Top Cybersecurity Jobs

Executes security engineering and operations across endpoints, identity, cloud platforms, and enterprise systems. Responsibilities include endpoint hardening, IAM administration, alert and log analysis, vulnerability management, access reviews, security technology deployments, compliance evidence collection, scripting, troubleshooting, documentation, and process improvement. The role partners with IT, Engineering, DevOps, IAM, and platform teams to maintain technical safeguards, resolve issues, and improve security workflows.

Provides governance, risk, and compliance support for federal information systems under FISMA and the NIST RMF. Manages authorization activities, reviews FedRAMP packages, evaluates security controls, conducts risk and gap assessments, maintains SSPs, SARs, SAPs, and POA&Ms, and supports continuous monitoring. The role collaborates with system owners, ISSOs, cloud providers, and senior stakeholders; prepares compliance reporting and oversight responses; and contributes to cybersecurity policy, control tailoring, remediation, and quality assurance activities.

Supports federal privacy and cybersecurity compliance by conducting Privacy Threshold Assessments, Privacy Impact Assessments, and related reviews. Maintains SORNs, ISAs, MOUs, inventories, metrics, and audit-ready documentation. Advises system owners on PII protection and privacy integration throughout the SDLC, monitors federal privacy requirements, supports FISMA reporting, develops training materials, and recommends process improvements.

Manages federal cybersecurity Risk Management Framework and assessment and authorization activities. Develops and reviews SSPs, SAPs, SARs, and POA&Ms; evaluates NIST security controls; reviews FedRAMP authorization packages; conducts risk assessments; supports continuous monitoring, vulnerability remediation, and ongoing authorization. Engages system owners, ISSOs, cloud providers, authorizing officials, and senior stakeholders to maintain compliance with FISMA, NIST, and federal security requirements.

Develops and maintains federal cybersecurity policies, standards, procedures, authorization packages, and compliance reports. Researches NIST, FISMA, OMB, and CISA requirements; performs gap and risk analyses; supports audits, POA&M tracking, governance reviews, documentation management, metrics, and briefings. Collaborates with system owners, ISSOs, subject matter experts, and technical stakeholders to translate cybersecurity requirements into actionable organizational guidance.

Leads enterprise infrastructure and cybersecurity architecture across on-premises, cloud, hybrid, network, endpoint, and secure computing environments. Owns technology roadmaps, infrastructure reliability, disaster recovery, cybersecurity risk management, incident response, CMMC and DoD compliance readiness, asset lifecycle management, and secure modernization. Partners across engineering, compliance, facilities, and program teams while mentoring technical staff and implementing resilient, compliant environments.

Monitors, triages, investigates, and responds to cybersecurity alerts across enterprise environments. Supports incident response, vulnerability management, SIEM optimization, security tooling, helpdesk requests, third-party risk, and user security education. Coordinates with internal IT teams, managed security providers, vendors, and business stakeholders on containment, remediation, reporting, and recovery. The role also analyzes logs and vulnerabilities, improves response processes, and provides after-hours support when necessary.

Engineers and operates enterprise cybersecurity platforms focused on Microsoft Defender, Purview, Azure, Microsoft 365, cloud security, and IAM. The role develops automation, security integrations, configuration baselines, monitoring, documentation, compliance controls, and security metrics. It partners with infrastructure, networking, application, data, OT, and security operations teams to improve endpoint, identity, cloud, and data protection. Responsibilities also include incident response support, vulnerability management, platform roadmaps, audit evidence, vendor coordination, and occasional after-hours support.

Administers cybersecurity systems, monitors alerts and logs, investigates and responds to incidents, analyzes threats and malware, manages vulnerabilities, supports digital forensics, enforces security policies, documents investigations, and collaborates on compliance, risk management, and employee security awareness.

Provides hands-on cybersecurity engineering and advisory services for client environments. Designs, deploys, configures, and supports security technologies across infrastructure, cloud, networks, and endpoints. Performs vulnerability management, secure application development, risk management, incident response, firewall and SIEM/XDR reviews, and security architecture work. Develops documentation and playbooks, advises clients on compliance frameworks and best practices, evaluates emerging technologies, and partners with internal teams to improve security posture.

Manages cybersecurity programs for classified information systems, including security control reviews, continuous monitoring, system and network assessments, policy implementation, risk mitigation, and Assessment and Authorization activities. Leads Security Test and Evaluation, prepares security documentation such as SSPs, POA&Ms, and SCTMs, supports inspections and audits, and coordinates corrective actions with government authorities. This is a full-time, on-site role requiring an active Secret clearance and eligibility for Special Access Programs.

Build and lead the security operations center, including staffing, operating models, playbooks, tooling, detection engineering, threat hunting, incident response, data-loss monitoring, and compliance evidence. Serve as incident commander, manage MSSP relationships, support CMMC and NIST assessments, coordinate sensitive-data investigations, conduct exercises, and report SOC performance to leadership. The role requires defense or federal cybersecurity experience, strong SIEM, EDR, SOAR, scripting, incident response, and threat-hunting expertise.

Own and advance the company’s identity security architecture across cloud and on-premises environments. Responsibilities include RBAC, JML automation, authentication policies, phishing-resistant MFA, PIM, PAM, secrets management, cloud IAM, SSO and SCIM integrations, Active Directory security, identity threat detection, access reviews, and compliance evidence. The role partners with Security Operations, IT, HR, and Compliance to implement secure, usable access controls aligned with CMMC, NIST, DFARS, and ITAR requirements.

Leads and enhances the enterprise Third-Party Risk Management program, including vendor intake, risk assessments, due diligence, monitoring, policy development, risk scoring, contractual security provisions, exception management, GRC data quality, and executive reporting. Partners with Legal, Procurement, business stakeholders, and security specialists to reduce cybersecurity, privacy, resilience, compliance, and operational risks introduced by third parties.

Designs and maintains enterprise cybersecurity architecture across cloud, endpoint, network, identity, application, and manufacturing environments. Leads security platform implementation, monitoring, threat detection, incident response, vulnerability management, penetration testing, access controls, hardening, audits, and regulatory support. Automates security workflows, develops metrics, oversees vendors and complex projects, advises business initiatives, and mentors cybersecurity staff. Occasional travel between company locations may be required.

Delivers strategic cybersecurity advisory engagements for organizational leaders. Assesses and develops cybersecurity and incident response programs, creates exercises and scenarios, identifies emerging cyber trends, and produces reports, presentations, recommendations, and findings. The role also contributes to thought leadership, methodology development, and internal initiatives while managing multiple projects and client relationships independently. Travel up to 30% is required, often on short notice.

Lead complex incident response engagements, investigate advanced threats, conduct host and network forensics across Windows, macOS, and Linux, perform malware analysis, and develop remediation plans. The consultant will communicate findings to executives, regulators, legal counsel, and customers; lead teams; conduct cloud incident response; contribute industry thought leadership; apply AI technologies; and travel on short notice up to 30%.

Leads cybersecurity analytics, security data engineering, and security intelligence strategy. Manages data scientists, data engineers, and security engineers while overseeing SIEM engineering, security telemetry pipelines, data models, dashboards, threat intelligence, vulnerability data, cloud security signals, and advanced analytics. The role requires executive stakeholder leadership, cloud-native data architecture expertise, cybersecurity risk measurement, AI-enabled security initiatives, regulatory reporting, and enterprise-scale security data platform development.

Lead PKI implementation and data protection projects, advise clients on privacy laws and compliance, conduct privacy impact assessments, develop privacy policies, manage project planning and budgets, coach and mentor teams, collaborate on breach response and cross-functional cybersecurity initiatives, and review legal documents to support compliance.

Manages enterprise information security governance, risk, and compliance initiatives. Develops security policies and frameworks, leads data classification and threat modeling, conducts risk assessments, oversees vulnerability remediation, evaluates security controls, supports audits, and prepares risk metrics and executive reports. Partners with technical teams to embed security requirements and promotes governance best practices across the organization.

Lead a team developing and testing cyber defenses for the Starshield satellite network. Responsibilities include implementing cyber defense strategy, assessing threats, conducting red-team exercises and vulnerability hunts, improving incident detection and response, and collaborating across security and engineering teams. The role requires hands-on software and cybersecurity expertise, leadership of direct reports, and readiness to respond to active threats against production systems.

Leads a cybersecurity engineering team responsible for defending the Starshield network against active threats. Implements cyber defense strategies, conducts red-team exercises and vulnerability hunts, improves incident detection and response, and develops countermeasures across large-scale systems. Collaborates with security feature, monitoring, and engineering teams while remaining hands-on with software and security challenges.

Build and mature a Cyber Resilience and Assurance program by developing governance frameworks, assessment methodologies, operating procedures, and validation approaches. Evaluate security controls across identity, infrastructure, network, cloud, applications, and AI environments. Support threat-informed assessments, attack simulations, resilience exercises, and readiness evaluations. Analyze attack paths and control effectiveness, create metrics and executive reporting, identify improvement opportunities, and contribute to long-term cybersecurity strategy and program roadmaps.

The Security Compliance Analyst manages cybersecurity, data privacy, classification, retention, governance, vulnerability assessments, incident response, and ATO documentation. Responsibilities include monitoring cloud environments and system logs, using SIEM tools, analyzing security risks, supporting security policies, reporting incidents, and ensuring compliance throughout the system lifecycle. The role also collaborates with Agile teams and stakeholders to protect sensitive data and resolve information assurance issues.

Develops and administers privacy, data classification, retention, and data-sharing policies for a federal court data platform. Conducts Privacy Impact Assessments, privacy risk analyses, and technical problem solving; drafts and manages data-sharing agreements, MOUs, and ISAs; maintains agreement inventories; and advises governance, legal, engineering, and business stakeholders on privacy-by-design, regulatory compliance, and secure handling of sensitive and personally identifiable information.