive cyber, systems security engineering, formal methods, and security software. Develop and prototype new security technologies, manage technical execution, mentor contributors, support customer relationships and business development, and contribute to research programs and technical marketing. The role requires strong computing expertise, research experience, leadership in capture activities, and eligibility for a Top Secret clearance.

Leads cybersecurity research and development, prototypes security technologies, manages technical execution, supports business development and customer relationships, mentors researchers, and shares results with industry. Focus areas include offensive cyber, systems security engineering, formal methods, and security software. The role requires strong computing expertise, research experience, leadership in capture activities, and the ability to obtain a Top Secret clearance.

Modernize DoD RMF and ATO packages for Google Cloud, Google Workspace, and ServiceNow GCC-High environments. Conduct gap analyses, develop SSPs, SARs, POA&Ms, and continuous monitoring plans, validate Rev. 5 control narratives, map evidence in ServiceNow GRC, evaluate FedRAMP inheritance, and document organizational risk and authorization decisions.

Designs and assesses enterprise security architectures across Zero Trust, cloud, hybrid, and on-premises environments. Develops security roadmaps, reference patterns, requirements, transition plans, architecture diagrams, and executive briefings. Evaluates system designs, integrations, data flows, identity patterns, and control dependencies for security and interoperability risks. Advises technical teams and leaders on architecture decisions, tradeoffs, and remediation priorities in large enterprise or government environments.

Designs and maintains cybersecurity telemetry and data pipelines for monitoring, detection, investigation, reporting, and risk analysis. Integrates logs, alerts, asset, identity, vulnerability, and other security data into analytics platforms. Defines data models, collection patterns, retention requirements, quality controls, and integrations while improving data completeness, normalization, timeliness, and correlation. Partners with security operations, engineering, data teams, and system owners to resolve telemetry gaps and strengthen visibility.

Designs secure system and integration architectures for APIs, applications, platforms, data exchange, and operational services. Defines system requirements, data flows, interface patterns, and integration standards; evaluates architecture alternatives for security, scalability, reliability, performance, and supportability; coordinates with technical and business stakeholders; and produces architecture diagrams, interface specifications, integration plans, and technical decision records.

Engineer and assess cybersecurity capabilities across identity, devices, networks, applications, data, and cloud platforms. Translate NIST, FISMA, RMF, and FedRAMP requirements into technical controls; support authorization activities; review security documentation and evidence; analyze vulnerabilities and control gaps; develop remediation recommendations; and advise stakeholders on security design and risk treatment.

Assess cybersecurity supply-chain risks involving vendors, products, software, services, and third-party dependencies. Document security requirements, findings, mitigations, and risk decisions; review supplier evidence, provenance, vulnerabilities, and remediation plans; coordinate with acquisition, engineering, legal, security, and program stakeholders; and continuously monitor supplier risks, threats, and corrective actions.

Engineers, configures, integrates, and sustains cybersecurity tools for detection, prevention, vulnerability management, configuration management, and compliance. Develops implementation plans, standards, procedures, and documentation; integrates security data with operational systems; analyzes performance, coverage, alerts, and data quality; and supports upgrades, testing, troubleshooting, and operational handoff.

Provide cybersecurity consulting and technical expertise by developing security incident automations and designing SOAR orchestrations. Collaborate with security SMEs, engineers, vendors, and project stakeholders to implement innovative solutions in a fast-paced environment. The role requires Python development, scripting, COTS integration, API experience, and familiarity with cybersecurity platforms and cloud or container technologies.

Provides cybersecurity consulting and technical expertise to design and implement security automations and orchestrations. Develops incident-response automations, integrates commercial off-the-shelf software, consumes and develops APIs, and collaborates with security engineers, vendors, subject-matter experts, and project stakeholders. The role is onsite in Northern Virginia and supports security operations teams in fast-paced environments.

Provide cybersecurity consulting and technical expertise by developing security automations and orchestrations for incident response. Collaborate with subject matter experts, engineers, vendors, and project stakeholders to design and implement innovative security solutions in a fast-paced client delivery environment. The role focuses on SOAR development, cybersecurity platform integration, API usage, scripting, and software development.

Performs cybersecurity engineering for unmanned aircraft systems, including software, hardware, and operating system hardening; vulnerability scanning and remediation; security control testing; and technical documentation. Uses ACAS, Nessus, SCAP, STIGs, and the NIST Risk Management Framework to support Security Control Assessments. Collaborates with engineering and development teams in an agile environment and travels occasionally for cyber assessments.

Own identity, endpoint, network, and security engineering for a distributed robotics company operating in a CMMC 2.0 Level 2 environment. Responsibilities include securing Microsoft and Google environments, managing devices and networks, implementing zero-trust access, maintaining DNS and email authentication, conducting audits, developing NIST 800-171-aligned standards and incident response runbooks, establishing AI tooling guardrails, managing vendors, and handling hardware logistics.