Top Cybersecurity Jobs

Serve as the primary cybersecurity technical advisor and ISSM for AF IT systems. Lead RMF/ISCM activities, maintain authorization to operate, assess security controls and configuration changes, validate vulnerabilities using automated tools, coordinate corrective actions, train ISSOs/privileged users, and ensure compliance with DoWI/AFMAN/AFI cybersecurity policies throughout the system lifecycle.

Lead design and delivery of Agentic AI IAM and secrets management across hybrid environments. Build secure authentication/authorization, centralized secrets vaulting, automated rotation, governance, monitoring, and operational metrics. Partner with infrastructure, cloud, DevOps, application, and risk teams to implement Zero Trust, machine identity security, and AI agent safeguards while driving enterprise program execution and compliance.

Build end-to-end full-stack product workflows and backend services for AI-powered security: vulnerability discovery, scanning, red teaming, findings review, remediation, and reruns. Design APIs, data models, async orchestration, durable state, and integrations; improve reliability, observability, and user trust while partnering with security researchers and product teams.

Perform cyber threat modeling, gap analysis, risk-based assessments and impact assessments for spacecraft and terrestrial systems. Develop system security requirements, provide engineering analysis and technical consultation, coordinate remediation, brief senior leaders, and support avionics/network security using relevant frameworks and tools.

Lead cybersecurity engineering for NASA space and terrestrial systems: threat modeling, risk assessments, system security requirements, V&V, impact assessments, remediation coordination, and technical briefings to senior leaders.

Leads cybersecurity assurance across medical device product lifecycles, including threat modeling, vulnerability assessments, security architecture, SBOMs, security testing, risk management, and regulatory compliance. Partners with engineering, quality, regulatory, and security teams to ensure controls, requirements, testing, and audit readiness align. Supports audits, CAPA, supplier processes, and continuous improvement while mentoring cybersecurity engineers. Requires extensive medical-device cybersecurity experience and expertise in embedded and connected technologies.

Leads independent technology, cybersecurity, and data control testing, including control design and operating effectiveness assessments, remediation validation, risk-based testing plans, regulatory engagement support, issue evaluation, training, and management reporting. Partners with risk and control owners to challenge risk assessments, control coverage, testing scope, and remediation effectiveness. Serves as a subject matter expert and may present findings to regulators.

Support SOC 2 attestation engagements by coordinating client communications, managing evidence requests and project timelines, maintaining audit documentation, assisting senior auditors with control walkthroughs and light technical analysis, and contributing to templates and training to build toward CISA/CISSP certification.

Leads cybersecurity research and thought leadership for Gartner clients, producing actionable insights, market analysis, strategic recommendations, presentations, and executive guidance. Advises leaders on cybersecurity strategy, AI risk, emerging technologies, regulations, frameworks, market dynamics, and vendor consolidation. Supports sales and client engagement, reviews content, mentors analysts, improves research processes, and represents Gartner at conferences. Requires extensive cybersecurity leadership, research, communication, and executive advisory experience.

Leads operational technology cybersecurity for attraction, live-show, and transportation control systems. Responsibilities include setting design standards, managing project scope and schedules, collaborating with engineering teams, developing network architecture standards, reviewing technical drawings, communicating security requirements, and implementing scalable cybersecurity processes. The role supports system reliability and availability in industrial and nontraditional environments, including occasional evenings, weekends, and holidays.

Conduct client security risk assessments against NIST, ISO 27001, and CIS frameworks; evaluate controls and evidence, identify vulnerabilities and compliance gaps, document findings, and prepare executive reports. Lead client kickoff and debrief meetings, manage assessment communications, and provide remediation guidance. Investigate escalated security incidents, analyze root causes, maintain case documentation, and collaborate with SOC, IT, engineering, and senior security teams.

Engineer, administer, and optimize DLP and CASB solutions across endpoint, network, and cloud environments. Configure security policies, integrations, agents, alerts, and data-classification controls; investigate incidents and data-exfiltration risks; remediate control gaps; support firewalls, email security, WAF, and DNS security. Partner with GRC, HR, Legal, and business teams on compliance, reporting, documentation, change management, and remediation. Mentor junior security staff and support incident response activities.

Engineers, administers, and optimizes DLP and CASB solutions, including policies, alerts, integrations, data discovery, classification, and remediation. Supports firewalls, DNS, email security, WAF, incident response, and broader security control operations. Investigates data-loss and insider-risk events, develops compliance reports and metrics, tunes detection rules, manages change processes, documents runbooks, and mentors SOC personnel. The role requires incident availability 24/7 and regional client travel.

Engineers, administers, and optimizes DLP and CASB solutions, including policies, integrations, data discovery, alert triage, incident response, cloud application controls, and sensitive-data classification. The role remediates cybersecurity control gaps across firewalls, email security, WAFs, and related systems; produces risk and compliance metrics; coordinates with GRC, legal, HR, and business teams; and mentors junior security staff. It requires 24/7 incident availability and regional travel.

Lead installation, configuration, integration, and training for Forcepoint COTS cyber products. Provide on-site support, troubleshooting, upgrades, and technical documentation. Architect REST API integrations with SIEM/SOAR/IdP/cloud services, mentor junior engineers, serve as trusted advisor to customers and sales, and relay product feedback to influence the roadmap.

Implement, configure, optimize, and administer distributed LogRhythm SIEM deployments in AWS and Azure environments. Develop secure cloud infrastructure, manage security groups and storage, maintain SQL and Elasticsearch databases, troubleshoot networks and VPNs, automate operational tasks, document architectures, forecast deployment growth, and provide technical escalation support to SIEM engineers.

Provide technical support and security guidance to managed-service customers. Monitor security systems, troubleshoot security tools across Windows, Linux, Azure, and AWS environments, investigate networks and logs using SIEM technologies, identify malicious activity, and recommend security improvements. The role also supports incident response research, client implementations, knowledge transfer, documentation, and technical issue resolution.

Leads cybersecurity consulting work across client engagements, supporting RMF, A&A, security control assessments, vulnerability management, compliance reviews, system hardening, and secure configuration. Prepares SSPs, SAR inputs, POA&Ms, policies, reports, and technical presentations. Coordinates workstreams, deadlines, remediation, and quality reviews while guiding junior staff and contributing to proposals. The remote role requires travel exceeding 50% to client sites and project locations.

Provides cybersecurity consulting across multiple client engagements, including NIST RMF, assessment and authorization, security control validation, vulnerability assessment, compliance reviews, system hardening, and cybersecurity documentation. Supports project planning, client presentations, quality assurance, proposal development, and business development. Reviews systems against DoD and maritime cybersecurity requirements, mentors junior consultants, and travels regularly to client sites.

Provides Information Systems Security Engineering and DevSecOps support for the C-17 program. Integrates cybersecurity requirements into system architecture, development, configuration, and operations; traces controls to security requirements; maintains RMF artifacts and security baselines; supports vulnerability scanning, STIG assessments, audit reviews, endpoint protection, DLP, PPSM entries, and supply-chain evaluations across multiple enclaves.

Support the Risk Management Framework lifecycle by developing documentation, conducting assessments, and ensuring compliance with federal standards while working with security tools.

Lead malware, binary, firmware and source-code analysis to identify vulnerabilities in critical infrastructure and federal networks. Develop automated analysis tools and workflows, mentor staff, write technical reports, shape research direction, pursue program growth and proposals, and collaborate with sponsors to secure and harden operational technology and software assurance capabilities.

Military-only SkillBridge cybersecurity internship providing hands-on exposure to network security, IAM, SOC/SIEM, endpoint protection, incident response, GRC, threat/vulnerability management, audits, red team/social engineering exercises, and security reporting. Interns attend customer meetings, participate in industry activities, and author three 1,000-word cybersecurity articles. Remote with equipment provided; 90-day minimum.

Design and implement end-to-end cybersecurity architectures for classified, CUI, and unclassified systems supporting DoD/IC. Lead RMF accreditation (SSPs, SARs, POA&Ms), conduct threat modeling and vulnerability assessments, advise on Cross Domain Solutions and zero trust, integrate security into SDLC, and brief senior leadership. Mentor junior staff and provide SME support for classified cybersecurity programs.

Design, implement, and evaluate cybersecurity solutions and controls for DoD information systems. Conduct risk assessments and vulnerability analyses, recommend mitigations, support test plans, ensure compliance with DoD standards, prepare technical documentation, and collaborate with multidisciplinary teams.