Top Cybersecurity Jobs

Senior Cybersecurity Engineer to design, implement, and maintain security controls across enterprise systems and mission environments. Responsibilities include vulnerability management, access control, boundary defense, patch compliance, Zero Trust implementation, IDS/IPS and firewall management, remediation planning, documentation, and compliance for federal mission systems.

Operate, maintain, tune, and engineer enterprise SIEM and log-aggregation platforms. Develop detection content, alerting rules, playbooks, and parsing for ingestion. Troubleshoot event flows, ensure 99.99% availability, perform maintenance/patching, document incidents, and support CSOC analytics and integrations with government reporting systems.

Operate, maintain, and improve enterprise SIEM and log aggregation platforms (ArcSight, ElasticSearch, Kibana, Splunk). Onboard assets, develop alerts/playbooks/rules, tune queries, troubleshoot event flow and parsing, and perform engineering, testing, and emergency maintenance to meet 99.99% availability and Intelligence Community standards. Document incidents, use ticketing systems, and support CSOC reporting and integrations. Requires active TS/SCI and relevant DoD 8570 certifications.

Lead enterprise cybersecurity architecture across Zero Trust, cloud, identity, networks, applications, and data. Design secure hybrid on‑prem/cloud architectures, establish baselines and standards, ensure NIST/RMF/OMB-CISA compliance, oversee modernization efforts, coordinate cross-functional teams for threat modeling, secure API design, encryption, secrets management, and advise senior leadership on strategy and enterprise risk.

The Operational Risk Manager oversees cybersecurity risks, advises stakeholders, conducts risk assessments, ensures compliance, and participates in incident response activities.

The role involves advising on cybersecurity improvements, crisis response, due diligence, and conducting briefings with executives across Blackstone’s global portfolio.

Support and secure mission-critical intelligence systems through RMF-aligned assessments, vulnerability identification, and mitigation. Evaluate architectures, document SOPs, automate testing and monitoring with Python/PowerShell, manage containerized/virtualized environments (Kubernetes, AWS), and collaborate with DevOps and systems teams to ensure secure design and mission readiness in classified environments.

Provide cyber intelligence services for the U.S. energy sector: deliver threat intelligence on nation-state and criminal actors; design, implement, and secure enterprise IT and OT environments; manage cloud security, Zero Trust, RMF/NIST 800-53 compliance; support ATO packages and continuous monitoring; perform endpoint security, vulnerability management, and system hardening. Requires active TS/SCI or DOE Q.

Provide Assessment & Authorization (A&A) support under DoD/IC RMF for USSOCOM networks and systems. Perform risk and vulnerability assessments, create A&A/CAP packages, use ACAS/Nessus/SCAP and STIGs, validate patching, develop POA&Ms and ISCM plans, coordinate with DoD/IC agencies, and advise on mitigation and authorization actions to obtain ATO/IATT/ATC.

Lead global security operations, incident response, and threat intelligence programs for Aptiv's Cybersecurity Engineering section, ensuring compliance and incident readiness.

Oversee Minitab's Information Security Management System, manage risk compliance, third-party security assessments, and develop security training programs.

Lead cybersecurity for Ground CIS systems: develop and review security requirements and artifacts (SSP, IATT, ATC, ATO), implement RMF, perform risk assessments, track contractor deliverables, produce POAMs, evaluate threats/vulnerabilities, and support program reviews and briefings. Travel ~20%.

Design, implement, and operate enterprise security controls across Azure, M365, and hybrid environments. Support incident response, PKI and key management, DLP, EDR, secure configuration baselines, and Zero Trust operationalization. Collaborate with GRC, Threat & Exposure Management, infrastructure, and application teams to remediate vulnerabilities, embed security into SDLC, and maintain global security platform reliability and compliance.

Law firm seeks associates (2-4 years post-JD) for privacy, cybersecurity, and communications regulatory practice. Responsibilities include privacy and data security counseling, transactional and litigation work, and representing clients before regulators (FTC, foreign DPAs, state AGs). Focus on compliance with HIPAA, GLBA, FTC Act, international privacy law, and self-regulatory standards; cyber incident response and information security planning experience is a plus.

Lead global infrastructure and cybersecurity for corporate and plant environments: design and operate networks, cloud, virtualization, backups, endpoint and OT security; transition operations to MSPs; own vendor governance, budgets, incident response, and a permanent security/infrastructure team.

Design, build, automate, and maintain enterprise security platforms with emphasis on AI/ML model protection, detection, and incident response. Integrate telemetry, SIEM, container and cloud security, perform vulnerability assessments on AI pipelines, enforce data protection and access controls, automate workflows, and collaborate with engineering and SecOps to improve platform reliability and compliance.

Protect firm employees, data, and infrastructure by developing and using monitoring tools, performing incident response and remediation, conducting unstructured investigations, and promoting cybersecurity best practices across the organization.

The Cybersecurity Engineer is responsible for protecting data and infrastructure, implementing firm-wide defenses, leading awareness efforts, and handling incident responses.

Lead and mentor a team of Security Engineers to design and enforce secure architectures for electronic warfare systems. Manage RMF (Steps 1-6) and ISSE/ISSO functions to achieve IATT/ATO, produce A&A documentation with Xacta/eMASS, run continuous monitoring and vulnerability management (Nessus/ACAS/SCAP), and direct incident response while ensuring compliance with NIST SP 800-53, ICD 503, and CNSSI 1253.

Lead design and delivery of DoD-focused secure infrastructure solutions. Provide pre- and post-sales technical leadership, architect multivendor security, produce proposals/RFP responses, conduct vulnerability assessments, mentor engineers, and enable sales teams.

Defend DoD networks as part of a 24x7 SOC: analyze real-time threat intelligence, correlate security events, perform packet and log forensics, triage alerts, integrate IOCs into sensors/SIEMs, and coordinate incident response with USCYBERCOM and customers.

Design, build, and operate a secure Kubernetes-based platform: automate infrastructure (Terraform), CI/CD (Argo CD), observability, and security tooling; ensure availability, compliance, and incident troubleshooting while collaborating with engineering teams and documenting platform standards.

Senior security engineer to build, operate, and secure a Kubernetes-based cloud platform. Responsibilities include infrastructure automation (Terraform), CI/CD (Argo CD), observability, security tooling, compliance, troubleshooting, documentation, and cross-team collaboration to support U.S. federal contracts.

Collect, analyze, and report cyber and physical threat intelligence using OSINT and threat platforms. Produce analytic products and executive briefings, support incident response and insider threat investigations, develop dashboards (Power BI/Azure Databricks), automate intelligence processes, and partner across security teams and external agencies to inform detection, hunting, and mitigation activities.

Lead development and maintenance of a technology and cybersecurity governance framework across on-prem and cloud environments. Manage policy and controls programs, risk and controls mapping (SOC2, NIST, PCI, NYDFS), annual risk assessments, GRC automation, SOC2 audits and regulatory exams. Partner with enterprise risk, architects, and tech teams to measure and report program effectiveness and ensure compliance.