Top Cybersecurity Jobs

Leads information security strategy and execution for the Federal Reserve System’s District IT and Corporate Services portfolio. Advises senior technology and business leaders, manages cybersecurity risk and tolerance, develops resilient security practices, and partners across a matrixed organization to deliver secure technology services. Builds high-performing, AI-savvy teams, drives change and innovation, manages stakeholders and external partners, and aligns security initiatives with business objectives and system standards.

Leads information security strategy and execution for Federal Reserve System IT Operations and Policy portfolios. Advises the System CISO and business and technology leaders, manages cybersecurity risk and resilience, develops secure technology practices, and partners across infrastructure, architecture, data, innovation, and IT business teams. Builds AI-savvy security teams, drives organizational change, strengthens governance, and ensures secure, reliable technology delivery across a geographically dispersed enterprise.

Leads Alaffia’s security, compliance, DevOps, infrastructure, and IT functions. Owns SOC 2, HIPAA, and HITRUST efforts; cloud infrastructure, CI/CD, reliability, observability, incident response, access controls, device management, and IT vendors. Manages and grows a cross-functional engineering team while setting roadmaps, KPIs, security processes, audit readiness, and production practices. This hands-on player-coach partners with engineering, product, customers, auditors, and company leadership.

Leads IT cybersecurity governance and controls operations, including policy and standards lifecycle management, risk acceptance, control governance, service management, GRC workflow modernization, metrics, executive reporting, and stakeholder coordination. The role establishes operating procedures, ownership, evidence requirements, exception paths, and sustainable governance practices across cybersecurity, audit, privacy, legal, procurement, and business teams.

Own workforce identity and access management, including Okta administration, SaaS integrations, SSO, provisioning, lifecycle automation, RBAC/ABAC, privileged access, and non-human identity governance. Strengthen access controls and compliance evidence for ISO 27001 and SOC 2, support endpoint and SaaS security initiatives, investigate incidents, document processes, and participate in on-call coverage.

Own vulnerability management across endpoints, servers, and cloud infrastructure; prioritize remediation and track SLA compliance. Harden AWS environments, improve identity management, investigate cloud alerts, and support application security through SAST, DAST, dependency scanning, secure code reviews, and threat modeling. Resolve security tickets, contribute to incidents and compliance preparation, lead security initiatives, and collaborate with engineering, IT, and compliance stakeholders.

Leads and mentors a multidisciplinary cyber/IT engineering team supporting DoD mission systems. Provides secure enterprise architecture, cybersecurity, cloud, network, systems, and DevSecOps oversight across on-premises, hybrid, classified, and air-gapped environments. Drives Zero Trust, RMF/ATO compliance, vulnerability management, incident response, automation, CI/CD, and infrastructure modernization. Presents technical strategies and risk findings to senior government leadership while coordinating with DISA, NSA, authorizing officials, and customer cybersecurity teams.

Leads multidisciplinary cyber and IT engineering teams supporting DoD programs. Oversees secure enterprise architecture, cloud and hybrid infrastructure, Zero Trust, DevSecOps, CI/CD, Infrastructure-as-Code, RMF/ATO compliance, vulnerability management, incident response, and cyber defense operations across classified and unclassified environments. Provides technical strategy, architecture guidance, senior leadership briefings, Agile/Scrum direction, and mission-aligned cybersecurity solutions for Army, Navy, Air Force, and SOCOM customers.

Manage the enterprise IT controls and access governance program across applications, infrastructure, developer platforms, and data services. Build risk-based control inventories, operate access reviews and certifications, track exceptions and remediation, establish metrics and executive reporting, and maintain audit-ready documentation. Partner with Security, IT, application owners, Finance, Legal, auditors, and business stakeholders to improve identity governance, privileged access, lifecycle management, segregation of duties, and control effectiveness. Use automation, APIs, analytics, and AI agents to improve governance efficiency and auditability.

Monitors, detects, and responds to cybersecurity threats affecting government systems, networks, and sensitive data. Responsibilities include security event and log analysis, threat hunting, continuous monitoring, incident response, detection policy development, automation improvements, security reporting, metrics collection, and strengthening cybersecurity controls and operational resilience.

Supports classified IT and cyber programs through project coordination, network workstation management, site deployments, secure data transfers, and compliance with NISPOM, ICDS, DoD 5205 guidance, RMF, SAP, SCI, COMSEC, and OPSEC requirements. Coordinates with intelligence communities, agencies, military services, and program managers; prepares MOUs, acquisition plans, reports, and program documentation. Periodic travel is required for program reviews and demonstrations.

Administers classified, air-gapped IT systems in a 100% onsite environment. Responsibilities include managing Active Directory, Lab-in-a-Box environments, VMware, Veeam, Trellix ePO, Nessus, Splunk, domain controllers, secure wipes, data-spill response, vulnerability remediation, STIG and RMF compliance, documentation, and audit readiness. Provides coordination with security stakeholders and occasional after-hours or weekend maintenance and incident-response support.

Provides onsite administration and security support for classified, air-gapped IT systems and lab environments. Responsibilities include Active Directory, VMware, Veeam, Trellix, Nessus, Splunk, vulnerability remediation, backup and recovery, data-spill response, secure sanitization, STIG and RMF compliance, documentation, and audit readiness. The role requires collaboration with security stakeholders and occasional after-hours support.

Leads enterprise network security architecture, engineering, and modernization across cloud and on-premises environments. Designs firewalls, WAF, DDoS protection, Azure connectivity, microsegmentation, Zero Trust, SASE, and SD-WAN solutions. Serves as a Level 3 incident escalation point, drives root-cause analysis and resilience improvements, establishes automation and DevSecOps standards, and mentors engineers. Partners with stakeholders and vendors to deliver secure, scalable network security platforms.

Conduct IT audits of digital environments, internal controls, cybersecurity measures, data and AI systems, governance, and regulatory compliance. Analyze risks, assess data quality, collaborate with clients, develop recommendations, and apply IT governance and auditing methodologies. The role also requires client relationship management, mentoring junior staff, and maintaining professional and technical standards.

Drive strategic cybersecurity consulting sales across new and existing enterprise accounts. Responsibilities include achieving a $1.1M+ gross-profit quota, closing complex $85K to $5M+ opportunities, building CISO and executive relationships, developing territory strategies, leveraging cybersecurity vendor partnerships, and collaborating with consulting and technical teams to win security engagements.

The Technology Audit Manager leads technology, cybersecurity, physical security, and digital transformation assurance and advisory engagements. Responsibilities include planning and executing audits, evaluating governance and controls against industry frameworks, testing controls, reporting findings, developing recommendations, monitoring corrective actions, assessing emerging risks, and supporting annual audit planning. The role also manages stakeholder relationships and audit project communications across the organization.

Leads and mentors technical program managers delivering enterprise IT security and infrastructure programs. Establishes governance, executive reporting, risk mitigation, and accountability frameworks while managing budgets, scope, schedules, vendors, contracts, and cross-functional engineering dependencies. Aligns security, infrastructure, software engineering, vendors, and executives on roadmaps and delivery commitments. Drives adoption of AI-enabled automation for program monitoring, reporting, resource allocation, and operational decision-making.

Monitors and investigates Tier-2 security events across corporate IT and OT/ICS environments, including SCADA systems. Tunes detections, performs forensic analysis, manages vulnerabilities, supports penetration testing, and coordinates remediation. Maintains MFA, SSO, access reviews, security documentation, audit evidence, and compliance activities aligned with NIST, TSA, C2M2, and NERC CIP. The role also supports incident response, tabletop exercises, awareness training, disaster recovery, and security on-call operations.

Leads and supports risk-based IT and security audits, evaluating controls, regulatory compliance, operational and strategic risks, and technology implementations. Identifies root causes, recommends improvements, prepares audit reports, and presents findings to management. Applies IIA, AICPA, COBIT, and NIST standards while partnering with business leaders and maintaining audit quality. The role requires at least five years of IT and security audit experience and may involve cybersecurity reviews and internal audits.

Manage classified, air-gapped IT systems and lab environments in a 100% onsite closed area. Configure Active Directory, GPOs, VMware, Veeam, Trellix ePO, Nessus, Splunk, and Lab-in-a-Box environments. Lead data spill response, secure wipes, vulnerability remediation, system monitoring, backup recovery, STIG/RMF compliance, documentation, and audit readiness while coordinating with security stakeholders.

Supports IT and Security operational risk management through risk assessments, control evaluations, risk inventories, regulatory alignment, and governance reporting. Leads risk intake and enterprise assessments using NIST, COBIT, RSA Archer, JIRA, and ServiceNow. Develops AI governance protocols and risk registers, audits distributed ledger technology programs, and reviews IAM controls including RBAC, access reviews, and least-privilege policies. Collaborates with technology, compliance, legal, audit, and business stakeholders to improve ORM methodologies and resolve findings.

Leads SOC analysts and response personnel supporting the United States Air Force. Oversees alert triage, threat hunting, investigations, incident response, vulnerability remediation, staffing, coverage, compliance documentation, and Government reporting. Coordinates defensive cyber operations across IT and OT environments, manages cyber taskers, supports RMF activities, evaluates SOC tools and telemetry, and improves incident response procedures and operational readiness. The role is on-site in Linthicum Heights, Maryland and requires an active TS/SCI clearance.

Supports a 24/7 Security Operations Center by monitoring SIEM alerts, triaging and documenting incidents, escalating threats, tuning detection rules, and assisting with vulnerability management and threat intelligence. The role also supports access verification and identity management tasks, follows security playbooks, participates in shift and on-call rotations, and contributes to SOC process improvements.

Analyzes university information systems, policies, and processes to identify security gaps and develop remediations. Monitors cyber defense activity, investigates incidents, assesses risks, maintains security policies, coordinates audits, and supports compliance with TAC 202, PCI, HIPAA, and other requirements. Leads security remediation projects, awareness training, security assessments, and related technology or process improvements while providing incident support, reports, and briefings.