Top Cybersecurity Jobs

Lead IT and cybersecurity governance, risk, and compliance programs including IT SOX/ITGC execution, ERM for IT risks, audit liaison, policy authoring, KRI/KPI tracking, GRC tool integration, third-party risk review, and people leadership to improve control maturity and regulatory alignment.

Support DoD Special Access Programs (SAP) and SCI activities: maintain file servers, firewalls, security monitoring, and network appliances; administer VTC systems; perform account lifecycle management, help desk support, patching, hardware/software configuration, COMSEC and media control, and prepare/update authorization packages and cybersecurity self-inspections.

The IT Specialist will support the AFLCMC/IN by managing IT operations, ensuring network security, and analyzing system performance while providing technical guidance.

Lead cybersecurity, compliance, and resilience across a multi-site aerospace/defense environment. Drive CMMC Level 2, NIST 800-171, DFARS, and CUI readiness; manage identity, vulnerability, incident response, SOX ITGC support, business continuity, and security governance. Build and lead the cybersecurity, compliance & resilience team and coordinate cross-functional certification and audit activities.

Support the Director of Facility Security in FedRAMP High ATO efforts: gather evidence, track milestones, maintain SOPs and IT documentation, manage IT assets and vendors, and document network maps and technical workflows to ensure audit readiness and compliance with federal cybersecurity frameworks.

The IT Project Lead, SME oversees the ISaaS program, ensuring technical execution, risk management, compliance, and quality assurance while leading cybersecurity teams and engaging with government stakeholders.

The IT Requirements Analyst will provide technical IT support, gather user requirements, assess systems for improvement, draft documentation, and communicate updates to leadership.

Lead cybersecurity operations for a large DoD program: oversee RMF/eMASS processes, continuous monitoring, vulnerability management, audits (ST&V/CVA/CCRI), policy and ATO support, risk assessments, remediation guidance, and mentor technical staff while coordinating with government leadership and partner agencies.

Lead and execute cybersecurity operations, incident response, detection engineering, threat hunting, and vulnerability management. Manage a small team and SOC/MSSP vendors, implement security controls across cloud, infrastructure, and applications, and leverage AI-assisted tooling and automation to improve triage, investigation, and response.

Design, implement, and operate enterprise endpoint management (Jamf, Fleet, Intune, Entra) to enforce zero-trust, automate provisioning and remediation, integrate telemetry with Splunk for monitoring and investigations, implement CIS-aligned controls in ITAR/EAR environments, pilot AI-assisted automation, and provide tier-3 support, documentation, and cross-functional leadership.

Evaluate IT infrastructure systems by conducting security assessments and developing reports. Ensure compliance with NIST standards while advising on data protection.

Perform end-to-end FedRAMP assessments for cloud service providers: interview SMEs, review IaaS architectures (AWS/Azure/OCI), validate NIST SP 800-53 controls, analyze vulnerabilities, verify encryption and configurations, draft deliverables, and mentor project team members.

Perform end-to-end FedRAMP assessments: interview CSP SMEs, walkthrough cloud architectures (AWS/Azure/OCI), evaluate NIST SP 800-53 controls, validate configurations and vulnerabilities, draft deliverables, train and mentor team members, and support practice development.

Support AI governance by assessing AI system cybersecurity vulnerabilities, developing governance frameworks and assessment tools, ensuring compliance with NIST, CMMC, GDPR, and guiding secure, ethical AI deployment across the organization.

Support and engineer enterprise Linux systems and SIEM infrastructure for US Army/NETCOM. Collaborate with engineering team, resolve technical issues, use Linux, VMware virtualization, and SIEMs, and produce security A&A documentation (SSP, policies).

Design, manage, and optimize enterprise directory services and hybrid authentication systems. Lead identity and access architecture, troubleshoot and resolve issues, automate monitoring and maintenance, evaluate new tools, and ensure secure, reliable directory operations to support mission requirements.

Design, implement, and maintain Java/Spring Boot web backends and data workflows on AWS. Automate containerized deployments, integrate authentication, enforce fine-grained access controls for sensitive data, maintain JSON/XML schemas, write tests, support system integration/UAT, document processes, and monitor production systems for a classified environment.

Perform advanced reverse engineering and kernel-level programming to support cyber missions. Conduct computer forensics, use version control (Subversion, CVS), author technical presentations, and develop solutions using Assembly, C/C++, C#, Java, Perl, and Python.

Lead FOCI management strategies and execute high-level risk assessments, internal control testing, and corrective action plans. Oversee compliance with DoD/DCSA policies, monitor mitigation performance, support governance using ServiceNow IRM/SPM, prepare FOCI reporting, and conduct stakeholder outreach and audit support for China-related mission activities.

Manage and maintain enterprise PKI systems: issue, renew, revoke certificates; administer CAs/RAs and HSMs; troubleshoot PKI issues; develop/enforce PKI policies; conduct audits; and maintain documentation and automation.

Design, deploy, and maintain secure enterprise LAN/WAN and multi-firewall environments. Lead firewall migrations and configurations (Cisco, Palo Alto, Juniper), perform security audits, implement VPN/IPSec with PKI, troubleshoot voice/video/data traffic, create build/as-built and test documentation, mentor junior engineers, and support IT operations onsite at the customer facility.

Design, implement, and manage network security and Palo Alto firewall configurations (including cloud deployments in AWS/GCP/Azure). Monitor traffic and alerts, investigate and respond to incidents, enforce security policies, document changes, and collaborate with IT/security teams to maintain continuous monitoring and compliance.

Lead RMF-based A&A and continuous monitoring for classified commercial cloud services and cross-domain solutions. Perform security engineering, system hardening, control assessments, audits, vulnerability analysis, and penetration testing. Prepare A&A evidence packages, support IC assessments, and communicate risk to leadership while supporting ISSM/ISSO and GRC activities onsite in McLean, VA.

Manage enterprise PKI services including issuance, renewal, revocation, token issuance, and MFA enforcement across multiple networks. Monitor certificate health, CRLs, and authentication systems; troubleshoot certificate and authentication failures; support Trusted Agents and admins; maintain documentation and procedures; support identity-related incident response to protect mission-critical systems.

Lead development and maintenance of OCO cyber tools. Collaborate with peers and customers, write and maintain code in C/C++/Rust/Go/Python, perform reverse engineering, use Git/GitLab, build CI/CD pipelines, and work with networking and container technologies. Must obtain TS/SCI and be a U.S. citizen.