Top Cybersecurity Jobs

Lead and perform FedRAMP/FISMA/NIST RMF security assessments for cloud systems. Conduct documentation review, evidence collection, vulnerability scanning and testing, recommend remediations, author reports, lead technical discussions, mentor teammates, and coordinate cross-functional delivery in a fast-paced remote environment.

Implement, operate, and improve cybersecurity solutions; provide functional and technical expertise on security projects; gather business/IT requirements to develop security processes; triage incidents and provide urgent support; participate in on-call rotation; and drive projects to completion through project management and stakeholder coordination.

Serve as a Senior Cybersecurity Engineer for a Navy program: integrate cyber requirements across the SDLC, perform ACAS/Nessus scans, apply DISA STIGs/SCAP, identify and remediate vulnerabilities, develop SAPs/POA&Ms/SARs, support RMF toward ATO/IATT, produce architecture and data flow diagrams, and advise stakeholders.

Perform RMF across all phases: categorize systems, develop and update SSPs, SAPs, POA&Ms and RARs in eMASS. Review DISA STIGs/SRGs, SCAP and ACAS results, identify vulnerabilities, track risks, support ISSMs and stakeholders, and provide authorization status and cybersecurity guidance throughout system engineering, deployment, and sustainment.

Lead RMF activities across system engineering, deployment, and sustainment. Develop SSPs, SAPs, POA&Ms, and RARs in eMASS; document NIST 800-53 control implementations; review DISA STIGs/SRGs, SCAP, and ACAS results; track/report cybersecurity risks to ISSM and engineering teams.

Serve as a senior security operations advisor: lead incident response, tune detection tooling (SIEM/SOAR/XDR/EDR), apply identity-centric and Zero Trust controls, advise product/R&D on secure-by-design, document runbooks and metrics, automate tasks, mentor teammates, and communicate findings across technical and non-technical stakeholders.

Support cloud and enterprise cybersecurity by performing vulnerability scanning and remediation, threat modeling, incident analysis, RMF/ATO documentation, ST&E support, audit log review, and system hardening to maintain compliance with NIST and DoD risk management requirements.

Provide legal counsel on cybersecurity and privacy matters, advise on contract cyber requirements, support enterprise frameworks and incident response, monitor regulatory changes, develop training, and lead cross-functional cyber/privacy initiatives.

Lead UEBA and SOAR implementation for a Zero Trust initiative, integrating visibility/analytics with automation. Provide Tier 3/4 engineering, perform enclave and network assessments, produce RMF artifacts and manage the ATO lifecycle, interpret DISA STIGs, support assessors, and collaborate with ISSOs and stakeholders to refine processes and ensure system security and compliance.

Lead design and operation of a cloud-native cybersecurity data lakehouse on AWS. Define storage/table formats, partitioning, compute engines (EMR, Athena, Redshift), governance (Lake Formation, IAM), IaC provisioning, cost governance, and capacity planning to support analytics, ML, and security operations.

Lead and execute digital technology and cybersecurity audits, develop risk‑based audit programs, report findings, and partner with management on remediation. Apply data analytics, collaborate with cross‑functional teams, and promote continuous improvement and stakeholder engagement across the internal audit function.

Support technology, cybersecurity, privacy, and control audit/advisory engagements and technical assessments. Identify control weaknesses, vulnerabilities, and design gaps; prepare workpapers and reports; communicate findings to leadership; perform readiness, vulnerability, penetration, incident response, and governance/compliance assessments.

Teach and develop project-based undergraduate and advanced courses and labs in cybersecurity, information systems, computer science, or cyber engineering; advise students; participate in student organizations, assessment, accreditation, committees, and professional development while maintaining community and industry relationships.

Lead cybersecurity engineering for medical products by defining security requirements, governance, and vulnerability management. Perform threat modeling, vulnerability scanning, breach response support, and produce security documentation. Collaborate with product teams to prioritize security deliverables and ensure application security throughout the software development lifecycle.

Lead and improve global SOC capabilities by overseeing threat detection, incident response, and SIEM-driven operations. Serve as technical escalation for analysts, develop playbooks and automation, coordinate stakeholders, and use metrics and threat analysis to drive detection and response maturity.

The Cybersecurity Engineer protects assets by managing firewalls, conducting risk assessments, and ensuring network security compliance with industry standards.

Design, build, and maintain security automation workflows (SOAR, scripts) to integrate SIEM, EDR, IAM, ticketing and cloud tools. Automate alert triage, enrichment, containment, reporting, and control validation to reduce analyst workload and improve detection/response for cyber, fraud, and identity incidents. Participate in on-call rotation.

Designs, implements, and maintains on‑premises and cloud cybersecurity infrastructure (Windows/Linux). Deploys AWS services, engineers NDR/EDR/NGFW/IDS solutions, creates architecture diagrams and roadmaps, supports security assessments and authorization, leads technical exchanges, and may lead teams while developing test plans and modernization strategies.

Lead cybersecurity operations for a large DoD program: oversee RMF/eMASS processes, continuous monitoring, vulnerability management, audits (ST&V/CVA/CCRI), policy and ATO support, risk assessments, remediation guidance, and mentor technical staff while coordinating with government leadership and partner agencies.

Design, implement, and manage network security and Palo Alto firewall configurations (including cloud deployments in AWS/GCP/Azure). Monitor traffic and alerts, investigate and respond to incidents, enforce security policies, document changes, and collaborate with IT/security teams to maintain continuous monitoring and compliance.

Lead RMF lifecycle and security authorization efforts (SSP, SAR, POA&M, eMASS) to achieve ATOs; conduct and validate DoD/DON control assessments; manage vulnerability scanning (ACAS/Tenable) and STIG/SRG compliance; implement continuous monitoring dashboards; coordinate with system owners, ISSOs/ISSMs and leadership; advise on governance, process improvements, and training.

Design, implement, and manage NSA CSfC-compliant secure communications for Data-at-Rest and Data-in-Transit. Create architectures, perform risk/vulnerability assessments, troubleshoot CSfC implementations, produce technical documentation, and collaborate with stakeholders to ensure classified data protection and compliance.

Support USPACOM J6 MPE engineering and integration: translate mission requirements into technical plans, support RMF documentation and POA&M, validate security controls, perform vulnerability and risk analysis, and produce technical briefings and recommendations for stakeholders.

Support RMF A&A, risk and vulnerability assessments, compliance tracking, incident handling, and ISCM. Produce and maintain BoE artifacts (STIGs, SCAP, ACAS, Nessus), POAMs, SOPs, and documentation; coordinate with network/system admins and government POCs to remediate findings and maintain authorization records.

Remote DoD SkillBridge internship offering RapidAscent 17-week (or 25-week evening) cybersecurity job-readiness training. Curriculum covers incident response, risk management, threat hunting, product and network security, hands-on simulators, projects, employer networking, and career prep. Includes DOD 8570-compliant training and Security+/CySA+ voucher. Applicants must be active-duty U.S. military eligible for SkillBridge, complete assessments, and register with City University of Seattle.