Top Cybersecurity Jobs

Lead security engineering for a large, distributed network: define security architecture and strategy, manage ISSO/ISSE teams, ensure ATO/SSP compliance, perform SAST/DAST and penetration testing, guide remediation, and coordinate cross-functional security efforts for test, integration, and development environments.

Design, build, and maintain cyber training ranges and virtual infrastructure. Support planning and execution of cyber exercises, configure Windows/Linux hosts, troubleshoot networking and performance, operate offensive/defensive training content, and produce technical documentation and runbooks to enable repeatable events and rapid issue resolution.

Lead strategy, deployment, and operations of enterprise endpoint security tools (EDR/XDR, DLP, EPM) across Windows, macOS, and Linux. Manage and mentor an endpoint engineering team, integrate tools with SIEM/SOAR and SOC workflows, drive incident response and remediation, define hardening standards and roadmaps, run POCs and vendor management, and partner with IT, IAM, and compliance to balance security and usability.

Support US federal, air-gapped classified cloud environments; perform vulnerability management, incident response, threat hunting, and detection engineering. Deploy and manage systems in AWS/Microsoft Top Secret clouds, build investigation/response tools, coordinate with customers and Cyber Defense teams, and develop best practices across environments.

Assess and strengthen cloud-hosted system security for DoD compliance: review architecture and policy, recommend improvements, analyze and report threats, coordinate with cyber intelligence and incident response, identify protection/detection gaps, and deliver actionable reports and briefings.

Provide cybersecurity engineering support across the DLA EFM portfolio: analyze and implement security requirements, support A&A and RMF activities, manage POA&Ms and compliance reporting, recommend DoD-aligned standards (Defense-in-Depth, Zero Trust), integrate security across system lifecycles, and collaborate with stakeholders to improve cybersecurity posture.

Lead RMF-based accreditation for test/pre-production AWS environments, prepare IATT-C and ATO packages, implement and validate security controls, support Zero Trust/ICAM integration, liaise on enterprise boundary defense, and provide cybersecurity guidance and documentation to obtain and maintain accreditation.

Lead sales and cross-functional teams to develop multi-year strategic account plans, build large pipelines, and sell complex cybersecurity services and technology solutions to key accounts while driving client satisfaction and exceeding multi-million-dollar gross margin targets.

Lead and coach a regional cybersecurity sales team to drive multi-year, complex hardware/software/services engagements. Build a large pipeline, execute MEDDICC/Force Management sales processes, develop client and partner relationships, deliver accurate forecasts, and collaborate cross-functionally to grow revenue and client satisfaction.

Monitor and respond to security alerts across endpoints, cloud, identity, and network; administer CrowdStrike and Rapid7 SIEM; lead incident response and threat hunting; enforce endpoint hardening and vulnerability remediation; coordinate penetration testing; and deliver security awareness programs in a regulated medical device environment.

Investigate cybersecurity incidents (BECs, infections), review phishing and MDR/EDR alerts, participate in incident response, configure and analyze vulnerability assessments, manage firewall/switch changes, create SOPs and knowledge articles, and stay current on security trends.

Investigate and respond to cybersecurity incidents (BECs, infections), review phishing and MDR/EDR alerts daily, participate in incident response, configure/analyze vulnerability assessments, make firewall/switch changes, develop SOPs/knowledge articles, and track cybersecurity trends and standards.

Investigate cybersecurity incidents (BECs, infections), review phishing and MDR/EDR alerts, participate in incident response, configure and analyze vulnerabilities, modify firewalls/switches, create knowledge articles/SOPs, and stay current on security trends and standards.

Designs, implements, and optimizes enterprise security architectures (SSE, SWG, CASB, DLP, ZTNA, Enterprise Browser) and data protection strategies across hybrid/multi-cloud environments. Leads deployments, defines testing/validation metrics, automates workflows, governs AI security, and partners with stakeholders to align security with business, regulatory, and risk requirements while mentoring engineers and driving platform optimization.

Support client cybersecurity assessments and implementations by applying IT fundamentals (networking, systems, databases, cloud), security frameworks, and compliance knowledge. Travel to client sites, document findings, communicate technical issues to non-technical stakeholders, and pursue professional growth and certifications while collaborating with experienced security consultants.

Lead and execute cybersecurity and resilience assessments (HIPAA, NIST, ISO) across data protection, vendor risk, incident response, business continuity, and infrastructure/application controls. Advise clients on GRC and operational resilience, manage engagements end-to-end, mentor junior consultants, produce reports, and communicate findings to technical and non-technical stakeholders to improve security posture and compliance.

Lead MDR operations, incident response, and endpoint/cloud security across a multi-entity holding company. Manage MDR provider, run IR playbooks/tabletops, evaluate and implement Palo Alto Cortex/Prisma stack, enforce endpoint hardening (Jamf, CrowdStrike, Intune), own cloud security for AWS/GCP/Azure, drive vulnerability management, CASB/DLP, detection engineering, and continuous pentesting. Partner with vCISO, IT ops, and portfolio company teams.

Serve as the ISSM to maintain cybersecurity posture for AF IT systems: manage RMF/ISCM activities, maintain certifications and ATO documentation, monitor security events, assess configuration and control effectiveness, coordinate POA&Ms and corrective actions, advise AO/PM/ISO, and ensure personnel training and clearance compliance.

Lead and run security operations including incident response, vulnerability management, cloud/SaaS security, and remediation tracking. Coach and prioritize team work, advise technology and business partners on risk, improve detection and monitoring across AWS and legacy platforms, and report security metrics and risk to leadership.

Lead redesign and operational maturity of the firm's IGA program. Drive platform selection and implementation, design lifecycle and governance processes, integrate applications (notably Microsoft Entra ID), automate workflows, define KPIs and audit reporting, mentor team members, and partner with business and third-party advisors to ensure secure, compliant access management.

Lead global 24x7 security operations for converged IT/OT environments. Own SOC, detection engineering, incident command, threat intelligence, vulnerability management, MSSP/MDR governance, and automation/AI-enabled SecOps to protect manufacturing continuity and IP while meeting regulatory obligations.

Monitor, analyze, and translate international cybersecurity regulations into policies and controls. Lead regulatory impact assessments, manage policy lifecycle and governance, coordinate cross-functional implementation, support audits and readiness, and deliver executive briefings while driving continuous process improvements. Requires English/Spanish fluency.

Provide OT/IT security engineering, conduct IA/cybersecurity assessments and Security Test & Evaluation, perform risk assessments for NIPRNet and SIPRNet systems, develop standards/guides, handle COMSEC per DoD policy, and support DLA Cloud/OT/IT compliance and deliverable production.

Provide OT/IT cybersecurity engineering and IA/ISSE support for DLA across NIPRNet and SIPRNet. Conduct vulnerability assessments, security test & evaluation, risk assessments, policy compliance reviews, develop IA standards/guides, handle COMSEC as required, and produce assessment reports and implementation documentation.

Lead RMF Assessment & Authorization efforts to secure ATOs, perform vulnerability and risk assessments, secure Air Force Platform IT systems, analyze program documentation for cybersecurity compliance, prepare cybersecurity artifacts and reporting, support program managers and Program Protection planning for DoD/aerospace programs.