Top Cybersecurity Jobs

Lead implementation and maintenance of security controls to achieve CMMC 2.0 compliance for CUI. Conduct vulnerability assessments, incident response, threat hunting, and forensic analysis. Prepare and support CMMC assessments, maintain SSP/POA&M, collaborate with compliance and operations teams, and run continuous monitoring and security awareness training.

Lead architecture and technical strategy for multi-tenant security stacks, serve as Tier-4 escalation for complex incidents, build Security-as-Code automation (Python/PowerShell/Terraform), integrate tooling across platforms, drive vendor evaluations and global standardization, and oversee compliance evidence for HIPAA, SOC 2, and CMMC.

Lead design and implementation of end-to-end security for multi-cloud and hybrid environments. Architect Zero Trust and DevSecOps solutions, embed automated SAST/DAST in CI/CD, lead incident response and forensic investigations, manage risk-based vulnerability programs, implement AI security guardrails, and ensure compliance with GDPR, NIST 800-53, and cloud sovereignty requirements while mentoring junior staff.

Design, implement, and maintain security controls across networks, systems, and cloud environments. Monitor threats, conduct penetration tests and vulnerability scans, manage incident response, ensure regulatory compliance, and integrate security into SDLC and CI/CD pipelines through automation and DevSecOps practices.

Lead SOX IT controls and IT audit activities: document controls, perform walkthroughs and testing, analyze evidence and data, support external audits, drive remediation, and improve governance aligned with SOX, NIST, and ISO requirements while partnering with IT, cybersecurity, finance and business stakeholders.

Lead IT infrastructure and cybersecurity across headquarters and distributed sites: manage networks, servers, endpoints, security cameras, PCI-DSS compliance, penetration testing, vulnerability scanning, incident response, hardware setups, conference AV, cloud migration, and AI tool adoption while managing strategic IT projects.

Support mission-focused technology integration for federal cyber incident response: lead use case identification, gather and document requirements, facilitate stakeholders, define success criteria, develop business cases, track requirements traceability, document workflows, measure pilot outcomes, and support governance, briefings, and continuous improvement to ensure disciplined pilot scope and transition decisions.

Lead IT/OT risk management and security across industrial sites: identify and mitigate risks, monitor endpoint security, manage incidents and remediation, support OT network segmentation (IEC 62443), ensure GxP compliance, oversee IT/OT solution lifecycles, partner with vendors, support audits, and train teams on service management and operational excellence.

Provide information assurance and IT support for DoD Special Access Programs: maintain servers, firewalls, networks, VTC, COMSEC, perform AIS accreditation/self-inspections, identify vulnerabilities, manage accounts/media, and support help desk and system configuration updates.

Lead IT support and cybersecurity efforts for DoD-related systems: develop and maintain cybersecurity program, conduct risk assessments, implement controls, monitor and respond to incidents, ensure compliance with DoD/NIST standards, manage security projects and training, and oversee complex datacenter operations.

Provide day-to-day cybersecurity and IT support for Collateral/SCI/SAP environments: maintain file servers, firewalls, security monitoring, network appliances, perform account management, patching, VTC administration, COMSEC management, prepare and review authorization packages, and perform help desk and troubleshooting tasks.

Provide day-to-day IT and information assurance support for Collateral/SCI/SAP environments: maintain servers, firewalls, networks and security monitoring; perform account management, patching, hardware/software configuration, VTC administration, COMSEC/media control, prepare and review authorization packages, identify vulnerabilities and implement countermeasures, and support help desk and troubleshooting in a 24/7 shift setting.

Provide records management and information assurance support: oversee records program, maintain office records lists, advise on disposition, ensure NARA/DoD/Army compliance, conduct surveys/inspections, develop and deliver training, and maintain audit readiness for RMIC/MICP testing.

Lead use-case identification, gather and document requirements for technology integration pilots, and coordinate stakeholders. Translate mission pain points into capability requirements, define success metrics, develop business cases, and manage requirements traceability. Facilitate workshops, support governance reviews, and ensure pilot scope, transition, and continuous improvement for cyber incident response initiatives.

Lead and execute cybersecurity operations, incident response, detection engineering, threat hunting, and vulnerability management. Manage a small team and SOC/MSSP vendors, implement security controls across cloud, infrastructure, and applications, and leverage AI-assisted tooling and automation to improve triage, investigation, and response.

Lead enterprise IT audit strategy and execution for insurance and financial systems. Oversee audits of core insurance platforms, financial systems, cybersecurity, cloud, IAM, SDLC, and regulatory compliance. Advise executives and regulators, manage remediation, prepare Audit Committee reporting, and mentor IT audit staff.

Lead and execute IT risk assessments, maintain the IT risk management framework, produce senior-level risk reporting (KRIs, trends), analyze and remediate control issues, liaise with InfoSec and IT teams, and support audit readiness and governance across complex IT environments.

Lead enterprise cybersecurity strategy, prioritize and manage a multi-year cybersecurity roadmap and portfolio, oversee program execution and budgets, translate risk insights into executive/board reporting, and align security investments to reduce risk and improve resilience across IAM, vulnerability management, threat intelligence, and data protection.

Lead and supervise IT audit teams to design and execute compliance and security audit programs, perform IT SOX testing, document controls, assess IT risks, present findings, recommend process improvements, and coordinate with business and technical stakeholders on remediation and special projects.

Design, implement, and operate enterprise endpoint management (Jamf, Fleet, Intune, Entra) to enforce zero-trust, automate provisioning and remediation, integrate telemetry with Splunk for monitoring and investigations, implement CIS-aligned controls in ITAR/EAR environments, pilot AI-assisted automation, and provide tier-3 support, documentation, and cross-functional leadership.

Lead strategy, deployment, and operations of enterprise endpoint security tools (EDR/XDR, DLP, EPM) across Windows, macOS, and Linux. Manage and mentor an endpoint engineering team, integrate tools with SIEM/SOAR and SOC workflows, drive incident response and remediation, define hardening standards and roadmaps, run POCs and vendor management, and partner with IT, IAM, and compliance to balance security and usability.

Coordinate and oversee internships for Information Technology and Cybersecurity Analytics and Operations at Penn State Beaver for Fall 2026. Manage applicant review, may conduct teaching demonstrations during interviews, and ensure successful completion of required background checks. Applicants must submit application materials including a letter, CV, and references.

Analyze enterprise endpoint telemetry and reporting to identify inefficiencies and security risks. Develop and maintain Power BI dashboards and automated reports using Intune, MECM, Defender, Graph API, Log Analytics, SQL, and PowerShell. Monitor device compliance, patching, encryption, and endpoint health. Support RMF/ATO sustainment, audit requests, and cybersecurity reporting. Coordinate operational reporting for leadership and assist engineering teams with data analysis for incident response and platform optimization.

Support discovery, design, implementation, and improvement of Digital Trust products (IAM, PAM, IGA, security operations workflows). Document workflows, write user stories and acceptance criteria, support testing, pilot programs, integrations, stakeholder communications, and adoption activities. Collaborate with security, infrastructure, clinical and business teams to reduce friction, strengthen controls, enable automation and AI-assisted features, and maintain product documentation and metrics.

Lead and manage the IT SOX compliance program, conduct IT risk assessments and scoping, oversee ITGC/ITAC testing and remediation, support system implementations for SOX readiness, train control owners, partner with internal/external audit, and drive program improvements through automation, metrics, and tools while adhering to QMS and security/privacy standards.