Top Cybersecurity Jobs

As a Junior Cybersecurity Analyst, you'll support senior analysts, manage client accounts, and learn cybersecurity frameworks and compliance tools.

Protect and defend enterprise and mission IT infrastructures, secure cloud and classified environments, implement policy-based data flows and boundary protections, support RMF certification/accreditation, perform penetration testing and red/blue exercises, develop security documentation, and communicate technical risks to stakeholders.

Support and secure mission-critical intelligence systems through RMF-aligned assessments, vulnerability identification, and mitigation. Evaluate architectures, document SOPs, automate testing and monitoring with Python/PowerShell, manage containerized/virtualized environments (Kubernetes, AWS), and collaborate with DevOps and systems teams to ensure secure design and mission readiness in classified environments.

The Operational Risk Manager oversees cybersecurity risks, advises stakeholders, conducts risk assessments, ensures compliance, and participates in incident response activities.

The Cybersecurity Specialist integrates security architecture and engineering to enhance system security throughout the IT life cycle, managing multi-disciplinary projects while ensuring compliance with cybersecurity policies.

Lead cybersecurity engineering projects, mentor junior engineers, develop advanced security capabilities, and enhance IT service delivery in a managed services context.

Provide cyber intelligence services for the U.S. energy sector: deliver threat intelligence on nation-state and criminal actors; design, implement, and secure enterprise IT and OT environments; manage cloud security, Zero Trust, RMF/NIST 800-53 compliance; support ATO packages and continuous monitoring; perform endpoint security, vulnerability management, and system hardening. Requires active TS/SCI or DOE Q.

Design, implement, and manage security architecture and controls across healthcare IT (EHRs, medical devices, cloud). Configure security tools, conduct vulnerability assessments and forensics, respond to incidents, maintain compliance (HIPAA/HITECH/HITRUST/SOC 2), support audits, build dashboards, and deliver security awareness and client-facing security guidance.

Operate, maintain, tune, and engineer enterprise SIEM and log-aggregation platforms. Develop detection content, alerting rules, playbooks, and parsing for ingestion. Troubleshoot event flows, ensure 99.99% availability, perform maintenance/patching, document incidents, and support CSOC analytics and integrations with government reporting systems.

Operate, maintain, and improve enterprise SIEM and log aggregation platforms (ArcSight, ElasticSearch, Kibana, Splunk). Onboard assets, develop alerts/playbooks/rules, tune queries, troubleshoot event flow and parsing, and perform engineering, testing, and emergency maintenance to meet 99.99% availability and Intelligence Community standards. Document incidents, use ticketing systems, and support CSOC reporting and integrations. Requires active TS/SCI and relevant DoD 8570 certifications.

Lead enterprise cybersecurity architecture across Zero Trust, cloud, identity, networks, applications, and data. Design secure hybrid on‑prem/cloud architectures, establish baselines and standards, ensure NIST/RMF/OMB-CISA compliance, oversee modernization efforts, coordinate cross-functional teams for threat modeling, secure API design, encryption, secrets management, and advise senior leadership on strategy and enterprise risk.

Designs and manages SOAR automation using Splunk Phantom, developing Python-based playbooks and integrations. Supports incident handling, threat hunting, forensic analysis, and vulnerability/DLP automation. Mentors teams, coordinates with SOC and threat intel, enforces CND policies, and manages incidents from detection through after-action reporting for a customer site environment.

Lead the CSOC by overseeing detection, incident response, and SOC operations; act as technical escalation point; improve SIEM-driven detection, playbooks, automation, and metrics to reduce MTTD/MTTR.

Provide Assessment & Authorization (A&A) support under DoD/IC RMF for USSOCOM networks and systems. Perform risk and vulnerability assessments, create A&A/CAP packages, use ACAS/Nessus/SCAP and STIGs, validate patching, develop POA&Ms and ISCM plans, coordinate with DoD/IC agencies, and advise on mitigation and authorization actions to obtain ATO/IATT/ATC.

Remote Cybersecurity Engineer on a client delivery team designing and implementing security automations and orchestrations (SOAR). Develop integrations and APIs, build incident-response automations using Python and scripting, collaborate with SMEs, vendors, and stakeholders, and adapt in a fast-paced environment.

Implement, tune, deploy, and support security solutions; create WAF rules; develop SIEM content (correlations, enrichments, dashboards, alerts); build automations for incident response; provide cybersecurity engineering expertise within client environments and support security operations and incident response processes.

Design, deploy, tune and support security solutions; create WAF rules; develop SIEM content and automations; respond to incidents and improve security operations.

Provide SOAR-focused cybersecurity consulting: design and implement security orchestrations and automations, respond to incidents, collaborate with SMEs, vendors, and stakeholders, and apply hands-on expertise across SIEM, IDS/IPS, DLP, WAF, and endpoint security.

Monitor and analyze network traffic, IDS and SIEM alerts; create detective content; investigate security incidents to resolution; maintain SOC SOPs and shift reporting; advise responders and stay current on threats. Must work shift schedule, including overnight, onsite in Chandler, AZ.

Design and implement security automations and orchestrations, develop integrations and APIs, collaborate with SMEs and vendors to build SOAR-enabled incident response solutions, and adapt in a fast-paced consulting environment.

Design, deploy, tune, and support cybersecurity solutions including WAF and SIEM content. Develop automations and incident response workflows, create WAF rules, and support security operations and incident response efforts within a fast-paced delivery team.

Serve as the technical lead for cybersecurity, IAM, and compliance initiatives; enforce RMF/NIST SP 800-53 controls and vulnerability management; administer Linux/Solaris and directory services; mentor technical staff, drive technical decisions, and support compliance/auditing efforts.

The IT Cybersecurity Engineer is responsible for designing, implementing, and maintaining security solutions, focusing on cloud security and proactive threat mitigation, especially within Microsoft Azure.

Provide cybersecurity and information assurance activities at Aberdeen Proving Ground. Review cybersecurity packages, develop strategies, and manage documentation.

Oversee Minitab's Information Security Management System, manage risk compliance, third-party security assessments, and develop security training programs.