Top Cybersecurity Jobs

Leads facility-wide cybersecurity, cyberinfrastructure oversight, and software program direction for a distributed scientific research facility. Owns cybersecurity plans, risk registers, compliance activities, corrective actions, technical requirements, budgets, schedules, and stakeholder reporting. Oversees software development through the Software Development Manager, integrates data center and implementing-organization performance information, supports incident reporting, and represents the program to NSF, reviewers, governance bodies, and technical partners.

Conducts cyber exploitation and vulnerability analysis involving network and system administration, information security, penetration testing, computer forensics, and information assurance. The role requires a TS/SCI clearance with polygraph, U.S. citizenship, and substantial relevant experience paired with an applicable technical degree or military coursework.

The role involves managing cybersecurity risks from third-party vendors, conducting risk assessments, supporting security processes, and engaging in event resolution.

Builds, deploys, configures, and maintains on-premises and cloud cybersecurity infrastructure across Windows and Linux environments. Implements AWS-based security solutions, modernizes enterprise cybersecurity systems, develops architecture diagrams and technology roadmaps, evaluates upgrades, supports testing and documentation, and coordinates security assessments and authorization processes. The role requires collaboration with government agencies, stakeholders, and assessors, along with independent technical leadership across large-scale global networks.

Analyzes network and cybersecurity data to identify incidents, trends, precursors, and potential compromises. Develops and tunes SIEM rules, signatures, and scripts; investigates alerts and false positives; supports incident response triage; and documents findings. Requires advanced cyber analytics experience, SIEM querying, signature development, network protocol analysis, scripting knowledge, DoD-compliant certifications, and TS/SCI clearance with ability to obtain a CI Poly.

Lead triage and investigation of product security reports across vehicle, mobile, API, and backend software. Assess exploitability, impact, and risk; recommend severity and remediation. Coordinate with engineering, product, SOC, bug bounty, legal, and PSOC to validate fixes, improve PSIRT playbooks, and enhance tooling and reporting.

Leads cyber resiliency for a pharmaceutical manufacturing site, protecting IT, OT, automation, MES, and laboratory systems. Develops cyber risk strategies, recovery objectives, incident response processes, disaster recovery testing, ransomware exercises, and regulatory readiness. Partners with engineering, automation, quality, EHS, vendors, and cybersecurity teams to secure ICS environments and maintain GxP-compliant controls. Delivers awareness training and reports resiliency risks, KPIs, and recovery capabilities to site and enterprise leadership.

Administers and improves Microsoft Sentinel and Defender XDR security monitoring and response platforms. Develops and tunes detections, performs threat hunting and complex investigations, automates SOC workflows using Sentinel playbooks and Logic Apps, and supports incident response. Partners with SOC analysts, IT teams, and third-party providers, researches emerging threats, applies AI-assisted security capabilities, and improves monitoring, response, documentation, and regulatory compliance.

Design and deliver cybersecurity and fraud-detection solutions using AI/ML, data science, Databricks, Python, SQL, and R. Analyze large, disparate datasets, identify threats and process gaps, recommend remediation, and communicate insights to stakeholders. Lead delivery across cybersecurity, analytics, risk management, and product engagements while directing specialized data science, engineering, and business intelligence teams in secure environments.

Manage and monitor SIEM systems for near-real-time threat detection, anomaly investigation, incident escalation, dashboards, reporting, and audit support. Provide PKI and certificate support, review Army Cyber Tasking Orders, coordinate with Cyber Security Service Providers, participate in software assurance reviews, and evaluate system design plans for security compliance with DoD and Army requirements.

Supports ISSOs with cybersecurity compliance for NOAA FISMA systems by maintaining continuous monitoring documentation, security evidence, assessment packages, POA&Ms, compliance trackers, and authorization artifacts. Coordinates with system owners and technical stakeholders, reviews documentation for completeness, tracks vulnerabilities and remediation, supports NIST RMF and A&A/ATO activities, and helps maintain audit and assessment readiness.

Provides senior cybersecurity internal controls and Risk Management Framework support, including eMASS package development, asset categorization, validation reviews, compliance artifacts, ACAS and STIG remediation, POA&M management, annual security reviews, continuity and incident response testing, Army PPSM and Circuit Registry maintenance, and software assurance documentation.

Provides enterprise cybersecurity compliance and RMF support, including developing RMF packages, maintaining asset inventories and categorizations, coordinating validation reviews, reviewing ACAS and STIG findings, managing POA&Ms, conducting security reviews, supporting COOP and incident response testing, and maintaining Army cybersecurity records.

Manages SIEM infrastructure, dashboards, monitoring, and incident investigations for Army and DoD environments. Develops audit and security-control reporting, supports PKI and certificate management, reviews cyber tasking orders, coordinates with cybersecurity service providers, participates in software assurance reviews, and evaluates system design plans for security compliance.

Manage cybersecurity network defense activities, including ACAS infrastructure, vulnerability scanning, reporting, STIG compliance, AESS site reviews, DISA whitelist administration, PKI tokens, PPSM support, and security-impact reviews. The role also supports account in-processing and out-processing, training tracking, software assurance reviews, and remediation documentation in eMASS. An active DoD Secret clearance, cybersecurity certification, and at least 10 years of relevant experience are required.

Manages DoD network defense and security compliance activities, including ACAS infrastructure, vulnerability scanning, reporting, AESS site reviews, DISA whitelist and PKI token management, STIG compliance, PPSM support, configuration security reviews, and eMASS POA&M remediation tracking. The role also supports account processing, training and certification tracking, software assurance reviews, incident response, and security documentation. An active DoD Secret clearance and cybersecurity certification are required.

Develops and maintains DoD cybersecurity Assessment and Authorization packages, conducts continuous monitoring, vulnerability testing, risk assessments, and security analysis for U.S. Navy tactical combat systems. The role applies RMF, STIGs, NSA recommendations, and DoD security policies; serves as an ISSO; documents requirements and system architectures; and supports cybersecurity engineering, compliance, testing, and risk mitigation activities.

Develops and documents cybersecurity requirements, policies, architectures, risk assessments, threat analyses, and mitigation plans for Navy combat systems. Conducts classified cyber assurance research, analyzes policy gaps, leads cybersecurity strategy working groups, and applies MBSE models to cybersecurity engineering. The role is fully on-site at NSWC Dahlgren and requires an active Top Secret clearance with SCI eligibility.

Leads enterprise cybersecurity monitoring, 24x7 SOC and CSIRT operations, incident response, investigations, containment, remediation, and executive communications. Oversees SIEM monitoring, cloud security, identity investigations, malware analysis, forensics, and threat intelligence. Coordinates major incidents with legal, regulatory, law enforcement, and business stakeholders. Ensures compliance with healthcare and cybersecurity frameworks, drives AI-enabled security workflows, improves operational maturity, and hires, coaches, and evaluates cybersecurity personnel.

Operate and improve cybersecurity controls for a regulated AWS-hosted SaaS product. Responsibilities include security monitoring, endpoint protection, centralized logging, vulnerability management, detection tuning, incident response, data protection, compliance evidence, automation, and security reporting. The role investigates security events, supports FedRAMP and CJIS requirements, maintains operational readiness, and collaborates with engineering, cloud, compliance, privacy, legal, and product teams.

Provides cybersecurity and information assurance support for DISA enterprise software systems. Analyzes security requirements, resolves information security and workflow problems, and supports security engineering across system planning, design, development, testing, demonstration, and integration. Requires experience with Linux and Windows Server administration, scripting, SIEM tools, and incident response, along with an active Secret clearance.

Supports enterprise cyber governance, risk, and compliance activities across global and regional frameworks. Responsibilities include coordinating compliance inquiries, collecting audit evidence, monitoring controls, conducting IT asset risk assessments, coordinating maturity assessments, maintaining risk and compliance trackers, supporting certification lifecycles, researching regulations, preparing reports, and assisting with GRC procedures and awareness training.

Provide senior-level audit expertise for complex, risk-focused cybersecurity and technology audits. Plan and execute audit procedures, analyze findings, drive validation for internal and regulatory issues, incorporate data analytics, communicate with senior stakeholders, mentor junior staff, and ensure compliance with auditing standards and internal controls.

Leads Caturus Energy’s cybersecurity program across corporate IT and operational technology environments, including SCADA, ICS, LNG, and field systems. Responsibilities include security operations, vulnerability management, incident response, network segmentation, third-party testing, risk governance, compliance, ITGCs, executive reporting, AI security, vendor oversight, budgeting, and team development. The role requires ensuring security controls protect critical infrastructure without compromising process, personnel, or operational safety.

Leads systems engineering and cybersecurity integration for Protected Key Management Architecture modernization within an enterprise SATCOM system. Develops requirements, acquisition documentation, technical roadmaps, risk assessments, test and certification strategies, and integration plans. Coordinates cryptographic key management across government, contractor, NSA, space, ground, terminal, and payload stakeholders. Supports technical baseline reviews, vendor analysis, executive briefings, and deployment milestones. The role requires an active Top Secret clearance and substantial experience supporting national security space or DoD programs.