Top Cybersecurity Jobs

Lead and grow the attack surface management program by identifying, assessing, and prioritizing exposures; drive remediation and automation; collaborate with AppSec, DevOps, and cloud teams; maintain standards, runbooks, and attack surface maps; present risk metrics; mentor teammates; and lead compliance activities (e.g., PCI).

Leads cybersecurity operations including incident response, threat intelligence, vulnerability management, GRC, security monitoring, and risk reduction across cloud, endpoint, identity, and third-party environments. Investigates complex security events, coordinates containment and recovery, develops threat hunting strategies, improves security processes, maintains response documentation, delivers security awareness training, and supports cybersecurity planning for live events and venues. Serves as a cybersecurity subject matter expert and participates in after-hours incident response.

Supports cybersecurity planning, assessments, implementation, compliance, and continuous monitoring for Air Force infrastructure modernization. Coordinates RMF activities, DISA STIG validation, NIST control analysis, vulnerability remediation, POA&M development, eMASS documentation, accreditation packages, and cybersecurity reviews. The role validates controls throughout deployment and operational transition, collaborates with ISSMs and engineering teams, and requires active Secret clearance, DoD IAM/IAT certification, and 35% travel.

Leads CLS’s global Cybersecurity Operations function, setting strategy for threat detection, incident response, digital forensics, DLP, UEBA, Purple Teaming, and detective controls. Oversees security engineering, vendors, third-party integrations, governance, executive reporting, talent development, and regulatory alignment. The role requires extensive cybersecurity leadership experience in highly regulated environments, strong technical expertise across SIEM, SOAR, cloud and endpoint security, and the ability to direct complex cyber incident response programs.

Supports Defense Health Agency systems through cybersecurity certification and accreditation, RMF assessment and authorization, security documentation, vulnerability management, configuration management, audit reviews, and STIG compliance. Conducts self-assessments, vulnerability scans, POA&M development, and eMASS documentation to support IATT and ATO decisions. Coordinates with authorizing officials, system administrators, and cybersecurity personnel to maintain system security posture and accreditation compliance.

Administer and optimize Trellix cybersecurity tools across enterprise Windows and Linux environments. Manage policies, deployments, endpoint health, detections, integrations with SIEM/SOAR and vulnerability platforms, dashboards, compliance, documentation, and incident response activities. Support endpoint forensics, containment, IOC sweeps, risk assessments, security control validation, and RMF/NIST compliance while coordinating with systems, network, and cybersecurity teams.

Designs and integrates enterprise cybersecurity solutions, with emphasis on cloud security architecture, secure migrations, vulnerability management, incident response, firewalls, IDS/IPS, and SIEM technologies. The role supports military cyberspace operations, evaluates cybersecurity tools, prepares technical security documentation, and collaborates with internal teams and external customers. Applicants must possess TS/SCI clearance and be able to obtain a CI Poly.

Lead cybersecurity assessment and authorization activities for classified DoD and Intelligence Community systems. Responsibilities include executing RMF processes, maintaining SSPs, POA&Ms, SARs, and ATO artifacts, managing vulnerability remediation, validating NIST and CNSSI controls, enforcing STIG compliance, hardening Windows, Linux, and network systems, monitoring environments, supporting incident response, and assessing security impacts of system changes.

Leads cybersecurity assessment and authorization activities for classified DoD and Intelligence Community systems. Maintains SSPs, POA&Ms, SARs, and ATO artifacts; performs vulnerability scanning and remediation tracking; validates NIST and CNSSI controls; supports hardening, patching, STIG compliance, monitoring, incident response, and change-impact assessments. Collaborates with engineering, administration, and DevSecOps teams.

Conduct advanced cybersecurity monitoring, incident detection, investigation, response, threat analysis, and security validation across on-premises and cloud environments. Perform authorized vulnerability validation, penetration-test finding reproduction, remediation verification, and application security testing. Develop incident-response procedures, testing methodologies, documentation, and playbooks while supporting offensive security, adversary emulation, and purple-team capabilities. Mentor junior analysts and collaborate with technical teams and government stakeholders.

Maintains Authority to Operate for Navy education and training systems by managing compliance, vulnerability remediation, incident response, access coordination, security documentation, and continuous monitoring. Supports DevSecOps security integration, cloud security architecture, risk management, cybersecurity reporting, stakeholder coordination, vendor engagement, and implementation of security tools and controls across classified and unclassified environments.

Secure and accredit multi-tenant, multi-classification cloud environments across development, integration, and test enclaves. Implement JSIG, NIST, STIG, RMF, and ATO requirements; maintain SSPs, POA&Ms, and continuous-monitoring evidence; validate vulnerability, application-security, container, and infrastructure-as-code outputs; support secure cloud and DevSecOps design; and provide cybersecurity guidance for capability-provider artifacts and promotion decisions.

Build and operate secure DevSecOps pipelines using SAST, DAST, container scanning, SBOM/SCA, artifact validation, and vulnerability gates. Produce RMF/cATO evidence, support secure coding compliance, drive CWE/CVE remediation, validate rollback readiness, and help developers adopt secure-by-default CI/CD automation across cloud and mission environments.

Maintain Authority to Operate for Navy education systems, coordinate secure access, monitor vulnerabilities and incidents, manage compliance reporting, support audits, and integrate security into DevSecOps. The role includes incident investigation, threat analysis, remediation, cloud and enterprise security architecture, cybersecurity documentation, vendor coordination, risk management, and implementation of secure tools, applications, migrations, and deployment processes.

Manage complex, citywide cybersecurity programs and multiple concurrent projects across agencies, vendors, and stakeholders. Responsibilities include vendor selection, RFI/RFP development, budgeting, scheduling, contractor management, risk assessment, reporting, dashboard strategy, PMO development, workflow implementation, proof-of-concept trials, and executive communications. The role supports Cyber Command leadership and may require varied shifts in a 24/7 operational environment.

Lead advanced cyber investigations and detection engineering across endpoint, network, cloud, identity, application, and manufacturing environments. Develop and tune detections in SIEM/EDR/NDR/SOAR, conduct threat hunting, apply MITRE ATT&CK, automate workflows with scripting/AI, mentor analysts, and collaborate across security teams to improve detection fidelity and response.

Leads the Cyber & Information Security portfolio and program governance for a healthcare organization. Oversees prioritization, dependencies, risks, budgeting, execution, reporting, process optimization, and executive visibility across security initiatives. Supports CISO and Board engagements, coordinates governance materials and follow-up, participates in business continuity exercises, advises leadership on operational risks, and mentors team members. Requires substantial experience managing complex technology or security programs in regulated environments.

Lead pre-sales security architecture engagements by designing and validating defense-in-depth solutions across hybrid, cloud, application, identity, endpoint, network, and data environments. Conduct security assessments, create remediation roadmaps, integrate security platforms, and support DevSecOps, SOC, detection engineering, incident response, compliance, and risk programs. Collaborate with sales, engineering, clients, and executive stakeholders to communicate technical trade-offs and deliver scalable enterprise security strategies.

Designs and implements cybersecurity controls, evaluates network, system, and application vulnerabilities, identifies advanced threats, and develops remediation strategies. The role involves monitoring and improving cyber defenses, responding to security breaches, communicating security risks to stakeholders, and supporting mission-critical infrastructure and national security initiatives.

Lead the strategy, roadmap, and growth of Horizon3’s Tripwires threat detection and deception product. Own detection fidelity, deployment coverage, alerting, integrations, dashboards, analyst workflows, customer insight, and commercial outcomes. Partner with Engineering, Design, Sales, Marketing, Customer Success, and Security teams to deliver precise, low-noise alerts and integrate Tripwires with SOC response workflows. Define product metrics, influence executive direction, and guide launches and adoption.

Designs and delivers GM Financial’s cybersecurity architecture and program, including security controls, risk assessments, cloud and application security, network protections, compliance, and security strategy. Partners with technical and business stakeholders to reduce risks, assess systems, improve security maturity, guide infrastructure and application teams, and support cybersecurity education. The role also mentors team members and contributes to security automation, DevOps, container, and cloud security initiatives.

Executes cybersecurity governance and risk initiatives by developing policies, standards, and procedures; managing audits, remediation tracking, security requirements, and compliance reporting. Partners with business and technical teams to protect information assets, monitor adherence to controls, and address threats. The role requires knowledge of networking, infrastructure, security frameworks, IT service management, cloud technologies, and relevant regulations. It operates in a flexible hybrid environment with four office days weekly.

Provides cybersecurity engineering support to a NAVSEA contractor team. Responsibilities include implementing and monitoring cyber defense measures, assessing vulnerabilities, developing remediation strategies, maintaining security controls, responding to breaches, and ensuring compliance with cybersecurity policies and Assessment and Authorization requirements. The role is based primarily at the Washington Navy Yard, with occasional naval-centric travel to locations including Norfolk and San Diego.

Lead and oversee a large DoD enterprise IT and cybersecurity contract, interfacing with government leadership, managing staffing, subcontractors, risk, finances, compliance, SLAs, transitions, and delivery of cloud, infrastructure, DevSecOps, and security services across dispersed sites.

Implement and assess cybersecurity controls across information systems and Microsoft Azure environments. Support DoD RMF activities, Zero Trust implementation, ACAS vulnerability scanning, remediation tracking, Azure Policy administration, Microsoft Defender for Cloud assessments, Xacta documentation, infrastructure automation, continuous monitoring, and security-control evidence collection. Collaborate with cloud engineers, system administrators, DevSecOps teams, ISSOs, and cybersecurity personnel while documenting configurations and remediation activities.