Top Cybersecurity Jobs

Build and operate cybersecurity AI infrastructure supporting model training, evaluation, deployment, and serving. Develop Databricks and AWS platforms, security telemetry pipelines, GitHub Actions CI/CD, DevSecOps controls, infrastructure as code, identity and secrets management, and model evaluation workflows. Partner with AI/ML engineers, data scientists, and security operators while conducting technical reviews and guiding platform design.

Build and operate Booz Allen’s cybersecurity AI infrastructure platform using Databricks, AWS, GitHub Actions, and infrastructure as code. Develop governed security telemetry pipelines, model evaluation and serving workflows, CI/CD, DevSecOps controls, and repeatable deployments. Partner with AI engineers, data scientists, and security operators to operationalize agentic AI capabilities. Lead technical design, code reviews, platform direction, and production monitoring while enforcing least-privilege access and secure handling of sensitive data.

Serves as the technical authority for network security, endpoint security, and detection and response. Owns security reference architectures, standards, governance, technology strategies, and multi-year roadmaps. Leads architecture reviews, platform evaluations, Zero Trust and defense-in-depth initiatives, risk assessments, and remediation recommendations. Develops detection and response capabilities for AI systems and autonomous agents, mentors security professionals, and advises executive leadership on complex cybersecurity decisions.

Designs and implements cybersecurity architecture across corporate and development environments. Translates NIST SP 800-171 and CMMC Level 2 requirements into technical controls, supports ATO activities, and partners with infrastructure teams on Palo Alto architecture, segmentation, remote access, and network rules. Defines CUI boundaries, data flows, and security diagrams while addressing gaps across cloud, SaaS, endpoints, networks, servers, and software services.

Develop and maintain RMF security artifacts for federal building and facility control systems. Gather technical information, support system categorization and risk assessments, review vulnerability scans, create and track POA&Ms, assist with STIG compliance, maintain system inventories, and coordinate with government cybersecurity teams, system owners, engineers, and security officers to support ATO activities and recurring reporting.

Leads onsite cybersecurity operations for federal facility and control systems. Responsibilities include patching, hardening, monitoring, vulnerability management, RMF documentation, system inventories, compliance, ATO readiness, and coordination with government cybersecurity teams, facility personnel, OEM vendors, and stakeholders. Supervises two RMF Specialists, mentors staff, supports risk assessments, and leads cyber phase-in and transition activities.

Implements STIGs across IT and OT systems, supports RMF assessments and authorizations, inventories ICS/SCADA environments, performs vulnerability scanning, manages POA&Ms, applies technical controls, and supports cybersecurity compliance, inspections, and continuous improvement. The role requires collaboration with government customers, vendors, and multidisciplinary teams while documenting vulnerabilities and implementing NIST-based security controls.

Monitor SIEM and cybersecurity tools in a 24x7x365 environment; detect, analyze, and respond to threats, unauthorized activity, APTs, and attacks. Review logs and network traffic, conduct root cause analysis, use threat intelligence and OSINT, support cybersecurity tools, and implement Defense-in-Depth controls. Develop scripts and tools using SPL, Python, or PowerShell to improve detection and incident response capabilities.

Supports global cybersecurity governance, risk, and compliance programs by administering KnowBe4, coordinating awareness campaigns and phishing simulations, maintaining policies and governance records, tracking metrics and remediation, supporting audits and evidence collection, and preparing dashboards and executive reports. The role also assists with ServiceNow governance workflows, AI and non-human identity governance, stakeholder coordination, and process improvement.

Lead DoD Risk Management Framework authorization activities across system development, testing, authorization, and operations. Develop and maintain ATO/IATT packages, SSPs, POA&Ms, security control documentation, and assessment evidence in eMASS. Analyze NIST, DISA STIG, vulnerability, and configuration requirements; coordinate with ISSMs, ISSOs, SCAs, AOs, engineers, and government stakeholders. Support continuous monitoring, system changes, vulnerability remediation, security assessments, and secure configuration guidance across Linux, Windows, network, and virtualized environments.

Participate in a 9-week onsite cybersecurity internship supporting security assessments, vulnerability scanning, threat monitoring, penetration testing, red teaming, and AI testing. Work with security engineers to design and maintain cybersecurity solutions, prepare threat models, execute test cases, compile reports, and establish testing infrastructure for web and mobile applications.

Supports client and internal cybersecurity compliance programs through control assessments, evidence review, risk analysis, policy and documentation development, vendor cybersecurity reviews, and audit coordination. The role prepares remediation roadmaps, risk summaries, control crosswalks, inventories, and audit materials while applying NIST, CIS, SOC 2, and ISO 27001 frameworks. It also translates technical findings into clear client deliverables and helps maintain compliance templates and processes.

Leads multiple Enterprise Security Operations Center teams monitoring classified and unclassified networks. Oversees incident detection, analysis, response, remediation, post-incident reviews, and root-cause planning. Provides technical guidance, manages projects, coordinates with IT teams and external partners, and communicates cybersecurity concepts to technical and non-technical stakeholders. Requires Top Secret clearance, relevant degree, cybersecurity experience, and CISM or CEH certification.

Maintains cybersecurity operations and security posture for an Air Force logistics system. Integrates cybersecurity throughout the system lifecycle, monitors security events and configuration changes, manages authorization and corrective actions, maintains documentation, reports cybersecurity impacts, and ensures personnel training, certifications, clearances, and compliance with Department of War and Air Force cybersecurity requirements.

Leads global managed cybersecurity service delivery, including MDR, CTEM, cloud security, SOC operations, governance, client outcomes, and service performance. Owns managed-services growth, revenue, margins, forecasting, modernization, AI adoption, transformation programs, and executive client relationships. Builds and develops distributed cybersecurity teams while partnering cross-functionally on portfolio strategy, delivery quality, operational resilience, and business expansion.

Executes security engineering and operations across endpoints, identity, cloud platforms, and enterprise systems. Responsibilities include endpoint hardening, IAM administration, alert and log analysis, vulnerability management, access reviews, security technology deployments, compliance evidence collection, scripting, troubleshooting, documentation, and process improvement. The role partners with IT, Engineering, DevOps, IAM, and platform teams to maintain technical safeguards, resolve issues, and improve security workflows.

Provides governance, risk, and compliance support for federal information systems under FISMA and the NIST RMF. Manages authorization activities, reviews FedRAMP packages, evaluates security controls, conducts risk and gap assessments, maintains SSPs, SARs, SAPs, and POA&Ms, and supports continuous monitoring. The role collaborates with system owners, ISSOs, cloud providers, and senior stakeholders; prepares compliance reporting and oversight responses; and contributes to cybersecurity policy, control tailoring, remediation, and quality assurance activities.

Supports federal privacy and cybersecurity compliance by conducting Privacy Threshold Assessments, Privacy Impact Assessments, and related reviews. Maintains SORNs, ISAs, MOUs, inventories, metrics, and audit-ready documentation. Advises system owners on PII protection and privacy integration throughout the SDLC, monitors federal privacy requirements, supports FISMA reporting, develops training materials, and recommends process improvements.

Manages federal cybersecurity Risk Management Framework and assessment and authorization activities. Develops and reviews SSPs, SAPs, SARs, and POA&Ms; evaluates NIST security controls; reviews FedRAMP authorization packages; conducts risk assessments; supports continuous monitoring, vulnerability remediation, and ongoing authorization. Engages system owners, ISSOs, cloud providers, authorizing officials, and senior stakeholders to maintain compliance with FISMA, NIST, and federal security requirements.

Develops and maintains federal cybersecurity policies, standards, procedures, authorization packages, and compliance reports. Researches NIST, FISMA, OMB, and CISA requirements; performs gap and risk analyses; supports audits, POA&M tracking, governance reviews, documentation management, metrics, and briefings. Collaborates with system owners, ISSOs, subject matter experts, and technical stakeholders to translate cybersecurity requirements into actionable organizational guidance.

Leads enterprise infrastructure and cybersecurity architecture across on-premises, cloud, hybrid, network, endpoint, and secure computing environments. Owns technology roadmaps, infrastructure reliability, disaster recovery, cybersecurity risk management, incident response, CMMC and DoD compliance readiness, asset lifecycle management, and secure modernization. Partners across engineering, compliance, facilities, and program teams while mentoring technical staff and implementing resilient, compliant environments.

Monitors, triages, investigates, and responds to cybersecurity alerts across enterprise environments. Supports incident response, vulnerability management, SIEM optimization, security tooling, helpdesk requests, third-party risk, and user security education. Coordinates with internal IT teams, managed security providers, vendors, and business stakeholders on containment, remediation, reporting, and recovery. The role also analyzes logs and vulnerabilities, improves response processes, and provides after-hours support when necessary.

Engineers and operates enterprise cybersecurity platforms focused on Microsoft Defender, Purview, Azure, Microsoft 365, cloud security, and IAM. The role develops automation, security integrations, configuration baselines, monitoring, documentation, compliance controls, and security metrics. It partners with infrastructure, networking, application, data, OT, and security operations teams to improve endpoint, identity, cloud, and data protection. Responsibilities also include incident response support, vulnerability management, platform roadmaps, audit evidence, vendor coordination, and occasional after-hours support.

Administers cybersecurity systems, monitors alerts and logs, investigates and responds to incidents, analyzes threats and malware, manages vulnerabilities, supports digital forensics, enforces security policies, documents investigations, and collaborates on compliance, risk management, and employee security awareness.

Provides hands-on cybersecurity engineering and advisory services for client environments. Designs, deploys, configures, and supports security technologies across infrastructure, cloud, networks, and endpoints. Performs vulnerability management, secure application development, risk management, incident response, firewall and SIEM/XDR reviews, and security architecture work. Develops documentation and playbooks, advises clients on compliance frameworks and best practices, evaluates emerging technologies, and partners with internal teams to improve security posture.