Top Cybersecurity Jobs

Support a 24/7 DoD Cyber Network Defense operation by monitoring alerts, analyzing packet and log data, triaging incidents, integrating threat intelligence into sensors/SIEMs, and coordinating incident response and reporting.

As a Principal Cybersecurity Engineer, you will design and maintain security systems for the Workday product within AWS, focusing on Kubernetes, Python, and Infrastructure as Code tools while integrating security into the engineering workflow.

Provide security engineering and DLP administration for DLA JETS DLP program, support incident response and cybersecurity content development, analyze and implement security requirements, integrate security solutions, and coordinate enterprise-wide incident handling in accordance with DoD directives.

Lead and execute incident response for DoD directives, conduct forensic investigations, perform post-incident reviews, maintain IR SOPs to NIST/DISA guidance, manage enterprise monitoring/logging, produce leadership reports, and support remediation and capability improvements while providing after-hours investigative support.

Support cybersecurity for power plant control systems by maintaining network diagrams and asset inventories, assisting assessments and compliance, troubleshooting critical systems, and supporting control system modernization and documentation in collaboration with engineering and plant teams.

Leads a team building and improving enterprise threat detection, SIEM/SOAR content, automation playbooks, validation practices, and detection lifecycle governance. The manager remains hands-on with detection engineering, alert tuning, threat modeling, MITRE ATT&CK coverage, incident response automation, integrations, metrics, audit documentation, and roadmap planning. Partners across SOC, incident response, threat intelligence, cloud, identity, network, OT, IT, and business teams to improve alert fidelity, investigation speed, response scalability, and overall SecOps maturity.

Lead and scale product marketing across Cato's portfolio: define portfolio strategy, positioning, launches, and messaging; build and mentor a PMM team; drive cross-functional alignment; create thought leadership and data-driven go-to-market programs supporting sales and product.

The Cybersecurity Engineer detects and responds to threats, improves endpoint visibility and security posture, supports incident response, automates alerting and reporting, manages vulnerabilities, and partners with IT on patching and system hardening. The role monitors hybrid environments, investigates suspicious activity, documents security standards, and drives continuous improvement. It requires enterprise IT and cybersecurity experience, endpoint security expertise, scripting skills, and strong Windows Server knowledge.

Design, implement, and maintain Privileged Access Management (PAM) solutions and IAM operations. Develop roadmaps, automate security solutions, perform incident triage and threat analysis, remediate risks, and collaborate with IT and business teams to integrate PAM and identity governance across hybrid/cloud environments.

Leads cybersecurity and RMF activities for C-17 training and sustainment systems across 16 locations. Oversees ISSO personnel, RMF documentation, eMASS workflows, ATO processes, vulnerability assessments, audits, incident response, security controls, compliance, staffing, budgets, schedules, and stakeholder coordination. Ensures alignment with DoD, USAF, NIST, NISPOM, DAAPM, and JSIG requirements while presenting risks and mitigations to leadership.

Build and operate cybersecurity capabilities in Workday’s U.S. Government air-gapped classified cloud. Responsibilities include vulnerability management, incident response, threat hunting, threat detection, security tooling, and collaboration with federal customers and internal cyber defense teams. The role requires cloud security experience, technical leadership, security operations expertise, and eligibility for a potential TS/SCI with CI Poly clearance.

Build and operate cybersecurity capabilities in a U.S. Federal air-gapped classified cloud environment. Responsibilities include vulnerability management, incident response, threat hunting, threat detection, security tool development, and collaboration with customers and cyber defense teams. The role requires technical leadership, cloud security experience, prioritization of vulnerabilities, SIEM and SOAR expertise, and the ability to support multiple projects and operational responsibilities.

Support cybersecurity operations, threat detection, incident response, and vulnerability management across a distributed manufacturing environment. Partner with an MSSP to investigate and respond to security alerts, manage containment and recovery, and document incidents. Maintain endpoint, network, identity, and logging security systems; coordinate vulnerability remediation; develop automation and security improvements; manage metrics and dashboards; and contribute to security policies, standards, procedures, and technical documentation.

Leads cybersecurity control implementation across DoD environments and delivery pipelines. Manages RMF activities, ATO support, vulnerability monitoring, risk mitigation, compliance coordination, security response, and protection of system data. Collaborates with DevSecOps, infrastructure, and program teams across IL-5/IL-6 and cloud environments.

Leads an enterprise cybersecurity posture and hygiene program covering strategy, governance, control maturity, configuration drift, remediation, metrics, and reporting. Manages and develops a multidisciplinary security team while partnering with infrastructure, cloud, identity, network, endpoint, application, and AI engineering groups. Establishes CIS Controls-aligned frameworks, detects AI misuse and control gaps, drives secure-by-default practices, and advances continuous monitoring and risk-based improvements.

Designs and leads enterprise identity and access management architecture across cloud and on-premises environments. Responsibilities include developing IAM blueprints and roadmaps, integrating authentication, authorization, identity governance, and privileged access solutions, evaluating platforms, supporting zero-trust and compliance initiatives, coordinating with cybersecurity and engineering teams, managing vendors, and providing technical leadership for identity-related incident response. The role also defines IAM effectiveness metrics and evaluates emerging technologies such as passwordless authentication and AI-driven access decisions.

Lead development and maintenance of the enterprise cybersecurity program for a patient-facing healthcare organization. Advise on security controls, risk management, compliance (HIPAA/ISO), vendor/security assessments, and integration of cybersecurity requirements into projects and IT systems. Collaborate cross-functionally and support audits, process improvements, and strategic cybersecurity initiatives.

Leads cybersecurity engineering, tools, and emerging technology initiatives. Evaluates and integrates security tools, researches threats and vulnerabilities, conducts risk assessments, develops technical recommendations, mentors engineers, supports OT cybersecurity, establishes engineering standards, automates processes, and maintains enterprise cybersecurity reporting through Power BI, Splunk, and Microsoft Sentinel dashboards.

Lead development and implementation of ADAS cybersecurity architecture and processes, ensuring compliance with automotive security standards. Perform threat modeling, TARA, failure mode analysis, hardware/software integration, HIL/bench/in-vehicle verification, and SoC troubleshooting. Collaborate cross-functionally, manage work items in Jira, and support ECU key/certificate management and manufacturing cybersecurity processes.

Lead architecture, development, and production deployment of AI/ML solutions for cybersecurity, network analytics, and enterprise risk detection. Build and operationalize models (anomaly detection, predictive, classification), implement Generative/Agentic AI, design scalable ML pipelines, collaborate with security and IAM teams, and deliver dashboards and visualizations for stakeholders.

Provide technical leadership for enterprise cybersecurity: lead RMF/ATO activities, oversee ISSOs and cyber engineers, manage vulnerability management, SOC operations, incident response, penetration testing, threat hunting, and compliance while coordinating with Government AO and ISSM.

Serve as a Senior Cybersecurity Engineer supporting a Navy program: integrate cyber requirements across the SDLC, perform ACAS/Nessus scans, evaluate DISA STIGs/SCAP, identify and remediate vulnerabilities, develop POA&Ms, SAPs and SARs, create architecture and data flow diagrams, and support RMF processes to achieve ATO/IATT.

Lead enterprise information security strategy, governance, and incident response. Define security roadmap and policies, manage vendors and budgets, oversee IAM, SIEM, EDR, cloud security, and compliance programs, advise executives and Board, and build/mentor security teams to reduce organizational risk.

Manage and optimize SIEM (Splunk) platform health, data ingestion, and detection coverage. Investigate anomalies, develop high-fidelity detections, build CI/CD tools, and collaborate with SOC and threat teams to improve threat identification and response.

Supports cybersecurity-focused industry-managed and certification programs through audit reviews, task group leadership, auditor recruitment and training, standards development, technical reporting, and quality-system support. The role serves as a cybersecurity subject matter expert, contributes to internal improvement projects, maintains technical proficiency, supports budgets, and travels approximately 30% of the time.