Top Cybersecurity Jobs

On-site Tampa role operating a SIEM (Splunk preferred) to detect, investigate, and respond to threats. Build queries, dashboards, and correlation searches; maintain Splunk infrastructure; triage incidents, perform root-cause analysis, and produce documentation and reports. Collaborate with cross-functional teams and follow a Panama 12-hour shift schedule. Requires active DoD TS/SCI clearance and DoD 8570 IAT certification.

Perform advanced SIEM engineering and threat detection using Splunk (including Enterprise Security), build queries, dashboards, and correlation searches, investigate incidents, tune and maintain Splunk infrastructure, collaborate with IT/network teams, leverage endpoint security tools (Trellix/HBSS), document findings and recommend remediation, and stay current on cybersecurity threats and best practices for classified on-site work.

Perform onsite 12-hour-shift cybersecurity monitoring and incident response using SIEM (Splunk preferred). Develop queries, dashboards, and use cases, investigate incidents, maintain Splunk infrastructure, collaborate with cross-functional teams, document findings, and improve security posture while supporting classified TS/SCI missions.

Support Galaxy’s Product Security team by developing and refining secure engineering standards covering authentication, authorization, API communication, web UI security, and secure coding. The intern may add implementation guidance and develop custom libraries, artifacts, or other resources that help software and production engineering teams apply security practices. The role is remote in the UK or US during the fall semester and includes hands-on work in cybersecurity, secure engineering, and product development.

Lead and manage cybersecurity consulting engagements across strategy, risk, compliance, operations, data protection, offensive security, resilience and training. Oversee project delivery, client relationships, business development, and consultant mentoring. Contribute to innovation, PoCs, publications, and firm eminence within the CyberLab.

Lead and manage cybersecurity consulting engagements across strategy, risk, compliance, operations, data protection, offensive security, resilience and training. Oversee project delivery, client relationships, business development, and consultant mentoring. Contribute to innovation, PoCs, SaaS offers, and firm thought leadership through publications and events.

Lead and manage end-to-end cybersecurity consulting engagements (strategy, risk, compliance, offensive security, resilience, data protection). Build client relationships, contribute to business development, mentor consultants, run PoCs and innovation in the CyberLab, produce thought leadership, and represent the firm at events.

The DoD SkillBridge Internship offers active-duty military members IT and cybersecurity training, certifications, and networking opportunities to prepare for civilian careers in IT.

Owns cybersecurity detection and response across Microsoft Sentinel, Defender, Purview, Entra ID, AWS, and SaaS telemetry. Responsibilities include deploying SIEM connectors, writing and tuning KQL detections mapped to MITRE ATT&CK, leading incident response from triage through post-incident review, investigating endpoint, email, application, DLP, and insider-risk alerts, supporting SOC 2, ISO 27001, and NIST audits, and automating triage with PowerShell, Graph API, or Python.

Support USAF systems by leading security engineering and RMF activities: manage controls, lead risk and vulnerability assessments, implement detection and monitoring, guide DevSecOps security, and mentor teams to produce ATO packages and continuous monitoring for IL5-ready environments.

The Technical Manager will lead the Cyber Risk Management team, overseeing project development and management, customer interactions, and strategic planning for risk and resilience in alignment with DOD challenges.

Conduct product cybersecurity assessments throughout the SDLC for web, embedded, connected, and industrial systems. Perform threat modeling, risk assessments, vulnerability analysis, security architecture reviews, and secure design guidance. Develop cybersecurity controls, standards, training, and awareness programs; support defect investigations, remediation, vulnerability disclosure, and incident response. Partner with engineering, product, leadership, customers, and suppliers to improve cybersecurity maturity and compliance with applicable frameworks and standards.

Conduct product cybersecurity assessments throughout the SDLC, perform threat modeling and risk analysis, review security architectures, and recommend secure design controls for web, embedded, connected, and industrial systems. Guide engineering and product teams on cybersecurity standards, investigate defects, support vulnerability remediation and incident response, develop training, and improve organizational security practices. The role requires expertise in product security engineering, embedded and IoT security, cryptography, secure development, compliance frameworks, and stakeholder collaboration.

Conduct product cybersecurity assessments throughout the SDLC for web, embedded, connected, and industrial systems. Perform threat modeling, risk assessments, vulnerability analysis, and security architecture reviews. Advise engineering and product teams on secure design, technical controls, hardening, cryptography, and remediation. Support defect investigations, vulnerability disclosure, incident response, training, standards development, and cybersecurity compliance across global teams.

Lead RMF lifecycle activities for Air Force FM systems: develop and sustain authorization artifacts, perform vulnerability and risk assessments, coordinate remediation, track enterprise authorization status, and brief senior leaders. Provide policy-to-implementation guidance, maintain version-controlled documentation, and support incident/continuity activities and AO decision packages.

Conduct product cybersecurity assessments across the software development lifecycle for web, embedded, connected, and industrial systems. Perform threat modeling, risk assessments, vulnerability analysis, security architecture reviews, and secure design guidance. Apply cybersecurity frameworks and controls, support defect remediation and incident response, develop security standards and training, and collaborate with engineering, product, leadership, customers, suppliers, and global stakeholders to improve cybersecurity maturity.

Conduct product cybersecurity assessments throughout the SDLC, perform threat modeling and risk assessments, review security architectures, and guide engineering teams on secure design and compliance. Develop cybersecurity standards, controls, training, and awareness programs; investigate defects; support vulnerability remediation and incident response; and promote security improvements across connected, web, industrial, and embedded product portfolios.

Design, integrate, assess, and mature cybersecurity solutions across mission systems and lab/test environments. Translate NIST/RMF requirements into technical designs, perform vulnerability assessments and remediation (Tenable/SCAP/STIG/ACAS), support secure system integration and hardening (Linux/bash), produce RMF authorization artifacts, and collaborate with engineers and ISSMs to validate security controls for deployment and testing.

Lead global cybersecurity operations across identity, endpoint, network, cloud, and data environments. Manage security monitoring, incident response, vulnerability management, secure configuration, IAM/PAM, security tooling, audit evidence, and vendor partnerships. Establish operational KPIs, support NIST and CIS compliance, coordinate testing and resilience exercises, and oversee 24/7 monitoring. Manage and mentor cybersecurity analysts while partnering with IT, infrastructure, engineering, compliance, and external providers to strengthen enterprise security.

Supports Cybersecurity and Privacy consulting engagements across strategy, privacy compliance, cloud security, identity and access management, threat monitoring, incident management, ethical hacking, and AI security. Interns participate in planning, engagement management, project wrap-up, business development, marketing initiatives, and thought leadership. The role requires analytical, communication, problem-solving, teamwork, and time-management skills, along with willingness to learn and travel as needed.

Support RMF/A&A lifecycle for USAF systems: develop and maintain authorization artifacts (SSPs, RARs, POA&Ms), use eMASS/ITIPS, validate control evidence, track vulnerabilities, assist risk analysis and ATO decision support, and coordinate remediation with stakeholders.

Designs and governs enterprise cybersecurity data architecture to support detection, response, and decision-making. Defines data models, integration patterns, and governance (classification, retention, lineage, access controls). Partners with cybersecurity, IT, and data teams to implement scalable, cloud/hybrid data platforms and enable threat detection, incident response, and continuous monitoring.

Owns the cybersecurity architecture, tooling, monitoring, identity, access, incident response, vulnerability management, and compliance assurance for OT/ICS environments supporting grid-connected energy assets. Designs IEC 62443-aligned segmentation, manages industrial IDS and asset inventories, defines SCADA and controller security requirements, oversees PKI and remote access, validates site acceptance evidence, and supports NERC CIP and utility security reviews.

Leads the technical strategy, architecture, and roadmap for cybersecurity incident response engineering. Designs secure cloud-native services, SOAR playbooks, integrations, automation, forensic collection, and agentic AI tooling. Provides hands-on leadership during high-severity investigations, including evidence analysis, containment, recovery, and incident command. Establishes engineering standards, metrics, and operational practices while mentoring engineers and responders and partnering across cybersecurity and technology teams.

Lead AI security and cyber fraud analytics initiatives: design security controls for agentic systems, build fraud-detection and anomaly models, develop analytics pipelines and dashboards, detect adversarial AI threats (deepfakes, voice cloning), and operationalize AI governance frameworks like NIST AI RMF and ISO/IEC 42001 while collaborating across teams to mitigate enterprise risk.