Top Cyber Security Jobs in Huntsville, AL

Build and secure scalable backend services and APIs while debugging, optimizing performance, implementing features, refactoring codebases, and conducting security reviews and penetration testing. The role also involves automated testing, code review, vulnerability assessment, and contributing domain expertise to training next-generation AI systems.

Leads cybersecurity governance, risk, and compliance programs, with ownership of third-party cyber risk, customer security assessments, risk exceptions, and the cyber risk register. Manages a geographically distributed team, matures GRC processes, drives automation, partners with internal and external stakeholders, and reports risk trends and recommendations to senior leadership. Requires extensive cybersecurity experience, people leadership, customer-facing skills, and experience building or improving third-party risk capabilities.

Conducts independent cybersecurity assessments of MARAD information systems across authorization, reauthorization, and continuous monitoring activities. Evaluates management, operational, and technical controls under NIST RMF; develops assessment plans, reports, risk assessments, and remediation recommendations; validates evidence and system compliance; supports ATO decisions; enters data into CSAM; and collaborates with federal cybersecurity stakeholders.

Lead and execute IT SOX and SOC testing (ITGC, ITAC, SDLC), coordinate remediation with control owners, perform risk assessments, provide IT audit consulting, and support audit readiness and control framework improvements across US and Europe.

Designs, implements, and operates Azure-native security controls for identity, networking, and workloads. Manages Defender for Cloud and Microsoft Sentinel, implements Conditional Access, MFA, and Zero Trust patterns, embeds security into Infrastructure-as-Code pipelines, monitors cloud posture, supports incident response, drives remediation, and maintains compliance documentation and metrics. Partners with cloud and infrastructure security teams to ensure secure, resilient, and compliant Azure environments.

The AI Security Consultant will enhance security programs, secure AI systems, engage in technical analysis, and report findings. They will also contribute to thought leadership while ensuring high-quality service delivery.

Leads Carina’s cloud infrastructure, internal IT, cybersecurity, risk management, compliance, and business continuity programs. Oversees AWS platform operations, infrastructure as code, deployment reliability, observability, incident response, disaster recovery, employee technology, identity systems, vendors, budgets, and governance. Advises executives on technology strategy, security posture, operational risk, and investments while partnering with Engineering and Data to provide a secure, reliable technology foundation.

Senior Information Systems Security Officer supporting federal cloud cybersecurity programs. Responsibilities include system categorization, security control selection and implementation, control assessments, RMF authorization documentation, continuous monitoring, risk analysis, incident response, remediation, audits, security training, and leadership reporting. Requires extensive ISSO experience in cleared environments, advanced cybersecurity and cloud certifications, familiarity with security tools, and an active TS/SCI clearance with ability to obtain a polygraph.

Lead cybersecurity compliance and authorization activities for federal systems. Implement and assess NIST security controls, manage RMF v5 workflows and eMASS documentation, develop SSP and ATO artifacts, track POA&Ms, coordinate STIG remediation, conduct risk assessments, monitor incidents, and communicate security requirements across technical and nontechnical teams.

Assesses and documents cybersecurity controls across the Risk Management Framework lifecycle. Reviews system evidence, guides categorization and control selection, oversees assessments and continuous monitoring, prepares authorization risk documentation, and advises stakeholders on remediation, incident response, audits, and compliance. Coordinates with system owners, ISSEs, and ISSOs while reporting security risks and improvement opportunities to leadership.

Leads and mentors cybersecurity professionals implementing the Risk Management Framework for FBI IT systems. Oversees system categorization, security control selection and implementation, assessments, authorization documentation, continuous monitoring, risk analysis, incident response, remediation, audits, and stakeholder reporting. Provides technical cybersecurity guidance, training, and process improvement while ensuring compliance with NIST guidance and organizational requirements.

Responsible for securing classified information systems through policy development, RMF authorization, NIST control compliance, vulnerability assessments, audits, incident response, documentation, and accreditation support. Serves as liaison with DCSA on classified system security matters and ensures compliance with NISPOM, DoD requirements, and information security mandates.

Support the DoD Risk Management Framework and Authorization to Operate lifecycle for a Software Defined Network. Maintain eMASS authorization packages, STIGs, vulnerability results, POA&Ms, and RMF documentation. Coordinate remediation with technical teams, tenants, and leadership; review cybersecurity directives; support risk assessments, inspections, configuration management, and continuous monitoring. The role also implements evolving cybersecurity requirements, including Zero Trust and post-quantum cryptography.

Lead security engineering for a federal health supply chain and logistics software product line. Own security architecture through authorization, establish engineering standards, assess and remediate complex findings, advise stakeholders on risk, and mentor engineers. The role requires federal security framework expertise, cloud security experience, cross-team remediation leadership, and eligibility for a Public Trust background investigation. Preferred experience includes federal health IT, ATO packages, Kubernetes security, incident response, HIPAA, and Agile or SAFe environments.

Secure federal health IT supply-chain and logistics software by designing and validating application and infrastructure controls, assessing vulnerabilities, driving remediation, embedding security checks into CI/CD pipelines, monitoring security tools, supporting incident response, and translating federal security requirements into implementable technical designs.

Designs and engineers secure network and cloud architectures across AWS, GCP, Azure, and physical data centers. Responsibilities include threat modeling, network segmentation, monitoring, alerting, automation, attack-surface reduction, and secure connection patterns. The role drives strategic security improvements, partners with product and infrastructure teams, communicates architectural decisions, and mentors engineers. Candidates need deep hybrid networking and cloud security expertise, protocol knowledge, scripting ability, independent problem-solving skills, and strong communication.

Supports cybersecurity architecture strategy for large-scale government and defense systems. Responsibilities include developing security architectures and standards, implementing Zero Trust, assessing system and vendor security, managing security requirements, supporting FedRAMP, RMF, NIST, and FISMA compliance, and architecting hybrid-cloud security solutions. Acts as deputy to the senior architect, leads security reviews, mentors technical teams, and aligns engineering, operations, and program leadership.

Owner of Vannevar's authentication and authorization platform: build tenant-isolated auth systems, self-service user/group/permission admin UI, tooling to visualize and validate access, feature-flag and platform management interfaces, and shared authorization capabilities across products.

Lead and mature Affirm's third-party security risk program by designing controls, automating GRC workflows, evaluating third-party/cloud security, building integrations and dashboards, and advising stakeholders. Drive automation using Python and agentic coding tools, operate orchestration across systems, manage a portfolio of risk reviews, and establish metrics, processes, and reporting to scale security risk management.

Lead and grow a Security Platform engineering team to design and operate centralized identity and access services (IdP integrations, SSO, authorization frameworks). Define roadmap, partner cross-functionally, and drive adoption of secure-by-default access controls across products.

The Security Engineer will manage Liftoff's SIEM, lead the adoption of AI-augmented SOC tools, triage alerts, and improve incident response processes while collaborating on various security functions.

Manages enterprise information security governance, risk, and compliance initiatives. Develops security policies and frameworks, leads data classification and threat modeling, conducts risk assessments, oversees vulnerability remediation, evaluates security controls, supports audits, and prepares risk metrics and executive reports. Partners with technical teams to embed security requirements and promotes governance best practices across the organization.

Protect Air Force modernization efforts by assessing legacy and modernized applications, conducting security audits and risk analyses, implementing RMF, ATO, and cATO processes, authoring security controls and authorization evidence, researching emerging threats, and coaching government engineering teams on secure software development and compliance.

Customer-facing Cloud Solution Architect driving security transformation on Azure and Microsoft 365. Design and implement security architectures (Identity, Threat Protection, Cloud Security), run design sessions, perform hands-on evaluations of Defender, Sentinel, and Azure AD, and influence product and engineering teams to improve customer security posture and adoption.

Lead architecture and hands-on development of Microsoft's AI Safety Platform, building observability, detection, investigation, threat-hunting, and distributed data-processing capabilities. Design attack detection infrastructure, correlate high-volume telemetry, apply AI security research, conduct security and privacy reviews, and partner across engineering, science, and incident response teams. Mentor engineers and provide technical leadership for complex AI security systems.