Top Cybersecurity Jobs

Own and implement the company-wide cybersecurity program, securing Microsoft 365, endpoints, identities, cloud infrastructure, email, and data. Manage EDR, MDM, MFA, DLP, DNS filtering, vulnerability management, monitoring, incident response, phishing prevention, and employee awareness. Conduct a security audit, prioritize remediation, support ISO 27001, SOC 2, and HIPAA compliance, and deliver a phased security rollout plan.

Conduct cybersecurity assessments, residual risk analysis, and Risk Management Framework documentation for Department of War IT systems. Recommend secure architectures, administer mixed network environments, perform vulnerability testing, support military tactical and non-tactical systems, and contribute to cybersecurity reporting. The role is fully on-site and requires eligibility for a Secret security clearance.

Designs and maintains cybersecurity controls for Windows and Linux enterprise systems. Administers Trellix ePO, ACAS/Nessus, and Splunk; performs vulnerability and compliance assessments; supports RMF documentation, STIG/SCAP validation, monitoring, incident response, and remediation. The role collaborates with infrastructure teams, provides security recommendations, and develops technical procedures and assessment reports.

Conduct vulnerability scans and security analyses on undersea combat platforms and support networks. Monitor SIEM data, detect and report cyber threats, analyze malicious activity, and develop and test mitigations. Apply cyber threat intelligence to address malware, phishing, and advanced persistent threats. Participation requires SkillBridge eligibility, military approval, U.S. citizenship, and an active Secret clearance.

Serve as the primary cybersecurity lead for classified information systems, managing RMF lifecycles, ATO authorization and renewals, security controls, compliance documentation, continuous monitoring, and coordination with DCSA, authorizing officials, system owners, engineers, administrators, and assessors. Support Cyber Operations by administering, testing, validating, and maintaining enterprise security systems and controls.

Performs cybersecurity risk assessments, vulnerability analysis, remediation tracking, continuous monitoring, incident response support, and Splunk-based security event analysis. Develops dashboards, alerts, reports, documentation, and training while supporting ACAS scans, STIG compliance, threat detection, and classified-system requirements analysis. Collaborates with system administrators, network engineers, application owners, and cybersecurity teams to strengthen security operations and resolve vulnerabilities.

Supports DoD Assessment and Authorization processes under the Risk Management Framework. Validates cybersecurity controls, advises system owners and J683, manages authorizations, prepares and updates Security Authorization Packages, maintains authorization artifacts and databases, and reports deliverables. Requires expertise across all RMF A&A phases, eMASS and related toolsets, DoD cybersecurity controls, contract financial management, and IAM-III certification. The role is office-based, requires U.S. citizenship and TS/SCI clearance, and involves no travel.

Leads global IT strategy and teams across infrastructure, cloud operations, cybersecurity, AI security, enterprise platforms, and service management. Oversees hybrid infrastructure modernization, platform engineering, resilience, incident response, risk management, compliance, vendor relationships, budgets, and software licensing. Partners with executives and business functions to drive digital transformation, secure emerging technology adoption, and reliable global IT operations.

Monitor network traffic, IDS alerts, security events, and logs to identify threats and false positives. Develop SOC procedures, produce situation reports, investigate incidents, create SIEM and IDS detection content, recommend proactive security blocks, and advise incident responders. The role requires shift work, multitasking under pressure, incident response experience, a bachelor’s degree, a relevant cybersecurity certification, and eligibility for a government clearance.

Monitor network traffic, IDS, SIEM events, and security logs; distinguish real threats from false alarms; investigate incidents; create detection content; maintain SOC procedures; advise incident responders; produce situation reports and security communications; and track investigations to resolution while working shifts.

Monitor network traffic, IDS alerts, security events, and logs; investigate anomalous activity and security incidents; develop SOC procedures, situation reports, detection content, and alert communications; advise incident responders; track investigations through resolution; and remain current on vulnerabilities and attack countermeasures while working shifts.

Conduct cybersecurity research on embedded firmware, focusing on separating application logic from hardware-dependent code. Develop an automated analysis framework to recover this boundary, evaluate it during firmware execution, conduct validation experiments, and prepare technical reports. The role is part-time wage payroll employment within Penn State’s Cyber Security Lab.

Designs, builds, and operates security data engineering foundations: ingesting, normalizing, enriching, and modeling telemetry in Databricks to support detections, analytics, investigations, and operational workflows. Owns production-grade batch and streaming pipelines, data quality controls, observability, performance tuning, governance, and collaborates with detection, platform, and security teams to ensure trustworthy, scalable security data products.

Design, build, and operate production-ready agentic AI solutions for cyber defense. Integrate LLMs, agent frameworks, enterprise data, and workflows; ensure secure, observable, and governed deployments; define evaluation, telemetry, human-in-the-loop controls, and support incident response and vulnerability management.

Leads cybersecurity governance, risk, and compliance activities, including policy and security documentation, SSPs, POA&Ms, control assessments, continuous monitoring, risk assessments, and remediation tracking. Advises technical and business stakeholders on NIST SP 800-171, CMMC, CUI protection, evidence management, and federal cybersecurity requirements. Supports CMMC and other external assessments, communicates risks and recommendations, and promotes risk-informed security improvements across the organization.

Leads the enterprise cybersecurity third-party risk management program, including governance, risk assessments, vendor due diligence, contractual security requirements, ongoing monitoring, remediation, fourth-party risk, executive reporting, and audit readiness. Partners with Legal, Procurement, Privacy, Compliance, business stakeholders, and leadership to evaluate supplier cyber risk, manage exceptions, and align vendor decisions with enterprise risk appetite.

Supports DoD cyber defense training programs by researching requirements, developing curricula and training materials, managing readiness metrics and certification records, maintaining training databases, and coordinating exercises and assessments. The role supports Joint Training System activities, after-action processes, workforce improvement initiatives, security awareness, and System Security Plan updates. It requires DoD cyber training expertise, IAT Level II certification, knowledge of joint planning systems, an active TS/SCI clearance, and occasional travel.

Plans and supports DoD cyber exercises across the Joint Event Lifecycle, aligning training objectives with readiness assessments and operational events. Develops exercise orders, scenarios, plans, and effectiveness measures; manages objectives in JTIMS; maintains SharePoint planning resources; coordinates tabletop exercises and rehearsals; and supports Joint Training and Exercise Plans. Requires strong knowledge of Joint Training System processes, analytical skills, advanced communication abilities, and an active DoD TS/SCI clearance.

Design, build, and operate production-ready user-facing applications and supporting services for Cyber Security Operations. Own Angular frontends and integrate backend services (Java/Spring Boot, Python) with enterprise APIs and AWS. Ensure secure development practices, observability, CI/CD, and operational readiness. Collaborate with security, platform, AI, and architecture teams to integrate LLM/agentic capabilities, automate detections and orchestration, support incident response, and continuously improve reliability and maintainability.

Provide end-to-end cybersecurity engineering for FAA air traffic control systems across requirements, design, integration, testing, deployment, authorization, operations, and sustainment. Develop and trace security requirements, SSPs, RMF artifacts, controls, POA&Ms, and authorization evidence. Conduct architecture reviews, risk assessments, security testing, vulnerability management, remediation verification, and continuous monitoring while collaborating with engineering teams, program leadership, and customers.

Provides senior technical leadership for secure enterprise, network, virtualization, and cybersecurity architectures supporting DoD and Intelligence Community environments. Designs VMware NSX, Cisco, LAN/WAN, encrypted network, and monitoring solutions; leads modernization, automation, threat modeling, risk assessments, incident response, and compliance efforts. Advises leadership and mission stakeholders on Zero Trust, secure-by-design implementations, and cyber defense while mentoring engineering teams.

Provides end-to-end cybersecurity engineering for mission-critical FAA air traffic systems across requirements, design, integration, testing, authorization, deployment, operations, and sustainment. Responsibilities include maintaining cybersecurity requirements, SSPs, RMF artifacts, security controls, POA&Ms, and authorization evidence; conducting architecture reviews, risk assessments, vulnerability analysis, security testing, and remediation; supporting continuous monitoring and configuration control; and communicating risks and solutions to technical, program, and customer stakeholders.

Leads cybersecurity operations for critical national mission and space systems. Responsibilities include developing security requirements, RMF documentation, test plans, risk and vulnerability assessments, incident investigations, audits, security architecture, compliance monitoring, and corrective actions. The role serves as the primary cybersecurity point of contact, coordinates customers and vendors, manages schedules and budgets, presents technical findings, and supervises cybersecurity personnel.

Senior Cybersecurity Engineer supporting a 24x7 SOC by designing, integrating, and sustaining security architectures and monitoring tools. Responsibilities include implementing Zero Trust controls, optimizing SIEM, SOAR, and NDR platforms, supporting secure cloud and DevSecOps architectures, engineering PKI and post-quantum cryptography solutions, securing AI-enabled systems, and providing Tier III incident support. The role also includes technical leadership, mentoring, and continuous improvement of SOC capabilities.

Performs cybersecurity engineering research, analysis, and recommendations for USCYBERCOM and CNMF networks. Develops cybersecurity documentation, concept papers, and test plans under DOD policies and the Risk Management Framework. Evaluates system performance, supports certification and accreditation, assesses infrastructure requests, coordinates among operators, developers, and engineers, and serves as an Information System Security Officer. Requires DOD cybersecurity expertise, an IAM Level I certification, U.S. citizenship, and an active Top Secret/SCI clearance with polygraph.