Top Cybersecurity Jobs

Analyzes university information systems, policies, and processes to identify security gaps and develop remediations. Monitors cyber defense activity, investigates incidents, assesses risks, maintains security policies, coordinates audits, and supports compliance with TAC 202, PCI, HIPAA, and other requirements. Leads security remediation projects, awareness training, security assessments, and related technology or process improvements while providing incident support, reports, and briefings.

Oversee internal IT infrastructure, cybersecurity operations, incident response, cloud systems, identity and access management, employee IT support, and technology vendors. Administer Microsoft 365, Azure, networking, firewalls, endpoints, backups, and SSO. Lead security assessments, vendor selection and negotiations, insurance compliance, documentation, infrastructure initiatives, and risk communication to leadership.

Designs, implements, and maintains security architecture for SCADA/OT systems in wastewater operations. Collaborates with IT and Water Reclamation teams to build compliant security controls, advises on best practices, participates in projects and requirements analysis, and mentors junior staff. Works under limited supervision and is evaluated by results and reviews.

Manage information security policies, operate security solutions, monitor alerts, investigate security concerns, coordinate corrective actions, support risk checks, and maintain security documentation and incident records.

Manage IT governance, audit activities, control testing, risk assessments, policies, and compliance programs. Lead PCI compliance and annual assessments, administer the GRC system, maintain documentation, evaluate governance frameworks, and report effectiveness to stakeholders. The role partners with IT and business teams to integrate risk management into daily operations and align IT strategy with business objectives.

Conduct penetration testing, vulnerability discovery, exploitation, fuzzing, firmware analysis, red-team exercises, and post-exploitation assessments across cloud and on-premises environments. Review architectures for security compliance, develop security solutions, analyze information systems, and produce regulatory security reports. Support federal Security Assessment and Authorization initiatives using NIST guidance and the Risk Management Framework.

Supports annual and ongoing IT security assessments by planning audits, collecting and validating evidence, testing technical and administrative controls, documenting deficiencies, evaluating risk, coordinating remediation, and maintaining audit workpapers and compliance documentation. Reviews identity and access management, endpoint security, vulnerability and patch management, logging, monitoring, and configuration management controls. Provides compliance and evidence guidance to technical and business stakeholders.

Lead and perform third-line IT internal audits and IT SOX testing across regions, assessing IT governance, ITGCs, cybersecurity, and infrastructure controls. Draft audit and SOX reports, track remediation, collaborate with external auditors, promote alignment with regulatory requirements and industry frameworks, and support audit planning and delivery within agreed timelines.

Leads an integrated IT and cybersecurity organization supporting classified programs. Oversees IT operations, infrastructure, end-user services, cybersecurity compliance, staff performance, operational issue resolution, metrics, inspections, and government regulatory compliance. Develops strategic initiatives, mentors managers, coordinates with program and security leadership, and ensures implementation of cybersecurity standards, RMF processes, system hardening, patching, audit readiness, and continuous compliance. The role is fully onsite in Linthicum, Maryland and requires an active Secret clearance.

Supports federal IT portfolio management, enterprise integration, governance, risk and compliance assessments, cybersecurity compliance, knowledge management, and platform operations. Maintains portfolio data, applies NIST, RMF, FISMA, and privacy requirements, monitors performance, develops reports and briefings, and collaborates with government and technical stakeholders. The role requires an active Secret clearance and at least seven years of experience.

Develop and govern federal IT policies, directives, SOPs, and guidance for a CIO organization. The role manages a 40-plus-document policy inventory, coordinates reviews and updates, identifies policy gaps, ensures alignment with federal statutes and NIST standards, translates technical and cyber risk into strategic recommendations, and briefs executives. The planner also manages policy lifecycles, stakeholder collaboration, document dependencies, and five-year review requirements.

Own access, identity, and integration work connecting the AI platform to business systems. Translate requests into API, authentication, account, scope, and permission requirements; coordinate IAM, SSO, OAuth apps, approvals, connector builds, testing, credential rotation, revocation, documentation, and troubleshooting across IT and engineering teams.

Supports company IT and security operations in a fully remote environment. Responsibilities include helpdesk and endpoint support, authentication and access management, security and compliance automation, disaster recovery, vendor management, system migrations, security tooling, and cross-functional technical project planning. The role also helps maintain audit-ready processes and supports AWS security, identity providers, compliance platforms, scripting, and remote security tools.

Leads enterprise cybersecurity, physical access security, risk governance, audits, incident response, vulnerability and patch management, identity and access management, supplier security reviews, data privacy, and security awareness. Partners with IT, Legal, HR, Finance, Operations, auditors, insurers, and suppliers to maintain secure and compliant technology. Oversees security controls, remediation plans, privacy requirements, physical access systems, and incident response across nationwide offices.

Manages governance, risk, compliance, and security programs, including IT SOX, PCI, third-party risk, control testing, remediation, risk registers, and security contract reviews. Leads compliance analysts and partners with business, audit, legal, procurement, engineering, and data teams. Supports AI governance, AI risk assessments, data classification, privacy, retention, and data protection controls while translating technology and regulatory risks into business decisions and executive reporting.

Coordinates cybersecurity procedures, monitoring, reporting, incident and vulnerability follow-up, audits, documentation, and continuous improvement. Oversees managed security providers, evaluates their findings and recommendations, coordinates internal remediation, and presents risks and strategies to leadership, customers, and staff. Supports security investigations, control assessments, regulatory inspections, audit responses, and security technology or compliance projects within a regulated life sciences environment.

Owns Step2’s cybersecurity program across strategy, threat intelligence, AI security, incident response, business continuity, endpoint protection, DevSecOps, vendor risk, compliance, awareness training, telemetry, and physical site security. The role defines and verifies Microsoft 365, Entra ID, EDR, SIEM, vulnerability management, firewall, VPN, and access controls; leads incident exercises and recovery planning; manages security vendors; and reports risk to leadership. It requires hands-on technical expertise, strategic program-building experience, and responsiveness to critical incidents across hybrid office, plant, and warehouse environments.

Leads enterprise IT governance, risk, compliance, privacy, AI governance, data governance, and third-party risk programs. Oversees SOX audits, NIST assessments, ISO 27001 alignment, policy management, privacy requests, vendor risk assessments, executive reporting, and compliance initiatives. Manages and develops GRC and Privacy team members while partnering with IT, Legal, Cybersecurity, Internal Audit, vendors, and senior leadership.

Provides day-to-day IT assurance and cybersecurity support for DoD Special Access Programs. Maintains servers, firewalls, networks, security monitoring systems, and authorization documentation; troubleshoots system issues; manages accounts, patching, configurations, hardware, software, COMSEC, VTC systems, and help desk support. Reviews authorization packages, identifies vulnerabilities, implements countermeasures, supports RMF assessments, and ensures systems comply with security policies. Requires a current TS/SCI clearance and ability to obtain TS/SCI with CI polygraph.

Leads IT audit engagements assessing technology controls, risk management, processes, and operational effectiveness. Responsibilities include risk assessments, audit scoping, control testing, workpaper preparation, reporting findings, issue follow-up, stakeholder meetings, and supervision or coaching of audit staff. The role serves as an IT subject matter expert and requires professional certification, such as CISA, CIA, or CISSP.

Supports the Information Security Management System, cybersecurity risk management, security documentation, vendor and internal system assessments, and collaboration with managed security providers. The internship also provides exposure to incident management, business continuity, threat hunting, gap analysis, incident response, event detection, reporting, and security event correlation. Candidates must be enrolled in a relevant cybersecurity or related degree program throughout the five-month internship.

Administer and maintain enterprise IT security applications and systems, implement security procedures, support threat operations, enforce policies, promote cybersecurity awareness, and communicate security concepts to technical and business stakeholders. The role requires 5+ years of IT security operations experience and an understanding of enterprise security practices.

Provide day-to-day cybersecurity and IT support for Collateral/SCI/SAP environments: maintain file servers, firewalls, security monitoring, network appliances, perform account management, patching, VTC administration, COMSEC management, prepare and review authorization packages, and perform help desk and troubleshooting tasks.

Provides day-to-day IT assurance and cybersecurity support for collateral, SCI, and SAP systems. Responsibilities include system and network administration, security monitoring, vulnerability remediation, authorization packages, RMF compliance, patching, account management, help desk support, VTC administration, COMSEC management, and hardware/software configuration. The role requires current TS/SCI clearance, SAP eligibility, CI polygraph eligibility, U.S. citizenship, and onsite work in San Antonio, Texas.

Leads federal IT risk and cybersecurity compliance across AWS, Azure, and Google Cloud environments. Executes the NIST RMF lifecycle, develops authorization artifacts, supports ATOs, evaluates security controls and vulnerability data, coordinates audits and assessments, and drives remediation with engineering teams. Responsibilities include cloud configuration reviews, continuous monitoring, incident investigation, privacy compliance, access control, and security strategy. The role requires federal cybersecurity compliance experience, ISSO expertise, cloud security knowledge, DoD certification, and eligibility for a Secret clearance.