Top Cybersecurity Jobs

The Senior Cybersecurity Operations Researcher conducts analytical studies on cybersecurity risks and supports strategic initiatives to enhance national security operations. Responsibilities include collaboration with diverse teams, engaging international stakeholders, and producing technical documentation and publications.

Lead day-to-day cybersecurity operations, manage a security team, and deliver CMMC-focused managed security services. Oversee EDR, SIEM, vulnerability management, identity security, and incident response. Drive compliance with CMMC Level 2, NIST SP 800-171, DFARS, SOC 2, and HIPAA; develop standards, audit readiness, remediation, and governance. Engage with clients at executive level and support business development and security strategy.

Entry-level security role supporting monitoring, alert triage, vulnerability scanning, incident response evidence collection, and GRC/compliance tasks (SOC 2, NIST CSF). Daily use of AI tools, documentation, KnowBe4 campaign support, and close mentorship with growth toward SOCOps or GRC specialization within 12–18 months.

Operate day-to-day security operations in a cloud-first environment: monitor and triage SIEM alerts, perform incident response, build detection rules, manage vulnerability remediation, run penetration testing programs, manage email security and phishing simulations, support DLP and access reviews, produce leadership reports, maintain documentation, and support audits and regulatory requests.

Lead NETGEAR's 24/7 SOC and corporate IT security, run incident response and tabletop exercises, develop detections and threat-hunting, integrate AI-driven analytics and automation, manage vendor/contractor relationships and security budget, and ensure compliance with SOC 2/ISO 27001/GDPR/HIPAA.

Support a 24/7 DoD Cyber Network Defense operation by monitoring alerts, analyzing packet and log data, triaging incidents, integrating threat intelligence into sensors/SIEMs, and coordinating incident response and reporting.

Manage and harden cloud and on-premises environments, deploy and maintain NSM/EDR/MDR/XDR and vulnerability management, perform security reviews and incident response, support compliance in Microsoft GCC High/GovCloud, implement security controls and remediation, configure network/security devices, and document security posture and procedures for internal and external clients.

Design, implement, and automate cybersecurity controls across IaC, PaaS, and containerized mission applications. Integrate security toolchains (SIEM, SAST/DAST/SCA), automate RMF and compliance evidence, harden platforms to STIG/CIS standards, develop Ansible playbooks, and collaborate with DevOps and engineering teams to improve security posture and resilience.

Design, implement, and automate cybersecurity controls for IaC, PaaS, and containerized mission applications. Integrate SIEM/SAST/DAST/SCA toolsets, automate hardening (STIG/SRG/CIS), enable SBOM/RBOM and patch management, write Ansible playbooks, and collaborate across DevOps and engineering teams to improve security posture and continuous delivery.

Design and implement end-to-end cybersecurity architectures for classified, CUI, and unclassified systems supporting DoD/IC. Lead RMF accreditation (SSPs, SARs, POA&Ms), conduct threat modeling and vulnerability assessments, advise on Cross Domain Solutions and zero trust, integrate security into SDLC, and brief senior leadership. Mentor junior staff and provide SME support for classified cybersecurity programs.

Design, implement, and evaluate cybersecurity solutions and controls for DoD information systems. Conduct risk assessments and vulnerability analyses, recommend mitigations, support test plans, ensure compliance with DoD standards, prepare technical documentation, and collaborate with multidisciplinary teams.

Lead and manage the company's cybersecurity program, including strategy, governance, risk guidance, incident response, compliance and audits. Oversee security architecture, budgets, vendor relationships, and security awareness. Monitor emerging technologies, recommend controls, and train/mentor team members to improve security culture and ensure confidentiality, integrity, and availability of systems.

Support the Risk Management Framework lifecycle by developing documentation, conducting assessments, and ensuring compliance with federal standards while working with security tools.

Military-only SkillBridge cybersecurity internship providing hands-on exposure to network security, IAM, SOC/SIEM, endpoint protection, incident response, GRC, threat/vulnerability management, audits, red team/social engineering exercises, and security reporting. Interns attend customer meetings, participate in industry activities, and author three 1,000-word cybersecurity articles. Remote with equipment provided; 90-day minimum.

Lead malware, binary, firmware and source-code analysis to identify vulnerabilities in critical infrastructure and federal networks. Develop automated analysis tools and workflows, mentor staff, write technical reports, shape research direction, pursue program growth and proposals, and collaborate with sponsors to secure and harden operational technology and software assurance capabilities.

Support design, deployment, and maintenance of enterprise identity and directory solutions. Manage Active Directory, GPOs, AD migrations, authentication (Kerberos, NTLM, PIV), SSO/ADFS integrations, PKI, and related services. Develop PowerShell/Visual Basic scripts, troubleshoot directory/authentication issues, perform functional testing, document processes, and collaborate with internal teams and developers to capture requirements and deliver IAM solutions.

Detect, triage, and investigate security alerts and incidents using SIEM and endpoint tools; document findings and remediation; support offensive testing, compliance efforts (PCI, SOX, ISO, HIPAA, NIST), and cross-functional IT teams. Provide off-hours availability and operate within a global hybrid environment.

Lead and execute incident response for DoD directives, conduct forensic investigations, perform post-incident reviews, maintain IR SOPs to NIST/DISA guidance, manage enterprise monitoring/logging, produce leadership reports, and support remediation and capability improvements while providing after-hours investigative support.

Manage and enhance NICHD IT security posture: run vulnerability scanning, patching, hardening, logging/auditing, configuration management, incident response, and network defense. Support FISMA compliance, perform security assessments and annual reporting, review system security documentation, and coordinate with systems/O&M teams to maintain secure, baseline configurations and remediate vulnerabilities.

Provide security engineering and DLP administration for DLA JETS DLP program, support incident response and cybersecurity content development, analyze and implement security requirements, integrate security solutions, and coordinate enterprise-wide incident handling in accordance with DoD directives.

The Cybersecurity Engineer protects clients by managing security monitoring solutions, vulnerability management, and compliance in cloud and on-premises environments.

Secure telecommunications technologies (3GPP/IMS/packet core/5G) by performing security assessments, vulnerability testing, threat modeling, and designing security controls. Collaborate with engineering teams to integrate security into development and deployment, lead strategic initiatives for e911, VoLTE, messaging platforms, and mitigate signaling/protocol risks (Diameter, SIP, SS7).

Lead oversight of cloud and application security, governance, control deviations, remediation tracking, and executive reporting. Partner with infrastructure, engineering, and application owners to assess configurations, onboard new applications (including agentic AI), validate controls, approve policy deviations, and communicate remediation progress and emerging risks to senior management.

Support cybersecurity for power plant control systems by maintaining network diagrams and asset inventories, assisting assessments and compliance, troubleshooting critical systems, and supporting control system modernization and documentation in collaboration with engineering and plant teams.

As a Principal Cybersecurity Engineer, you will design and maintain security systems for the Workday product within AWS, focusing on Kubernetes, Python, and Infrastructure as Code tools while integrating security into the engineering workflow.