Top Cybersecurity Jobs

Lead triage and investigation of product security reports across vehicle, mobile, API, and backend software. Assess exploitability, impact, and risk; recommend severity and remediation. Coordinate with engineering, product, SOC, bug bounty, legal, and PSOC to validate fixes, improve PSIRT playbooks, and enhance tooling and reporting.

Leads cyber resiliency for a pharmaceutical manufacturing site, protecting IT, OT, automation, MES, and laboratory systems. Develops cyber risk strategies, recovery objectives, incident response processes, disaster recovery testing, ransomware exercises, and regulatory readiness. Partners with engineering, automation, quality, EHS, vendors, and cybersecurity teams to secure ICS environments and maintain GxP-compliant controls. Delivers awareness training and reports resiliency risks, KPIs, and recovery capabilities to site and enterprise leadership.

Administers and improves Microsoft Sentinel and Defender XDR security monitoring and response platforms. Develops and tunes detections, performs threat hunting and complex investigations, automates SOC workflows using Sentinel playbooks and Logic Apps, and supports incident response. Partners with SOC analysts, IT teams, and third-party providers, researches emerging threats, applies AI-assisted security capabilities, and improves monitoring, response, documentation, and regulatory compliance.

Design and deliver cybersecurity and fraud-detection solutions using AI/ML, data science, Databricks, Python, SQL, and R. Analyze large, disparate datasets, identify threats and process gaps, recommend remediation, and communicate insights to stakeholders. Lead delivery across cybersecurity, analytics, risk management, and product engagements while directing specialized data science, engineering, and business intelligence teams in secure environments.

Manage and monitor SIEM systems for near-real-time threat detection, anomaly investigation, incident escalation, dashboards, reporting, and audit support. Provide PKI and certificate support, review Army Cyber Tasking Orders, coordinate with Cyber Security Service Providers, participate in software assurance reviews, and evaluate system design plans for security compliance with DoD and Army requirements.

Supports ISSOs with cybersecurity compliance for NOAA FISMA systems by maintaining continuous monitoring documentation, security evidence, assessment packages, POA&Ms, compliance trackers, and authorization artifacts. Coordinates with system owners and technical stakeholders, reviews documentation for completeness, tracks vulnerabilities and remediation, supports NIST RMF and A&A/ATO activities, and helps maintain audit and assessment readiness.

Provides senior cybersecurity internal controls and Risk Management Framework support, including eMASS package development, asset categorization, validation reviews, compliance artifacts, ACAS and STIG remediation, POA&M management, annual security reviews, continuity and incident response testing, Army PPSM and Circuit Registry maintenance, and software assurance documentation.

Provides enterprise cybersecurity compliance and RMF support, including developing RMF packages, maintaining asset inventories and categorizations, coordinating validation reviews, reviewing ACAS and STIG findings, managing POA&Ms, conducting security reviews, supporting COOP and incident response testing, and maintaining Army cybersecurity records.

Manages SIEM infrastructure, dashboards, monitoring, and incident investigations for Army and DoD environments. Develops audit and security-control reporting, supports PKI and certificate management, reviews cyber tasking orders, coordinates with cybersecurity service providers, participates in software assurance reviews, and evaluates system design plans for security compliance.

Manage cybersecurity network defense activities, including ACAS infrastructure, vulnerability scanning, reporting, STIG compliance, AESS site reviews, DISA whitelist administration, PKI tokens, PPSM support, and security-impact reviews. The role also supports account in-processing and out-processing, training tracking, software assurance reviews, and remediation documentation in eMASS. An active DoD Secret clearance, cybersecurity certification, and at least 10 years of relevant experience are required.

Manages DoD network defense and security compliance activities, including ACAS infrastructure, vulnerability scanning, reporting, AESS site reviews, DISA whitelist and PKI token management, STIG compliance, PPSM support, configuration security reviews, and eMASS POA&M remediation tracking. The role also supports account processing, training and certification tracking, software assurance reviews, incident response, and security documentation. An active DoD Secret clearance and cybersecurity certification are required.

Develops and maintains DoD cybersecurity Assessment and Authorization packages, conducts continuous monitoring, vulnerability testing, risk assessments, and security analysis for U.S. Navy tactical combat systems. The role applies RMF, STIGs, NSA recommendations, and DoD security policies; serves as an ISSO; documents requirements and system architectures; and supports cybersecurity engineering, compliance, testing, and risk mitigation activities.

Develops and documents cybersecurity requirements, policies, architectures, risk assessments, threat analyses, and mitigation plans for Navy combat systems. Conducts classified cyber assurance research, analyzes policy gaps, leads cybersecurity strategy working groups, and applies MBSE models to cybersecurity engineering. The role is fully on-site at NSWC Dahlgren and requires an active Top Secret clearance with SCI eligibility.

Leads enterprise cybersecurity monitoring, 24x7 SOC and CSIRT operations, incident response, investigations, containment, remediation, and executive communications. Oversees SIEM monitoring, cloud security, identity investigations, malware analysis, forensics, and threat intelligence. Coordinates major incidents with legal, regulatory, law enforcement, and business stakeholders. Ensures compliance with healthcare and cybersecurity frameworks, drives AI-enabled security workflows, improves operational maturity, and hires, coaches, and evaluates cybersecurity personnel.

Operate and improve cybersecurity controls for a regulated AWS-hosted SaaS product. Responsibilities include security monitoring, endpoint protection, centralized logging, vulnerability management, detection tuning, incident response, data protection, compliance evidence, automation, and security reporting. The role investigates security events, supports FedRAMP and CJIS requirements, maintains operational readiness, and collaborates with engineering, cloud, compliance, privacy, legal, and product teams.

Provides cybersecurity and information assurance support for DISA enterprise software systems. Analyzes security requirements, resolves information security and workflow problems, and supports security engineering across system planning, design, development, testing, demonstration, and integration. Requires experience with Linux and Windows Server administration, scripting, SIEM tools, and incident response, along with an active Secret clearance.

Supports enterprise cyber governance, risk, and compliance activities across global and regional frameworks. Responsibilities include coordinating compliance inquiries, collecting audit evidence, monitoring controls, conducting IT asset risk assessments, coordinating maturity assessments, maintaining risk and compliance trackers, supporting certification lifecycles, researching regulations, preparing reports, and assisting with GRC procedures and awareness training.

Provide senior-level audit expertise for complex, risk-focused cybersecurity and technology audits. Plan and execute audit procedures, analyze findings, drive validation for internal and regulatory issues, incorporate data analytics, communicate with senior stakeholders, mentor junior staff, and ensure compliance with auditing standards and internal controls.

Leads Caturus Energy’s cybersecurity program across corporate IT and operational technology environments, including SCADA, ICS, LNG, and field systems. Responsibilities include security operations, vulnerability management, incident response, network segmentation, third-party testing, risk governance, compliance, ITGCs, executive reporting, AI security, vendor oversight, budgeting, and team development. The role requires ensuring security controls protect critical infrastructure without compromising process, personnel, or operational safety.

Leads systems engineering and cybersecurity integration for Protected Key Management Architecture modernization within an enterprise SATCOM system. Develops requirements, acquisition documentation, technical roadmaps, risk assessments, test and certification strategies, and integration plans. Coordinates cryptographic key management across government, contractor, NSA, space, ground, terminal, and payload stakeholders. Supports technical baseline reviews, vendor analysis, executive briefings, and deployment milestones. The role requires an active Top Secret clearance and substantial experience supporting national security space or DoD programs.

Leads global cybersecurity operations across enterprise IT, cloud, customer-facing applications, connected platforms, and manufacturing OT. Manages internal teams and MSSP partners, 24/7 monitoring, incident response, detection engineering, threat hunting, SIEM/SOAR optimization, compliance, and operational metrics. Serves as incident commander for major security events and partners with plant, product, application, and executive stakeholders to strengthen detection, response, and resilience.

Leads cybersecurity and Risk Management Framework activities for Air Force defense systems, including security documentation, ATOs, continuous monitoring, eMASS administration, vulnerability management, STIG implementation, architecture reviews, and risk mitigation. Supports classified information security, acquisition program security, cross-domain solutions, compliance assessments, policy development, and leadership advisement. Delivers cybersecurity training and collaborates with government and commercial stakeholders. Requires extensive DoD experience, a bachelor’s degree, CISSP certification, US citizenship, and Top Secret clearance.

Leads cyber operational planning, enterprise architecture, systems integration, and IT modernization across complex infrastructure and cloud environments. Diagnoses network and systems issues, implements security controls, governs process improvements using SAFe and ITIL 4, and develops CONOPS, decision papers, training plans, and executive summaries. The role coordinates multiple transformation initiatives, translates strategic guidance into actionable cyber plans, and communicates technical recommendations to senior military and government leaders.

Designs and supports enterprise identity security across IAM, identity lifecycle management, identity governance, and privileged access management. Leads Zero Standing Privileges initiatives, including just-in-time provisioning, risk-adaptive policies, contextual authorization, and least-privilege access. Assesses cybersecurity risks, develops security requirements and architecture, maintains policies and procedures, and collaborates with business, technology, compliance, and audit stakeholders. Requires expertise with Okta, IGA tools, identity lifecycle concepts, Zero Trust, authentication protocols, and identity automation.

Lead and grow the attack surface management program by identifying, assessing, and prioritizing exposures; drive remediation and automation; collaborate with AppSec, DevOps, and cloud teams; maintain standards, runbooks, and attack surface maps; present risk metrics; mentor teammates; and lead compliance activities (e.g., PCI).