Top Cybersecurity Jobs

Participate in cybersecurity operations for subsea systems, including security posture management, Windows and Linux system administration, policy and procedure documentation, vulnerability identification and remediation, NIST and CISA practices, certification preparation, and Agile workflows. The internship requires full-time student enrollment in a computer science or related STEM program, full-time summer availability, and U.S. citizenship with eligibility for a government Secret clearance and program special access.

Supports security operations and incident response through alert monitoring, threat investigation, containment, evidence preservation, threat intelligence, threat hunting, vulnerability prioritization, automation, and case management. The role investigates identity, endpoint, cloud, email, network, application, third-party, AI, and breach-related security events; coordinates remediation with asset owners; maintains security metrics and documentation; and participates in business-hour coverage and on-call escalation.

Lead technology strategy, cybersecurity, infrastructure, compliance (HIPAA, NIST, SOC 2, HITRUST, FedRAMP), product security, cloud operations, vendor management, incident response, and AI governance. Oversee reliability, disaster recovery, secure development practices, audits, and cross-functional partnerships to support healthcare and public-sector customers.

Lead cybersecurity strategy and architecture across products, applications, and technologies. Advise engineering teams, communicate complex risks to leadership, develop reusable security frameworks, create mitigation solutions, and evaluate emerging technologies. The role requires influencing cross-functional teams, shaping enterprise-wide architecture, and applying cloud-native, application, API, web, and mobile security expertise across a complex financial-services environment.

Secure and harden wireless, edge AI, GPU, networking, virtualization, and Kubernetes platforms in a hands-on lab environment. Responsibilities include applying STIGs and CIS benchmarks, vulnerability management, network segmentation, wireless assessments, RMF and ATO documentation, identity and secrets management, logging, monitoring, and field security procedures. The engineer will collaborate with network, RF, and software teams while producing reproducible security documentation and briefing technical and leadership stakeholders.

Manage cybersecurity programs for classified information systems, conduct audits, continuous monitoring, vulnerability assessments, and security testing. Lead Assessment and Authorization activities, Risk Management Framework processes, Security Test and Evaluation, compliance documentation, corrective actions, and government policy implementation. The role is full-time, on-site in Colorado Springs and requires an active Top Secret clearance, IAM Level III certification, and eligibility for Special Programs access.

Supports cybersecurity consulting engagements involving IT audits, SOC examinations, IT risk assessments, controls-based audits, regulatory compliance reviews, and cybersecurity maturity assessments using frameworks such as NIST, PCI DSS, and ISO. Conducts research and special analyses, builds client relationships, and participates in networking and business development. The role requires pursuing a relevant bachelor's degree, strong analytical and communication skills, a minimum 3.0 GPA, and potential travel.

Designs and oversees enterprise cybersecurity architecture, networks, policies, and information security systems for the judicial branch. Responsibilities include cloud security, firewall and segmentation design, threat and vulnerability analysis, incident response, disaster recovery coordination, compliance, security testing, audits, stakeholder collaboration, and staff training. The role also researches security technologies, supports regulatory compliance, and requires occasional out-of-state travel.

Build and operate cybersecurity AI infrastructure supporting model training, evaluation, deployment, and serving. Develop Databricks and AWS platforms, security telemetry pipelines, GitHub Actions CI/CD, DevSecOps controls, infrastructure as code, identity and secrets management, and model evaluation workflows. Partner with AI/ML engineers, data scientists, and security operators while conducting technical reviews and guiding platform design.

Build and operate Booz Allen’s cybersecurity AI infrastructure platform using Databricks, AWS, GitHub Actions, and infrastructure as code. Develop governed security telemetry pipelines, model evaluation and serving workflows, CI/CD, DevSecOps controls, and repeatable deployments. Partner with AI engineers, data scientists, and security operators to operationalize agentic AI capabilities. Lead technical design, code reviews, platform direction, and production monitoring while enforcing least-privilege access and secure handling of sensitive data.

Serves as the technical authority for network security, endpoint security, and detection and response. Owns security reference architectures, standards, governance, technology strategies, and multi-year roadmaps. Leads architecture reviews, platform evaluations, Zero Trust and defense-in-depth initiatives, risk assessments, and remediation recommendations. Develops detection and response capabilities for AI systems and autonomous agents, mentors security professionals, and advises executive leadership on complex cybersecurity decisions.

Designs and implements cybersecurity architecture across corporate and development environments. Translates NIST SP 800-171 and CMMC Level 2 requirements into technical controls, supports ATO activities, and partners with infrastructure teams on Palo Alto architecture, segmentation, remote access, and network rules. Defines CUI boundaries, data flows, and security diagrams while addressing gaps across cloud, SaaS, endpoints, networks, servers, and software services.

Develop and maintain RMF security artifacts for federal building and facility control systems. Gather technical information, support system categorization and risk assessments, review vulnerability scans, create and track POA&Ms, assist with STIG compliance, maintain system inventories, and coordinate with government cybersecurity teams, system owners, engineers, and security officers to support ATO activities and recurring reporting.

Leads onsite cybersecurity operations for federal facility and control systems. Responsibilities include patching, hardening, monitoring, vulnerability management, RMF documentation, system inventories, compliance, ATO readiness, and coordination with government cybersecurity teams, facility personnel, OEM vendors, and stakeholders. Supervises two RMF Specialists, mentors staff, supports risk assessments, and leads cyber phase-in and transition activities.

Lead design and operation of a cloud-native cybersecurity data lakehouse on AWS. Define storage/table formats, partitioning, compute engines (EMR, Athena, Redshift), governance (Lake Formation, IAM), IaC provisioning, cost governance, and capacity planning to support analytics, ML, and security operations.

Implements STIGs across IT and OT systems, supports RMF assessments and authorizations, inventories ICS/SCADA environments, performs vulnerability scanning, manages POA&Ms, applies technical controls, and supports cybersecurity compliance, inspections, and continuous improvement. The role requires collaboration with government customers, vendors, and multidisciplinary teams while documenting vulnerabilities and implementing NIST-based security controls.

Monitor SIEM and cybersecurity tools in a 24x7x365 environment; detect, analyze, and respond to threats, unauthorized activity, APTs, and attacks. Review logs and network traffic, conduct root cause analysis, use threat intelligence and OSINT, support cybersecurity tools, and implement Defense-in-Depth controls. Develop scripts and tools using SPL, Python, or PowerShell to improve detection and incident response capabilities.

Supports global cybersecurity governance, risk, and compliance programs by administering KnowBe4, coordinating awareness campaigns and phishing simulations, maintaining policies and governance records, tracking metrics and remediation, supporting audits and evidence collection, and preparing dashboards and executive reports. The role also assists with ServiceNow governance workflows, AI and non-human identity governance, stakeholder coordination, and process improvement.

Lead DoD Risk Management Framework authorization activities across system development, testing, authorization, and operations. Develop and maintain ATO/IATT packages, SSPs, POA&Ms, security control documentation, and assessment evidence in eMASS. Analyze NIST, DISA STIG, vulnerability, and configuration requirements; coordinate with ISSMs, ISSOs, SCAs, AOs, engineers, and government stakeholders. Support continuous monitoring, system changes, vulnerability remediation, security assessments, and secure configuration guidance across Linux, Windows, network, and virtualized environments.

Participate in a 9-week onsite cybersecurity internship supporting security assessments, vulnerability scanning, threat monitoring, penetration testing, red teaming, and AI testing. Work with security engineers to design and maintain cybersecurity solutions, prepare threat models, execute test cases, compile reports, and establish testing infrastructure for web and mobile applications.

Leads User Administration and SAP Security teams, overseeing access provisioning, deprovisioning, access rights management, reporting, auditing, SLA adherence, compliance audits, and operational support for IT projects. Coaches team members, manages workloads, investigates customer issues, and designs and monitors enterprise security processes.

Supports client and internal cybersecurity compliance programs through control assessments, evidence review, risk analysis, policy and documentation development, vendor cybersecurity reviews, and audit coordination. The role prepares remediation roadmaps, risk summaries, control crosswalks, inventories, and audit materials while applying NIST, CIS, SOC 2, and ISO 27001 frameworks. It also translates technical findings into clear client deliverables and helps maintain compliance templates and processes.

Leads multiple Enterprise Security Operations Center teams monitoring classified and unclassified networks. Oversees incident detection, analysis, response, remediation, post-incident reviews, and root-cause planning. Provides technical guidance, manages projects, coordinates with IT teams and external partners, and communicates cybersecurity concepts to technical and non-technical stakeholders. Requires Top Secret clearance, relevant degree, cybersecurity experience, and CISM or CEH certification.

Leads the organization’s COMSEC program, including regulatory compliance, training, incident and breach response, risk mitigation, and liaison activities with authorities. The role requires expertise in communications and network security, encryption technologies, cryptographic material management, and applicable standards. The lead collaborates with internal teams and external partners, manages projects, and communicates technical concepts to varied audiences.

Maintains cybersecurity operations and security posture for an Air Force logistics system. Integrates cybersecurity throughout the system lifecycle, monitors security events and configuration changes, manages authorization and corrective actions, maintains documentation, reports cybersecurity impacts, and ensures personnel training, certifications, clearances, and compliance with Department of War and Air Force cybersecurity requirements.