Top Cybersecurity Jobs

Design and lead enterprise IAM and identity security architecture aligned to NIST and Zero Trust. Build scalable authentication, authorization, federation, lifecycle, privileged access, and governance solutions across cloud, on-prem, SaaS, and hybrid systems. Review solutions, mitigate identity risks, advise engineering teams, and develop governance, policies, and patterns for non-human and AI agent identities. Mentor staff and communicate identity risk to stakeholders while ensuring regulatory compliance.

Manage and track security findings and vulnerabilities, monitor critical security controls across cloud and applications, liaise with product teams to drive remediation, deliver executive-level reports, host capability reviews and partner office hours, and support ad hoc security initiatives to maintain compliance and reduce risk.

The Cybersecurity Consultant leads vulnerability management, supports compliance activities, and monitors security alerts, requiring strong relationship-building and analytical skills.

Lead SIEM and security monitoring engineering: administer and optimize SIEM, onboard/normalize telemetry, develop and tune detections (EDR, WAF/CDN), reduce false positives, maintain monitoring baselines and documentation, support NIST/CIS configuration baselines, oversee security engineering staff, and coordinate with SOC/NOC for operational visibility and telemetry validation.

Perform system audits, continuous monitoring, and security assessments within a classified enclave. Support RMF Assessment & Authorization, Security Test & Evaluation, documentation of A&A artifacts, risk analysis, and implementation of government security policy. Work on-site in San Diego with periodic travel.

Protect enterprise systems by assessing and designing security architecture, implementing hybrid/cloud security solutions, validating and remediating vulnerabilities, and responding to incidents. Develop metrics, update procedures, mentor junior staff, and coordinate remediation with leadership. Requires regular on-site attendance for secure access and collaboration.

Monitor network traffic, system logs, and endpoint alerts to detect threats; investigate and respond to incidents; review and remediate vulnerabilities; create and manage security tickets and reports; operate and improve security tools and procedures; and collaborate with IT and development teams to reduce risk and support compliance.

Support RMF security and compliance for DoD/Navy systems enabling UUV operations: implement and test security controls, run ACAS scans and IAVM remediation, prepare A&A/ATO packages, perform continuous monitoring, and provide day-to-day cybersecurity support to program leadership.

On-site cybersecurity internship supporting InfoSec team: triage daily alerts, tune and maintain security tools, collect and organize logs for audit, manage vendor reports, upload compliance artifacts, and deliver an end-to-end project (e.g., logging gap report or incident response refresh).

Provide RMF/A&A support for DoD systems: develop security documentation, conduct risk and vulnerability assessments, manage PKI and access controls, ensure STIG and DoD cloud compliance, handle classified material accountability, and coordinate stakeholders to achieve authorization.

Serve as the government-facing cybersecurity SME for Assessment & Authorization (A&A) and RMF processes. Assess NIST SP 800-53 controls across large, complex IT environments (cloud, OT, AIS), determine residual risk, brief senior leadership, and support authorization decisions for DLA/DoD systems.

Perform internal and external vulnerability assessments, manage vulnerability scanning programs, prioritize and track remediation with technology teams, produce metrics and executive reports, support threat intelligence and threat hunting, maintain policies and controls for audit/compliance, and drive continuous improvement to reduce organizational cyber risk.

Lead and manage the organization's GRC program, staff, and cross-functional initiatives to ensure compliance with NIST CSF, PCI DSS, HIPAA/HITECH. Oversee risk assessments, audits, third-party risk, vulnerability and email security programs, data protection, policy development, security awareness, and reporting to leadership.

Support day-to-day cybersecurity and IT tasks across Windows, Azure, and Office 365. Monitor and respond to security alerts, assist with Fortinet systems, endpoint protection, patch management, MFA and access reviews, and document issues in FreshService while maintaining DoD/CMMC Level 2 compliance.

Provide long-term, client-facing cybersecurity advisory services: develop prioritized, business-aware security roadmaps; align governance and compliance to frameworks; translate technical risk for executives; own advisory relationships; partner with assessors and engineers; support incident readiness and program improvement; mentor junior staff and evolve advisory methodology.

Serve as a trusted security advisor focused on Threat Management: design pragmatic security programs, support sales pursuits, perform requirements analysis, qualify opportunities, coordinate evaluations, and collaborate with delivery teams to implement SOC/SIEM/SOAR, threat intelligence, forensics, and related controls. Maintain client relationships, promote partner technologies, and support account planning and proposals.

Serve as a trusted AI security advisor to clients: design pragmatic AI-focused security solutions, drive sales pipeline, qualify and scope opportunities, lead demonstrations and evaluations, partner with delivery teams, evangelize AI security thought leadership, and maintain stakeholder relationships to deliver comprehensive AI security programs.

Lead and coach a regional cybersecurity sales team to develop large, multi-year hardware, software, services and financing deals; build a 4x pipeline, forecast sales, establish partner relationships, execute territory and account plans, and align client strategies with Optivs value proposition to drive revenue growth and employee development.

Lead vulnerability management, tune SIEM detection, perform incident triage and root-cause analysis, apply STIGs and security baselines, run vulnerability scans (Nessus/Tenable/ACAS), analyze network traffic and packet captures, automate security operations with Python/Bash/PowerShell, support RMF/ATO workflows, mentor junior engineers, and contribute to proposal efforts for a DoD program.

Lead and evolve Business Wire's cybersecurity and GRC strategy. Oversee security architecture, cloud and application security, vulnerability management, incident response, audits and compliance (PCI, SOC 2, ISO 27001). Manage external cyber defense partner, mentor security team, advise executives, and drive security governance, risk assessments, policy, training, and metrics.

Seeking a founder to build B2B SaaS startups addressing physical cybersecurity where AI controls critical infrastructure: adversarial robustness, sensor and control-loop integrity, and incident response/forensics. Partner with Forum for funding, go-to-market support, hiring, and product validation to reach early ARR and scale.

Administer and deploy enterprise security tools (CrowdStrike, Tenable, BigID), manage EDR and DLP controls, perform vulnerability assessments and remediation, detect and respond to threats, ensure DoD compliance and zero-trust implementation in a high-sensitivity IL5 environment.

Lead global cybersecurity strategy and teams for architecture, engineering, and cyber defense. Oversee security monitoring, detection, incident response, vulnerability management, OT/ICS and cloud security, vendor relationships, metrics, ISO 27001 alignment, and cross-functional change leadership. Build and mentor senior teams and report to the CISO.

Lead and operate the Security Operations Center (SOC): manage analysts, detection and response, incident command, threat hunting, vulnerability management, security awareness programs, and reporting to IT and business leaders while supporting audits and vendor assessments.

Assess application security against FedRAMP High and NIST RMF requirements, support ATO documentation and SSP/POA&M development, identify and prioritize remediation, evaluate Zero Trust and continuous monitoring, review IAM/encryption, conduct vulnerability management, and collaborate with architects and ISV teams to guide remediation.