Top Cybersecurity Jobs

Owns the cybersecurity architecture, tooling, monitoring, identity, access, incident response, vulnerability management, and compliance assurance for OT/ICS environments supporting grid-connected energy assets. Designs IEC 62443-aligned segmentation, manages industrial IDS and asset inventories, defines SCADA and controller security requirements, oversees PKI and remote access, validates site acceptance evidence, and supports NERC CIP and utility security reviews.

Leads the technical strategy, architecture, and roadmap for cybersecurity incident response engineering. Designs secure cloud-native services, SOAR playbooks, integrations, automation, forensic collection, and agentic AI tooling. Provides hands-on leadership during high-severity investigations, including evidence analysis, containment, recovery, and incident command. Establishes engineering standards, metrics, and operational practices while mentoring engineers and responders and partnering across cybersecurity and technology teams.

Lead AI security and cyber fraud analytics initiatives: design security controls for agentic systems, build fraud-detection and anomaly models, develop analytics pipelines and dashboards, detect adversarial AI threats (deepfakes, voice cloning), and operationalize AI governance frameworks like NIST AI RMF and ISO/IEC 42001 while collaborating across teams to mitigate enterprise risk.

Architects and leads enterprise cybersecurity solutions across AWS, Azure, GCP, hybrid, and on-premises environments. Defines secure cloud, container, IAM, network segmentation, DevSecOps, and AI/ML security standards; addresses AI-specific risks and governance; leads architecture reviews, cloud migrations, SaaS evaluations, and third-party integrations. Provides strategic technical leadership, mentors engineers and architects, advances Zero Trust and compliance controls, and partners with IT, CloudOps, Security, Data Science, and business teams.

Supports senior planners in designing, coordinating, conducting, and evaluating DHS cyber exercises. Develops scenarios and exercise planning materials, documents meetings and exercise activities, contributes to after-action reports and improvement plans, facilitates stakeholder requirements gathering, researches cybersecurity process needs, and provides administrative coordination throughout the exercise lifecycle.

Support and secure mission-critical intelligence systems through RMF-aligned assessments, vulnerability identification, and mitigation. Evaluate architectures, document SOPs, automate testing and monitoring with Python/PowerShell, manage containerized/virtualized environments (Kubernetes, AWS), and collaborate with DevOps and systems teams to ensure secure design and mission readiness in classified environments.

Lead cybersecurity efforts for a DIA program: develop policies and strategies, design secure architectures, perform threat modeling and risk assessments, oversee testing, vulnerability management, and incident response, coordinate with Government teams, and mentor cybersecurity staff.

Monitors networks and systems, investigates suspicious activity, leads incident response, performs digital forensics, and coordinates recovery. Mentors cybersecurity analysts, develops incident response procedures, evaluates security tools, researches attacker tactics, reports security trends, supports detection engineering and automation, and leads cybersecurity improvement projects. The role also educates employees, communicates technical findings to nontechnical audiences, and provides Cyber Incident Response Team leadership.

Serve as a trusted advisor designing pragmatic, scalable security programs and solutions, support sales by qualifying opportunities, drive cross-sell, lead technology evaluations, maintain client relationships, and collaborate with delivery teams. Provide thought leadership, represent Optiv externally, and pursue continuous professional development. Up to 40% travel.

Drives enterprise cybersecurity governance, risk, compliance, and assurance activities. Translates regulatory and contractual requirements into controls and evidence, assesses control effectiveness, manages CMMC, NIST, DFARS, CUI, and SOX ITGC obligations, maintains SSPs and risk documentation, oversees remediation and access governance, and coordinates security reviews for suppliers, SaaS, AI tools, and M&A activities. Partners with technical, business, legal, audit, and executive stakeholders to improve assessment and operational readiness.

Engineers identity security, privileged access, vulnerability management, endpoint and cloud security across a multi-site aerospace and defense environment. The role administers Microsoft security tools, investigates alerts, coordinates remediation, validates technical controls, supports CMMC and NIST assessments, maintains evidence and procedures, and reviews technology projects for security risks. It also contributes to incident response, audit remediation, M&A activities, automation, and mentoring across IT and security teams.

Supports cybersecurity governance through policy and procedure development, compliance monitoring, regulatory research, audit support, remediation planning, risk mitigation, stakeholder communication, and vendor relationship management. Analyzes compliance data and prepares recommendations for cybersecurity leadership while maintaining internal controls and regulatory standards.

Supports cybersecurity, infrastructure operations, and backup help desk functions. Responsibilities include monitoring security alerts, assisting with incident response and remediation, administering security tools, conducting vulnerability assessments and access reviews, supporting servers, networks, cloud systems, identity platforms, endpoints, backups, and coordinating with vendors. The role also provides technical user support, device setup, onboarding and offboarding assistance, ticket documentation, and service improvement recommendations.

Architect and implement ServiceNow security controls for DoD IL4/IL5 environments. Own platform security engineering, ATO management, SSP and RMF artifacts, POA&M remediation, continuous monitoring, vulnerability and compliance reporting, and data segregation. Coordinate with government stakeholders and ensure personnel meet DoD cybersecurity qualification and certification requirements.

Evaluates cybersecurity submissions for drone systems under the Blue UAS Cleared List Program. Reviews assessment reports, penetration testing results, vulnerability analyses, firmware evaluations, and remediation plans. Identifies vulnerabilities, attack vectors, and residual risks, then recommends mitigation strategies and validates risk reductions. Advises on cybersecurity standards, NIST controls, supply chain risk management, DoD policies, and RMF processes supporting government technical acceptance and ATO decisions.

The Senior Principal Cybersecurity Architect will assess risks, develop security programs, create security requirements, and supervise cybersecurity testing initiatives to enhance security controls across technologies.

Design, build, and automate cloud-based security operations solutions (threat hunt analytics, malicious detections, workbooks). Develop IaC/CaC Azure deployments, CI/CD pipelines, container orchestration, data ingestion/visualization, and incident response tooling. Engage customers for requirements, automate deployments, and document best practices and lessons learned.

Evaluate cybersecurity submissions for the DCMA Blue List Program, focusing on embedded systems, firmware, wireless communications, supply chain security, and component-level risks. Review assessment reports, penetration testing results, vulnerability assessments, remediation plans, and technical evidence. Identify vulnerabilities, threats, attack vectors, and residual risks, then provide recommendations on mitigation, technical acceptance, policy implementation, and assessment requirements to Government decision-makers and stakeholders.

Designs, administers, and secures enterprise networks, cloud connectivity, identity systems, and hybrid infrastructure. Responsibilities include managing Cisco, Meraki, Arista, VMware, Azure, firewalls, VPNs, SD-WAN, segmentation, Zero Trust controls, Microsoft Entra ID, Microsoft 365, vulnerability management, incident response, security monitoring, compliance initiatives, documentation, vendor relationships, and Tier III support. The role also participates in on-call operations and helps improve cybersecurity posture, resilience, and NIST 800-171, DFARS, and CMMC readiness.

Leads the enterprise cybersecurity program, including risk management, threat modeling, security architecture, incident response, governance, third-party risk, security operations oversight, awareness, and continuous posture improvement. Partners with IT, solutions delivery, and digital innovation leaders on security controls, secure development, AI safety, and security-by-design. Develops the security team, communicates risk to leadership, and evolves tooling, staffing, policies, and practices to address emerging AI-era threats.

Provides senior cybersecurity assessment, authorization, and risk advisory support for classified government systems. Leads technical reviews, threat modeling, DevSecOps security integration, vulnerability validation, RMF execution, Zero Trust adoption, and Cross Domain Solution assessments. Evaluates cloud, containerized, network, hardware, PIT, and satellite control environments; translates technical findings into mission-focused risk decisions; and liaises with government AOs, defense organizations, assessment bodies, and SAP working groups.

Manage cybersecurity programs for classified information systems, including continuous monitoring, security control assessments, configuration reviews, risk analysis, and government policy implementation. Lead Assessment and Authorization activities, Security Test and Evaluation, inspections, audits, and corrective actions. Prepare and submit security documentation such as System Security Plans, Risk Acceptance Reports, Security Controls Traceability Matrices, and Plans of Action and Milestones. This is a full-time onsite role requiring Top Secret clearance and potential Special Access Program access.

Leads cybersecurity and network operations for a Space Force launch-range network. Responsibilities include managing technical teams, maintaining network availability and boundary defenses, overseeing RMF and ATO packages, vulnerability scanning, STIG compliance, incident response, patching, secure enclave connectivity, COMSEC equipment, developer access, and network modernization. The role coordinates with government mission defense teams, stakeholders, engineers, and military cybersecurity offices during active launch operations.

Architects and implements ServiceNow security controls for DoD IL4/IL5 environments, including RBAC, ACLs, data policies, encryption, and identity integration. Owns ATO and RMF activities by maintaining SSPs, POA&Ms, SARs, and compliance artifacts mapped to NIST and DoD requirements. Conducts continuous monitoring, vulnerability remediation, and penetration-test reviews while coordinating with government program managers and authorizing officials. Ensures personnel qualifications and cybersecurity certifications meet DoD requirements.

Administer and deploy enterprise security tools (CrowdStrike, Tenable, BigID), manage EDR and DLP controls, perform vulnerability assessments and remediation, detect and respond to threats, ensure DoD compliance and zero-trust implementation in a high-sensitivity IL5 environment.