Top Cybersecurity Jobs

Manages SIEM infrastructure, dashboards, monitoring, and incident investigations for Army and DoD environments. Develops audit and security-control reporting, supports PKI and certificate management, reviews cyber tasking orders, coordinates with cybersecurity service providers, participates in software assurance reviews, and evaluates system design plans for security compliance.

Manages DoD network defense and security compliance activities, including ACAS infrastructure, vulnerability scanning, reporting, AESS site reviews, DISA whitelist and PKI token management, STIG compliance, PPSM support, configuration security reviews, and eMASS POA&M remediation tracking. The role also supports account processing, training and certification tracking, software assurance reviews, incident response, and security documentation. An active DoD Secret clearance and cybersecurity certification are required.

Develops and maintains DoD cybersecurity Assessment and Authorization packages, conducts continuous monitoring, vulnerability testing, risk assessments, and security analysis for U.S. Navy tactical combat systems. The role applies RMF, STIGs, NSA recommendations, and DoD security policies; serves as an ISSO; documents requirements and system architectures; and supports cybersecurity engineering, compliance, testing, and risk mitigation activities.

Develops and documents cybersecurity requirements, policies, architectures, risk assessments, threat analyses, and mitigation plans for Navy combat systems. Conducts classified cyber assurance research, analyzes policy gaps, leads cybersecurity strategy working groups, and applies MBSE models to cybersecurity engineering. The role is fully on-site at NSWC Dahlgren and requires an active Top Secret clearance with SCI eligibility.

Leads enterprise cybersecurity monitoring, 24x7 SOC and CSIRT operations, incident response, investigations, containment, remediation, and executive communications. Oversees SIEM monitoring, cloud security, identity investigations, malware analysis, forensics, and threat intelligence. Coordinates major incidents with legal, regulatory, law enforcement, and business stakeholders. Ensures compliance with healthcare and cybersecurity frameworks, drives AI-enabled security workflows, improves operational maturity, and hires, coaches, and evaluates cybersecurity personnel.

Provides cybersecurity and information assurance support for DISA enterprise software systems. Analyzes security requirements, resolves information security and workflow problems, and supports security engineering across system planning, design, development, testing, demonstration, and integration. Requires experience with Linux and Windows Server administration, scripting, SIEM tools, and incident response, along with an active Secret clearance.

Provide senior-level audit expertise for complex, risk-focused cybersecurity and technology audits. Plan and execute audit procedures, analyze findings, drive validation for internal and regulatory issues, incorporate data analytics, communicate with senior stakeholders, mentor junior staff, and ensure compliance with auditing standards and internal controls.

Leads Caturus Energy’s cybersecurity program across corporate IT and operational technology environments, including SCADA, ICS, LNG, and field systems. Responsibilities include security operations, vulnerability management, incident response, network segmentation, third-party testing, risk governance, compliance, ITGCs, executive reporting, AI security, vendor oversight, budgeting, and team development. The role requires ensuring security controls protect critical infrastructure without compromising process, personnel, or operational safety.

Leads global cybersecurity operations across enterprise IT, cloud, customer-facing applications, connected platforms, and manufacturing OT. Manages internal teams and MSSP partners, 24/7 monitoring, incident response, detection engineering, threat hunting, SIEM/SOAR optimization, compliance, and operational metrics. Serves as incident commander for major security events and partners with plant, product, application, and executive stakeholders to strengthen detection, response, and resilience.

Leads cybersecurity and Risk Management Framework activities for Air Force defense systems, including security documentation, ATOs, continuous monitoring, eMASS administration, vulnerability management, STIG implementation, architecture reviews, and risk mitigation. Supports classified information security, acquisition program security, cross-domain solutions, compliance assessments, policy development, and leadership advisement. Delivers cybersecurity training and collaborates with government and commercial stakeholders. Requires extensive DoD experience, a bachelor’s degree, CISSP certification, US citizenship, and Top Secret clearance.

Designs and supports enterprise identity security across IAM, identity lifecycle management, identity governance, and privileged access management. Leads Zero Standing Privileges initiatives, including just-in-time provisioning, risk-adaptive policies, contextual authorization, and least-privilege access. Assesses cybersecurity risks, develops security requirements and architecture, maintains policies and procedures, and collaborates with business, technology, compliance, and audit stakeholders. Requires expertise with Okta, IGA tools, identity lifecycle concepts, Zero Trust, authentication protocols, and identity automation.

Lead and grow the attack surface management program by identifying, assessing, and prioritizing exposures; drive remediation and automation; collaborate with AppSec, DevOps, and cloud teams; maintain standards, runbooks, and attack surface maps; present risk metrics; mentor teammates; and lead compliance activities (e.g., PCI).

Leads cybersecurity operations including incident response, threat intelligence, vulnerability management, GRC, security monitoring, and risk reduction across cloud, endpoint, identity, and third-party environments. Investigates complex security events, coordinates containment and recovery, develops threat hunting strategies, improves security processes, maintains response documentation, delivers security awareness training, and supports cybersecurity planning for live events and venues. Serves as a cybersecurity subject matter expert and participates in after-hours incident response.

Supports cybersecurity planning, assessments, implementation, compliance, and continuous monitoring for Air Force infrastructure modernization. Coordinates RMF activities, DISA STIG validation, NIST control analysis, vulnerability remediation, POA&M development, eMASS documentation, accreditation packages, and cybersecurity reviews. The role validates controls throughout deployment and operational transition, collaborates with ISSMs and engineering teams, and requires active Secret clearance, DoD IAM/IAT certification, and 35% travel.

Leads CLS’s global Cybersecurity Operations function, setting strategy for threat detection, incident response, digital forensics, DLP, UEBA, Purple Teaming, and detective controls. Oversees security engineering, vendors, third-party integrations, governance, executive reporting, talent development, and regulatory alignment. The role requires extensive cybersecurity leadership experience in highly regulated environments, strong technical expertise across SIEM, SOAR, cloud and endpoint security, and the ability to direct complex cyber incident response programs.

Designs and maintains cybersecurity controls under DoD RMF v5, manages ATO packages and eMASS documentation, conducts risk assessments, coordinates STIG remediation, monitors and responds to security incidents, and develops security policies and system documentation. The role requires collaboration with technical teams, autonomous workload management, and expertise in federal cybersecurity frameworks, operating systems, networks, cloud platforms, and security technologies.

Supports Defense Health Agency systems through cybersecurity certification and accreditation, RMF assessment and authorization, security documentation, vulnerability management, configuration management, audit reviews, and STIG compliance. Conducts self-assessments, vulnerability scans, POA&M development, and eMASS documentation to support IATT and ATO decisions. Coordinates with authorizing officials, system administrators, and cybersecurity personnel to maintain system security posture and accreditation compliance.

Designs and maintains application security capabilities across the software development lifecycle. Responsibilities include operating SAST, DAST, software composition analysis, and secrets-scanning tools; threat modeling; secure design and code reviews; vulnerability remediation; penetration testing; developer education; API, cloud, container, and software supply chain security; incident response; risk assessments; and application security program improvement.

Coordinates cybersecurity defense operations across NORAD, USNORTHCOM, CWOC, JCC, and NITES personnel. Manages Cyber Tasking Orders, IAVMs, directives, vulnerability remediation, and POA&M tracking. Develops cybersecurity SOPs, maintains compliance logs, coordinates stakeholders, and provides metrics and executive-level communications to military and civilian leadership.

Administer and optimize Trellix cybersecurity tools across enterprise Windows and Linux environments. Manage policies, deployments, endpoint health, detections, integrations with SIEM/SOAR and vulnerability platforms, dashboards, compliance, documentation, and incident response activities. Support endpoint forensics, containment, IOC sweeps, risk assessments, security control validation, and RMF/NIST compliance while coordinating with systems, network, and cybersecurity teams.

Designs and integrates enterprise cybersecurity solutions, with emphasis on cloud security architecture, secure migrations, vulnerability management, incident response, firewalls, IDS/IPS, and SIEM technologies. The role supports military cyberspace operations, evaluates cybersecurity tools, prepares technical security documentation, and collaborates with internal teams and external customers. Applicants must possess TS/SCI clearance and be able to obtain a CI Poly.

Leads cybersecurity assessment and authorization activities for classified DoD and Intelligence Community systems. Maintains SSPs, POA&Ms, SARs, and ATO artifacts; performs vulnerability scanning and remediation tracking; validates NIST and CNSSI controls; supports hardening, patching, STIG compliance, monitoring, incident response, and change-impact assessments. Collaborates with engineering, administration, and DevSecOps teams.

Lead cybersecurity assessment and authorization activities for classified DoD and Intelligence Community systems. Responsibilities include executing RMF processes, maintaining SSPs, POA&Ms, SARs, and ATO artifacts, managing vulnerability remediation, validating NIST and CNSSI controls, enforcing STIG compliance, hardening Windows, Linux, and network systems, monitoring environments, supporting incident response, and assessing security impacts of system changes.

Conduct advanced cybersecurity monitoring, incident detection, investigation, response, threat analysis, and security validation across on-premises and cloud environments. Perform authorized vulnerability validation, penetration-test finding reproduction, remediation verification, and application security testing. Develop incident-response procedures, testing methodologies, documentation, and playbooks while supporting offensive security, adversary emulation, and purple-team capabilities. Mentor junior analysts and collaborate with technical teams and government stakeholders.

Maintains Authority to Operate for Navy education and training systems by managing compliance, vulnerability remediation, incident response, access coordination, security documentation, and continuous monitoring. Supports DevSecOps security integration, cloud security architecture, risk management, cybersecurity reporting, stakeholder coordination, vendor engagement, and implementation of security tools and controls across classified and unclassified environments.