Top Cybersecurity Jobs

Leads enterprise cybersecurity and core technology audit strategy, annual planning, audit execution, reporting, continuous monitoring, and regulatory readiness. Provides independent assurance and credible challenge across technology governance, cyber operations, cloud, resilience, third-party risk, identity, data protection, and emerging technology. Partners with executives, regulators, committees, and assurance functions while building and developing a high-performing audit team. Oversees risk-based coverage, quality, issue remediation, and strategic audit transformation through data-driven insights and automation.

Leads privacy technology and cybersecurity consulting engagements, assessing ad tech practices, identifying regulatory gaps, and implementing compliance solutions. Designs API and system integrations, website scanning strategies, consent management approaches, and privacy-by-design methodologies across the SDLC. Analyzes network traffic, documents data flows, develops policies and metrics, supports client presentations, and leads privacy consultants. Requires knowledge of privacy regulations, marketing technologies, network protocols, and privacy deliverables.

Provides cybersecurity strategy consulting through research, analysis, stakeholder engagement, policy interpretation, strategic planning, roadmap development, governance support, and implementation planning. The role translates cybersecurity directives and leadership priorities into executable activities, milestones, deliverables, and operating models. It requires familiarity with CTI, SOC operations, incident response, defensive cyber operations, federal mission environments, executive briefings, facilitation, and cross-organizational coordination.

The Cyber Exercise Planner will lead joint cyber exercise planning and execution, collaborate with stakeholders, and ensure alignment with MARFORCYBER objectives.

Lead and manage cybersecurity programs for assigned information systems, conduct assessments and continuous monitoring, perform A&A and ST&E activities, document security findings and remediate risks, prepare A&A artifacts (SSP, SCTM, POA&M), and ensure compliance with government/security policies and Special Access Program requirements.

Leads cybersecurity and systems engineering for PKMA modernization and integration into an enterprise SATCOM system. Responsibilities include defining requirements, acquisition documentation, vendor evaluation, technical roadmaps, dependency and risk analyses, cryptographic key management coordination, COMSEC/TRANSEC planning, testing, certification, baseline reviews, and executive briefings. The role coordinates with government agencies, NSA, Space Systems Command, contractors, and mission partners while supporting integration milestones and technical decision-making.

Lead the engineering and operation of security controls for a classified secure workstation enclave. Configure and harden Red Hat Linux systems, administer Splunk, Tenable, Trellix, and Teramind, and maintain Active Directory controls. Monitor telemetry, triage alerts, investigate incidents, oversee vulnerability and STIG scanning, coordinate remediation, and support RMF continuous monitoring, auditing, documentation, assessment artifacts, and POA&M activities.

Supports cybersecurity program execution through data analysis, risk reporting, stakeholder presentations, operational reporting, and oversight committee packages. Tracks initiative progress, risks, dependencies, blockers, budgets, headcount, contracts, and training. Drives cross-departmental projects, facilitates stakeholder engagement, captures meeting outcomes, and coordinates execution teams. Requires cybersecurity knowledge, project and program management experience, data visualization proficiency, strong communication, and financial services experience.

Monitors and administers cybersecurity infrastructure, including network security, SIEM, encryption, antivirus, patch management, secure file transfer, MFA, and SSO solutions. Performs vulnerability and penetration testing, investigates suspicious activity, supports forensic analysis and incident response, manages access controls, documents security procedures, assists with disaster recovery, and collaborates on cybersecurity policies and help desk incident management.

Designs, reviews, and governs enterprise cybersecurity architecture across identity, network, cloud, and AI domains. Produces ADRs and ARDs, partners with engineering teams to convert security concepts into specifications, and evaluates emerging AI-related threats and secure AI adoption. Communicates security risks and architectural trade-offs to technical and business leaders while providing cross-domain coverage and mentoring support. The role is fully on-site at a Fiserv hub and requires approximately 10% travel.

Provides strategic cybersecurity architecture leadership across applications, data, networks, cloud, SaaS, and emerging AI technologies. Develops security requirements, designs secure technical architectures, assesses risk, improves security frameworks, supports SDLC activities, and supervises cybersecurity testing. Partners with business and executive stakeholders to enable strategic initiatives while strengthening security controls and resolving complex technical challenges.

Leads a large federal cybersecurity GRC program, serving as the primary client-facing program manager and advisor. Oversees personnel, subcontractors, staffing, budgets, contract performance, quality assurance, governance, risk management, authorization, continuous monitoring, engineering, operations, and incident response coordination. Manages executive and government stakeholder relationships, deliverables, schedules, metrics, risks, and compliance with federal cybersecurity frameworks. The role requires onsite support five days per week in the Washington Metropolitan Area and contributes to business development, recruiting, mentoring, and proposal activities.

Lead end-to-end technical cybersecurity assessments across enterprise, cloud, and public-sector environments. Evaluate technical controls, review configurations and artifacts, map findings to risk and business context, produce prioritized reports, present to stakeholders, mentor junior assessors, and improve assessment methodology and tooling.

Support Galaxy’s Product Security team by developing and refining secure engineering standards covering authentication, authorization, API communication, web UI security, and secure coding. The intern may add implementation guidance and develop custom libraries, artifacts, or other resources that help software and production engineering teams apply security practices. The role is remote in the UK or US during the fall semester and includes hands-on work in cybersecurity, secure engineering, and product development.

The DoD SkillBridge Internship offers active-duty military members IT and cybersecurity training, certifications, and networking opportunities to prepare for civilian careers in IT.

The Technical Manager will lead the Cyber Risk Management team, overseeing project development and management, customer interactions, and strategic planning for risk and resilience in alignment with DOD challenges.

Conduct product cybersecurity assessments throughout the SDLC for web, embedded, connected, and industrial systems. Perform threat modeling, risk assessments, vulnerability analysis, security architecture reviews, and secure design guidance. Develop cybersecurity controls, standards, training, and awareness programs; support defect investigations, remediation, vulnerability disclosure, and incident response. Partner with engineering, product, leadership, customers, and suppliers to improve cybersecurity maturity and compliance with applicable frameworks and standards.

Conduct product cybersecurity assessments throughout the SDLC, perform threat modeling and risk analysis, review security architectures, and recommend secure design controls for web, embedded, connected, and industrial systems. Guide engineering and product teams on cybersecurity standards, investigate defects, support vulnerability remediation and incident response, develop training, and improve organizational security practices. The role requires expertise in product security engineering, embedded and IoT security, cryptography, secure development, compliance frameworks, and stakeholder collaboration.

Conduct product cybersecurity assessments throughout the SDLC for web, embedded, connected, and industrial systems. Perform threat modeling, risk assessments, vulnerability analysis, and security architecture reviews. Advise engineering and product teams on secure design, technical controls, hardening, cryptography, and remediation. Support defect investigations, vulnerability disclosure, incident response, training, standards development, and cybersecurity compliance across global teams.

Conduct product cybersecurity assessments across the software development lifecycle for web, embedded, connected, and industrial systems. Perform threat modeling, risk assessments, vulnerability analysis, security architecture reviews, and secure design guidance. Apply cybersecurity frameworks and controls, support defect remediation and incident response, develop security standards and training, and collaborate with engineering, product, leadership, customers, suppliers, and global stakeholders to improve cybersecurity maturity.

Conduct product cybersecurity assessments throughout the SDLC, perform threat modeling and risk assessments, review security architectures, and guide engineering teams on secure design and compliance. Develop cybersecurity standards, controls, training, and awareness programs; investigate defects; support vulnerability remediation and incident response; and promote security improvements across connected, web, industrial, and embedded product portfolios.

Lead global cybersecurity operations across identity, endpoint, network, cloud, and data environments. Manage security monitoring, incident response, vulnerability management, secure configuration, IAM/PAM, security tooling, audit evidence, and vendor partnerships. Establish operational KPIs, support NIST and CIS compliance, coordinate testing and resilience exercises, and oversee 24/7 monitoring. Manage and mentor cybersecurity analysts while partnering with IT, infrastructure, engineering, compliance, and external providers to strengthen enterprise security.

Owns the cybersecurity architecture, tooling, monitoring, identity, access, incident response, vulnerability management, and compliance assurance for OT/ICS environments supporting grid-connected energy assets. Designs IEC 62443-aligned segmentation, manages industrial IDS and asset inventories, defines SCADA and controller security requirements, oversees PKI and remote access, validates site acceptance evidence, and supports NERC CIP and utility security reviews.

Drives enterprise cybersecurity governance, risk, compliance, and assurance activities. Translates regulatory and contractual requirements into controls and evidence, assesses control effectiveness, manages CMMC, NIST, DFARS, CUI, and SOX ITGC obligations, maintains SSPs and risk documentation, oversees remediation and access governance, and coordinates security reviews for suppliers, SaaS, AI tools, and M&A activities. Partners with technical, business, legal, audit, and executive stakeholders to improve assessment and operational readiness.

Engineers identity security, privileged access, vulnerability management, endpoint and cloud security across a multi-site aerospace and defense environment. The role administers Microsoft security tools, investigates alerts, coordinates remediation, validates technical controls, supports CMMC and NIST assessments, maintains evidence and procedures, and reviews technology projects for security risks. It also contributes to incident response, audit remediation, M&A activities, automation, and mentoring across IT and security teams.