Top Cybersecurity Jobs

Designs and oversees cybersecurity architecture, controls, documentation, monitoring, and compliance for cloud and tactical edge platforms in defense environments. The role applies Zero Trust, RMF, NIST, DISA STIGs, DevSecOps, vulnerability management, threat modeling, and incident response practices. It advises government and vendor stakeholders, validates security capabilities, supports DDIL operations, leads cybersecurity working groups, and briefs senior audiences. An active Secret clearance and extensive defense cybersecurity engineering experience are required.

Leads cybersecurity assessment and authorization activities for classified DoD and Intelligence Community systems. Maintains SSPs, POA&Ms, SARs, and ATO artifacts; performs vulnerability scanning and remediation tracking; validates NIST and CNSSI controls; supports hardening, patching, STIG compliance, monitoring, incident response, and change-impact assessments. Collaborates with engineering, administration, and DevSecOps teams.

Conduct cybersecurity assessments and penetration tests for GPS and Positioning, Navigation and Timing systems supporting the U.S. Space Force. Identify vulnerabilities, analyze risks, develop mitigation recommendations, improve assessment processes and automation, and brief technical findings to government and customer stakeholders. The role requires collaboration with engineering teams, subcontractors, and Space Force personnel while applying DoD and NIST cybersecurity standards.

Conduct advanced cybersecurity monitoring, incident detection, investigation, response, threat analysis, and security validation across on-premises and cloud environments. Perform authorized vulnerability validation, penetration-test finding reproduction, remediation verification, and application security testing. Develop incident-response procedures, testing methodologies, documentation, and playbooks while supporting offensive security, adversary emulation, and purple-team capabilities. Mentor junior analysts and collaborate with technical teams and government stakeholders.

Maintains Authority to Operate for Navy education and training systems by managing compliance, vulnerability remediation, incident response, access coordination, security documentation, and continuous monitoring. Supports DevSecOps security integration, cloud security architecture, risk management, cybersecurity reporting, stakeholder coordination, vendor engagement, and implementation of security tools and controls across classified and unclassified environments.

Administers Armis Centrix and performs Tier 3 SOC cybersecurity operations for a state government customer. Responsibilities include network security monitoring, incident investigation and response, threat and vulnerability analysis, forensic evidence collection, incident containment, secure system restoration, threat intelligence analysis, tool configuration, vendor coordination, metrics reporting, and executive briefings.

Leads cybersecurity governance and accreditation for Air Force development, integration, and test environments. Owns RMF/ATO packages, SSPs, POA&Ms, continuous monitoring, and vulnerability remediation. Validates cyber artifacts, supports cloud and DSOP engineers, advises ARB/CCB promotion decisions, ensures MLS/MILS boundary compliance, and coordinates corrective actions across technical teams. Mentors cybersecurity staff and drives alignment with JSIG, NIST, STIG, and RMF requirements.

Build and operate secure DevSecOps pipelines using SAST, DAST, container scanning, SBOM/SCA, artifact validation, and vulnerability gates. Produce RMF/cATO evidence, support secure coding compliance, drive CWE/CVE remediation, validate rollback readiness, and help developers adopt secure-by-default CI/CD automation across cloud and mission environments.

Manage cybersecurity and Risk Management Framework activities for DoD systems supporting USSOCOM. Maintain security authorization documentation, assess security controls, track weaknesses, support remediation and continuous monitoring, and ensure compliance with NIST, FISMA, DoD, DISA, FedRAMP, and cloud security requirements. Use eMASS, STIGs, and STIG Viewer for compliance reporting, while preparing stakeholder briefings and collaborating with IT teams.

Secure and accredit multi-tenant, multi-classification cloud environments across development, integration, and test enclaves. Implement JSIG, NIST, STIG, RMF, and ATO requirements; maintain SSPs, POA&Ms, and continuous-monitoring evidence; validate vulnerability, application-security, container, and infrastructure-as-code outputs; support secure cloud and DevSecOps design; and provide cybersecurity guidance for capability-provider artifacts and promotion decisions.

Maintains cybersecurity compliance for DoD systems throughout the RMF lifecycle. Responsibilities include managing POA&Ms, eMASS and DITPR-DON records, VRAM vulnerability data, FISMA documentation, security assessment reports, engineering change reviews, and compliance with DISA STIGs, NIST, NSA, and DoD policies. The analyst supports vulnerability remediation, system change assessments, and cybersecurity workforce certification requirements.

Maintain Authority to Operate for Navy education systems, coordinate secure access, monitor vulnerabilities and incidents, manage compliance reporting, support audits, and integrate security into DevSecOps. The role includes incident investigation, threat analysis, remediation, cloud and enterprise security architecture, cybersecurity documentation, vendor coordination, risk management, and implementation of secure tools, applications, migrations, and deployment processes.

Manage complex, citywide cybersecurity programs and multiple concurrent projects across agencies, vendors, and stakeholders. Responsibilities include vendor selection, RFI/RFP development, budgeting, scheduling, contractor management, risk assessment, reporting, dashboard strategy, PMO development, workflow implementation, proof-of-concept trials, and executive communications. The role supports Cyber Command leadership and may require varied shifts in a 24/7 operational environment.

Lead advanced cyber investigations and detection engineering across endpoint, network, cloud, identity, application, and manufacturing environments. Develop and tune detections in SIEM/EDR/NDR/SOAR, conduct threat hunting, apply MITRE ATT&CK, automate workflows with scripting/AI, mentor analysts, and collaborate across security teams to improve detection fidelity and response.

Leads the Cyber & Information Security portfolio and program governance for a healthcare organization. Oversees prioritization, dependencies, risks, budgeting, execution, reporting, process optimization, and executive visibility across security initiatives. Supports CISO and Board engagements, coordinates governance materials and follow-up, participates in business continuity exercises, advises leadership on operational risks, and mentors team members. Requires substantial experience managing complex technology or security programs in regulated environments.

Lead pre-sales security architecture engagements by designing and validating defense-in-depth solutions across hybrid, cloud, application, identity, endpoint, network, and data environments. Conduct security assessments, create remediation roadmaps, integrate security platforms, and support DevSecOps, SOC, detection engineering, incident response, compliance, and risk programs. Collaborate with sales, engineering, clients, and executive stakeholders to communicate technical trade-offs and deliver scalable enterprise security strategies.

Implements and assesses cybersecurity controls across information systems, ensuring compliance with NIST, federal, DoD, and agency standards. Develops security documentation, contingency and disaster recovery plans, mitigation strategies, and audit artifacts. Supports cyber defense operations involving intrusion detection, security event monitoring, data spillage response, and incident response. Requires Secret clearance, a bachelor’s degree, CISSP certification, and at least three years of cybersecurity experience.

Designs and implements cybersecurity controls, evaluates network, system, and application vulnerabilities, identifies advanced threats, and develops remediation strategies. The role involves monitoring and improving cyber defenses, responding to security breaches, communicating security risks to stakeholders, and supporting mission-critical infrastructure and national security initiatives.

Serve as a cybersecurity advisor to federal agency CIOs and CISOs. Translate cybersecurity policies, coordinate audits and federal mandates, improve enterprise security posture, develop security operating models, oversee ISSO security assessment and authorization activities, validate JCAM records, advise on system lifecycle requirements, perform risk assessments, and maintain security documentation. Requires strong communication, organizational skills, federal cybersecurity compliance expertise, hands-on JCAM experience, and an active Secret clearance.

Lead the strategy, roadmap, and growth of Horizon3’s Tripwires threat detection and deception product. Own detection fidelity, deployment coverage, alerting, integrations, dashboards, analyst workflows, customer insight, and commercial outcomes. Partner with Engineering, Design, Sales, Marketing, Customer Success, and Security teams to deliver precise, low-noise alerts and integrate Tripwires with SOC response workflows. Define product metrics, influence executive direction, and guide launches and adoption.

Plans and coordinates cybersecurity projects involving security policies, risk assessments, network and endpoint scans, security architecture, audits, and system certification. Develops project charters, business cases, budgets, schedules, reports, RFIs, and RFPs. Evaluates vulnerabilities and vendor submissions, coordinates stakeholders and rollout activities, and reports compliance findings and project status to leadership.

Leads the global cybersecurity program, strategy, risk posture, governance, and executive reporting. Builds and manages the internal security team, oversees vendors and SLAs, directs incident response and cyber resilience, and owns security budgets and headcount planning. The role requires enterprise risk management, regulatory knowledge, board-level communication, security architecture fluency, and experience implementing NIST CSF or ISO 27001 programs.

Leads the global cybersecurity program, setting strategy, managing enterprise risk, and reporting cyber risk to executives and the board. Builds and leads the internal security team, manages vendors and SLAs, oversees incident response and cyber resilience, and establishes governance, policies, and awareness programs. Owns cybersecurity budgets and headcount planning while directing compliance, regulatory, architecture, and security maturity initiatives.

Monitor and investigate cybersecurity alerts across enterprise platforms, triage and validate incidents, analyze threats and indicators of compromise, document investigations, coordinate containment and recovery, escalate confirmed threats, tune detection capabilities, review vulnerabilities, and develop SOC procedures and playbooks within a 24x7 operations environment.

Designs and delivers GM Financial’s cybersecurity architecture and program, including security controls, risk assessments, cloud and application security, network protections, compliance, and security strategy. Partners with technical and business stakeholders to reduce risks, assess systems, improve security maturity, guide infrastructure and application teams, and support cybersecurity education. The role also mentors team members and contributes to security automation, DevOps, container, and cloud security initiatives.