Top Cybersecurity Jobs

Design, engineer, administer, and secure enterprise mobile device solutions (MDM) across iOS, Android, Windows, and macOS. Manage policy, software/patch deployment, device provisioning, asset lifecycle, compliance reporting, and Tier-3 troubleshooting. Support RMF/IATT/ATO activities and integrate mobile platforms with enterprise identity, authentication, and monitoring in DoD/IC environments.

Manage and maintain NXP's IT general control environment and perform IT compliance assessments (SOX, NIS2, NIST frameworks, AI, ESG). Coach control owners, design remediation plans, test control effectiveness, liaise with auditors, and support IT teams and vendors to ensure compliance across projects and SaaS implementations.

Lead ABM's IT General Controls (ITGC) program for SOX compliance. Supervise two IT SOX analysts, oversee control testing, deficiency remediation, and auditor liaison. Drive control assessments across access, change management, and IT operations, report to executives, and improve automation and control maturity.

Lead IT Operations for a DoD enclave, oversee ATO documentation and RMF compliance, manage cybersecurity posture, incident response, vulnerability assessments, DR/BCP, and supervise technical staff to ensure system availability and security across the SOMTC infrastructure.

Serve as technical lead to plan, deploy, and document Delinea privileged-access and secrets-management tools across enterprise Linux environments. Translate security and operational requirements into deployable solutions, design deployment strategies, ensure architecture alignment, automate with scripts and IaC, integrate with identity services and CI/CD, and maintain documentation to support sustainment and audits.

Engineer responsible for implementing, integrating, and sustaining the Delinea Tools Suite on Linux. Serve as Delinea SME, develop scripts/software in Bash/Python/Java, integrate with directory services, implement PAM/IAM and certificate auth, automate secrets in CI/CD using IaC and automation tools, troubleshoot distributed Linux environments, and collaborate with security, infrastructure, and DevOps teams.

Engineer and manage security tools (Tenable, Splunk, McAfee); evaluate and enforce cybersecurity policies; perform risk assessments, incident triage and coordination; conduct system hardening and security testing; develop and maintain security toolsets and posture assessments; monitor threats and recommend mitigations.

Provide active monitoring and response for unauthorized wireless signals using Bastille WIDS and handheld tools; perform real-time alert analysis, threat classification, incident assessment and reporting per ICD 503 and TSSC SOPs; conduct direction-finding, recommend mitigations, research devices for the Authorized Equipment List, coordinate with government security personnel, and produce follow-on documentation.

Design, build, and maintain secure on‑prem and cloud infrastructure and CI/CD pipelines for Kubernetes-based services. Automate deployments, manage production/staging/dev environments, monitor logs and system health, enforce security controls, and support accreditation (A&A) and operational readiness. Troubleshoot incidents, perform root cause analysis, maintain documentation, and collaborate with Agile teams to drive DevSecOps best practices.

Provide enterprise endpoint provisioning, deployment, patching, compliance, and sustainment support. Administer endpoint management platforms (MECM/Intune), perform OS imaging and application packaging, enforce secure configurations and encryption, manage patch and vulnerability remediation, monitor endpoint health, and provide Tier 2/3 troubleshooting and documentation while collaborating with engineering and cybersecurity teams.

Design, develop, configure, and maintain RadiantOne identity data management solutions. Integrate authoritative sources, support JML processes, entitlement governance, role management, identity correlation, provisioning, and identity distribution to edge and mission-partner environments. Troubleshoot complex identity aggregation and provisioning issues, produce technical documentation, and participate in Agile development.

Provide cybersecurity support for Collateral, SCI and SAP environments including system administration, firewall and patch management, authorization package preparation and review, vulnerability identification and mitigation, COMSEC and media accountability, VTC administration, account management across boundaries, help desk support, and adherence to RMF and DoD/SCI security standards.

Operate, maintain, tune, and engineer enterprise SIEM and log-aggregation platforms. Develop detection content, alerting rules, playbooks, and parsing for ingestion. Troubleshoot event flows, ensure 99.99% availability, perform maintenance/patching, document incidents, and support CSOC analytics and integrations with government reporting systems.

Design, implement, and test mission-focused C/C++ and Objective-C software for constrained environments. Perform reverse engineering (ARM/firmware), low-level debugging, CI/CD builds via GitLab, and produce documentation to satisfy operational and integration requirements. Collaborate with stakeholders and follow formal test and release processes.

Operate, maintain, and improve enterprise SIEM and log aggregation platforms (ArcSight, ElasticSearch, Kibana, Splunk). Onboard assets, develop alerts/playbooks/rules, tune queries, troubleshoot event flow and parsing, and perform engineering, testing, and emergency maintenance to meet 99.99% availability and Intelligence Community standards. Document incidents, use ticketing systems, and support CSOC reporting and integrations. Requires active TS/SCI and relevant DoD 8570 certifications.

Lead systems engineering for secure IT infrastructure: run STIG/SCAP vulnerability assessments, harden operating systems and COTS, manage GitLab repos, configure Cisco networking (ASA, routing, switching), build/test lab networks, research CVEs and OS patches, produce documentation, mentor staff, and support field troubleshooting and deployment.

Administer, monitor, configure, and troubleshoot Army enterprise network infrastructure (routers, firewalls, load balancers) in a 24/7 mission environment. Enforce DoD/Army cybersecurity policies, support incident response and boundary security devices, maintain documentation, and assist automation and compliance efforts.

Design, implement, and sustain enterprise authentication and federation services (PingFederate and related platforms) to provide SSO, MFA, PKI/certificate-based auth, federation with IdPs/SPs, and identity assurance for enterprise, partner, coalition, and edge/DDIL environments. Troubleshoot complex identity issues, develop integrations (SAML/OAuth/OIDC/WS-Fed/JWT), support onboarding, produce technical documentation, and collaborate with security, cloud, and application teams to support Zero Trust and mission readiness.

Lead ICAM solutions architecture for DoW/federal customers across enterprise and cloud environments. Provide technical and engineering guidance, design and integrate COTS/GOTS products, produce architecture artifacts, analyze alternatives, support Agile teams, mentor staff, and participate in technical meetings. Work remotely with periodic domestic and international travel.

Lead enterprise cybersecurity architecture across Zero Trust, cloud, identity, networks, applications, and data. Design secure hybrid on‑prem/cloud architectures, establish baselines and standards, ensure NIST/RMF/OMB-CISA compliance, oversee modernization efforts, coordinate cross-functional teams for threat modeling, secure API design, encryption, secrets management, and advise senior leadership on strategy and enterprise risk.

Design, maintain, and monitor enterprise Identity and Access Management systems across on-prem, hybrid, and cloud environments. Troubleshoot and respond to IAM-related security incidents, automate IAM operations, evaluate and recommend IAM technologies, and provide strategic solutions to optimize enterprise identity services. Must meet DoD compliance and clearance requirements.

Design, build, and maintain secure automated CI/CD pipelines and enterprise SecOps platforms. Integrate security across the SDLC, perform pipeline and code reviews, mentor teams on secure coding, and drive vulnerability remediation and secure package/dependency management for applications across hybrid, multi-classification environments.

Designs and manages SOAR automation using Splunk Phantom, developing Python-based playbooks and integrations. Supports incident handling, threat hunting, forensic analysis, and vulnerability/DLP automation. Mentors teams, coordinates with SOC and threat intel, enforces CND policies, and manages incidents from detection through after-action reporting for a customer site environment.

Configure, maintain, and operate the ACAS suite and its RHEL host; execute and report vulnerability scans across multiple security enclaves; apply DISA STIG guidance; support RMF processes and audits; assist the ISSO/ISSM and complete required ACAS training within 90 days.

Lead cybersecurity engineering for DTRA DSMS: advise leadership on risk and posture, coordinate inspections and compliance, develop policies and SOPs, report metrics, and architect/implement security platforms (Splunk, Palo Alto) and cloud security (AWS/Azure).