Top Cybersecurity Jobs

Designs and implements cybersecurity controls, evaluates network, system, and application vulnerabilities, identifies advanced threats, and develops remediation strategies. The role involves monitoring and improving cyber defenses, responding to security breaches, communicating security risks to stakeholders, and supporting mission-critical infrastructure and national security initiatives.

Implements and assesses cybersecurity controls across information systems, ensuring compliance with NIST, federal, DoD, and agency standards. Develops security documentation, contingency and disaster recovery plans, mitigation strategies, and audit artifacts. Supports cyber defense operations involving intrusion detection, security event monitoring, data spillage response, and incident response. Requires Secret clearance, a bachelor’s degree, CISSP certification, and at least three years of cybersecurity experience.

Serve as a cybersecurity advisor to federal agency CIOs and CISOs. Translate cybersecurity policies, coordinate audits and federal mandates, improve enterprise security posture, develop security operating models, oversee ISSO security assessment and authorization activities, validate JCAM records, advise on system lifecycle requirements, perform risk assessments, and maintain security documentation. Requires strong communication, organizational skills, federal cybersecurity compliance expertise, hands-on JCAM experience, and an active Secret clearance.

Lead the strategy, roadmap, and growth of Horizon3’s Tripwires threat detection and deception product. Own detection fidelity, deployment coverage, alerting, integrations, dashboards, analyst workflows, customer insight, and commercial outcomes. Partner with Engineering, Design, Sales, Marketing, Customer Success, and Security teams to deliver precise, low-noise alerts and integrate Tripwires with SOC response workflows. Define product metrics, influence executive direction, and guide launches and adoption.

Plans and coordinates cybersecurity projects involving security policies, risk assessments, network and endpoint scans, security architecture, audits, and system certification. Develops project charters, business cases, budgets, schedules, reports, RFIs, and RFPs. Evaluates vulnerabilities and vendor submissions, coordinates stakeholders and rollout activities, and reports compliance findings and project status to leadership.

Lead design, implementation, and operationalization of Microsoft security solutions across identity, endpoint, cloud, data, and SOC domains for mission‑sensitive federal environments. Serve as technical advisor, integrate Microsoft Zero Trust stack with compliance frameworks, mentor consultants, and contribute reusable architectures, playbooks, and delivery accelerators.

Leads the global cybersecurity program, strategy, risk posture, governance, and executive reporting. Builds and manages the internal security team, oversees vendors and SLAs, directs incident response and cyber resilience, and owns security budgets and headcount planning. The role requires enterprise risk management, regulatory knowledge, board-level communication, security architecture fluency, and experience implementing NIST CSF or ISO 27001 programs.

Leads the global cybersecurity program, setting strategy, managing enterprise risk, and reporting cyber risk to executives and the board. Builds and leads the internal security team, manages vendors and SLAs, oversees incident response and cyber resilience, and establishes governance, policies, and awareness programs. Owns cybersecurity budgets and headcount planning while directing compliance, regulatory, architecture, and security maturity initiatives.

Secures software applications, cloud infrastructure, and IT systems by conducting assessments, threat modeling, vulnerability management, penetration testing, and incident response. Integrates security testing into the SDLC and CI/CD, supports AWS security architecture, improves security tools and dashboards, maintains documentation, and educates technical and non-technical stakeholders about security best practices, phishing, and social engineering.

Monitor and investigate cybersecurity alerts across enterprise platforms, triage and validate incidents, analyze threats and indicators of compromise, document investigations, coordinate containment and recovery, escalate confirmed threats, tune detection capabilities, review vulnerabilities, and develop SOC procedures and playbooks within a 24x7 operations environment.

Designs and delivers GM Financial’s cybersecurity architecture and program, including security controls, risk assessments, cloud and application security, network protections, compliance, and security strategy. Partners with technical and business stakeholders to reduce risks, assess systems, improve security maturity, guide infrastructure and application teams, and support cybersecurity education. The role also mentors team members and contributes to security automation, DevOps, container, and cloud security initiatives.

Executes cybersecurity governance and risk initiatives by developing policies, standards, and procedures; managing audits, remediation tracking, security requirements, and compliance reporting. Partners with business and technical teams to protect information assets, monitor adherence to controls, and address threats. The role requires knowledge of networking, infrastructure, security frameworks, IT service management, cloud technologies, and relevant regulations. It operates in a flexible hybrid environment with four office days weekly.

Supports cybersecurity for C-130 and other aeronautical systems at the Air Force Life Cycle Management Center. Advises the ISSM, develops cybersecurity strategies and RMF artifacts, supports IATT and ATO authorization, reviews program documentation, analyzes system components and vulnerabilities, identifies risks and safeguards, and verifies cybersecurity controls and mitigations. Requires aircraft or weapon-system experience, a Secret clearance, U.S. citizenship, and occasional travel.

Provides cybersecurity engineering support to a NAVSEA contractor team. Responsibilities include implementing and monitoring cyber defense measures, assessing vulnerabilities, developing remediation strategies, maintaining security controls, responding to breaches, and ensuring compliance with cybersecurity policies and Assessment and Authorization requirements. The role is based primarily at the Washington Navy Yard, with occasional naval-centric travel to locations including Norfolk and San Diego.

Lead global IT audit for technology risk, develop risk-based audit plans, perform risk assessments and audits across software, infrastructure, and emerging technologies (AI, connected vehicles, SaaS). Partner with Cyber Defense, internal controls, and global audit teams to modernize audit practices, monitor remediation, and support transformation initiatives. Represent audit with senior technology leaders and drive benchmarking, industry research, and continuous improvement.

Lead and oversee a large DoD enterprise IT and cybersecurity contract, interfacing with government leadership, managing staffing, subcontractors, risk, finances, compliance, SLAs, transitions, and delivery of cloud, infrastructure, DevSecOps, and security services across dispersed sites.

Implement and assess cybersecurity controls across information systems and Microsoft Azure environments. Support DoD RMF activities, Zero Trust implementation, ACAS vulnerability scanning, remediation tracking, Azure Policy administration, Microsoft Defender for Cloud assessments, Xacta documentation, infrastructure automation, continuous monitoring, and security-control evidence collection. Collaborate with cloud engineers, system administrators, DevSecOps teams, ISSOs, and cybersecurity personnel while documenting configurations and remediation activities.

Supports ISSMs and ISSOs in securing DoD information systems across tactical Army programs. Implements cybersecurity policies, manages RMF documentation and ATO packages, reviews vulnerability and penetration-test findings, analyzes architectures and data flows, coordinates incident remediation, maintains security artifacts, and supports continuous monitoring, system hardening, secure application development, and DevSecOps practices.

Own and implement the company-wide cybersecurity program, securing Microsoft 365, endpoints, identities, cloud infrastructure, email, and data. Manage EDR, MDM, MFA, DLP, DNS filtering, vulnerability management, monitoring, incident response, phishing prevention, and employee awareness. Conduct a security audit, prioritize remediation, support ISO 27001, SOC 2, and HIPAA compliance, and deliver a phased security rollout plan.

Conduct cybersecurity assessments, residual risk analysis, and Risk Management Framework documentation for Department of War IT systems. Recommend secure architectures, administer mixed network environments, perform vulnerability testing, support military tactical and non-tactical systems, and contribute to cybersecurity reporting. The role is fully on-site and requires eligibility for a Secret security clearance.

Designs and maintains cybersecurity controls for Windows and Linux enterprise systems. Administers Trellix ePO, ACAS/Nessus, and Splunk; performs vulnerability and compliance assessments; supports RMF documentation, STIG/SCAP validation, monitoring, incident response, and remediation. The role collaborates with infrastructure teams, provides security recommendations, and develops technical procedures and assessment reports.

Conduct vulnerability scans and security analyses on undersea combat platforms and support networks. Monitor SIEM data, detect and report cyber threats, analyze malicious activity, and develop and test mitigations. Apply cyber threat intelligence to address malware, phishing, and advanced persistent threats. Participation requires SkillBridge eligibility, military approval, U.S. citizenship, and an active Secret clearance.

Serve as the primary cybersecurity lead for classified information systems, managing RMF lifecycles, ATO authorization and renewals, security controls, compliance documentation, continuous monitoring, and coordination with DCSA, authorizing officials, system owners, engineers, administrators, and assessors. Support Cyber Operations by administering, testing, validating, and maintaining enterprise security systems and controls.

Performs cybersecurity risk assessments, vulnerability analysis, remediation tracking, continuous monitoring, incident response support, and Splunk-based security event analysis. Develops dashboards, alerts, reports, documentation, and training while supporting ACAS scans, STIG compliance, threat detection, and classified-system requirements analysis. Collaborates with system administrators, network engineers, application owners, and cybersecurity teams to strengthen security operations and resolve vulnerabilities.

Supports DoD Assessment and Authorization processes under the Risk Management Framework. Validates cybersecurity controls, advises system owners and J683, manages authorizations, prepares and updates Security Authorization Packages, maintains authorization artifacts and databases, and reports deliverables. Requires expertise across all RMF A&A phases, eMASS and related toolsets, DoD cybersecurity controls, contract financial management, and IAM-III certification. The role is office-based, requires U.S. citizenship and TS/SCI clearance, and involves no travel.