Top Cybersecurity Jobs

Designs and implements advanced network, endpoint, and identity security solutions. Secures Agentic and Generative AI workflows, conducts assessments, automates controls, manages encryption and DLP, integrates security into SDLC, and produces technical documentation and remediation recommendations.

Build and operate production-grade agentic AI systems for cloud security and governance: design LLM-powered agents, RAG pipelines, integrate with cloud/SaaS security tools (SIEM, CNAPP/CSPM/SSPM), implement Security-as-Code/Policy-as-Code, contribute to shared AI infrastructure, and ensure secure, auditable AI operations.

Lead implementation of RMF A&A activities, perform risk and vulnerability assessments, manage PKI/accounts/ACLs, ensure STIG and DoD cloud compliance, maintain classified material and clearance databases, produce security engineering artifacts, support eMASS and acquisition security, and deliver security training and stakeholder coordination to achieve authorization and continuous compliance.

Lead and oversee enterprise cyber defense operations, manage incident response and threat hunting, enforce technical security controls, evaluate security technologies and vendors, drive detection automation and AI-enabled capabilities, and provide people leadership and stakeholder risk communication.

Provide senior-level cybersecurity architecture and strategic advisory to INSCOM ACO, assess cyber and SIGINT capabilities, identify gaps, develop modernization strategies, integrate policies and emerging technologies, and brief senior government stakeholders to advance secure capability delivery and enterprise readiness. On-site at Fort Meade supporting DoD/IC acquisition and mission partners.

Serve as senior technical lead integrating cybersecurity and supply chain risk management into Army acquisition programs. Assess C-SCRM risks, develop mitigation strategies, align policies and architectures with operational priorities, produce executive decision support, and collaborate across Army, NSA, ARCYBER, and mission partners to enable secure capability delivery.

Sell expert-led cybersecurity advisory and GRC services to new and existing clients. Generate leads, build a book of business, develop proposals, meet sales quotas, and work with subject matter experts to address regulatory requirements, manage cyber risk, and improve security maturity across IT/OT environments.

Lead CrowdStrike implementation and integration across on-prem and cloud environments; harden servers, networks, and storage; support vulnerability management and SIEM development; drive CMMC/NIST 800-171 compliance; assist incident response and forensic readiness; communicate risks and remediation to leadership.

Lead strategic account growth for cyber and risk consulting by developing executive relationships, executing account plans, driving cross-sell/renewals, coordinating multi-discipline advisory teams, and managing pipeline, forecasts, and account health to expand integrated cyber, risk, privacy, and resilience services.

Support and secure manufacturing operational technology by monitoring OT environments, investigating incidents, administering OT security tools, conducting risk assessments, ensuring compliance with NIST/ISA/IEC standards, coordinating with engineering and plant teams, and embedding cybersecurity into smart manufacturing initiatives.

Develop and maintain defensive countermeasures for enterprise cybersecurity, analyze data trends, and collaborate with teams on incidents to prevent compromises.

Lead and grow a team managing cybersecurity governance, risk, compliance, ERP security, third-party risk, ITGC/SOX audit readiness, and security awareness. Drive policies, risk assessments, remediation, access governance (SAP/IAM), executive reporting, and program maturity across the enterprise while partnering with cross-functional stakeholders.

Senior cybersecurity practitioner embedded in DevSecOps teams to execute RMF, assess and remediate CVEs, prepare authorization artifacts, enable secure IL5/IL6 deployments, and communicate cyber risk to government stakeholders.

Assess software and hardware for vulnerabilities, perform vulnerability scans and manual STIG/SRG verifications, develop RMF artifacts, conduct cybersecurity impact assessments, support security architecture and verification across the system lifecycle, and participate in systems engineering and technical review events.

Perform advanced SIEM engineering and threat detection using Splunk (including Enterprise Security), build queries, dashboards, and correlation searches, investigate incidents, tune and maintain Splunk infrastructure, collaborate with IT/network teams, leverage endpoint security tools (Trellix/HBSS), document findings and recommend remediation, and stay current on cybersecurity threats and best practices for classified on-site work.

Assess hardware and software for vulnerabilities, perform vulnerability scans and manual STIG/SRG verifications, evaluate static code analysis, produce artifacts for authorization, and support cybersecurity architecture, impact assessments, and verification activities.

Perform RMF assessment and authorization (A&A) activities for a federal civilian agency: develop SSPs, BIAs, POA&Ms, SARs, SAPs; assess technical controls, identify and mitigate risks, execute Security Test Plans, manage continuous monitoring, and support system authorization efforts while collaborating with stakeholders.

On-site Cybersecurity Analyst supporting classified operations: develop and tune Splunk queries, dashboards, and Enterprise Security use cases; investigate incidents using SIEM and endpoint tools (Trellix/HBSS); maintain Splunk infrastructure; collaborate with IT/network teams; document findings and recommend remediation. Work a Panama 12-hour shift schedule. Participation is through the DoD SkillBridge program.

Perform onsite 12-hour-shift cybersecurity monitoring and incident response using SIEM (Splunk preferred). Develop queries, dashboards, and use cases, investigate incidents, maintain Splunk infrastructure, collaborate with cross-functional teams, document findings, and improve security posture while supporting classified TS/SCI missions.

Lead security engineering for a large, distributed network: define security architecture and strategy, manage ISSO/ISSE teams, ensure ATO/SSP compliance, perform SAST/DAST and penetration testing, guide remediation, and coordinate cross-functional security efforts for test, integration, and development environments.

Design, build, and maintain cyber training ranges and virtual infrastructure. Support planning and execution of cyber exercises, configure Windows/Linux hosts, troubleshoot networking and performance, operate offensive/defensive training content, and produce technical documentation and runbooks to enable repeatable events and rapid issue resolution.

Lead strategy, deployment, and operations of enterprise endpoint security tools (EDR/XDR, DLP, EPM) across Windows, macOS, and Linux. Manage and mentor an endpoint engineering team, integrate tools with SIEM/SOAR and SOC workflows, drive incident response and remediation, define hardening standards and roadmaps, run POCs and vendor management, and partner with IT, IAM, and compliance to balance security and usability.

Support US federal, air-gapped classified cloud environments; perform vulnerability management, incident response, threat hunting, and detection engineering. Deploy and manage systems in AWS/Microsoft Top Secret clouds, build investigation/response tools, coordinate with customers and Cyber Defense teams, and develop best practices across environments.

Assess and strengthen cloud-hosted system security for DoD compliance: review architecture and policy, recommend improvements, analyze and report threats, coordinate with cyber intelligence and incident response, identify protection/detection gaps, and deliver actionable reports and briefings.

Provide cybersecurity engineering support across the DLA EFM portfolio: analyze and implement security requirements, support A&A and RMF activities, manage POA&Ms and compliance reporting, recommend DoD-aligned standards (Defense-in-Depth, Zero Trust), integrate security across system lifecycles, and collaborate with stakeholders to improve cybersecurity posture.