Top Cybersecurity Jobs

Designs, implements, automates, and maintains cybersecurity controls across strategic enterprise platforms, including cloud, SaaS, PaaS, and AI environments. Conducts security assessments, validates controls, monitors security posture, investigates gaps, and drives remediation. Integrates security into CI/CD and platform delivery, develops controls-as-code, improves resilience, and supports governance and compliance readiness. Partners with platform, engineering, architecture, and product teams to enable secure adoption and operational efficiency.

Lead cybersecurity operations for U.S. Army C4ISR and distribution systems. Design and operate secure communications networks, conduct security analysis, incident response, event analysis, threat intelligence, risk assessments, and vulnerability assessments. Coordinate cybersecurity certification and accreditation, prepare authorization documentation, support systems engineering, and implement cyber defense solutions. The role requires DoD cybersecurity standards knowledge, network security architecture experience, CISSP certification, and the ability to obtain and maintain a Secret clearance.

Lead security design and assessments across applications, cloud, mobile, IoT, and network domains. Perform threat modeling, code reviews, vulnerability testing, and remediation planning. Advise engineering teams, design firewall/SSL policies, manage SIEM and scanning tools, and drive security improvements and compliance.

Leads and supervises complex technology audits, including planning, risk assessment, control testing, issue identification, remediation validation, and audit reporting. Oversees multiple concurrent audits and issue validations, coaches junior auditors, manages stakeholder communications, and advises management on cybersecurity, information security, IAM, technology governance, and resiliency risks. Supports enterprise audit initiatives, regulatory compliance, process improvements, and control governance.

Supports DoD cybersecurity connection approval and risk management activities. Responsibilities include reviewing RMF authorization packages, network connection packages, security agreements, and compliance documentation; maintaining approval databases and metrics; developing SOPs, policies, and governance materials; performing quality assurance; advising stakeholders on cybersecurity risks and DoD/DISA policy; and tracking connection expirations and action items.

Participate in a paid 10-week internship developing secure applications and systems, implementing security controls, identifying vulnerabilities, and creating security automation tools. Collaborate with engineering, security, and platform teams in Agile environments while gaining experience in secure software development, cybersecurity, design, development, and testing. Receive mentorship, coaching, and leadership development throughout the program.

Leads IT governance, cybersecurity risk and compliance, audit readiness, technology integration, and cross-functional planning. Establishes governance frameworks, manages risk assessments and reporting, coordinates audits and remediation, oversees performance metrics, and aligns cybersecurity, infrastructure, data, AI, architecture, and business technology teams. The role also supports budgeting, contracts, workforce planning, change management, executive communications, and board-level reporting.

Leads enterprise IT audit, advisory, risk assessment, compliance, and technology control activities. Manages audit staff, coordinates risk-based audit planning, evaluates cybersecurity and technology risks, develops audit reports, advises senior leadership, and presents findings to executive management and audit committees. Ensures alignment with IIA, ISACA, regulatory, privacy, and corporate standards while driving improvements across healthcare technology environments.

Leads customer-facing Azure security engagements for U.S. federal clients, including security architecture, implementation, production deployment, and troubleshooting. Drives Zero Trust, cloud adoption, modern SOC, identity, threat protection, compliance, information protection, and governance strategies. Conducts architectural design sessions, operationalizes Microsoft Defender, Sentinel, and Entra solutions, coordinates technical resources, and collaborates with Microsoft engineering and product teams to deliver secure, scalable cloud outcomes.

An 11-week Cybersecurity and Technology Audit internship supporting internal control audits. Responsibilities include interviewing personnel, performing audit testwork, analyzing results, communicating issues, and participating in IT risk assessments and control evaluations. The role offers real-world audit experience and potential future career opportunities.

Designs and integrates secure network architectures for classified and tactical C2 systems supporting C-UAS missions. Responsibilities include network engineering, cybersecurity compliance, RMF and authorization packages, vulnerability management, STIG implementation, Zero Trust, interoperability, troubleshooting, testing, and technical advising. The role supports NIPRNet, SIPRNet, tactical networks, sensors, data platforms, applications, and effectors, with on-site work in the National Capital Region and travel up to 50%.

Supports cybersecurity engineering for CBP operational technology and mission systems, including secure architecture, vulnerability management, incident response, risk assessment, RMF, ATO, continuous monitoring, and security documentation. Translates mission requirements into security controls, evaluates vulnerabilities and operational impact, develops remediation strategies, and advises engineering and government stakeholders. The role requires government-system authorization experience, FISMA and NIST knowledge, and support for complex, high-availability environments.

Lead full enterprise sales cycles for deepfake/AI-detection platform across regulated industries. Prospect, close, and expand accounts in financial services, government, and insurance. Engage senior stakeholders (CISOs, fraud, risk, compliance), manage technical validation and legal/procurement processes, and collaborate with Solutions Engineering, Product, Marketing, and Customer Success to ensure successful deployments and renewals.

Designs, develops, documents, tests, and modifies cybersecurity systems, integrations, scripts, and automation. Translates security requirements into technical specifications, investigates defects and alerts, supports endpoint protection, identity security, vulnerability remediation, incident response, and platform administration. Collaborates with IT teams, vendors, and managed security providers while maintaining technical documentation, audit records, and change-management controls. Participates in on-call support and regional travel as needed.

Supports cybersecurity compliance and RMF/ATO activities for Army cloud systems. Responsibilities include maintaining SSPs, POA&Ms, and audit evidence; coordinating continuous monitoring; reviewing vulnerability and configuration reports; assessing cloud architecture risks; tracking remediation; applying NIST controls; and supporting RMF change control and authorization activities across AWS, Azure, or comparable environments.

Develops and maintains DoD Risk Management Framework authorization packages for classified defense networks. Responsibilities include documenting security controls, creating scanning plans, managing POA&Ms, assembling authorization evidence, conducting security assessments, analyzing vulnerabilities and risks, tracking remediation, and supporting ATO, IATO, IATT, ATC, and ISA approvals. The role also assesses SCI systems, collaborates with architects and developers, and supports cybersecurity planning and compliance activities.

Leads automotive and embedded-systems cybersecurity consulting engagements, developing ISO/SAE 21434 and ISO 24089 processes, templates, risk analyses, cybersecurity concepts, verification documents, and assessment reports. Guides clients in secure software design, coding, testing, and compliance with UN Regulations 155 and 156. Responsibilities also include client program leadership, proposals and business development, standards participation, technical guidance, and occasional travel to client sites.

Leads cybersecurity governance, risk, and compliance for a semiconductor manufacturing environment. Manages security frameworks, audits, risk registers, third-party supply-chain assessments, regulatory compliance, incident-response exercises, and OT/ICS security collaboration. Reviews IAM, network segmentation, and zero-trust architectures while coordinating vulnerability remediation for production systems. The role requires cybersecurity leadership experience in manufacturing or comparable industrial sectors and strong familiarity with security technologies and professional certifications.

Leads enterprise endpoint security operations using Tanium or comparable platforms. Oversees endpoint engineering, patching, remediation, automation, cloud-hosted agents, incident triage, root-cause analysis, and stakeholder communications. The role drives vulnerability reduction, solution delivery, security strategy, and operational improvements while managing, mentoring, and coaching a team of 6–10 direct reports.

Collects and analyzes open-source and intelligence reporting to produce actionable cyber threat briefings. Reviews logs, network events, and alerts for attacks and advanced persistent threats; supports detection and protection gap analysis, root cause analysis, and incident remediation for OT environments. Serves as the OT cybersecurity subject matter expert and analyzes adversary campaigns and cyber-physical attack paths across ICS and SCADA systems.

Monitors network traffic, IDS alerts, security events, and logs to identify intrusions and false alarms. Develops SOC procedures, reviews data for anomalies, creates SIEM and IDS detection content, manages investigations, communicates alerts, and supports incident responders. The role requires onsite shift work, including overnight shifts, and maintaining awareness of current vulnerabilities and attack methods.

Leads cybersecurity and security engineering for multiple C2BMC enclaves supporting the Missile Defense Agency. Manages cybersecurity personnel, governance and CSSP teams, vulnerability management, RMF accreditation, security documentation, cyber posture, and certification activities. Evaluates configurations against DISA STIGs, NIST controls, and Common Criteria; supports ACAS, McAfee Endpoint Security, MFA/PKI, CTOs, and C2BMC test events. Advises government and organizational leadership on cybersecurity policies, capabilities, and solutions.

Execute red team and threat actor emulation engagements, support concurrent operations, maintain command-and-control infrastructure, document findings, and collaborate with detection and response teams in purple team exercises. Develop offensive security tools, EDR evasion techniques, and stealthy C2 channels while applying AI tools to threat emulation, CVE analysis, and malware analysis.

Leads enterprise cybersecurity strategy, governance, operations, and transformation in a Microsoft 365 cloud-first environment. Develops security roadmaps aligned with NIST and CIS frameworks, manages internal teams and MSSP partnerships, and oversees threat detection, incident response, vulnerability management, identity governance, cloud security, security awareness, and crisis preparedness. Provides executive reporting and drives continuous improvement across the organization's cybersecurity posture and resilience.

Performs cyber resiliency analysis for tactical Software Defined Radio waveforms and supports system security engineering, RMF implementation, technical reviews, documentation, and stakeholder collaboration. Researches cybersecurity methodologies, maintains analysis processes, develops reports and white papers, updates SOPs, and coordinates with vendors and DoD organizations. The role requires knowledge of cybersecurity, electronic and technology protection, RF communications, SDRs, waveforms, and DoD security practices.