Cybersecurity Lead Jobs
Cybersecurity Lead jobs are open across financial services, healthcare, defense contracting, and technology, from mid-level practitioner to senior leadership, with specializations in cloud security, threat intelligence, and compliance program management. Find a role that fits from the openings below and apply directly.
Find Cybersecurity Lead JobsLooking for remote work? View remote cybersecurity lead jobs →Overview
Showing 5 of 92+ Cybersecurity Lead jobs
Work You'll Do
As a PROJECT - Lead Security Engineer II on the Enterprise Security team, you will support cybersecurity operations for the Client's program by administering and sustaining tools used for continuous monitoring, vulnerability management, log analysis, and security operations support.
- Administer Tripwire to support file integrity monitoring, configuration assessment, and cybersecurity control execution.
- Support administration of Splunk, SecurityBridge, and ESS, including configuration, monitoring, reporting, and operational support.
- Perform and coordinate ACAS scans, analyze findings, prioritize vulnerabilities, and track remediation with system owners and technical teams.
- Support system hardening, patch coordination, access reviews, and incident analysis across Windows and Linux environments.
- Maintain documentation, standard operating procedures, Plan of Action and Milestones (POA&M) inputs, and audit evidence in alignment with Department of Defense (DoD), Risk Management Framework (RMF), and program requirements.
A successful candidate would possess these skills:
- Ability to work independently and collaborate as part of a team
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Ability to meet deadlines
- Ability to mentor and provide clear guidance to others
The Team
Deloitte's Government & Public Services (GPS) practice - our people, ideas, technology and outcomes - is designed for impact. Serving federal, state, & local government clients as well as public higher education institutions, our team of professionals brings fresh perspective to help clients anticipate disruption, reimagine the possible, and fulfill their mission promise.
Our Enterprise Security offering embeds security in all aspects of digital transformation by securing a client's technical backbone while enabling secure digital transformation. Includes security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and security for emerging technologies and connected products.
The Project Delivery Talent Model is designed for professionals with specialized skills that align to a current client need. Team members focus on delivering services to clients, without additional expectations related to business development or promotion. Their employment is tied to their role on a project, and they are eligible for a benefits package that is competitive for project delivery-focused professionals.
Qualifications
Required:
- Bachelor's degree
- Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future
- Active Secret security clearance required with the ability to obtain a Top Secret clearance.
- Ability to travel 25%, on average, based on the work you do and the clients and industries/sectors you serve
- 4+ years of cybersecurity experience, including 2+ years in cloud security.
- 4+ years of experience with IAM, encryption, boundary security, logging, and cloud monitoring.
- 3+ years of experience with AWS
-
2+ years of the following experience:
- Experience with RMF, NIST 800-53, STIGs, and federal authorization practices.
- Experience with ACAS/Nessus
- Experience with Splunk
- Experience with securing AWS environments, preferably in regulated or government settings.
- CompTIA Security+ CE DoD 8570/8140-compliant baseline cybersecurity certification
Preferred:
-
OS / Computing Environment Certifications or Training Certificate of Completion (40+ hours):
- Tripwire: Windows Server Administration certification/training covering Windows Server 2022, or similar
- Splunk: CompTIA Linux+ or Red Hat Certified System Administrator (RHCSA), or similar
- CISSP, CASP/SecurityX, CySA, or similar
- Splunk Core Certified User / Power User / Admin
- Experience with AWS GovCloud in a DoW or IC environment.
- Experience with SAP cybersecurity tooling, including SecurityBridge
- Experience with RMF, STIGs, POA&M management, and DoD vulnerability management processes
Work You'll Do
As a PROJECT - Lead Security Engineer II on the Enterprise Security team, you will support cybersecurity operations for the Client's program by administering and sustaining tools used for continuous monitoring, vulnerability management, log analysis, and security operations support.
- Administer Tripwire to support file integrity monitoring, configuration assessment, and cybersecurity control execution.
- Support administration of Splunk, SecurityBridge, and ESS, including configuration, monitoring, reporting, and operational support.
- Perform and coordinate ACAS scans, analyze findings, prioritize vulnerabilities, and track remediation with system owners and technical teams.
- Support system hardening, patch coordination, access reviews, and incident analysis across Windows and Linux environments.
- Maintain documentation, standard operating procedures, Plan of Action and Milestones (POA&M) inputs, and audit evidence in alignment with Department of Defense (DoD), Risk Management Framework (RMF), and program requirements.
A successful candidate would possess these skills:
- Ability to work independently and collaborate as part of a team
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Ability to meet deadlines
- Ability to mentor and provide clear guidance to others
The Team
Deloitte's Government & Public Services (GPS) practice - our people, ideas, technology and outcomes - is designed for impact. Serving federal, state, & local government clients as well as public higher education institutions, our team of professionals brings fresh perspective to help clients anticipate disruption, reimagine the possible, and fulfill their mission promise.
Our Enterprise Security offering embeds security in all aspects of digital transformation by securing a client's technical backbone while enabling secure digital transformation. Includes security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and security for emerging technologies and connected products.
The Project Delivery Talent Model is designed for professionals with specialized skills that align to a current client need. Team members focus on delivering services to clients, without additional expectations related to business development or promotion. Their employment is tied to their role on a project, and they are eligible for a benefits package that is competitive for project delivery-focused professionals.
Qualifications
Required:
- Bachelor's degree
- Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future
- Active Secret security clearance required with the ability to obtain a Top Secret clearance.
- Ability to travel 25%, on average, based on the work you do and the clients and industries/sectors you serve
- 4+ years of cybersecurity experience, including 2+ years in cloud security.
- 4+ years of experience with IAM, encryption, boundary security, logging, and cloud monitoring.
- 3+ years of experience with AWS
-
2+ years of the following experience:
- Experience with RMF, NIST 800-53, STIGs, and federal authorization practices.
- Experience with ACAS/Nessus
- Experience with Splunk
- Experience with securing AWS environments, preferably in regulated or government settings.
- CompTIA Security+ CE DoD 8570/8140-compliant baseline cybersecurity certification
Preferred:
-
OS / Computing Environment Certifications or Training Certificate of Completion (40+ hours):
- Tripwire: Windows Server Administration certification/training covering Windows Server 2022, or similar
- Splunk: CompTIA Linux+ or Red Hat Certified System Administrator (RHCSA), or similar
- CISSP, CASP/SecurityX, CySA, or similar
- Splunk Core Certified User / Power User / Admin
- Experience with AWS GovCloud in a DoW or IC environment.
- Experience with SAP cybersecurity tooling, including SecurityBridge
- Experience with RMF, STIGs, POA&M management, and DoD vulnerability management processes
Cybersecurity Lead Jobs by Experience Level
See All 92 Cybersecurity Lead Jobs
Find roles that match your experience and apply in just a few clicks.
Find Cybersecurity Lead JobsCybersecurity Lead Job Market
Who's Hiring
Top Industries Hiring
- Consulting & Professional Services
- Investment & Asset Management
- Energy
- Technology & Software
- Retail
What Employers Look For
The qualifications that appear most often in cybersecurity lead jobs.
- Seven or more years of progressive cybersecurity experience with at least two in a leadership role
- Hands-on proficiency with SIEM platforms such as Splunk, Microsoft Sentinel, or IBM QRadar
- Active CISSP, CISM, or equivalent enterprise security certification
- Experience developing and maintaining security policies aligned to NIST, ISO 27001, or SOC 2 frameworks
- Proven ability to lead incident response efforts and manage post-incident reviews
- Bachelor's degree in computer science, information security, or a closely related field
Tips for Your Cybersecurity Lead Job Search
Tailor your resume to the threat model
Hiring managers scan for evidence you've owned a specific threat environment, whether that's cloud-native, OT/ICS, or regulated industries. Name the frameworks you've applied, the environments you've defended, and the incidents you've led from detection to remediation.
Certify for the roles you target
CISSP covers a broad leadership audience, but roles in federal contracting lean heavily on CISM or CASP+, while cloud-heavy positions prioritize CCSP or AWS Security Specialty. Match your active certifications to the cert stack listed in the job description before you apply.
Quantify program impact on your resume
Vague claims about 'improving security posture' won't differentiate you. Replace them with concrete outcomes: reduced mean time to detect, number of vulnerabilities remediated in a cycle, or audit findings closed. Reviewers in this field are trained to spot unsubstantiated claims.
Apply early to roles that fit
Migrate Mate lists cybersecurity lead openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Prepare for a technical leadership interview split
Cybersecurity lead interviews typically divide time between hands-on technical depth and people or program management scenarios. Practice articulating how you set team priorities during an active incident and how you communicate risk trade-offs to non-technical executives.
Negotiate around total compensation and scope
Security leadership roles vary widely in budget authority, team size, and vendor contract ownership. Before you accept an offer, clarify reporting lines, headcount, and whether you control the security tool budget, since those factors define the actual seniority of the role.
Cybersecurity Lead Jobs: Frequently Asked Questions
Which companies are hiring the most cybersecurity leads?
The companies hiring the most cybersecurity leads right now include JPMorganChase, Goldbelt, and Booz Allen Hamilton, with the largest share of openings in Virginia, District of Columbia, and Texas, based on current listings on Migrate Mate as of August 2026. Demand is concentrated in financial services, defense contracting, and large technology firms with regulated data environments.
How many cybersecurity lead jobs are remote?
About 56% of cybersecurity lead openings are fully remote or hybrid as of August 2026, though on-site requirements vary significantly by industry. Roles focused on governance, risk, and compliance or cloud security architecture tend to carry the most remote flexibility, while positions tied to on-premises infrastructure or government facilities typically require an in-person presence.
How do you become a cybersecurity lead?
Start by building deep technical experience in at least one security domain such as network defense, cloud security, or incident response. Move into a senior individual contributor role where you own security programs end to end. Earn a recognized leadership certification like CISSP or CISM, demonstrate you can manage projects and communicate risk to business stakeholders, and take on team lead or program ownership responsibilities before targeting formal lead titles.
Can you get hired as a cybersecurity lead with limited experience?
Getting hired as a cybersecurity lead with limited experience is difficult because most employers treat the role as a senior-level position requiring demonstrated incident ownership and program management. You can accelerate your path by leading a security function at a smaller organization, taking on incident command responsibilities in your current role, earning a CISSP or CISM certification, and building a portfolio of documented security improvements you drove from start to finish.
What does the cybersecurity lead interview process look like?
The cybersecurity lead interview process typically runs three to five rounds. An initial recruiter screen is followed by a technical interview covering threat detection, vulnerability management, or architecture decisions relevant to the company's environment. A leadership or behavioral round focuses on how you manage teams and communicate risk. Many employers add a case study or written exercise asking you to assess a mock security scenario, and a final round with senior leadership or the CISO usually closes the process.
Where can I find and apply to cybersecurity lead jobs?
You can find and apply to cybersecurity lead jobs on Migrate Mate, which lists current openings from employers across the United States. Search the listings for roles that match your experience level, industry background, and preferred location or remote arrangement, then apply directly to each opening that fits.
See All 92 Cybersecurity Lead Jobs
Find roles that match your experience and apply in just a few clicks.
Find Cybersecurity Lead Jobs