Top Cybersecurity Jobs

Lead design, architecture, and engineering of Cross Domain Solutions (CDS). Analyze alternatives, create complex design packages, gather/validate stakeholder requirements, coordinate implementation, support accreditation and operational CDS environments, mentor engineers, and provide technical inputs for modernization and strategy.

Design, implement, and manage NSA CSfC-compliant secure communications for Data-at-Rest and Data-in-Transit. Create architectures, perform risk/vulnerability assessments, troubleshoot CSfC implementations, produce technical documentation, and collaborate with stakeholders to ensure classified data protection and compliance.

Lead installation, configuration, migration, and support of Cayosoft identity management across on-prem and Azure environments. Migrate Active Roles Server capabilities to Cayosoft, integrate with ServiceNow and Active Directory, troubleshoot systems, provide stakeholder training and documentation, and support on-call rotation to ensure secure, continuous identity services.

Designs, engineers, and implements secure enterprise mobile device solutions (phones, tablets, laptops). Ensures mobile platform compliance and accreditation, integrates authentication and monitoring, supports RMF/IATT/ATO activities, troubleshoots advanced mobile security and connectivity issues, deploys patches and responds to vulnerabilities, and evaluates emerging mobile technologies for DoD/IC environments.

Design and define Linux system architecture, provide Tier III support for patches and updates, test baselines in the Engineering Operations Facility, develop Enterprise Technical Procedures, enforce DISA/STIG hardening and baseline compliance, monitor centralized alerts, and manage OS lifecycle and security integrations. Onsite at Fort Huachuca; requires active Secret clearance.

Design, implement, integrate, and maintain on- and off-premises Microsoft Exchange solutions. Provide system architecture, documentation, technical leadership, ATO support, and testing for email/retention systems.

Develop custom cyber mission software and tools using C/C++, assembly, and scripting (Python/Perl). Perform reverse engineering with tools like Ghidra, IDA Pro, GDB, and Wireshark. Must hold TS/SCI with polygraph, possess a relevant bachelors degree, and have 10+ years of related experience.

Manage a 24x7 SOC for federal customers: lead incident detection, triage, analysis, and escalation. Maintain SIEM and monitoring tools, develop TTPs, enforce policies, conduct risk assessments, drive SOC process improvements, and communicate incidents and summaries to leadership while ensuring compliance with DoW contract requirements.

Design, implement, and maintain enterprise and edge Identity Governance and Administration (IGA) and identity data management solutions. Support SailPoint IdentityIQ and Radiant Logic, integrate authoritative sources, implement JML and entitlement governance, enable identity synchronization for disconnected/edge environments, troubleshoot identity reconciliation and provisioning, and produce technical documentation while supporting Zero Trust and Agile initiatives.

Research and analyze 802.11 traffic; design, implement, verify, and release mission software. Develop UIs, use GitLab in an agile process, write/execute tests, estimate and decompose tasks, and communicate with stakeholders. Requires active clearance.

Designs, implements, and maintains on‑premises and cloud cybersecurity infrastructure (Windows/Linux). Deploys AWS services, engineers NDR/EDR/NGFW/IDS solutions, creates architecture diagrams and roadmaps, supports security assessments and authorization, leads technical exchanges, and may lead teams while developing test plans and modernization strategies.

Design, implement, and maintain secure cloud application capabilities (IaaS/PaaS/SaaS). Integrate security into CI/CD, automate scans, monitor cloud configurations, lead developers, perform QA, and produce technical documentation for DoD customers.

Provide day-to-day cybersecurity and IT support for Collateral/SCI/SAP environments: maintain file servers, firewalls, security monitoring, network appliances, perform account management, patching, VTC administration, COMSEC management, prepare and review authorization packages, and perform help desk and troubleshooting tasks.

Provide day-to-day cybersecurity and IT support for Collateral, SCI and SAP environments: administer Windows/Exchange servers, firewalls, VTC, COMSEC, account management, patching, system configuration, authorization package support, vulnerability identification and remediation, and self-inspection/RMF activities. Perform help desk, hardware/software upgrades, media control, and support PL2 systems (PL3/PL4 cross-domain solutions desired).

Designs and operates secure CI/CD pipelines and software‑factory automation across classified enclaves (NIPR/SIPR/JWICS). Implements DevSecOps tooling, IaC/CaC, automated compliance (STIG/NIST), observability, incident response, and governance. Drives modernization strategy, evaluates tooling, and produces architecture, maturity, and compliance reporting to accelerate releases and ensure mission readiness.

Design, deploy, tune, and maintain McAfee HBSS and endpoint security across multi-domain Windows and hybrid RHEL environments. Support ePO, vulnerability scanning (Nessus/ACAS/SCAP), STIG/SCAP hardening, policy analysis, and operational maintenance while following DoD security standards and providing O&M and lifecycle support.

Manage full endpoint device lifecycle for Windows and macOS: OS imaging, patching, vulnerability remediation, Tier 3 support, endpoint management tool administration, monitoring, and documentation to ensure security and compliance.

Perform internal and external penetration tests across networks, web apps, databases, and cloud; exploit vulnerabilities, escalate privileges, produce RoE/Test Plans/SOPs, write threat-based reports, and provide remediation guidance aligned with NIST 800-53 and RMF.

Design, implement, and maintain enterprise PKI systems and certificate services. Manage CAs, RAs, and HSMs; enforce PKI policies; perform audits for compliance; monitor infrastructure health; troubleshoot certificate and PKI issues; and automate workflows using scripting. Role requires Top Secret clearance, US citizenship, and 5+ years' related experience.

Lead identity and access management across Azure/Entra ID, on‑prem Active Directory, Okta, and Microsoft 365. Administer Azure platform services, implement RBAC, MFA, SSO and conditional access, ensure security/compliance, perform monitoring/troubleshooting, automate with PowerShell/Azure CLI, support incident response, and mentor junior engineers.

Lead FOCI risk management and mitigation for China-related mission systems. Conduct high-level risk and control testing, direct corrective action plans, support governance reporting via ServiceNow IRM/SPM, ensure compliance with DoD/DoW policies, monitor mitigation performance, and engage stakeholders and auditors to support mission requirements.

Provide day-to-day IT and information assurance support for Collateral/SCI/SAP environments: maintain servers, firewalls, networks and security monitoring; perform account management, patching, hardware/software configuration, VTC administration, COMSEC/media control, prepare and review authorization packages, identify vulnerabilities and implement countermeasures, and support help desk and troubleshooting in a 24/7 shift setting.

Lead and execute Identity Provider (IdP) work for an ICAM program using Agile. Define scope, manage sprints, coordinate stakeholders, mitigate risks, interact with vendors, and deliver IdP-related engineering and integration deliverables on schedule.

Support USPACOM J6 MPE engineering and integration: translate mission requirements into technical plans, support RMF documentation and POA&M, validate security controls, perform vulnerability and risk analysis, and produce technical briefings and recommendations for stakeholders.

Hands-on principal network engineer to implement, operate, and improve enterprise secure internet edge and access services (SASE/Zero Trust). Manage secure web access, tunnels (GRE/IPSec), DNS, authentication (SAML/Kerberos), application delivery/load balancing, browser isolation, and collaborate with security, identity, and cloud teams while mentoring junior engineers and supporting incident response.