Top Cybersecurity Jobs

Conduct IT control audits of DoD accounting systems, evaluate control design and operating effectiveness, review SSAE 18 reports and complementary user entity controls, support corrective action plans and remediation testing, and provide FISCAM training. The role requires a relevant bachelor’s degree, 0–3 years of related experience, and an Interim Secret clearance with eligibility for a fully active Secret clearance.

Leads architecture, technical strategy, solution design, and engineering for enterprise Customer Identity and Access Management platforms supporting external users. Defines architecture standards, translates business requirements into secure and scalable solutions, evaluates identity technologies, and ensures security, availability, performance, monitoring, logging, documentation, and operational readiness. Partners with stakeholders, vendors, and service providers while driving continuous improvement and future-state identity architecture.

Leads enterprise IT security governance and risk remediation across complex financial services and insurance application portfolios. Responsibilities include identity and access remediation, vulnerability and patch governance, MFA compliance, policy exception management, application lifecycle risk, executive reporting, audit support, and escalation of overdue or non-compliant actions. The role partners with application, infrastructure, production support, and senior leadership teams to drive timely remediation and maintain audit-ready evidence.

Supervises business systems analysts, coordinates assignments and project plans, and leads business process analysis. Maintains information security policies, manages cybersecurity incident responses, delivers security awareness training, and verifies compliance with state and federal requirements. Serves as a liaison between business users and application developers while coordinating IRS, NITC, and Auditor of Public Accounts compliance activities.

Conduct IT audit, controls testing, model validation, issue validation, and regulatory remediation reviews for AML and Financial Crimes technology environments at a global bank. Evaluate IT general, application, security, change management, operational, and data controls; review technical documentation and system configurations; identify control gaps and root causes; recommend improvements; and prepare audit documentation for regulatory and stakeholder review.

Provides day-to-day IT and information assurance support for DoD Special Access Programs. Maintains servers, firewalls, networks, security monitoring systems, accounts, hardware, software, and VTC systems. Supports authorization packages, security assessments, self-inspections, vulnerability remediation, patching, configuration management, COMSEC activities, help desk functions, and system testing while ensuring compliance with cybersecurity policies and accreditation requirements.

Leads classified IT and information assurance operations, including cybersecurity governance, system security engineering, RMF assessment and authorization, classified systems administration, lifecycle management, and security compliance. Directs multidisciplinary and geographically dispersed teams, develops operational roadmaps, manages budgets and performance metrics, coordinates with government and security stakeholders, oversees cyber remediation and information-spillage reporting, and serves as the organization’s Insider Threat Official.

Analyzes compromised information for a government threat systems office, identifying exposed critical and proprietary data, assessing compromise scope and impact, preparing reports, and recommending technical improvements. The role uses AI, data science, knowledge management, and data lifecycle practices to support breach detection, risk mitigation, and continuous improvement. It also communicates findings to technical and non-technical stakeholders.

Analyzes Army network user activity and UAM alerts to identify anomalous behavior, potential insider threats, and security incidents. Uses analysis and correlation tools, validates events against device logs, manages cases, prepares Incident Assessment Reports, and provides resolution recommendations. Supports UAM modernization, collaborates with cyber defense and insider threat teams, maintains action tracking, and assists Army units and external agencies with findings and audit data.

Part-time internal audit intern supporting audits of business, financial, operational, and technology processes. Perform audit testing and data analytics, evaluate IT controls (access, change management, data protection, cybersecurity, resilience), document findings, participate in stakeholder meetings, and help prepare audit observations and recommendations.

Perform Information System Security Officer duties for federal classified systems. Apply the Risk Management Framework, develop authorization packages, obtain and maintain ATOs, manage POA&Ms, conduct continuous monitoring, and support cybersecurity, cloud, application, network, and information security processes. Manage Azure Government security tools and GRC platforms, collaborate through assessment and authorization activities, and work three days weekly onsite in Washington, DC.

The CISO will develop and manage the Bank's information security programs, ensuring compliance and protecting customer data while mitigating risks. They will also lead a security team, oversee third-party risk, and promote a culture of security awareness across the organization.

Lead and execute IT and security audits of manufacturing systems and external partners, assess third-party IT risk (foundries, OSATs, ODMs), review network, access controls, APIs and data exchanges, validate data integrity into data warehouses using analytics, and produce executive audit reports while driving remediation and managing on-site partner coordination and Tier-3 escalations.

Provides day-to-day information assurance, cybersecurity, system administration, and help desk support for DoD Special Access Programs. Maintains servers, firewalls, network appliances, monitoring systems, accounts, configurations, patches, and VTC systems. Prepares authorization packages, coordinates cybersecurity evidence, conducts self-inspections, identifies vulnerabilities, implements countermeasures, and manages COMSEC equipment. Requires a bachelor’s degree or equivalent experience, related system or network administration experience, and Top Secret clearance with SCI eligibility.

Leads enterprise infrastructure vulnerability remediation, security patching, and automation across Linux, Windows, AWS, Azure, on-premises, and hybrid environments. Develops patch-management frameworks, vulnerability KPIs, SOPs, and audit-ready evidence. Translates cybersecurity, GxP, SOX, and access-control requirements into practical technical controls. Coordinates remediation across infrastructure, network, cloud, scientific systems, compliance, and audit teams while mentoring engineers and driving standardized, traceable security operations.

Own day-to-day cybersecurity, identity and access hygiene, compliance readiness, and infrastructure security across a multi-site healthcare environment. Administer Microsoft security tools, MFA, Conditional Access, SIEM, email protection, patching, backups, firewalls, and network controls. Lead SOC 2 evidence collection, security reporting, remediation tracking, third-party access reviews, and audit preparation. Direct and verify outsourced IT and offshore resources, enforce SLAs, supervise network work, and communicate risks to nontechnical leaders.

Provides day-to-day IT assurance and systems administration for DoD Special Access Programs. Responsibilities include maintaining servers, firewalls, networks, security monitoring systems, and VTC environments; troubleshooting hardware and software; managing accounts and COMSEC equipment; preparing accreditation packages; conducting self-inspections; identifying vulnerabilities; implementing countermeasures; and ensuring compliance with security policies. The role also provides help desk, laptop, guest network, media accountability, and operational test support.

Owns organization-wide authentication and authorization across SaaS applications, cloud platforms, on-premises infrastructure, and endpoints. Architects and evolves Okta, designs least-privilege access models, builds access request and review workflows, and enforces protections for CUI, EAR, and ITAR data. Administers identity integrations across Okta, Active Directory, Google Workspace, Microsoft 365, AWS, GCP, and Azure while partnering with IT, Security, and business teams on compliance and operational requirements.

Leads the IT and Cybersecurity roadmap by managing OKRs, project backlogs, cross-functional initiatives, change management, reporting, vendor implementations, and dependencies. Drives SOX ITGC, SOC 2, IPO-readiness, vulnerability management, access reviews, and vendor risk remediation. Partners with the IT Director and represents program status to executives, board members, and audit stakeholders.

Provides system administration, cybersecurity authorization, troubleshooting, and technical support for DoD collateral, SCI, and SAP environments. Configures and patches systems and network appliances, manages accounts, firewalls, file servers, laptops, VTC systems, and COMSEC equipment. Prepares authorization packages, reviews evidence, identifies vulnerabilities, implements countermeasures, supports inspections, and maintains compliance with security policies and operational requirements.

Summer intern supporting IT and cybersecurity audits, SOX IT controls testing, audit work papers, evidence analysis, control effectiveness determinations, issue follow-up, and external auditor meetings. The role also uses data analytics, automation tools, and Microsoft Copilot to develop audit use cases. Applicants must be pursuing a relevant bachelor’s degree, meet the GPA requirement, and be willing to relocate to Allentown, Pennsylvania.

Performs IT audits assessing compliance with regulations and internal policies. Assists with audit planning, SOX ITGC testing, risk-based technology reviews, data analysis, issue validation, and remediation monitoring. Identifies control deficiencies, process inefficiencies, anomalies, and noncompliance, then communicates findings and recommendations to audit leadership and business stakeholders. Supports risk assessments and helps strengthen controls and reduce technology and business-process risk.

Supports 24/7 Special Access Program, SCI, and DoD information assurance operations. Maintains servers, firewalls, networks, security monitoring systems, VTC systems, and authorization boundaries; troubleshoots anomalies; manages accounts, patching, configurations, hardware, software, laptops, media, and COMSEC equipment. Prepares authorization packages, reviews evidence, conducts cybersecurity inspections, identifies vulnerabilities, implements countermeasures, and provides help desk and client support.

Maintain and improve cybersecurity across Azure Cloud and on-premises environments. Monitor and tune security alerts, manage vulnerability scanning and remediation, conduct threat intelligence analysis, support incident response, perform risk assessments and threat modeling, and implement security controls and configurations. The role also supports regulatory compliance, security documentation, cross-functional initiatives, and on-call response to security alerts.

Administers and secures campus network infrastructure, including routers, switches, firewalls, VPNs, wireless services, backups, and cloud networking. Monitors SIEM platforms and network traffic, investigates cybersecurity alerts, supports incident response, patches vulnerabilities, and maintains NIST-aligned security controls. Designs network services, performs risk assessments, troubleshoots performance and security issues, documents configurations, supports compliance audits, and provides IT assistance across two campuses.