Top Cybersecurity Jobs

Leads enterprise IT and cybersecurity strategy, teams, budgets, service delivery, infrastructure reliability, security governance, incident response, compliance, audits, vendor relationships, and operational resilience. Advises executives and boards on technology risk, investments, material incidents, and risk acceptance while establishing standards, metrics, roadmaps, and continuous improvement practices.

Leads independent technology, cybersecurity, and data control testing, including control design and operating effectiveness assessments, remediation validation, issue evaluation, and regulatory engagement support. Develops risk-based annual testing plans, challenges risk and control owners, maintains testing methodology and quality standards, prepares management reporting, and provides subject matter expertise on cybersecurity risk, control frameworks, and assurance practices.

Own day-to-day cybersecurity operations across endpoint, network, cloud, and infrastructure environments. Responsibilities include security-stack monitoring, incident response, vulnerability and patch management, Microsoft 365, Azure, Purview, Intune, firewall and email security administration, endpoint hardening, scripting automation, audits, compliance evidence, security awareness, and policy development. The role collaborates with technical teams and requires independent work, strong documentation, regulatory awareness, and flexibility for occasional unusual hours.

Advises business, technology, and plant stakeholders on cybersecurity risks across IT and OT environments. Leads secure architecture reviews, threat modeling, risk assessments, control implementation, incident response planning, audits, compliance documentation, and policy improvements. Supports cloud security, IAM, Zero Trust, AI governance, and industrial cybersecurity initiatives while aligning controls with NIST, CIS, ISO 27001, and IEC 62443 frameworks.

Secure and optimize enterprise network infrastructure through firewall lifecycle management, GlobalProtect VPN support, vulnerability remediation, incident response, monitoring, troubleshooting, and automation. Develop Ansible and Python workflows for threat defense, data collection, investigation, threat hunting, and user access management. The role also designs, configures, maintains, and monitors cybersecurity capabilities and supports onsite testing and deployments.

Supports cybersecurity architecture, risk assessments, vulnerability analysis, RMF compliance, and accreditation activities for wearable and sensor-based systems. Develops cybersecurity documentation and strategies, supports IATT and ATO efforts, and protects system data. The role requires DoD cybersecurity and NIST knowledge, an engineering or science bachelor’s degree, and an active Top Secret clearance. The position is contingent upon contract award.

Monitor and analyze SIEM alerts, respond to security incidents and client tickets, troubleshoot vulnerabilities and malware, and provide recommendations to strengthen client security postures. Maintain application, web, and infrastructure security controls; collaborate with clients, vendors, and IT professionals; monitor vulnerability intelligence; and produce technical status reports and contract deliverables.

Leads cybersecurity, infrastructure, helpdesk, and IT asset operations across on-premise and cloud environments. Manages MSSP relationships, incident response, vulnerability remediation, firewalls, VPNs, endpoint protection, patching, backups, disaster recovery, Microsoft 365, Intune, and infrastructure documentation. Supervises helpdesk operations, supports hybrid meeting technology, oversees procurement and vendors, maintains asset inventories, and drives infrastructure upgrades, compliance, and security policy adherence.

Conduct continuous monitoring and security control assessments for DoD systems. Maintain ConMon strategies, SOPs, dashboards, RMF packages, POA&M tracking, and security status reports. Use security tools to assess vulnerabilities, validate controls, monitor threats, and resolve data issues with system administrators. Report risk status and notify the Government of significant security posture changes within 60 minutes.

Provide senior acquisition and program management support for cryptologic and cyber systems. Guide acquisition execution, review and comment on acquisition documentation, monitor program health, coordinate reviews, and advise leadership on system-of-systems integration, budgeting (PPBE), and regulatory compliance. Act as SMART focal point and support a wide range of DoD acquisition processes and documentation to deliver warfighter capability.

Serve as an ISSO for intelligence-community cyber systems, guiding systems through RMF assessment and authorization. Author security plans and test plans, analyze NIST 800-53 controls, conduct self-assessments, support formal assessments, remediate vulnerabilities and findings, document waivers, and transition authorized systems to operations. The role requires active TS/SCI with polygraph, DoD 8570 IAT Level II certification, IC RMF experience, Xacta expertise, and strong communication skills.

Participate in a paid remote research interview about integrating vulnerability verification into CI/CD pipelines. Explain a recent project involving full-stack development, secure deployments, application security practices, and production pipeline challenges. Review conceptual secure application workflows and provide practical feedback. Candidates should have professional experience in full-stack engineering, DevSecOps, or security-focused backend development, with hands-on CI/CD configuration and vulnerability verification experience.

Lead second-line cybersecurity and technology risk assessments for financial services clients, advise on regulatory readiness and frameworks, improve governance and reporting, and guide remediation, IAM, cloud security, incident response, third-party risk, and AI risk initiatives while mentoring junior staff and communicating findings to executives and boards.

Leads the Security Engineering team and oversees secure design, testing, deployment, and lifecycle management of operating systems, networks, and security tools. Directs risk and vulnerability assessments, security control implementation, compliance activities, incident response, and digital forensics. Partners with enterprise architecture and senior leadership to embed security throughout IT projects, communicate risk posture, and align engineering priorities with the security roadmap.

Build and prototype software that improves defensive cybersecurity operations for government and Defense Industrial Base clients. Collaborate with mission operators to solve workflow challenges, use Python and LLMs to accelerate development and analytics, and support vulnerability patching, incident response, threat emulation, and COMSEC monitoring. Preferred experience includes AI solutions, data engineering, Splunk, Kubernetes, Rancher, and Apache Airflow.

Lead comprehensive cybersecurity assessments of supplier IT and cloud environments, identify risks and remediation plans, conduct onsite and virtual fieldwork, advise stakeholders on defensive architectures and incident response, and recommend process improvements to strengthen supplier risk posture.

Supports GSA cybersecurity policy and process initiatives focused on Identity and Access Management. Responsibilities include researching emerging technologies, developing process maps and project plans, managing workstreams and deliverables, coordinating stakeholder meetings and briefings, analyzing surveys, preparing written materials, tracking risks, and supporting project lifecycle activities. The role also provides program logistics, communications, and collateral development using Microsoft Office and Google Workspace.

Designs, deploys, administers, and secures LAN, WAN, wireless, cloud, and hybrid infrastructure across multiple sites. Configures firewalls, VPNs, SASE, NAC, EDR, and PAM solutions; investigates and remediates cybersecurity incidents and vulnerabilities; documents network environments; supports technical issues; and collaborates with global IT teams. The role leads cybersecurity improvements across North American locations and contributes to infrastructure and security projects.

Supports cybersecurity analysts, threat intelligence researchers, and vulnerability management engineers across threat monitoring, vulnerability assessment, CVE/NVD analysis, risk prioritization, incident alert triage, SIEM and EDR analysis, MITRE ATT&CK mapping, and security documentation. The intern contributes to Tribal infrastructure security projects, participates in mentoring and knowledge sharing, completes a cybersecurity capstone, and presents findings to company leadership and Tribal stakeholders.

Directs global cybersecurity go-to-market strategy for Threat Defense, Axur, and Kentik. Builds playbooks, dashboards, enablement programs, competitive strategies, and operating cadences across worldwide sales teams without direct authority. Partners with Product, Marketing, Sales Enablement, regional leaders, and channel alliances to improve pipeline, win rates, adoption, and executive engagement. Uses AI-enabled tools and field analytics to scale repeatable execution and represents the company with CISOs and security leaders.

Leads go-to-market strategy, enterprise sales, account growth, and revenue targets for AI-powered cybersecurity solutions. Engages CISOs and senior security executives, translates technical capabilities into business and risk outcomes, manages complex sales cycles and seven-figure deals, develops offerings with technical and delivery teams, maintains forecasts and CRM pipelines, and represents Booz Allen at industry forums.

Support vehicle platform security assessments and help design secure boot processes for embedded devices. Partner with hardware engineers on HSM integration, encryption, key management, and cryptographic operations. Collaborate with software, hardware, QA, and product teams to integrate security throughout product development. This entry-level role provides mentorship while developing expertise in embedded and automotive cybersecurity.

Secure and improve advanced Electronic Warfare collection systems by supporting Authority to Operate (ATO) processes, Continuous Monitoring, DISA STIG and Tenable Nessus compliance, vulnerability risk analysis, security hardening, testing, and documentation. The engineer collaborates with system developers and customer ISSOs while maintaining security plans, test scripts, and POA&Ms in a Linux environment.

Support DoD system authorization and security posture by preparing RMF accreditation documentation, evaluating and maintaining security configurations, performing vulnerability scanning with DoD tools (ACAS), applying STIG hardening, and producing RMF packages (SSP, SAR, POA&M) to achieve ATOs.

Provides senior cybersecurity operations and program support for FHWA systems, including incident handling, vulnerability management, secure configuration validation, DevSecOps, audit support, continuous monitoring, contingency-plan testing, risk mitigation, and cybersecurity documentation. Advises system owners and technical teams, supports FISMA and government audits, reviews suspicious logs, maintains security procedures, and communicates findings and recommendations to technical and nontechnical stakeholders.