Top Cybersecurity Jobs

Lead implementation and operation of enterprise IAM security controls across Entra ID, Okta, and Active Directory in a hybrid, multi-tenant environment. Translate architecture into secure configurations, enforce policies for compliance (CMMC, NIST), tune identity controls (PAM, JIT, MFA), investigate identity incidents as a 2nd-level SOC escalation point, automate IAM operations, support audits, maintain documentation, and provide occasional off-hours and travel support.

Conduct cloud and application security assessments, identify and remediate misconfigurations and vulnerabilities, embed security controls into CI/CD pipelines, and develop DevSecOps standards. Review cloud-native architectures for secure design, implement cyber defense controls, perform risk and compliance assessments, coordinate threat intelligence activities, and support RMF and security authorization requirements. The role requires AWS/Azure expertise, U.S. citizenship, and eligibility for a DOE L or Q clearance.

Performs entry-level cybersecurity and information assurance activities under close supervision, including system security plans, POA&Ms, change control, audits, incident response, vulnerability assessments, and security impact assessments. Supports RMF-based assessment and authorization, vulnerability mitigation, cybersecurity architecture coordination, technical reporting, and discussion-based exercises. Collaborates with ISSMs, program managers, stakeholders, and contractors while supporting government test-range systems and meeting strict deadlines.

Supports cybersecurity consulting engagements involving IT audits, SOC examinations, IT risk assessments, controls-based audits, regulatory compliance reviews, and cybersecurity maturity assessments using frameworks such as NIST, PCI DSS, and ISO. Conducts research and special analyses, builds client relationships, and participates in networking and business development. The role requires pursuing a relevant bachelor's degree, strong analytical and communication skills, a minimum 3.0 GPA, and potential travel.

Supports cybersecurity and privacy consulting engagements across strategy, compliance, cloud security, identity and access management, ethical hacking, threat monitoring, incident management, data protection, and AI security solutions. Contributes to engagement planning, project management, business development, marketing, and thought leadership while collaborating with clients and team members. The role requires strong analytical, technical, communication, problem-solving, and time-management skills, plus the ability to travel and work onsite or at client locations.

Leads initial cybersecurity incident response, monitors logs and threats, manages security tools and vendors, maintains policies, supports audits and regulatory compliance, conducts vulnerability assessments, and develops employee security awareness programs. The role requires strong documentation, organization, communication, discretion, and collaboration skills, along with at least one year of relevant IT experience.

Reviews and assesses vendor engagements, performs cybersecurity risk assessments, and supports vendor portfolio management. Collaborates with IT leaders, business partners, executives, consultants, and vendors to develop and execute measurement-based cyber risk management programs. Responsibilities include designing risk workflows, developing security plans and projects, applying risk quantification models, monitoring cybersecurity risks, and managing multiple deadlines. The role also requires regulatory knowledge, strong analytical and communication skills, budgeting ability, and Microsoft 365 proficiency.

Lead global product safety, regulatory, and cybersecurity compliance across Qualitrol’s industrial platforms and connected products. Manage certifications, risk assessments, design reviews, vulnerability management, secure development lifecycle integration, regulatory roadmaps, and certification testing. Partner with engineering, DevOps, product management, and external agencies to support global launches, standardize compliance processes, streamline documentation, and prevent compliance issues from delaying releases.

Leads enterprise cybersecurity advisory engagements across federal environments, covering governance, risk, compliance, Zero Trust, policy, and program performance. Advises C-suite and interagency stakeholders, oversees complex cybersecurity delivery, and aligns technical, data, and AI capabilities with mission objectives. Drives business development, capture, proposals, client relationships, revenue, and practice profitability. Mentors multidisciplinary teams and provides industry thought leadership through publications, conferences, and forums.

Leads the enterprise cybersecurity strategy, governance, security operations, risk and compliance programs. Oversees Microsoft security technologies, Zero Trust, identity and access management, cloud and endpoint security, incident response, vulnerability management, data protection, vendor risk, PCI DSS compliance, and AI security governance. Builds and mentors the cybersecurity team, manages vendors and investments, and communicates cyber risks and priorities to executives and the Board.

Performs continuous monitoring, vulnerability assessments and remediation, RMF control implementation, STIG reviews, and security documentation for an IL-5 environment. Maintains ATO, POA&M, audit evidence, and continuous-monitoring records while supporting secure DevSecOps pipelines, access controls, incident response, assessments, and compliance activities across applications, infrastructure, cloud services, databases, and integrations.

Support DoD cybersecurity risk management and PPSM operations by managing registry processes, ports and protocol registrations, security measures, compliance documentation, metrics, meetings, websites, and stakeholder communications. The role requires network security expertise, familiarity with DoD and DISA policies, eMASS and DMZ whitelist processes, technical writing, automation, and an active Secret clearance while working primarily onsite at Fort Meade.

Provides technical leadership for enterprise cybersecurity architecture, engineering, modernization, technology integration, risk management, and cloud migration. Leads cybersecurity solution design, feasibility studies, proofs of concept, vendor evaluations, and technology assessments. Advises government and executive stakeholders, develops recommendations aligned with mission objectives, and improves cybersecurity capabilities across on-premises, hybrid-cloud, and multi-cloud environments. Supports continuous monitoring, threat detection, incident response, vulnerability management, and classified and unclassified enterprise operations.

Supports DoD cyber defense training programs through curriculum analysis and development, training planning, certification standards, exercise objectives, readiness assessments, and performance evaluations. Maintains training databases, metrics, certification records, and status reports; researches cyber workforce requirements; supports exercises and after-action processes; develops training materials; and recommends System Security Plan updates for certification and accreditation. Requires familiarity with Joint Training System programs, JOPP, JELC, DoD cyber policies, and information assurance compliance.

Leads cybersecurity risk management for Army Aviation systems, including RMF lifecycle activities, accreditation packages, continuous monitoring, vulnerability mitigation, audits, testing, and authorization reviews. Coordinates government, contractor, and military stakeholders; maintains eMASS artifacts and compliance with DoD, NIST, CNSSI, and Army regulations. Provides technical guidance across multiple classification levels and supports ATO/ATC readiness.

Leads Acrisure’s global cybersecurity governance, risk, compliance, regulatory readiness, audit and control assurance functions. Owns cyber risk reporting, board governance, IT general controls, M&A cybersecurity due diligence, security awareness, phishing resilience, GRC modernization and AI-enabled workflows. Builds and scales a global GRC organization while partnering with executive leadership, Legal, Privacy, Internal Audit, Finance and Enterprise Risk Management in a regulated, acquisitive fintech environment.

Supports cybersecurity projects across threat-informed defense and governance, risk, and compliance teams. Duties may include threat investigation, vulnerability assessments, security documentation, risk assessments, compliance, privacy initiatives, metrics reporting, systems testing, and stakeholder communication. The intern works full-time remotely, collaborates with Technology and business teams, and helps improve security controls and organizational risk management.

Lead security enablement and automation for enterprise application onboarding. Design authentication/authorization patterns (SAML, OAuth2, OIDC), build automation, reusable tools/APIs, and self-service workflows. Partner with application and product teams to ensure secure integrations, perform risk assessments, enforce compliance, and mentor junior engineers.

Designs, implements, and maintains enterprise cybersecurity systems across university infrastructure, networks, cloud environments, and research systems. Configures security platforms, manages identity and access services, leads incident response and investigations, develops automation, supports zero-trust and cloud security architectures, and conducts security reviews. The role also supports HIPAA, FERPA, PCI-DSS, CMMC, and NIST compliance, documents technical processes, collaborates across IT teams, and mentors colleagues.

Support RMF/ATO activities: produce and maintain system security documentation (SSP, STCM, POA&M) using eMASS and Microsoft tools, install and manage cybersecurity tools, perform security control assessments and continuous monitoring, manage vulnerabilities, and coordinate with stakeholders and oversight organizations.

Lead cybersecurity operations and GRC activities, including incident response, vulnerability management, audit readiness, risk tracking, third-party assessments, policy management, and compliance with SOC 2, ISO 27001, NIST, GxP, GDPR, and 21 CFR Part 11. Administer security controls, coordinate penetration testing and remediation, improve automation, prepare executive reporting, and partner with IT, Legal, Privacy, Quality, HR, and business stakeholders.

Supports Emerson’s Product Security team by improving cybersecurity across its product portfolio. Responsibilities include assisting with secure coding practices, regulatory compliance, agile development, secure software and firmware development, and communicating security findings. The intern will apply cybersecurity principles in a collaborative product environment while developing professional skills.

Supports Emerson’s Product Security team by applying cybersecurity principles across its product portfolio. Responsibilities include assisting with secure coding practices, regulatory compliance, secure software and firmware development, agile processes, and communicating security findings. The intern will collaborate with stakeholders, develop technical and communication skills, and gain practical experience in product cybersecurity within a team-oriented environment.

Execute risk-based digital technology and cybersecurity audits, develop testing procedures, evaluate controls, report findings, track remediation, and apply data analytics to identify risks and anomalies. Collaborate with technology, cybersecurity, compliance, and analytics teams; monitor regulatory developments; improve audit practices; and mentor team members. The role requires stakeholder engagement, clear reporting, and approximately 15–20% domestic and international travel.

Cybersecurity Intern supporting security log reviews, vulnerability scan analysis, threat tracking, risk assessments, compliance audits, security awareness training, and incident response improvements. The role also involves researching emerging threats, tools, and technologies while applying foundational knowledge of networking, operating systems, and cybersecurity concepts. This is a 12-week, full-time, in-office internship in West Des Moines, Iowa.