Top Cybersecurity Jobs

Design and build reusable authentication/authorization frameworks and APIs for zero trust adoption. Collaborate with architects and developers, implement fine-grained access controls (ABAC, entitlements, row-level security), perform code reviews, produce developer integration guides, and research IAM/zero trust technologies to improve secure-by-design integrations.

Design and maintain reusable frameworks, libraries, APIs, and reference implementations to enable zero trust authentication and authorization. Provide developer guides, implement fine-grained authorization (entitlements, row-level security, ABAC), conduct secure code reviews, collaborate with architects and infrastructure teams, and research identity/access management improvements.

Lead offensive security assessments across embedded vehicle software, mobile, and backend systems. Perform penetration tests, red-team activities, and vulnerability research; validate impacts and develop exploits; provide actionable remediation guidance; partner with engineering teams to improve secure SDLC and advance offensive tooling and testing methods.

Senior individual contributor who designs and builds secure engineering services, implements SAST/DAST/fuzzing/runtime/OS hardening, conducts secure code reviews, authors reusable security patterns, partners with product teams, mentors engineers, and builds custom security tooling to scale secure software and systems across embedded, mobile, and backend products.

Support the RMF and A&A lifecycle for a classified workstation secure enclave. Manage FedRAMP and DoD security controls, continuous monitoring, POA&M remediation, audit preparation, and compliance evidence. Assess vulnerabilities using Tenable and STIG tools, review system architectures and configurations, oversee control assessments, analyze security risks, and support incident response. Collaborate with engineers, administrators, ISSOs, vendors, and leadership to maintain authorization and ensure compliance with FedRAMP and CNSSI 1253 requirements.

Lead cybersecurity compliance and continuous monitoring for a classified workstation secure enclave. Support the RMF and A&A lifecycle, maintain FedRAMP and DoD evidence packages, manage POA&Ms, assess vulnerabilities and STIG findings, validate security controls, oversee audits and 3PAO assessments, evaluate architectures and firewall rules, and provide risk and incident-response support. The role requires extensive ISSO or ISSM experience, active Top Secret clearance, on-site work in McLean, Virginia, and DoD 8140/8570 compliance.

Executes security engineering and operations across endpoints, identity, cloud platforms, and enterprise systems. Responsibilities include endpoint hardening, IAM administration, alert and log analysis, vulnerability management, access reviews, security technology deployments, compliance evidence collection, scripting, troubleshooting, documentation, and process improvement. The role partners with IT, Engineering, DevOps, IAM, and platform teams to maintain technical safeguards, resolve issues, and improve security workflows.

Designs, integrates, and maintains Cross-Domain Solutions for secure data transfer across classified and unclassified networks. Leads cybersecurity programs, continuous monitoring, risk assessments, security testing, audits, and Assessment and Authorization activities. Prepares security documentation, validates controls, implements government policies, and supports compliance with US Government security directives. The role is full-time onsite in Bellevue, Nebraska, requires an active Secret clearance and eligibility for Special Access Programs, and involves approximately 10% travel.

Build, deploy, configure, and maintain cybersecurity infrastructure and applications across Windows, Linux, on-premises, and cloud environments. Implement AWS-based security solutions, modernize enterprise cybersecurity systems, develop architecture diagrams and technology roadmaps, support testing and authorization processes, and coordinate with stakeholders and assessors. The role also provides technical recommendations, documentation, presentations, and may lead teams or tasks.

Leads cybersecurity architecture, RMF compliance, system accreditation, risk assessments, and ATO processes for complex DoD systems. Manages RMF documentation, vulnerability scanning, cyber tool deployment, security controls, continuous monitoring, hardening, patching, and incident response readiness. Integrates AI/ML capabilities into threat detection, vulnerability management, compliance monitoring, and risk prioritization workflows. Mentors engineers and communicates security posture to technical and executive stakeholders in mission-driven environments.

Drive enterprise and MSSP sales across the Western region: build pipeline, close new logos, expand channel partnerships, collaborate with product/marketing/engineering, and consistently exceed quota while traveling ~40% within the region.

Designs, develops, and operates enterprise security automation and orchestration solutions across IAM, security operations, compliance, cloud, and infrastructure. Builds full-stack applications, APIs, AI/ML tooling, event-driven workflows, and identity lifecycle automation. Architects platforms across Azure, AWS, Linux, Windows, containers, and managed services while implementing infrastructure as code and CI/CD. Develops incident response playbooks, self-service portals, and integrations with security tools, and mentors engineers while driving continuous improvement.

Leads Quanex’s enterprise cybersecurity program, overseeing security monitoring, alerting, risk management, architecture, policies, compliance, incident response, vendor risk, audits, and outsourced SOC/MDR partnerships. Manages cybersecurity personnel and collaborates with IT, business leaders, vendors, auditors, and global teams to improve security maturity, resilience, and risk posture.

Cybersecurity Operations Intern supporting incident response, threat monitoring, threat hunting, threat intelligence, vulnerability management, security posture assessments, threat detection, and automation. The intern will help analyze alerts, identify attacks, prioritize remediation, improve detection rules and runbooks, and implement SOAR or scripting-based efficiencies. The ten-week program includes mentorship, team projects, and a presentation to leadership.

Supports cybersecurity policy programs and high-level convenings by coordinating agendas, speakers, meetings, events, stakeholder communications, briefing materials, membership relationships, and program tracking. The role manages event logistics, speaker engagement, follow-up, operational improvements, and sensitive information while coordinating multiple domestic and global cybersecurity initiatives.

Leads vCISO and cybersecurity compliance engagements for multiple clients, including CMMC and NIST assessments, SSP and POA&M development, risk assessments, framework mapping, audit and assessor support, incident response, and remediation coordination. Advises clients on regulatory obligations, security tooling, and compliance strategies while managing client relationships, engagement health, reporting, and delivery quality across a large portfolio.

Leads Honeywell’s global cybersecurity sales organization, develops enterprise opportunities, achieves revenue and margin targets, and drives strategic account growth. The role advises C-level and technical customers, leads consultative sales and proof-of-concept activities, manages forecasting through Salesforce, builds ecosystem partnerships, and guides regional teams selling cybersecurity services and products for operational technology and commercial building environments.

Provides technical leadership for enterprise IAM platforms, including Okta, Microsoft Entra ID, and Active Directory. Designs authentication, federation, authorization, provisioning, lifecycle management, automation, and API integrations across cloud and on-premises environments. Leads SaaS onboarding, hybrid identity modernization, M&A identity transformations, governance, compliance, and Zero Trust initiatives. Partners with cross-functional teams, mentors engineers, supports vulnerability management, and drives the IAM technical roadmap.

Develops cybersecurity processes, risk assessments, controls, requirements, and validation plans for safety-critical aerospace embedded systems. The role also develops embedded software and tools, collaborates with suppliers and engineering teams, supports regulatory compliance, and prepares technical documentation. Responsibilities include analyzing hardware and software architectures, managing vulnerabilities and incidents, integrating security controls, improving engineering processes, and delivering software using C/C++, Python, and MATLAB/Simulink.

Supports DoD and Air Force system authorization and accreditation under the Risk Management Framework. Performs ISSE, ISSM, and ISSO duties; conducts risk, vulnerability, security, audit, and compliance assessments; develops security and recovery procedures; evaluates security events; protects systems, networks, and data; and ensures adherence to cybersecurity policies and information assurance requirements.

The Sr. Cybersecurity Operational Risk Officer manages operational and technology risks, provides oversight, collaborates with teams, and enhances risk frameworks. They evaluate projects and compliance, conduct assessments, and maintain relationships with business leaders.

Support a global 24x7x365 security operations team by monitoring systems and networks, investigating threats and incidents, responding to phishing, malware, breaches, and cyberattacks, deploying countermeasures, analyzing post-event activity, assessing vulnerabilities, and improving security protocols. The role requires familiarity with cloud security controls, network protocols, operating systems, scripting, web technologies, penetration testing tools, and threat intelligence.

Design, implement, and automate security controls and validation methods across systems, applications, cloud, and vendors. Perform technical risk assessments, support audits, collect evidence, develop policy-as-code and compliance tooling, and provide forensic incident response and scripting to improve continuous compliance and audit readiness.

Supports Risk Management Framework compliance, cybersecurity documentation, eMASS records, audits, incident-response workflows, vulnerability tracking, STIG remediation, and software license compliance. The role coordinates with technical and compliance teams to identify documentation gaps, maintain security artifacts, update POA&Ms, and support regulated-environment reviews. It requires 3–5 years of cybersecurity or RMF experience, Security+ or equivalent IAT Level II certification, NIST familiarity, and the ability to obtain required clearance.

Provides strategic leadership for the cybersecurity function, including security architecture, cloud and application security, identity management, Zero Trust, vulnerability management, incident response, privacy, and data protection. Leads the GRC program, risk assessments, audits, penetration testing, and compliance with PCI DSS, SOC 2, and ISO 27001. Oversees external cyber defense partners, advises executives, develops security strategy and policies, manages communications, and mentors cybersecurity and GRC teams.