Top Cybersecurity Jobs

Establish and govern an enterprise Microsoft Entra ID and Microsoft 365 environment. Review tenant configuration, licensing, integrations, administrative models, and service usage; identify security and operational risks; implement prioritized remediation; and improve privileged access, lifecycle management, SIEM visibility, and cloud governance. The role also documents target-state controls, creates operating procedures, trains technical teams, and supports secure management of Teams, SharePoint, OneDrive, and Azure.

Lead IT policy and cybersecurity compliance initiatives for a federal customer. Finalize and maintain cybersecurity standards, handbooks, and policy documents; support policy dissemination and adoption; develop project plans; coordinate stakeholders; manage risks and assessments; oversee project performance, deliverables, personnel, and contractual obligations; and report project status, risks, and compliance to senior leadership.

Perform and coordinate IT security assessments, technical IT audits, and evaluations of IT and security processes. Develop audit approaches for emerging technologies, use data analytics to identify risks and improve audit efficiency, assess security weaknesses, communicate business risks, and recommend controls or mitigation actions. The role also involves developing subject-matter expertise, collaborating internationally, and sharing knowledge with colleagues.

Leads security operations, incident response, vulnerability remediation, cloud and infrastructure security, application and software supply-chain security, and AI security governance. The role monitors and tunes security tooling, investigates incidents, manages vulnerabilities, reviews cloud and application controls, supports compliance audits, and develops automation using Python or PowerShell. It also advances Zero Trust, secure development practices, AI risk controls, threat modeling, and AI-assisted security operations.

Designs, develops, and implements security for primarily Windows-based production systems. Responsibilities include secure software development, application security, penetration testing, malware reverse engineering, Windows internals analysis, vulnerability remediation, SQL injection prevention, secure data protection, and security testing. The role requires collaboration within an Agile/Scrum team and expertise in Windows security, debugging, reverse engineering, networking, databases, and enterprise software security.

Leads enterprise IT security strategy, vulnerability management, security architecture reviews, risk reporting, security tool oversight, compliance, and remediation initiatives. Advises leadership and project teams, manages security vendors, supports cloud and data center security operations, updates standards, and serves as a subject matter expert. The role requires advanced technical expertise, cross-functional leadership, executive communication, and occasional after-hours support for critical security events.

Designs and leads target-state perimeter and DMZ architectures across hybrid and multi-cloud environments. Develops network segmentation, secure ingress and egress patterns, security guardrails, reference architectures, and automation-first standards. Partners with cloud, network, security, and middleware teams to enable self-service platforms and developer productivity. Leads architectural governance, design reviews, roadmap development, and proof-of-concept implementations while applying Zero Trust, API security, and compliance principles.

Leads UCSF’s Cyber Risk and Assurance function, directing staff and overseeing enterprise cybersecurity risk assessments, compliance reviews, exceptions, remediation, and risk acceptance. Manages GRC program operations, ServiceNow IRM workflows, metrics, policies, standards, and continuous improvement. Serves as PCI DSS subject matter expert and Internal Security Assessor, while advising senior stakeholders, auditors, vendors, and cross-functional teams on HIPAA, NIST, UC policy, and related security requirements.

Provides enterprise technical leadership for Cisco ISE, Catalyst Center, and TrustSec architecture. Designs identity-based access control, network segmentation, Zero Trust, automation, and infrastructure-as-code solutions. Leads integrations, troubleshooting, lifecycle management, governance, technical roadmaps, design reviews, documentation, and standardization across network security environments. Partners with infrastructure, security, and operations teams while mentoring engineering and project teams.

Own internal IT operations and GRC functions, including identity and access management, endpoint security, SaaS administration, onboarding, helpdesk, audit readiness, risk registers, control ownership, and compliance evidence. Partner with security engineering and detection teams on logging, EDR, SIEM, and infrastructure security. Manage IT and GRC leaders, vendors, licensing, third-party risk assessments, and operational roadmaps while reporting risk posture to the CISO.

Lead cybersecurity consulting and engineering engagements securing OT and IT environments for water, wastewater, and environmental infrastructure clients. Conduct ICS, SCADA, network, architecture, risk, and compliance assessments; design secure IT/OT architectures; develop governance, incident response, security plans, and improvement roadmaps; evaluate security technologies; and support proposals and client presentations. Mentor junior staff and advise on cloud, IoT, AI, and critical infrastructure security.

Leads enterprise IT, cybersecurity, and AI strategy across Vehlo. Oversees security frameworks, risk management, cloud and infrastructure operations, enterprise AI governance and platforms, technology integrations, budgets, vendors, facilities technology, and IT and security teams. Establishes responsible AI controls, manages enterprise AI licensing and adoption, and advises executive leadership on technology, cyber risk, and digital transformation.

Leads federal vulnerability management and remediation efforts, conducts vulnerability assessments, validates fixes, maintains scanning and security tools, and develops related policies and reports. Supports NIST RMF, security audits, incident response, configuration management plans, security baselines, and compliance monitoring. The role requires extensive A&A experience, knowledge of NIST standards, vulnerability scanning platforms, a security certification, U.S. citizenship, and a Secret clearance.

Manage and optimize vulnerability scanning platforms, patching technologies, automation, and security dashboards. Build test environments, support air-gapped systems, prioritize vulnerabilities based on risk, and apply infrastructure security, threat intelligence, monitoring, and vulnerability assessment practices. Use networking fundamentals, segmentation, traffic analysis, and incident response knowledge to support secure IT operations.

Monitor technology and operational risks, evaluate IT controls, track remediation, analyze risk and compliance data, support regulatory monitoring, and collaborate with IT, Security, Legal, and Compliance teams to strengthen governance and operational resilience.

Supports IT governance, risk management, controls assessment, audit activities, issue tracking, risk mitigation, control documentation, and IT security training. Partners with business and technology teams to identify and evaluate risks, strengthen controls, monitor mitigation plans, and address risks exceeding tolerance. May support incident management, recovery testing, continuity planning, and cybersecurity-related initiatives.

Administers and monitors enterprise security tools, access controls, authentication, vulnerabilities, logs, audits, and incident response activities. Implements security solutions, maintains policies and procedures, supports compliance, and provides technical guidance to security analysts and IT personnel. The role also participates in on-call rotations and may assist with networking and systems administration.

Leads enterprise cybersecurity strategy, governance, risk management, compliance, security operations, incident response, business continuity, identity and access management, and third-party risk. Advises executive leadership and the Audit Committee, builds the security organization, and establishes responsible AI governance, security controls, and employee education. The role requires executive communication, oversight during major incidents, and leadership of security programs in complex, regulated, or industrial environments.

Leads IT and information security risk management and governance across the enterprise. Oversees risk aggregation, assessment, reporting, controls, policies, regulatory engagement, and enterprise security domains including information security, business continuity, physical security, and corporate investigations. Advises senior leaders and regulators, establishes risk appetite metrics, challenges business decisions, and builds high-performing teams.

Executes IT risk, internal audit, SOX compliance, and IT control assessments for clients. Responsibilities include evaluating control design and operating effectiveness, assessing IT systems and infrastructure, supporting risk management programs, reporting engagement results, and helping design and implement controls. The role requires client collaboration, analytical and project management skills, and knowledge of cybersecurity standards, ERP systems, IAM, GRC, and data analytics tools.

Executes IT risk, internal audit, SOX compliance, and IT control assessments for client engagements. Responsibilities include testing IT control design and operating effectiveness, assessing IT systems and infrastructure, evaluating risk management and cybersecurity standards, supporting control implementation, reporting findings, and collaborating with clients and multidisciplinary teams. The role requires strong analytical, communication, organizational, and project management skills, along with familiarity with ERP, IAM, GRC, operating systems, databases, networks, and analytics tools.

Maintain and optimize shipboard submarine IT systems, applications, networks, hardware, and test equipment. Develop security plans, POA&Ms, and RMF documentation while ensuring system reliability, security, and availability. Troubleshoot complex IT issues, manage multiple projects, and support Windows Server, Linux, real-time operating systems, Active Directory, networking topologies, and Group Policy. Domestic travel of up to 25% is required.

Supports college cybersecurity initiatives by monitoring vulnerability alerts, conducting risk-based vulnerability assessments, evaluating potential impacts, documenting findings, and assisting with remediation strategies. The intern collaborates with cybersecurity professionals, maintains confidentiality and data security protocols, and develops practical experience with cybersecurity frameworks, vulnerability management, and professional reporting.

Performs independent audits of information assurance and cybersecurity programs to verify compliance with DoD RMF controls, DHA directives, and federal policies. Reviews accreditation packages and RMF artifacts, assesses vulnerability management through ACAS and eMASS, evaluates security impacts of system changes, and audits incidents and violations. Prepares compliance reports, risk summaries, corrective-action documentation, and executive briefings while collaborating with assessors, vulnerability analysts, and system administrators.

Provides Tier 2 cybersecurity support through security monitoring, incident response, vulnerability and endpoint management, identity and access management, security awareness training, compliance support, documentation, and reporting. The role investigates phishing, malware, and other incidents; administers Microsoft Defender XDR and related security tools; coordinates remediation; supports MFA and access reviews; and communicates security risks and remediation steps to internal and external stakeholders.