Top Cybersecurity Jobs

Leads the organization’s COMSEC program, including regulatory compliance, training, incident and breach response, risk mitigation, and liaison activities with authorities. The role requires expertise in communications and network security, encryption technologies, cryptographic material management, and applicable standards. The lead collaborates with internal teams and external partners, manages projects, and communicates technical concepts to varied audiences.

Maintains cybersecurity operations and security posture for an Air Force logistics system. Integrates cybersecurity throughout the system lifecycle, monitors security events and configuration changes, manages authorization and corrective actions, maintains documentation, reports cybersecurity impacts, and ensures personnel training, certifications, clearances, and compliance with Department of War and Air Force cybersecurity requirements.

Leads global managed cybersecurity service delivery, including MDR, CTEM, cloud security, SOC operations, governance, client outcomes, and service performance. Owns managed-services growth, revenue, margins, forecasting, modernization, AI adoption, transformation programs, and executive client relationships. Builds and develops distributed cybersecurity teams while partnering cross-functionally on portfolio strategy, delivery quality, operational resilience, and business expansion.

Executes security engineering and operations across endpoints, identity, cloud platforms, and enterprise systems. Responsibilities include endpoint hardening, IAM administration, alert and log analysis, vulnerability management, access reviews, security technology deployments, compliance evidence collection, scripting, troubleshooting, documentation, and process improvement. The role partners with IT, Engineering, DevOps, IAM, and platform teams to maintain technical safeguards, resolve issues, and improve security workflows.

Provides governance, risk, and compliance support for federal information systems under FISMA and the NIST RMF. Manages authorization activities, reviews FedRAMP packages, evaluates security controls, conducts risk and gap assessments, maintains SSPs, SARs, SAPs, and POA&Ms, and supports continuous monitoring. The role collaborates with system owners, ISSOs, cloud providers, and senior stakeholders; prepares compliance reporting and oversight responses; and contributes to cybersecurity policy, control tailoring, remediation, and quality assurance activities.

Supports federal privacy and cybersecurity compliance by conducting Privacy Threshold Assessments, Privacy Impact Assessments, and related reviews. Maintains SORNs, ISAs, MOUs, inventories, metrics, and audit-ready documentation. Advises system owners on PII protection and privacy integration throughout the SDLC, monitors federal privacy requirements, supports FISMA reporting, develops training materials, and recommends process improvements.

Manages federal cybersecurity Risk Management Framework and assessment and authorization activities. Develops and reviews SSPs, SAPs, SARs, and POA&Ms; evaluates NIST security controls; reviews FedRAMP authorization packages; conducts risk assessments; supports continuous monitoring, vulnerability remediation, and ongoing authorization. Engages system owners, ISSOs, cloud providers, authorizing officials, and senior stakeholders to maintain compliance with FISMA, NIST, and federal security requirements.

Develops and maintains federal cybersecurity policies, standards, procedures, authorization packages, and compliance reports. Researches NIST, FISMA, OMB, and CISA requirements; performs gap and risk analyses; supports audits, POA&M tracking, governance reviews, documentation management, metrics, and briefings. Collaborates with system owners, ISSOs, subject matter experts, and technical stakeholders to translate cybersecurity requirements into actionable organizational guidance.

Supports cybersecurity engineering initiatives across application, cloud, platform, identity, and infrastructure security. Responsibilities include system hardening, security integrations, cloud security policy development, automation, configuration baseline monitoring, risk assessments, audits, regulatory compliance, and implementation of cloud security solutions. Requires collaboration with technical teams and cloud providers, strong troubleshooting and communication skills, and participation in an on-call rotation.

Leads enterprise infrastructure and cybersecurity architecture across on-premises, cloud, hybrid, network, endpoint, and secure computing environments. Owns technology roadmaps, infrastructure reliability, disaster recovery, cybersecurity risk management, incident response, CMMC and DoD compliance readiness, asset lifecycle management, and secure modernization. Partners across engineering, compliance, facilities, and program teams while mentoring technical staff and implementing resilient, compliant environments.

Monitors, triages, investigates, and responds to cybersecurity alerts across enterprise environments. Supports incident response, vulnerability management, SIEM optimization, security tooling, helpdesk requests, third-party risk, and user security education. Coordinates with internal IT teams, managed security providers, vendors, and business stakeholders on containment, remediation, reporting, and recovery. The role also analyzes logs and vulnerabilities, improves response processes, and provides after-hours support when necessary.

Engineers and operates enterprise cybersecurity platforms focused on Microsoft Defender, Purview, Azure, Microsoft 365, cloud security, and IAM. The role develops automation, security integrations, configuration baselines, monitoring, documentation, compliance controls, and security metrics. It partners with infrastructure, networking, application, data, OT, and security operations teams to improve endpoint, identity, cloud, and data protection. Responsibilities also include incident response support, vulnerability management, platform roadmaps, audit evidence, vendor coordination, and occasional after-hours support.

Administers cybersecurity systems, monitors alerts and logs, investigates and responds to incidents, analyzes threats and malware, manages vulnerabilities, supports digital forensics, enforces security policies, documents investigations, and collaborates on compliance, risk management, and employee security awareness.

Provides hands-on cybersecurity engineering and advisory services for client environments. Designs, deploys, configures, and supports security technologies across infrastructure, cloud, networks, and endpoints. Performs vulnerability management, secure application development, risk management, incident response, firewall and SIEM/XDR reviews, and security architecture work. Develops documentation and playbooks, advises clients on compliance frameworks and best practices, evaluates emerging technologies, and partners with internal teams to improve security posture.

Participates in a structured remote cybersecurity internship covering asset inventory, vulnerability assessments, threat analysis, system hardening, incident response, security monitoring, and governance, risk, and compliance. The intern documents findings, develops security policies and reports, works in an AWS-based training environment, completes weekly deliverables, and presents a capstone security program summary.

Manages cybersecurity programs for classified information systems, including security control reviews, continuous monitoring, system and network assessments, policy implementation, risk mitigation, and Assessment and Authorization activities. Leads Security Test and Evaluation, prepares security documentation such as SSPs, POA&Ms, and SCTMs, supports inspections and audits, and coordinates corrective actions with government authorities. This is a full-time, on-site role requiring an active Secret clearance and eligibility for Special Access Programs.

Leads enterprise threat intelligence, detection engineering, threat hunting, phishing resiliency, and AI-enabled security operations. Builds and mentors multidisciplinary cybersecurity teams, advises executives, manages intelligence partnerships and vendors, maps detections to MITRE ATT&CK, directs red and purple team exercises, and drives measurable improvements in detection coverage, response times, control validation, and cyber risk reduction.

Build and lead the security operations center, including staffing, operating models, playbooks, tooling, detection engineering, threat hunting, incident response, data-loss monitoring, and compliance evidence. Serve as incident commander, manage MSSP relationships, support CMMC and NIST assessments, coordinate sensitive-data investigations, conduct exercises, and report SOC performance to leadership. The role requires defense or federal cybersecurity experience, strong SIEM, EDR, SOAR, scripting, incident response, and threat-hunting expertise.

Own and advance the company’s identity security architecture across cloud and on-premises environments. Responsibilities include RBAC, JML automation, authentication policies, phishing-resistant MFA, PIM, PAM, secrets management, cloud IAM, SSO and SCIM integrations, Active Directory security, identity threat detection, access reviews, and compliance evidence. The role partners with Security Operations, IT, HR, and Compliance to implement secure, usable access controls aligned with CMMC, NIST, DFARS, and ITAR requirements.

Leads and enhances the enterprise Third-Party Risk Management program, including vendor intake, risk assessments, due diligence, monitoring, policy development, risk scoring, contractual security provisions, exception management, GRC data quality, and executive reporting. Partners with Legal, Procurement, business stakeholders, and security specialists to reduce cybersecurity, privacy, resilience, compliance, and operational risks introduced by third parties.

Designs and maintains enterprise cybersecurity architecture across cloud, endpoint, network, identity, application, and manufacturing environments. Leads security platform implementation, monitoring, threat detection, incident response, vulnerability management, penetration testing, access controls, hardening, audits, and regulatory support. Automates security workflows, develops metrics, oversees vendors and complex projects, advises business initiatives, and mentors cybersecurity staff. Occasional travel between company locations may be required.

Delivers strategic cybersecurity advisory engagements for organizational leaders. Assesses and develops cybersecurity and incident response programs, creates exercises and scenarios, identifies emerging cyber trends, and produces reports, presentations, recommendations, and findings. The role also contributes to thought leadership, methodology development, and internal initiatives while managing multiple projects and client relationships independently. Travel up to 30% is required, often on short notice.

Lead complex incident response engagements, investigate advanced threats, conduct host and network forensics across Windows, macOS, and Linux, perform malware analysis, and develop remediation plans. The consultant will communicate findings to executives, regulators, legal counsel, and customers; lead teams; conduct cloud incident response; contribute industry thought leadership; apply AI technologies; and travel on short notice up to 30%.

Leads cybersecurity analytics, security data engineering, and security intelligence strategy. Manages data scientists, data engineers, and security engineers while overseeing SIEM engineering, security telemetry pipelines, data models, dashboards, threat intelligence, vulnerability data, cloud security signals, and advanced analytics. The role requires executive stakeholder leadership, cloud-native data architecture expertise, cybersecurity risk measurement, AI-enabled security initiatives, regulatory reporting, and enterprise-scale security data platform development.

Leads moderate-to-complex cybersecurity projects from planning through delivery, managing scope, schedules, budgets, risks, dependencies, quality, and stakeholder communication. Develops and validates project plans, facilitates meetings, resolves issues, tracks financial performance, creates business cases, and coordinates teams across the Cybersecurity organization. Advises stakeholders on tactical solutions and may mentor IT project managers. Requires cybersecurity or IT project management experience, knowledge of security frameworks, Agile and SDLC practices, and advanced project tracking skills.