Top Cybersecurity Jobs

Supports the Defense Logistics Agency’s cyber defense mission by analyzing and implementing cybersecurity policies, procedures, and processes. Applies DoD cybersecurity policy requirements and provides specialized expertise across cybersecurity operations. The role requires seven years of cybersecurity policy experience and maintaining CSSP Analyst certification for CERT team members. A DoD Top Secret clearance and eligibility for IT-I Critical Sensitive/Tier 5 are required.

Supports DoD cybersecurity connection approval and risk management activities. Responsibilities include reviewing RMF authorization packages, network connection packages, security agreements, and compliance documentation; maintaining approval databases and metrics; developing SOPs, policies, and governance materials; performing quality assurance; advising stakeholders on cybersecurity risks and DoD/DISA policy; and tracking connection expirations and action items.

Participate in a paid 10-week internship developing secure applications and systems, implementing security controls, identifying vulnerabilities, and creating security automation tools. Collaborate with engineering, security, and platform teams in Agile environments while gaining experience in secure software development, cybersecurity, design, development, and testing. Receive mentorship, coaching, and leadership development throughout the program.

Leads IT governance, cybersecurity risk and compliance, audit readiness, technology integration, and cross-functional planning. Establishes governance frameworks, manages risk assessments and reporting, coordinates audits and remediation, oversees performance metrics, and aligns cybersecurity, infrastructure, data, AI, architecture, and business technology teams. The role also supports budgeting, contracts, workforce planning, change management, executive communications, and board-level reporting.

Supports USAF base-level cyber defense by analyzing network alerts, incidents, vulnerabilities, threats, and mission-relevant terrain in cyberspace. Performs functional mission analysis, event correlation, trend analysis, risk assessment, incident documentation, and defense planning across classified and unclassified networks. Coordinates with cyber defense staff and local subject matter experts, develops mitigation strategies, maintains security databases, and provides recommendations for policies and courses of action.

Leads enterprise IT audit, advisory, risk assessment, compliance, and technology control activities. Manages audit staff, coordinates risk-based audit planning, evaluates cybersecurity and technology risks, develops audit reports, advises senior leadership, and presents findings to executive management and audit committees. Ensures alignment with IIA, ISACA, regulatory, privacy, and corporate standards while driving improvements across healthcare technology environments.

Leads and supports 24/7 Public Key Infrastructure operations for Army cybersecurity missions. Manages Registration Authorities, credentialing, token issuance and revocation, compliance, training for Trusted Agents, process consistency, repositories, SharePoint sites, and worldwide sustainment. Collaborates with cybersecurity stakeholders and service providers while providing PKI planning, design, engineering, integration, and operational support.

Deliver strategic cybersecurity advisory engagements, assess and mature security and incident response programs, develop exercise scenarios, and produce reports, presentations, recommendations, and findings for customer management. The role also identifies emerging cybersecurity trends, contributes to thought leadership and methodologies, and supports multiple concurrent projects. Candidates independently perform strategic analysis, communicate effectively with stakeholders, use AI technologies to improve workflows and decisions, and travel to client engagements up to 30%.

An 11-week Cybersecurity and Technology Audit internship supporting internal control audits. Responsibilities include interviewing personnel, performing audit testwork, analyzing results, communicating issues, and participating in IT risk assessments and control evaluations. The role offers real-world audit experience and potential future career opportunities.

Supports enterprise technology risk management through control testing, risk and control assessments, ITGC evaluations, audit support, exception management, regulatory compliance, and ongoing control monitoring. The role assesses applications, platforms, infrastructure, cloud environments, access management, cybersecurity, and resiliency controls while preparing management reporting and communicating risk programs to auditors, regulators, and internal partners.

Serves as the technical authority for cybersecurity architecture across a critical federal government program. Designs and maintains secure network, SD-WAN, cloud, telecommunications, and enterprise architectures; integrates security requirements throughout the development lifecycle; and supports federal authorization activities. Advises leadership, coordinates across technical and operational organizations, manages security risks and requirements, and contributes to governance, monitoring, compliance, and ATO documentation.

Lead product security for regulated medical device software, integrating security across the development lifecycle. Conduct threat modeling, risk and vulnerability assessments, security architecture reviews, penetration testing, code reviews, incident response, vendor assessments, and compliance activities. Support secure boot, communications, updates, access controls, and data protection. Collaborate with Agile scrum teams, document security practices, promote security awareness, and contribute to product security strategy for current and next-generation devices.

Lead full enterprise sales cycles for deepfake/AI-detection platform across regulated industries. Prospect, close, and expand accounts in financial services, government, and insurance. Engage senior stakeholders (CISOs, fraud, risk, compliance), manage technical validation and legal/procurement processes, and collaborate with Solutions Engineering, Product, Marketing, and Customer Success to ensure successful deployments and renewals.

Leads Privacy by Design across connected medical devices and supporting systems. Responsibilities include privacy risk assessments, DPIAs, compliance documentation, regulatory evidence, incident investigations, corrective actions, privacy incident response, stakeholder consultation, and alignment with product security engineering. The role mentors professionals and advances privacy governance, training, metrics, and continuous improvement while ensuring compliance with global privacy laws and medical device standards.

Leads automotive and embedded-systems cybersecurity consulting engagements, developing ISO/SAE 21434 and ISO 24089 processes, templates, risk analyses, cybersecurity concepts, verification documents, and assessment reports. Guides clients in secure software design, coding, testing, and compliance with UN Regulations 155 and 156. Responsibilities also include client program leadership, proposals and business development, standards participation, technical guidance, and occasional travel to client sites.

Supports cybersecurity architecture, RMF compliance, Assessment and Authorization, Continuous Monitoring, vulnerability remediation, incident response, and security oversight for defense systems. Develops security architecture and design documents, prepares ATO and IATT packages, maintains evidence documentation, evaluates system changes and risks, implements security controls, and advises stakeholders on DoD information assurance standards. The role is onsite at Fort Belvoir, Virginia, requires an active Secret clearance, and supports systems across multiple classification environments.

Leads cybersecurity incident response as an Incident Commander, coordinating cross-functional teams, investigating threats, analyzing root cause and impact, and communicating with senior leadership. Drives incident response program maturity through improved playbooks, processes, training, metrics, detection capabilities, and after-action reviews. Also leads vulnerability management, security assessments, threat intelligence, analyst development, and response to complex threats including ransomware, insider attacks, data exfiltration, and cloud compromise.

Leads federal cybersecurity audit readiness, OIG liaison activities, RMF governance, and enterprise GRC strategy. Coordinates OIG audits, validates technical evidence, manages findings and remediation, and translates cloud environments into defensible compliance documentation. Establishes common-control inheritance, Continuous Monitoring workflows, GRC platform logic, federal reporting standards, and governance guidelines. Reviews SSPs, SARs, and POA&Ms, conducts readiness assessments, interprets OMB, NIST, and CISA requirements, and briefs executives on compliance risks and remediation progress.

Analyze system vulnerabilities and attack techniques across hardware, software, personnel, procedures, logistics, and physical security. Assess impacts on supported missions, develop operational countermeasures, and produce reports, briefings, and analytical perspectives on actual and potential attacks. The role requires extensive vulnerability analysis, penetration testing, or computer forensics experience, a relevant technical degree, and TS/SCI clearance with polygraph.

Performs cyber resiliency analysis for tactical Software Defined Radio waveforms and supports system security engineering, RMF implementation, technical reviews, documentation, and stakeholder collaboration. Researches cybersecurity methodologies, maintains analysis processes, develops reports and white papers, updates SOPs, and coordinates with vendors and DoD organizations. The role requires knowledge of cybersecurity, electronic and technology protection, RF communications, SDRs, waveforms, and DoD security practices.

Designs and implements cybersecurity solutions for counter-unmanned aircraft systems and defense technology. Leads RMF assessment and authorization activities, manages ATO packages, reviews security assessments, identifies risks, develops mitigation strategies, and designs network security controls. Supports R&D, proof-of-concept, prototype, hybrid cloud, radio frequency, and non-traditional system environments while maintaining required security documentation and accreditation strategies.

Manages global IAM platform operations and engineering, ensuring availability, reliability, security, resiliency, and service performance. Leads distributed teams and offshore partners, drives automation, DevOps, AI-enabled operations, lifecycle management, incident response, monitoring, vendor relationships, budgets, and workforce planning. Develops high-performing teams and partners with cybersecurity, infrastructure, cloud, and application groups to deliver dependable enterprise IAM services.

Supports cybersecurity architecture, Risk Management Framework compliance, Assessment and Authorization, Continuous Monitoring, vulnerability remediation, incident response, and security control implementation for defense systems. Develops security documentation, risk assessments, criticality analyses, Plans of Action and Milestones, and Authority to Operate requests. Collaborates with technical teams and government stakeholders to maintain secure system operations across classified environments.

Conducts all-source cyber threat intelligence analysis, maps adversary behavior to MITRE ATT&CK, researches surface/deep/dark web threats, produces intelligence assessments, and develops AI-assisted automation for collection, triage, and threat analysis. The role supports threat hunting, red team, and purple team operations while informing enterprise cybersecurity strategy and control-gap prioritization.

Leads complex, cross-organizational cybersecurity programs from strategy through execution, adoption, and measurable outcomes. Develops governance, roadmaps, operating mechanisms, automated workflows, and success metrics; manages risks, dependencies, priorities, and tradeoffs. Partners with engineering, security, operations, compliance, and executives to align stakeholders, remove blockers, and drive accountability. Uses AI, telemetry, and data-driven insights to improve decisions and delivery while creating scalable cybersecurity capabilities.