Top Cybersecurity Jobs

Provide cybersecurity expertise across multiple client engagements, supporting NIST RMF and DoD A&A activities, performing vulnerability assessments, security control implementation and validation, producing technical documentation (SSPs, POA&Ms, policies), conducting client briefings, and contributing to business development. Role requires frequent client travel and collaboration with project managers to ensure deliverables are on schedule and meet quality standards.

Assess hardware and software for vulnerabilities, perform vulnerability scans and manual STIG verifications, develop RMF artifacts, guide cybersecurity architecture and tool selection, automate cybersecurity processes, and lead verification and systems engineering activities across the lifecycle to ensure controls are effective.

Senior technical consultant delivering ICS/OT cybersecurity and CRM-focused projects. Provide technical expertise, project planning and execution, risk assessments, client presentations, proposals, and business development. Coordinate stakeholders across cybersecurity, control systems, IT, and operations, support compliance and operational resilience, and contribute to documentation and continuous improvement while traveling frequently to client sites.

Support ISSO/SSPO on RMF compliance, SA&A activities, and information security governance. Prepare and maintain SSPs, RARs, POA&Ms, FISMA reporting, PTAs/PIAs, and security documentation. Coordinate with stakeholders, support FedRAMP and cloud SA&As, and maintain SOPs, templates, and training compliance. Onsite work in Hyattsville, MD with situational telework.

Lead cybersecurity and IT infrastructure operations, coordinate with MSSP, manage incident response, firewalls, endpoint protection and backups, oversee on-premise and cloud systems (O365/Azure), supervise helpdesk and AV/office IT, manage procurement and asset lifecycle, and ensure security policy compliance and documentation.

The role involves managing cybersecurity engineering projects, developing secure applications, utilizing various programming languages and cloud technologies, and implementing DevSecOps methodologies.

As a Cybersecurity Expert, you'll lead the establishment of a SOC, manage cyber operations, and collaborate on security solutions, focusing on compliance and technical mentorship.

The Senior Cybersecurity Audit Analyst coordinates external cybersecurity audits, manages compliance assessments, and tracks remediation efforts while ensuring communication with stakeholders.

Partner with engineering, operations, and security teams to assess and improve security posture, design and enforce architecture and Zero Trust controls, implement security frameworks and configuration guidelines, support application and platform security (DAST/SAST), and manage tactical execution of security risk reduction and compliance activities.

Support NICHD information assurance by monitoring security tools, triaging alerts, investigating incidents, tracking vulnerability remediation, maintaining FISMA compliance and dashboards, processing ServiceNow requests, supporting ATO/FISMA recertification, and collaborating on security operations and reporting.

Perform hands-on implementation, operation, and improvement of Identity and Access Management solutions. Provide IAM technical expertise, evaluate authentication/authorization policies, govern IAM platforms, support user provisioning/SSO/MFA/PAM, triage incidents, produce metrics/audit reports, and collaborate with application/infrastructure teams. Participate in project delivery and a scheduled 24x7 on-call rotation.

Lead development, revision, and maintenance of enterprise- and government-level cybersecurity policies, standards, procedures, and guidelines. Ensure compliance with federal frameworks (NIST, FISMA, DoD, CMMC), perform gap analyses, collaborate with SMEs and legal teams, maintain document control, support ATO and audit processes, and recommend policy updates to strengthen security posture.

Hands-on security engineer responsible for detection, triage, investigation, incident response, remediation, and continuous improvement across endpoint, identity, email, network, cloud, and hybrid environments. Tune SIEM/EDR, reduce false positives, develop IR playbooks, partner with IT to remediate root causes, and support vulnerability management and risk-based decisions.

Lead security operations, incident response, and vulnerability management across cloud and on-prem systems. Design and enforce security architecture (Zero Trust, IAM, PKI), support infrastructure and business continuity, and collaborate with stakeholders to implement cloud security and secure AI practices.

Design, build, and maintain the customer identity and access management (CIAM) platform using ForgeRock and Ping Identity. Develop automation for data collection, incident response, threat hunting, and fraud detection. Implement authentication/authorization frameworks, cloud IAM integrations, zero-trust and passwordless approaches, and AI/ML-driven DevSecOps capabilities to detect and prevent identity fraud and scale customer authentication experiences.

Build and scale cybersecurity GRC across IT and OT: identify and manage risks, design and maintain control frameworks, support audits (SOC 2, ISO 27001), manage third-party risk, and drive control adoption and reporting to leadership.

Lead financial and workforce analysis for Global Information Security technology projects, managing vendor contracts, headcount tracking, forecasting, accruals, and monthly reporting to senior leadership. Partner with product, finance, and COO teams to model contractual obligations, monitor spend and trends, and support an annual transformation budget of ~$110M.

The Senior Manager of Cybersecurity Defense leads a CSIRT team handling incident response, develops response frameworks, coordinates cross-functional operations, and mentors team members.

Serve as the division Information Assurance (IA) lead: implement and maintain cybersecurity program, ensure AF/DoD RMF and AFSSI 8522 compliance, onboard/offboard users, manage IA documentation and training, run IRP drills, open and track Remedy tickets, liaison with CSTs/base comms, manage PKI/CAC issues, maintain SharePoint and device security, and support inspections and assessments.

Serve as the primary cybersecurity liaison between DoD stakeholders and the EITaaS Wave 1 cybersecurity team. Facilitate stakeholder engagement, risk assessments, incident response coordination, policy implementation, security training, and threat intelligence sharing. Apply expertise in Active Directory hardening, OU design, Intune configuration, STIG compliance, and reporting to improve cybersecurity posture and ensure regulatory alignment.

Lead enterprise cybersecurity architecture across domains (network, endpoint, cloud, IAM, data protection, AI security). Define standards, roadmaps, and reference architectures; evaluate technologies and vendors; run proofs-of-concept; govern decisions; mentor solution architects; and collaborate with stakeholders to reduce risk, technical debt, and fragmentation.

Lead RMF A&A activities, develop and review security documentation (SSMPs, PPPs, OPSEC), perform vulnerability/risk assessments, implement STIG and PKI controls, manage classified material and user accounts, support DoD cloud security, integrate cybersecurity into system design, and deliver training and compliance for program lifecycle and acquisition artifacts.

Design and develop offensive cyber software and hardware solutions, perform reverse engineering and non-traditional penetration testing, build offensive cyber curriculum, operate in virtualized environments, and travel up to 50% to support client training exercises. Requires TS/SCI clearance.

Design and implement offensive cyber software/hardware solutions, perform reverse engineering and non-traditional penetration testing, develop offensive cyber training curriculum, work in virtualized environments, and travel to support client training exercises.

The Director of Cybersecurity Governance, Risk, and Compliance will lead the GRC team, implement cybersecurity practices, and manage compliance with policies, while enhancing cybersecurity awareness across the organization.