Top Cybersecurity Jobs

Lead identity and access management across Azure/Entra ID, on‑prem Active Directory, Okta, and Microsoft 365. Administer Azure platform services, implement RBAC, MFA, SSO and conditional access, ensure security/compliance, perform monitoring/troubleshooting, automate with PowerShell/Azure CLI, support incident response, and mentor junior engineers.

Support USPACOM J6 MPE engineering and integration: translate mission requirements into technical plans, support RMF documentation and POA&M, validate security controls, perform vulnerability and risk analysis, and produce technical briefings and recommendations for stakeholders.

Monitor, triage, investigate, and respond to security alerts across endpoints, cloud, and networks. Administer security tools (EDR/XDR, SIEM, Azure Sentinel, PIM/PAM), tune detections, support incident containment and remediation, assist threat hunting and playbook development, and help maintain compliance with CMMC/NIST/DFARS while documenting investigations and collaborating with IT and engineering teams.

Lead and build IT and cybersecurity program management for DoD-aligned initiatives. Establish Disciplined Agile frameworks, governance, and PMO foundations; manage end-to-end delivery, compliance (NIST 800-171/CMMC, ITAR/EAR, CUI), contracts (FAR/DFARS), risk, schedules, and cross-functional teams; support customer communications, accreditation, and proposal/capture activities.

Monitor, triage, investigate, and respond to security alerts across endpoints, cloud, and networks. Administer SOC tools (EDR/XDR, SIEM, Azure Sentinel), assist containment and remediation, tune detections, support compliance (CMMC, NIST 800-171, DFARS), and collaborate with IT and engineering to improve security posture.

Monitor, triage, investigate, and respond to security alerts across endpoints, cloud, and networks. Administer SOC tools (EDR/XDR, SIEM, Azure Sentinel), support incident response, threat hunting, detection rule tuning, vulnerability tracking, compliance (CMMC, NIST 800-171, DFARS), and collaborate with IT and engineering to improve security posture.

Build and operate cloud security posture and related platforms; co-own enterprise cybersecurity programs; perform security architecture reviews; design and implement cloud security solutions (IAM, network, data protection, DevSecOps); automate security processes; advise IT on secure infrastructure and compliance with frameworks; maintain relevant certifications. On-site hybrid role in Los Angeles.

Lead CrowdStrike implementation and integration across on-prem and cloud environments; harden servers, networks, and storage; support vulnerability management and SIEM development; drive CMMC/NIST 800-171 compliance; assist incident response and forensic readiness; communicate risks and remediation to leadership.

Plan and execute IT advisory, assessment and audit projects using GRC practices. Perform cybersecurity audits, risk assessments, controls reviews, and HIPAA compliance assessments. Document and present findings, maintain work papers, liaise with stakeholders and external auditors, and recommend risk mitigation and performance improvements.

Lead implementation of RMF A&A activities, perform risk and vulnerability assessments, manage PKI/accounts/ACLs, ensure STIG and DoD cloud compliance, maintain classified material and clearance databases, produce security engineering artifacts, support eMASS and acquisition security, and deliver security training and stakeholder coordination to achieve authorization and continuous compliance.

Sell expert-led cybersecurity advisory and GRC services to new and existing clients. Generate leads, build a book of business, develop proposals, meet sales quotas, and work with subject matter experts to address regulatory requirements, manage cyber risk, and improve security maturity across IT/OT environments.

Monitor systems and networks to identify, evaluate, and remediate cyber threats. Conduct incident investigations, vulnerability assessments, and penetration tests. Enforce security policies, collaborate with IT/business teams, mentor junior analysts, and participate in cybersecurity training and incident response.

Lead RMF accreditation and ATO activities for U.S. Navy mission systems: develop RMF artifacts (SSP, SAR, POA&M), perform vulnerability scanning and remediation, manage continuous monitoring, coordinate with Navy AOs/SCAs/ISSMs, harden systems, maintain golden images, and document systems and networks for technical and non-technical stakeholders.

Lead RMF accreditation for Navy mission systems including ATO activities, vulnerability management, continuous monitoring, and security engineering. Develop RMF artifacts (SSPs, SARs, POA&Ms), perform ACAS/Nessus scans and STIG checklist work, remediate vulnerabilities, manage authorization packages, maintain golden images and VMs, and coordinate with Navy AOs, SCAs, ISSMs, and program managers.

Support GRC activities to build and maintain CMMC 2.0 and DFARS compliance programs: perform gap analyses, prepare for assessments, translate NIST/DFARS/CMMC requirements into guidance, support contract and supply chain compliance, and collect continuous monitoring data.

Lead security operations and governance for cloud and hybrid environments, manage incident response and vulnerability programs, partner with legal and business stakeholders on risk, build and coach a security team, and provide executive-level cybersecurity guidance.

Teach and develop project-based undergraduate and advanced courses and labs in cybersecurity, information systems, computer science, or cyber engineering; advise students; participate in student organizations, assessment, accreditation, committees, and professional development while maintaining community and industry relationships.

Lead RMF lifecycle and security authorization efforts (SSP, SAR, POA&M, eMASS) to achieve ATOs; conduct and validate DoD/DON control assessments; manage vulnerability scanning (ACAS/Tenable) and STIG/SRG compliance; implement continuous monitoring dashboards; coordinate with system owners, ISSOs/ISSMs and leadership; advise on governance, process improvements, and training.

Support RMF A&A, risk and vulnerability assessments, compliance tracking, incident handling, and ISCM. Produce and maintain BoE artifacts (STIGs, SCAP, ACAS, Nessus), POAMs, SOPs, and documentation; coordinate with network/system admins and government POCs to remediate findings and maintain authorization records.

The Cybersecurity Engineer protects assets by managing firewalls, conducting risk assessments, and ensuring network security compliance with industry standards.

Lead Cybersecurity GRC compliance and assurance activities, coordinating SOC2/SOX evidence and audits, overseeing global cyber regulatory adherence, tracking remediation, and advising stakeholders to embed controls into products and operations.

Lead cybersecurity program financial planning and delivery across multi‑workstream initiatives. Track actuals vs. forecast, perform variance analysis, maintain spend documentation, produce executive reporting and dashboards, partner with finance/procurement/vendor teams, and provide governance, training, and guidance to ensure disciplined program execution.

Lead GRC efforts for cybersecurity by coordinating controls evidence, supporting SOC2 and SOX testing, interfacing with auditors/regulators/clients, tracking remediation, and embedding compliant practices across products and teams.

Lead execution of enterprise cybersecurity programs for the ASM/VM portfolio. Oversee project and program managers, manage stakeholder engagement, change and risk, financials and staffing, negotiate with senior leaders, report to the Global CISO, and ensure alignment of program outcomes with strategic objectives.

Operate daily security monitoring and alert triage, coordinate with a managed SOC partner, maintain incident and event logs, produce audit and compliance evidence, and support continuous monitoring and incident response documentation for certification readiness.