Top Cybersecurity Jobs

Lead the development and execution of Citi’s enterprise insider threat program. Responsibilities include strategic planning, AI-driven threat detection, data-centric process implementation, threat triage and response, stakeholder engagement, governance, risk management, metrics, reporting, and incident response support. The role partners with cybersecurity, legal, HR, compliance, risk, technology teams, industry peers, vendors, and government agencies while helping drive organizational transformation and mentor team members.

Leads cybersecurity integration for newly acquired sites, including security assessments, firewall and VPN deployment, network segmentation, Zero Trust and Entra ID configuration, EDR and SIEM onboarding, email security, vendor coordination, documentation, and operational handoff. The role independently owns security architecture from assessment through steady-state transition, with approximately 75–80% travel to domestic and international acquisition sites and occasional after-hours or weekend cutovers.

Plans, coordinates, and governs the cybersecurity program, aligning initiatives with organizational objectives, regulatory requirements, and security strategy. Oversees cybersecurity roadmaps, budgets, vendors, project portfolios, reporting, and knowledge management within the CISO organization. Requires cybersecurity program management experience and familiarity with Microsoft 365 tools, healthcare regulations, and security frameworks.

Leads SIEM engineering and cloud security for hybrid on-premises and cloud environments. Responsibilities include onboarding applications and workloads, integrating and parsing log sources, creating detection use cases, securing AWS and Azure migrations, supporting EDR and network monitoring, and applying incident response, identity management, segmentation, DLP, and healthcare security practices.

Provides senior cybersecurity and ISSM support for Air Force enterprise IT programs. Responsibilities include RMF compliance, continuous monitoring, authorization and security documentation, risk and configuration assessment, incident and vulnerability reporting, cybersecurity training, and advising authorization officials and program managers. The role also oversees security controls, corrective actions, developer findings, and cybersecurity personnel while supporting Agile development environments.

Provides senior ISSM cybersecurity support for Air Force REMIS, including RMF compliance, continuous monitoring, security control assessment, authorization maintenance, vulnerability tracking, configuration-change analysis, incident reporting, and cybersecurity documentation. The role guides ISSOs and privileged users, supports corrective actions, evaluates automated security findings, and ensures compliance with DoD and Air Force cybersecurity policies. Requires substantial cybersecurity experience, U.S. citizenship, a T3/Secret clearance, and an advanced DCWF ISSM certification.

Leads cybersecurity operations, including incident monitoring and response, threat hunting, vulnerability management, digital forensics, security-tool administration, and penetration-test remediation. Oversees onshore SOC activities, coordinates with offshore analysts, maintains SOPs and incident documentation, tracks security metrics and SLAs, and supports threat intelligence, security awareness, and purple, red, and blue team engagements. Provides technical guidance, analyst training, vendor coordination, management reporting, and after-hours incident support.

Engineer and harden classified systems, mission ground systems, and laboratory environments. Implement security controls, conduct RMF accreditation through ATO and ATC, manage vulnerabilities and incidents, automate compliance activities, and support continuous monitoring. The role also includes mentoring, developing security standards, collaborating with engineering and administration teams, and participating in on-call incident response for national security missions.

Supports a commercial client by designing, developing, and implementing SOAR automations for security incident response. Collaborates with cybersecurity SMEs, engineers, vendors, and stakeholders to create security orchestrations and innovative solutions. The role requires expertise across SOAR, SIEM, IDS/IPS, DLP, WAF, and endpoint security platforms, cybersecurity consulting experience, and onsite client work.

Manage cybersecurity programs for classified information systems, including continuous monitoring, security control assessments, configuration reviews, risk analysis, and government policy implementation. Lead Assessment and Authorization activities, Security Test and Evaluation, inspections, audits, investigations, and corrective actions. Prepare and submit security documentation such as System Security Plans, Risk Acceptance Reports, POA&Ms, and SCTMs. The role is full-time, on-site in Roy, Utah, and requires an active Top Secret clearance with potential access to Special Access Programs.

AeroVironment is recruiting for upcoming five-year cybersecurity contract opportunities across database engineering, information systems security, software, systems, cloud, testing, administration, web development, and data science. Team members will support defensive cyber operations, critical infrastructure protection, threat detection, containment, mitigation, systems integration, analytics, information sharing, malware analysis, configuration management, and training development. Positions begin in late 2026 or early 2027 and may require U.S. person status or U.S. citizenship under ITAR and contract requirements.

Lead the architecture and execution of a large-scale CIAM platform migration and consolidation. Own customer identity operations, authentication flows, integrations, microservices, mobile login experiences, observability, resilience, and identity-related incident response. Partner with product, marketing, business, and customer support teams to optimize security, fraud prevention, customer experience, and conversion. Communicate platform health, migration progress, and fraud metrics to stakeholders.

Designs, implements, and maintains enterprise cybersecurity solutions across on-premises, cloud, and hybrid environments. Responsibilities include security architecture, SIEM monitoring, threat hunting, incident response, vulnerability management, patch compliance, risk analysis, ATO planning, and security control integration. The role supports NIST, RMF, and ISO standards, collaborates with infrastructure and application teams, and operates onsite in a classified workspace requiring Top Secret clearance.

Performs cybersecurity risk and compliance activities, including ATO package management, SSP and POA&M development, vulnerability assessments, audits, incident response, RMF implementation, and security architecture reviews. Coordinates with authorizing officials, assessors, ISSMs, program managers, and contractors. Supports continuous monitoring, cybersecurity engineering, threat analysis, and compliance reporting across IT environments. Requires seven years of experience, DoD cybersecurity certifications, U.S. citizenship, and eligibility for a government security clearance.

Oversee daily operations of the MACC-TTE cyber training/testing center. Manage customer support for events, integrate sponsor requirements, control projects/budgets/schedules, serve as primary POC, be on-site during regular duty hours, and act as backup to the Program Manager as needed.

Supports cybersecurity operations for Executive Airlift Communications Network environments, including Air-to-GIG Gateways, a Systems Integration Laboratory, and a Government Security Operations Center. Responsibilities include diagnosing and mitigating cyber incidents, vulnerabilities, network attacks, and service interruptions; coordinating incident resolution; documenting events in ServiceNow; managing controlled changes; reviewing tickets; and applying ITSM and ITIL processes.

Develops AI-enabled software and rapid prototypes to improve defensive cybersecurity operations. The role collaborates with mission operators and applies Python, LLMs, and corporate AI resources to support vulnerability analysis, patching, incident response, adversary emulation, threat analysis, and COMSEC monitoring for government and Defense Industrial Base environments.

Leads vulnerability management across client applications, including analyzing findings, assigning remediation, tracking closure, and validating fixes. Supports POA&M activities, federal cybersecurity compliance, patching deadlines, dashboards, KPIs, leadership briefings, Splunk alert monitoring, secure development, audits, and assessments. Requires cybersecurity or IT risk management experience, federal Public Trust eligibility, and familiarity with vulnerability tools, NIST, FISMA, and OWASP.

Leads cybersecurity risk management across client applications, managing POA&M lifecycles, prioritizing remediation, conducting business impact analyses, and maintaining continuity documentation. The consultant coordinates with system owners, engineering, and security teams; validates fixes; prepares leadership and federal oversight reports; supports audits and assessments; and applies NIST, FISMA, and federal security requirements.

Protect P&G’s global IT environment from cyber threats through security engineering or analysis. Responsibilities include designing and monitoring security platforms, investigating incidents, responding to threats, assessing vulnerabilities, driving remediation, researching emerging attack techniques, strengthening security controls, and communicating risks to technical and business stakeholders.

Provides cybersecurity engineering leadership for classified DoD and U.S. Space Force systems. Designs and assesses security solutions, integrates controls across networks, supports RMF and ATO activities, conducts risk analyses, evaluates system changes, and ensures compliance with NIST, DoD, DAF, and Intelligence Community requirements. The role coordinates with government stakeholders and technical teams, tracks remediation activities, and presents security findings and recommendations to senior leadership.

Leads and grows a global digital risks and cybersecurity consulting business. Responsibilities include strategy, business development, sales, complex cyber advisory and incident response engagements, AI risk and governance services, threat analysis, executive recommendations, project profitability, team leadership, recruitment, and mentoring. The role advises clients on cyber resilience, information security risk, governance, forensics, analytics, emerging technology risk, and multi-jurisdictional cyber investigations.

Supports P&G’s Cyber Defense organization by helping design, test, deploy, monitor, and improve security solutions. Interns may investigate cybersecurity incidents, identify vulnerabilities, drive remediation, research emerging threats and tactics, and strengthen security controls across networks, applications, infrastructure, and CI/CD pipelines. The role also involves communicating security risks, collaborating with cross-functional teams, and promoting compliance with cybersecurity standards and best practices.

Designs and evolves secure, resilient IT and OT infrastructure and network architectures. The role eliminates single points of failure, strengthens business continuity, identifies and mitigates cyber vulnerabilities, validates managed service provider remediation, and protects manufacturing systems, legacy operating systems, and critical business products. Responsibilities include Microsoft and VMware infrastructure, redundant networking, security controls, scripting automation, and collaboration with OT engineers and product owners.

The Security Engineering Manager oversees security policies, manages incident responses, monitors threats, and coordinates investigations to protect the technology environment. They also handle reporting and assurance on security incidents and ensure operational stability.