Top Cybersecurity Jobs

The Senior Cybersecurity Operations Researcher conducts analytical studies on cybersecurity risks and supports strategic initiatives to enhance national security operations. Responsibilities include collaboration with diverse teams, engaging international stakeholders, and producing technical documentation and publications.

Detect, triage, and investigate security alerts and incidents using SIEM and endpoint tools; document findings and remediation; support offensive testing, compliance efforts (PCI, SOX, ISO, HIPAA, NIST), and cross-functional IT teams. Provide off-hours availability and operate within a global hybrid environment.

Lead oversight of cloud and application security, governance, control deviations, remediation tracking, and executive reporting. Partner with infrastructure, engineering, and application owners to assess configurations, onboard new applications (including agentic AI), validate controls, approve policy deviations, and communicate remediation progress and emerging risks to senior management.

Operate day-to-day security operations in a cloud-first environment: monitor and triage SIEM alerts, perform incident response, build detection rules, manage vulnerability remediation, run penetration testing programs, manage email security and phishing simulations, support DLP and access reviews, produce leadership reports, maintain documentation, and support audits and regulatory requests.

Support a 24/7 DoD Cyber Network Defense operation by monitoring alerts, analyzing packet and log data, triaging incidents, integrating threat intelligence into sensors/SIEMs, and coordinating incident response and reporting.

As a Principal Cybersecurity Engineer, you will design and maintain security systems for the Workday product within AWS, focusing on Kubernetes, Python, and Infrastructure as Code tools while integrating security into the engineering workflow.

Manage and harden cloud and on-premises environments, deploy and maintain NSM/EDR/MDR/XDR and vulnerability management, perform security reviews and incident response, support compliance in Microsoft GCC High/GovCloud, implement security controls and remediation, configure network/security devices, and document security posture and procedures for internal and external clients.

The Cybersecurity Engineer protects clients by managing security monitoring solutions, vulnerability management, and compliance in cloud and on-premises environments.

Provide security engineering and DLP administration for DLA JETS DLP program, support incident response and cybersecurity content development, analyze and implement security requirements, integrate security solutions, and coordinate enterprise-wide incident handling in accordance with DoD directives.

Lead and execute incident response for DoD directives, conduct forensic investigations, perform post-incident reviews, maintain IR SOPs to NIST/DISA guidance, manage enterprise monitoring/logging, produce leadership reports, and support remediation and capability improvements while providing after-hours investigative support.

Support cybersecurity for power plant control systems by maintaining network diagrams and asset inventories, assisting assessments and compliance, troubleshooting critical systems, and supporting control system modernization and documentation in collaboration with engineering and plant teams.

Leads a team building and improving enterprise threat detection, SIEM/SOAR content, automation playbooks, validation practices, and detection lifecycle governance. The manager remains hands-on with detection engineering, alert tuning, threat modeling, MITRE ATT&CK coverage, incident response automation, integrations, metrics, audit documentation, and roadmap planning. Partners across SOC, incident response, threat intelligence, cloud, identity, network, OT, IT, and business teams to improve alert fidelity, investigation speed, response scalability, and overall SecOps maturity.

Administer and engineer enterprise secure web gateway and proxy services, including web access policies, traffic inspection, authentication, integrations, upgrades, monitoring, and lifecycle management. Investigate web-related security incidents, analyze logs and alerts, troubleshoot complex connectivity issues, support incident response, develop automation, and maintain operational documentation. The role leads technical troubleshooting and partners with cybersecurity, identity, cloud, networking, endpoint, and operations teams while participating in on-call support.

Lead and scale product marketing across Cato's portfolio: define portfolio strategy, positioning, launches, and messaging; build and mentor a PMM team; drive cross-functional alignment; create thought leadership and data-driven go-to-market programs supporting sales and product.

The Cybersecurity Engineer detects and responds to threats, improves endpoint visibility and security posture, supports incident response, automates alerting and reporting, manages vulnerabilities, and partners with IT on patching and system hardening. The role monitors hybrid environments, investigates suspicious activity, documents security standards, and drives continuous improvement. It requires enterprise IT and cybersecurity experience, endpoint security expertise, scripting skills, and strong Windows Server knowledge.

Design, implement, and maintain Privileged Access Management (PAM) solutions and IAM operations. Develop roadmaps, automate security solutions, perform incident triage and threat analysis, remediate risks, and collaborate with IT and business teams to integrate PAM and identity governance across hybrid/cloud environments.

Leads cybersecurity and RMF activities for C-17 training and sustainment systems across 16 locations. Oversees ISSO personnel, RMF documentation, eMASS workflows, ATO processes, vulnerability assessments, audits, incident response, security controls, compliance, staffing, budgets, schedules, and stakeholder coordination. Ensures alignment with DoD, USAF, NIST, NISPOM, DAAPM, and JSIG requirements while presenting risks and mitigations to leadership.

Build and operate cybersecurity capabilities in Workday’s U.S. Government air-gapped classified cloud. Responsibilities include vulnerability management, incident response, threat hunting, threat detection, security tooling, and collaboration with federal customers and internal cyber defense teams. The role requires cloud security experience, technical leadership, security operations expertise, and eligibility for a potential TS/SCI with CI Poly clearance.

Build and operate cybersecurity capabilities in a U.S. Federal air-gapped classified cloud environment. Responsibilities include vulnerability management, incident response, threat hunting, threat detection, security tool development, and collaboration with customers and cyber defense teams. The role requires technical leadership, cloud security experience, prioritization of vulnerabilities, SIEM and SOAR expertise, and the ability to support multiple projects and operational responsibilities.

Support cybersecurity operations, threat detection, incident response, and vulnerability management across a distributed manufacturing environment. Partner with an MSSP to investigate and respond to security alerts, manage containment and recovery, and document incidents. Maintain endpoint, network, identity, and logging security systems; coordinate vulnerability remediation; develop automation and security improvements; manage metrics and dashboards; and contribute to security policies, standards, procedures, and technical documentation.

Leads cybersecurity control implementation across DoD environments and delivery pipelines. Manages RMF activities, ATO support, vulnerability monitoring, risk mitigation, compliance coordination, security response, and protection of system data. Collaborates with DevSecOps, infrastructure, and program teams across IL-5/IL-6 and cloud environments.

Leads an enterprise cybersecurity posture and hygiene program covering strategy, governance, control maturity, configuration drift, remediation, metrics, and reporting. Manages and develops a multidisciplinary security team while partnering with infrastructure, cloud, identity, network, endpoint, application, and AI engineering groups. Establishes CIS Controls-aligned frameworks, detects AI misuse and control gaps, drives secure-by-default practices, and advances continuous monitoring and risk-based improvements.

Designs and leads enterprise identity and access management architecture across cloud and on-premises environments. Responsibilities include developing IAM blueprints and roadmaps, integrating authentication, authorization, identity governance, and privileged access solutions, evaluating platforms, supporting zero-trust and compliance initiatives, coordinating with cybersecurity and engineering teams, managing vendors, and providing technical leadership for identity-related incident response. The role also defines IAM effectiveness metrics and evaluates emerging technologies such as passwordless authentication and AI-driven access decisions.

Lead development and maintenance of the enterprise cybersecurity program for a patient-facing healthcare organization. Advise on security controls, risk management, compliance (HIPAA/ISO), vendor/security assessments, and integration of cybersecurity requirements into projects and IT systems. Collaborate cross-functionally and support audits, process improvements, and strategic cybersecurity initiatives.

Leads cybersecurity engineering, tools, and emerging technology initiatives. Evaluates and integrates security tools, researches threats and vulnerabilities, conducts risk assessments, develops technical recommendations, mentors engineers, supports OT cybersecurity, establishes engineering standards, automates processes, and maintains enterprise cybersecurity reporting through Power BI, Splunk, and Microsoft Sentinel dashboards.