Top Cyber Security Jobs in Tampa, FL

Provides security engineering and architecture expertise for FedRAMP Cloud Service Provider assessments. Reviews full-stack architectures, authorization packages, security controls, policies, assessment reports, vulnerability scans, and penetration tests for compliance with FedRAMP, NIST, FISMA, RMF, and agency requirements. Leads vendor interviews, identifies technical and documentation gaps, supports continuous monitoring, advises government program leaders and CISOs, and provides security recommendations for cloud systems.

Leads enterprise cybersecurity compliance for VA systems, overseeing RMF execution, authorization and assessment activities, POA&M accuracy, SSPs, continuous monitoring, audit readiness, vulnerability remediation, and compliance reporting. Coordinates with system owners, cybersecurity, engineering, operations, auditors, and federal stakeholders. Evaluates security evidence, manages dashboards and corrective actions, presents compliance updates, improves procedures, and strengthens governance across assigned systems.

Build, secure, automate, and operate AWS and Kubernetes infrastructure while supporting HIPAA and SOC 2 compliance. Responsibilities include Terraform development, CI/CD security, IAM, vulnerability management, observability, SIEM integrations, incident response, infrastructure hardening, scripting, technical documentation, and cross-functional automation. The role also participates in on-call coverage and evaluates new security and infrastructure tools.

Build and scale application security for a SaaS platform by integrating SAST, SCA, DAST, secrets scanning, and container/IaC checks into CI/CD. Partner with engineering and DevOps teams on threat modeling, secure code reviews, vulnerability remediation, incident response, and secure development practices. The role also supports compliance goals and translates security risks clearly to engineers.

Implement and configure SailPoint IdentityIQ and Identity Security Cloud solutions, including identity lifecycle management, access certifications, provisioning, integrations, workflows, rules, and application onboarding. Lead or support IIQ-to-ISC migrations, gather client requirements, create technical documentation, troubleshoot deployments, and support UAT and hypercare. The role also involves client interaction, mentoring junior engineers, and contributing to reusable delivery assets in a remote consulting environment.

Leads security operations and corporate IT for a healthcare technology company handling PHI. Responsibilities include incident response, application and cloud security, IAM, endpoint management, vendor reviews, security policies, compliance support for HIPAA, SOC 2, and HITRUST, and management of three direct reports. The role also builds AI-driven automation tools and workflows for IT and security operations while partnering with executives, engineers, customers, auditors, and compliance leaders.

Monitor, investigate, and respond to global security incidents; lead incident response as an incident commander; develop security alerts, playbooks, automated actions, and escalation workflows; conduct threat hunting and threat intelligence research; improve detection, containment, and post-incident processes; collaborate with stakeholders; and participate in an on-call rotation.

Supports IT solution design and implementation, analyzes cybersecurity protocols and recommends improvements, and collaborates with data science teams to analyze data and generate actionable insights. The internship provides hands-on experience, mentorship, professional development, and exposure to aerospace technology. Candidates must be enrolled in a relevant bachelor's or higher degree program, maintain a 3.0 GPA, and graduate in December 2027 or later.

Monitor and investigate security alerts across client environments in a 24/7 security operations center. Analyze threats, identify malicious activity and indicators of compromise, distinguish false positives, support incident response and remediation, develop vulnerability reports, and communicate findings to technical and executive audiences. Participate in shift handoffs and rotating incident triage coverage while collaborating with incident response teams.

Provides Tier 1 and Tier 2 infrastructure and systems administration support for operational databases, servers, networks, storage, and VDI environments. Installs patches and upgrades, performs backups and recovery, troubleshoots hardware and software, and maintains SOPs. Implements DISA STIGs, manages POA&Ms and eMASS artifacts, supports security documentation, and provides cybersecurity guidance through change control and system initiatives. Requires DoD-compliant technical support experience, IAT II certification, and an active TS/SCI clearance.

Supports cybersecurity system planning, design, implementation, operations, reporting, and DoD RMF accreditation. Manages vulnerabilities, reviews network security configurations, monitors system health, responds to cyber incidents and tasking orders, maintains cybersecurity diagrams and change documentation, and trains military personnel. The role also provides expertise in risk management, vulnerability remediation, compliance, and cyber readiness reporting.

Leads and coordinates security and operational incident response for infrastructure, platforms, hosting, and customer environments. Serves as incident commander, manages escalations and communications, facilitates bridge calls and post-mortems, analyzes incident trends, maintains response procedures, and tracks corrective actions. Partners with technical and leadership teams to improve incident management maturity, accountability, governance, reporting, and operational transparency during high-severity events.

Leads the organization’s cybersecurity program, including security operations, incident response, vulnerability management, GRC, compliance, third-party risk, security architecture, automation, and AI adoption. Manages security staff, vendors, MDR providers, projects, policies, audits, and operational improvements while reporting risks and performance to senior leadership. The role also drives security awareness, cross-functional collaboration, incident preparedness, and team development.

Leads cybersecurity architecture for software applications and platforms within wealth management. Drives secure product design, evaluates current and emerging technologies, establishes target architectures, and guides business and technical stakeholders. Oversees alignment with enterprise frameworks, regulatory requirements, scalability, resilience, and software development lifecycle practices. Serves as a subject matter expert in architecture governance and collaborates across teams to deliver secure, high-volume enterprise solutions.

Lead cloud security engineering across AWS, Azure, and GCP by aligning security strategy with business and regulatory requirements. Identify and remediate security deficiencies, develop baselines and compliance monitoring, automate security capabilities, document controls and runbooks, mentor cybersecurity engineers, and partner with stakeholders to implement secure technologies. The role also supports vulnerability management, SIEM, IAM, container security, infrastructure as code, and enterprise-scale cloud solutions.

Leads application security governance across container platforms, integrating container security and vulnerability management into risk-driven controls. Oversees SCA, SAST, and DAST programs; drives vulnerability prioritization, remediation, and escalation; manages AppSec platforms; establishes secure development standards; and advances automation, metrics, reporting, emerging technologies, and audit-ready controls in partnership with Cloud, Platform, and Application teams.

Leads cybersecurity, AI assurance, DevSecOps, risk management, and compliance across data and software delivery. Translates government security requirements into engineering practices, directs RMF authorization activities, oversees AI and data threat modeling, embeds security into CI/CD pipelines, and manages continuous control monitoring. Coordinates with technical and government stakeholders, guides cybersecurity personnel, tracks remediation, and reports authorization risks and security status for mission-critical capabilities.

Embeds security throughout the software development lifecycle by performing application, API, mobile, cloud, and software supply-chain security assessments. Conducts threat modeling, architecture reviews, secure code reviews, and vulnerability validation; partners with developers on remediation; improves CI/CD security controls and secure coding standards; and prioritizes application risk based on exploitability, asset criticality, and business impact.

Own identity and endpoint security across the company, including SSO, MFA, access provisioning, access reviews, MDM, EDR, device security baselines, and IT workflows. Respond to identity and endpoint incidents, assess vendor and SaaS integration risks, support secure AI tool adoption, automate security processes, and help develop scalable security policies and controls.

Reviews and investigates security events, phishing reports, malware detections, and brand-monitoring alerts as a Tier 2 SOC analyst. Escalates incidents, supports containment and eradication, leads remediation, mentors junior analysts, documents procedures, and collaborates with security and IT teams across a multinational organization to improve threat detection and response capabilities.

Leads a 12-person application security practice conducting code audits, vulnerability research, and secure design reviews. Oversees technical delivery, client relationships, project staffing, utilization, profitability, recruiting, and team development. Provides hands-on technical direction across source-code security work, determines investments in tooling and methodologies, and integrates AI-assisted auditing and research into team workflows. The role also owns practice P&L and supports engineers’ conference, publication, and open-source contributions.

Own and advance cybersecurity for satellites, flight software, ground systems, mission networks, communication links, and AWS infrastructure. Responsibilities include security architecture, threat modeling, vulnerability management, incident response, IAM, SIEM detection engineering, network defense, cloud security, DLP, security assessments, awareness training, and compliance with CMMC Level 2, NIST 800-171, and ITAR/EAR requirements. The role collaborates with aerospace, software, systems, and compliance teams and requires expertise in mission-system security.

Lead enterprise security risk assessments, maintain the risk register, prioritize and track remediation, evaluate vendor and architectural risks, define risk methodologies, map controls to NIST and CMMC requirements, support audits, report risk metrics to leadership, and promote risk ownership across the organization.

Leads OT/ICS and enterprise cybersecurity architecture for a federal critical-infrastructure modernization program. Responsibilities include requirements development, NERC CIP traceability, market research, RFI and vendor evaluation, lab testing, alternatives analysis, product recommendations, and executive briefings. The role bridges utility operational technology and IT security, covering access control, monitoring, asset management, vulnerability management, SCADA environments, and industrial systems. It is fully remote in the U.S. with up to 25% domestic travel and requires Public Trust eligibility.

Leads data security governance across database monitoring, encryption, certificate and key management, HSM operations, data masking, and cryptographic asset inventory. Manages a security governance team, develops controls and procedures, supports audits and regulatory inquiries, partners cross-functionally, and drives post-quantum cryptography readiness, automation, metrics, service reliability, and operational maturity.