Top Cybersecurity Jobs

Lead and manage multiple cybersecurity risk workstreams including risk assessments, HVA oversight, and risk governance. Advise on federal cybersecurity frameworks, produce policies/SOPs, perform QA/QC on deliverables, present findings to technical and executive audiences, and coordinate with federal partners to ensure compliance with CISA, OMB, and NIST guidance.

Lead cybersecurity risk management and governance for federal clients: maintain and improve enterprise risk register, scope and execute Tier 1 technology risk assessments, prepare risk acceptance memoranda, implement corrective action plans, apply NIST/FIPS frameworks, and present findings and recommendations to technical and executive stakeholders.

Lead design and implementation of DoD cloud and enclave security architectures. Integrate RMF, cATO, Zero Trust, and DevSecOps into Agile workflows; maintain Bodies of Evidence, validate controls, support vulnerability management, STIGs, and cloud-native security across development and classified environments. Brief leadership and coordinate cross-functional cyber teams.

Build and operate secure, production-grade infrastructure and automation for security data pipelines and integrations. Own IaC, CI/CD, cloud deployments, observability, on-call readiness, and integrations across SIEM/SOAR/EDR and enterprise tools. Scope partner requests to shipped solutions and raise team capabilities with AI-augmented engineering practices.

Perform system audits, continuous monitoring, and security assessments; validate and recommend security requirements; support A&A and RMF documentation; conduct ST&E activities and report results; implement government policy, mitigate risks, and prepare risk management evidence for classified systems.

Perform system audits, continuous monitoring, and security assessments to evaluate and improve information system security posture. Support RMF Assessment & Authorization, ST&E testing, documentation (SSPs, POA&Ms), and investigations. Work within strict program controls for classified environments and assist with implementation of government security policy and safeguards.

Perform system audits, continuous monitoring, and assessments to evaluate security posture. Support RMF Assessment & Authorization (A&A), Security Test & Evaluation (ST&E), documentation (SSPs, POA&Ms), risk analysis, and implementation of government security policy and safeguards. Prepare A&A evidence, reports, and coordinate mitigation activities for classified systems.

Lead design, development, configuration, and optimization of ServiceNow capabilities supporting cybersecurity risk, compliance, third‑party risk, and PCI assessment processes. Build workflows, control libraries, evidence collection, dashboards, reporting, integrations, and automation. Provide technical escalation, architecture support, risk assessment methodologies, remediation tracking, and program maturity reporting.

Serve as a frontline subject-matter expert for cybersecurity incident response, enabling support staff readiness, managing high-impact escalations, driving fixes with product teams, improving processes and diagnostics, and coordinating global readiness and release plans to deliver superior customer outcomes.

Lead day-to-day security operations and the SOC, manage incident response and vulnerability management, operate enterprise security tools (endpoint, cloud, SIEM, DLP, firewalls), drive security projects and vendor relationships, contribute to policies, awareness, and strategy, and respond to high-severity alerts including off-hours incidents.

Lead design and governance of enterprise AI security: secure AI models, data pipelines, and agent deployments; build guardrails; perform threat modeling and risk assessments; deploy AI-powered security tools; integrate AI security across cloud, DevSecOps, and application teams; mentor and drive cybersecurity projects and incident response.

Lead full enterprise sales cycles for Fortune 500 clients, engaging CISOs/CIOs to align cybersecurity investments with business goals. Manage complex 6-12 month, multi-stakeholder deals, drive platform adoption, collaborate with Solutions Architects and partners, apply consultative methodologies (MEDDPICC, Challenger), and consistently exceed bookings, revenue, and margin targets.

Drive consultative enterprise sales to CISOs/CIOs/CFOs at $1B+ organizations, leading multi-stakeholder 6–12 month deals, promoting platform adoption, partnering with solutions, services and channel teams, and exceeding quota.

Lead complex, consultative enterprise sales to $1B+ organizations by engaging CISOs/CIOs/CFOs, managing 6-12 month multi-stakeholder deals, driving platform adoption, partnering with Solutions, Services and channel partners, and consistently exceeding revenue and margin targets using methodologies like MEDDPICC.

Drive strategic enterprise sales by owning complex consultative deals with CISOs/CIOs/CFOs at $1B+ organizations. Lead multi-stakeholder 6–12 month deals, collaborate with solutions, services, and partners, apply methodologies like MEDDPICC, and exceed bookings, revenue, and margin targets while promoting platform adoption.

Drive enterprise sales across $1B+ organizations by managing full sales cycles, engaging CISOs/CIOs/CFOs, leading multi-stakeholder 6-12 month deals, promoting platform adoption, and partnering with Solutions, Services, and channel partners to exceed bookings and revenue targets.

Lead and run the CFIUS-focused cybersecurity compliance program, translate US/North American regulations and standards into processes, manage audit readiness and reporting, coordinate with legal and agencies, support ISO 27001 and application-level assessments, and drive tooling and automation improvements (ServiceNow, OneTrust, Power Platform, Power BI, AI-enabled capabilities).

The Senior Principal Cybersecurity Architect will assess risks, develop security programs, create security requirements, and supervise cybersecurity testing initiatives to enhance security controls across technologies.

Lead security monitoring, investigations, and incident response. Maintain CSIRT and incident response plan, optimize security tools, mentor junior analysts, recommend control improvements, and leverage AI to accelerate investigations and threat detection. Drive deployment methodologies and train teams on security best practices.

Lead cloud security evaluations and SIEM validation; develop and deploy detection rules; monitor AWS posture for configuration drift; support continuous exposure management and cATO workflows; coordinate security control implementation and provide technical briefings and documentation.

Lead and perform high-assurance cybersecurity system engineering and evaluations for mission-critical systems. Develop and review security documentation, support requirements elicitation, conduct evaluations and C&A test planning, document vulnerabilities, and recommend mitigations and process improvements. Collaborate with teams and lead small teams to ensure systems meet security requirements.

Support Air Force systems by leading RMF-aligned cybersecurity engineering: manage controls, conduct risk and vulnerability assessments, oversee detection and monitoring, produce ATO/SSP evidence, and mentor teams to implement secure cloud and DevSecOps practices.

Perform detection, triage, and response to cybersecurity events within a 24x7 Cyber Fusion Center. Monitor SIEM/logging, manage cases in SOAR/incident systems, support host and network investigations, assist containment and remediation, participate in hunts, and document incident reports while improving CSIRT processes.

Support Air Force cybersecurity by leading risk and vulnerability assessments, managing infrastructure and controls, implementing RMF-aligned security solutions (IL5-ready), overseeing vulnerability scanning and continuous monitoring, and mentoring teams to secure systems and enable ATO packages.

Detect and mitigate insider threats and data-loss risks using behavioral analytics and multiple data sources. Build and tune detections, dashboards, and metrics; investigate alerts; reduce false positives; partner with risk and compliance; and implement email, network, endpoint, and cloud security controls.