Top Cybersecurity Jobs

Design, implement, and support web security platforms. Troubleshoot SSL/TLS, web traffic, and packet captures. Lead projects, develop processes and reports, monitor and respond to security incidents (24x7), collaborate with development and operations to ensure compliance with security standards.

Provide IT support for business processes with focus on SAP security administration. Participate on teams, apply IT analyses, complete basic changes to documented processes, and support roles/objects/user profiles in SAP across application, distributed, and mainframe environments.

Lead application security initiatives across the SDLC: perform threat modeling, secure design reviews, remediation guidance, third-party pen test management, develop security tooling, advise leadership on risks, mentor teammates, and improve application security maturity and training.

Contract security consultant to support and coordinate PCI-DSS compliance assessments (annual QSA engagement), prepare and submit evidence, implement and monitor PCI environments, perform vulnerability assessments and security event investigation, manage PCI training, contribute to hardening standards, and participate in incident response.

Support and improve IT security processes for SAP and mainframe environments. Participate in design, development, testing, implementation, and support of low-to-moderate complexity technology and business processes. Analyze security roles, user profiles, and policies; perform SAP security administration; collaborate with global teams and provide customer-focused support.

Lead and mentor the Cyber Operations team, evaluate and implement security tools, manage SIEM/IDS/IPS, perform vulnerability assessment and mitigation, develop SOPs, support FISMA and DISA STIG compliance, and assist with audits and continuity/disaster recovery planning.

Design and implement information security architecture and controls. Configure and develop SIEM solutions, administer Tenable Security Center, conduct risk and vulnerability assessments, implement application security, RBAC, IAM, DLP/data discovery, and secure web apps, databases, operating systems and network infrastructure (Cisco/Juniper).

Coordinate and track IT/infrastructure projects: create documentation, schedules, status reports, meeting minutes, and budgets; liaise with vendors and stakeholders to keep projects on schedule and manage issues and risks.

Support federal vulnerability management by conducting assessments, driving remediation, maintaining scanners and baselines, performing fix validation, participating in incident response and audits, and producing reports and dashboards to improve security posture and compliance.

Lead Splunk engineering and administration for Splunk Cloud, develop and tune advanced detections and dashboards, automate log onboarding and operational workflows, troubleshoot ingestion and platform issues, support Syslog-NG, collaborate with security, infra, and app teams, and participate in on-call rotation for incident escalation.

Lead database vulnerability and threat management (VTM) using IBM Guardium for mainframe DB2 and distributed databases. Administer and configure vulnerability tools, schedule scans, assess and risk-rank vulnerabilities, monitor database security, and produce reports and presentations for senior management. Drive VTM strategy and improvements across the agency.

Lead and execute IT compliance audits and risk assessments focused on PCI. Test and document system records, prepare audit plans and written reports, identify root causes, recommend controls, and provide technical guidance and mentoring to audit staff.

Provide Tier 1/2 support and subject-matter expertise for enterprise compliance archiving and Microsoft 365 Purview. Manage permissions, retention policies, eDiscovery cases, and data connectors. Build automation, monitor service resiliency and data quality, document processes, and coordinate with vendors and stakeholders to resolve compliance tool issues.

Contract Security Architect / Penetration Tester to perform security assessments and architecture work. Requires 10+ years IT experience across Windows, Linux, mainframe and web apps, 5+ years with firewalls, load-balancing and LAN/WAN. Strong communication, documentation, presentation, collaboration, and MS Office skills are required. 12+ month remote contract.

Provide enterprise security engineering support including troubleshooting and resolving tickets for firewalls, IDS/IPS, web filtering, SIEM, and endpoint security. Identify network/system security needs, conduct risk assessments and intrusion detection, implement vulnerability baseline monitoring, and help create and enforce security policies and procedures. Support web access duties related to the Affordable Care Act.

Lead security architect to support CJIS and information security compliance: interview stakeholders, document processes, assess controls, develop and track InfoSec implementation plans, facilitate status reporting, and provide remediation recommendations.

Perform intrusion detection and network analysis, support SIEM/IDS/IPS/firewall and web filtering, implement and enforce security policies and baseline monitoring for data center moves, and act as backup Enterprise Security Engineer resolving related help desk tickets.

Manage and secure DPH IT operations: monitor logs and network traffic, administer security systems (firewalls, IDS, antivirus), remediate vulnerabilities, review penetration tests, conduct forensics and audits, document processes, lead security projects, and coordinate with OIT and stakeholders.

Execute written security risk assessments and audits; produce policies, processes, and procedure documentation; facilitate assessments for custom and third-party applications; identify control deficiencies and associated risks; develop remediation action plans and alternate solutions; and provide security consulting and advisory services to business units and project teams.

Administer user credentials and maintain RACF, network, User-ID and user groups. Apply IT security policies, troubleshoot low-to-medium security issues, support SAP security and participate on teams and process-improvement projects. Make routine decisions for exceptions and contribute to projects related to existing tools and processes.

Responsible for implementing and maintaining IT security controls, monitoring networks for threats, performing vulnerability assessments, responding to incidents, and supporting compliance and security best practices.

Lead security operations and IT administration across Windows, Linux, and cloud environments. Maintain the System Security Plan, support audits (NIST 800-171, ISO 27001), perform log review, vulnerability scanning, access and configuration management, incident response, and manage Microsoft 365, XDR, and Linux systems while documenting configurations and procedures.

Lead development and maintenance of certification and accreditation (C&A) frameworks from scratch. Manage NIST-800 or DIACAP certification/accreditation, FISMA reporting, security analyses, risk/vulnerability assessments, tests and evaluations. Prepare briefings for senior officials, maintain certification documentation and POA&Ms, coordinate C&A activities with FSO and DAA, and enforce information assurance policies.

Coordinate and manage IT security implementation projects: define scope, schedules, budgets, and resources; document requirements; lead change management; engage stakeholders; track risks/issues; produce status reports and meeting minutes; work with vendors and infrastructure teams; provide technical review of SOW/BOM/solution architecture; and support project turnover to delivery.

Protect the City's information systems by monitoring SIEM, endpoints, and firewalls; performing vulnerability scans and incident response; ensuring compliance (NIST, CJIS, PCI-DSS); assessing third-party/cloud risks; supporting business continuity; developing security policies; and delivering security training and communications.