Top Cyber Security Jobs in Huntsville, AL

The CISO will develop and manage the Bank's information security programs, ensuring compliance and protecting customer data while mitigating risks. They will also lead a security team, oversee third-party risk, and promote a culture of security awareness across the organization.

The Network Security Architect will assess network security, guide teams, enhance security policies, design network solutions, and mentor engineers while aligning with a Zero Trust Strategy.

Lead and manage a team of security professionals to ensure program security compliance (NISPOM, OPSEC, ICD 705), support SAP and SIPR token lifecycle, translate regulatory requirements into risk-based controls, oversee security metrics and budgets, interface with program leadership, and support international sales and DevSecOps environments.

Lead cybersecurity strategy and RMF authorization for hybrid Department of the Workforce (DoW) and commercial space systems. Develop and maintain SSPs/SAPs/SARs/POA&Ms, manage vulnerability scanning and remediation, coordinate with authorizing officials, and embed security across engineering, operations, and cloud platforms to support ATO decisions.

Lead RMF-based cybersecurity compliance and authorization activities for DoD systems. Manage ATO lifecycle, maintain authorization packages, perform risk assessments and continuous monitoring, advise leadership, and oversee program management including staffing, budgeting, subcontractor coordination, and deliverable quality.

Support NASA OCSO by performing ISSE/ISSO engineering for FISMA Moderate/High and HVA systems. Tasks include RMF A&A support, SSP consolidation and development, OT and application security assessments, vulnerability scanning and remediation coordination, incident containment, ATO package preparation, POA&M tracking, and advising engineering teams on cybersecurity requirements and continuous monitoring.

Provide program, physical, and personnel security support for classified DoD programs. Administer NISPOM and DoD security procedures, manage classified material control and inventories, conduct briefings and training, respond to intrusion alerts, assist investigations and audits, maintain security documentation and systems (SIMS), and support ISSO duties as needed.

Support ISSO/ISSM teams onsite in a classified environment to assist with system compliance, auditing, security plan development, security sustainment (change/account/media management), investigations of security violations, reporting corrective actions, and delivering information systems security education. Collaborate with facility security, program personnel, and government representatives.

Serve as an ISSO supporting RMF and DoD cybersecurity standards: assess and continuously monitor system security, maintain ATO/ATC and POA&M remediation, document cybersecurity artifacts, evaluate configuration changes, validate NIST SP 800-53 controls (eMASS), and use tools like ACAS/Nessus and SCAP to identify weaknesses.

Manage industrial and personnel security for Special Access Programs: process PSQs/PARs, enforce policies, deliver indoctrination/debrief/refresher training, coordinate government visits, handle incident reporting and investigations, interface with senior leadership and multi-agency clients, and support on-site assessments and periodic travel.

Perform RMF-based cybersecurity engineering for HWIL/M&S environments: assess and document system security posture, run vulnerability scans and audits (ACAS/NESSUS/SCAP), manage eMASS/STIG compliance, recommend mitigations, and support security monitoring (Elastic/ESS). Travel ~10% for inspections.

Support DoD RMF processes for the GMD program: develop and manage SSPs, IATT/ATC/ATO packages, maintain eMASS artifacts, perform vulnerability and risk analysis, track POA&Ms, review audits, and coordinate cyber artifact delivery with stakeholders.

Support STARE Product Office cybersecurity activities at Redstone Arsenal: manage ATO/A&A packages, assess system confidentiality/integrity/availability, enforce DoD/Army CS standards, coordinate RMF and eMASS activities, prepare briefings, support security testing, and liaise with program offices. Approximately 25% travel.

Serve as the Information System Security Officer supporting Air & Missile Defense: manage RMF lifecycle, develop and maintain ATO packages and SSPs, perform continuous monitoring, conduct audits, apply NIST SP 800-53 and DISA STIGs, use ACAS and eMASS to identify/remediate vulnerabilities and track POA&Ms, and ensure compliance with DoDI and Army guidance.

Lead RMF-based cybersecurity compliance and authorization (ATO) activities for DoD systems. Manage security documentation, risk assessments, continuous monitoring, vulnerability scanning, and advise program leadership while ensuring adherence to DoD/NIST policies.

Support and secure DoD enterprise architectures by designing, implementing, and administering F5 BIG-IP (LTM, APM, ASM), working in DoD IL and private clouds, configuring VMware/NSX-T micro-segmentation and SD-WAN, troubleshooting with stakeholders, and ensuring compliance with federal security standards and cryptography best practices.

As a Security Architect, you will build secure agent runtimes and systems, ensuring robust security capabilities in agentic AI solutions while conducting security evaluations.

Owner of Vannevar's authentication and authorization platform: build tenant-isolated auth systems, self-service user/group/permission admin UI, tooling to visualize and validate access, feature-flag and platform management interfaces, and shared authorization capabilities across products.

Lead and mature Affirm's third-party security risk program by designing controls, automating GRC workflows, evaluating third-party/cloud security, building integrations and dashboards, and advising stakeholders. Drive automation using Python and agentic coding tools, operate orchestration across systems, manage a portfolio of risk reviews, and establish metrics, processes, and reporting to scale security risk management.

Lead product security across the SDLC: threat modeling, secure architecture, vulnerability management, security testing and remediation, CI/CD/DevSecOps controls, AI security integration, bug bounty triage, developer training, and cross-functional security consulting to scale secure-by-design practices.

Lead and grow a Security Platform engineering team to design and operate centralized identity and access services (IdP integrations, SSO, authorization frameworks). Define roadmap, partner cross-functionally, and drive adoption of secure-by-default access controls across products.

As a Security Engineer, you will conduct security assessments, develop security tools, perform architecture reviews, and collaborate on advanced security research.

Lead solution sales for Microsoft Security with enterprise customers: identify opportunities, build solutions and business cases, manage senior relationships and pipeline, collaborate with partners and internal teams, forecast and pursue high-potential accounts, and obtain relevant product/role certifications.

Partner with sales leadership and cross-functional stakeholders to drive billed revenue growth for Microsoft 365 E5. Monitor revenue performance, improve pipeline health, perform root-cause analysis, generate data-driven insights, and translate strategy into execution plans. Lead governance, cadence, and operational improvements to scale best practices and accelerate sales execution across regions.

Perform advanced threat hunting and deep analysis of attacker activity across on-premises and cloud environments, notify customers of imminent threats, build proof-of-concept hunting tools and automations, synthesize findings into mitigation recommendations, and drive product/tool improvements by transferring threat intelligence and investigation best practices to engineering and customer teams.