ZipRecruiter

Log In

1

Defensive Cyber Security Jobs (NOW HIRING)

Leidos

Cyber Security Watch Officer

Odenton, MD · On-site

Serve as a Cyber Security Watch Officer (CSWO) on the DISA GSM-O II program supporting the DISA ... Support the DJOC Battle Captain and senior CSWOs with all Cyber Defense and Network Assurance ...

Leidos

Cyber Security Watch Officer

Odenton, MD · On-site

Serve as a Cyber Security Watch Officer (CSWO) on the DISA GSM-O II program supporting the DISA ... Support the DJOC Battle Captain and senior CSWOs with all Cyber Defense and Network Assurance ...

Nrel

Adversarial Cybersecurity Researcher

Golden, CO · Hybrid

The successful candidate will possess a deep understanding of offensive and defensive cybersecurity methodologies, hands-on experience designing and conducting controlled adversarial experiments, and ...

SUMARIA SYSTEMS LLC

$140K - $160K/yr

Familiarity with Department of Defense cybersecurity policies, procedures, and vulnerability management processes. Travel: Limited travel may be required in support of program objectives. Security ...

New

next page

Showing results 1-20

All JobsDefensive Cyber Security Jobs

Defensive Cyber Security information

See salary details

$57K

$133K

$186K

How much do defensive cyber security jobs pay per year?

As of Jul 25, 2026, the average yearly pay for defensive cyber security in the United States is $132,962.00, according to ZipRecruiter salary data. Most workers in this role earn between $111,000.00 and $150,000.00 per year, depending on experience, location, and employer.

What are some common challenges faced by professionals in defensive cyber security roles?

One of the main challenges in defensive cyber security is staying ahead of constantly evolving threats, as attackers regularly develop new methods to bypass security measures. Professionals in this role must also balance implementing strong security protocols with maintaining usability for end users. Additionally, responding to incidents often requires quick, coordinated action with other IT teams and clear communication with non-technical stakeholders. Ongoing learning and adapting to new technologies are essential for career growth in this fast-paced field.

What is defensive security in cybersecurity?

Defensive security in cybersecurity involves implementing measures to protect computer systems, networks, and data from cyber threats and attacks. It includes practices such as firewalls, intrusion detection systems, security monitoring, and vulnerability management, which are essential skills for a defensive cybersecurity professional. Certifications like CompTIA Security+ or CISSP are often valuable in this field.

Can you make $500,000 a year in cyber security?

In defensive cybersecurity roles, earning $500,000 annually is possible but typically requires senior positions such as security directors or chief information security officers with extensive experience, advanced certifications, and leadership responsibilities. Most cybersecurity professionals earn lower salaries, but high-level executives and specialists in certain industries or organizations can reach or exceed this income level.

What is defensive cyber security?

Defensive cyber security refers to the practice of protecting computer systems, networks, and data from unauthorized access, attacks, and damage. Professionals in this field implement security measures such as firewalls, intrusion detection systems, and security policies to prevent and respond to cyber threats. Their main goal is to safeguard information and ensure the confidentiality, integrity, and availability of digital assets. Defensive cyber security is essential for organizations to reduce the risk of cyberattacks and comply with regulatory requirements.

What are the key skills and qualifications needed to thrive as a Defensive Cyber Security professional, and why are they important?

To thrive as a Defensive Cyber Security professional, you need a solid understanding of network security, threat analysis, and incident response, typically backed by a relevant degree and industry certifications such as CompTIA Security+ or CISSP. Familiarity with security information and event management (SIEM) tools, firewalls, intrusion detection/prevention systems (IDS/IPS), and endpoint protection platforms is crucial. Strong analytical thinking, attention to detail, and effective communication set top professionals apart in this role. These skills and qualities are essential for proactively identifying vulnerabilities, mitigating threats, and safeguarding organizational assets.

What is the difference between Defensive Cyber Security vs Security Analyst?

AspectDefensive Cyber SecuritySecurity Analyst
CertificationsCompTIA Security+, CISSP, CEHCompTIA Security+, CISSP, CEH
Work EnvironmentSecurity teams, cybersecurity firms, IT departmentsSecurity teams, cybersecurity firms, IT departments
Employer & IndustryAny industry with IT infrastructure, government, finance, healthcareAny industry with IT infrastructure, government, finance, healthcare

Defensive Cyber Security focuses on protecting systems through firewalls, intrusion detection, and security protocols. Security Analysts monitor, analyze, and respond to security incidents. While both roles require similar certifications and work environments, Defensive Cyber Security emphasizes proactive defense strategies, whereas Security Analysts focus on incident response and analysis.

Is 40 too old for cyber security?

Defensive cyber security professionals can succeed at any age, as the field values skills, experience, and continuous learning. Many individuals transition into cybersecurity later in their careers, often bringing valuable expertise and certifications like CISSP or CompTIA Security+. Age is generally not a barrier to entering or advancing in cybersecurity roles.

What is the least stressful job in cyber security?

In cyber security, roles such as security analyst or compliance analyst are often considered less stressful because they typically involve routine monitoring, documentation, and adherence to established protocols. These positions usually have regular hours and less immediate pressure compared to roles like incident response or penetration testing, which require rapid decision-making during active threats.
More about Defensive Cyber Security jobs
What cities are hiring for Defensive Cyber Security jobs? Cities with the most Defensive Cyber Security job openings:
What states have the most Defensive Cyber Security jobs? States with the most job openings for Defensive Cyber Security jobs include:
What job categories do people searching Defensive Cyber Security jobs look for? The top searched job categories for Defensive Cyber Security jobs are:
Defensive Cyber Security jobs near you
Infographic showing various Defensive Cyber Security job openings in the United States as of July 2026, with employment types broken down into 96% Full Time, and 4% Part Time. Highlights an 83% In-person, 4% Hybrid, and 13% Remote job distribution, with an average salary of $132,962 per year, or $63.9 per hour.
FMS Defensive Cybersecurity Engineer, Mid

FMS Defensive Cybersecurity Engineer, Mid

Booz Allen Hamilton

San Diego, CA • On-site

Full-time

Posted 25 days ago

Booz Allen Hamilton rating

8.8

Company rating: 8.8 out of 10

Based on 48 frontline employees who took The Breakroom Quiz

9th of 58 rated business consultants

Job description

Job Summary:
Booz Allen Hamilton is seeking a FMS Defensive Cybersecurity Engineer to enhance international Security Cooperation through advanced cybersecurity capabilities. The role involves deploying interoperable security stacks, mentoring partner nation engineers, and ensuring technical systems meet joint operational requirements.
Responsibilities:
• Deploy Interoperable SOC Stacks, and lead the hands-on installation and tuning of SIEM, SOAR, and XDR solutions within partner environments.
• Ensure these platforms are optimized for real-time data sharing and seamless integration with U.S. defensive frameworks.
• Design and execute technical "train-the-trainer" programs.
• Work side-by-side with partner nation engineers to transition advanced skills in threat hunting, incident response, and SOC management, aligned with the NICE Framework.
• Architect log ingestion and data integration frameworks that normalize multi-source intelligence. By delivering these pipelines, you enable allies to contribute to a shared, high-fidelity Common Operational Picture (COP).
• Build and manage cloud-based virtual cyber ranges and integrated Learning Management Systems (LMS).
• Provide the "digital playgrounds" where partner forces can safely simulate adversarial TTPs and validate their tactical proficiency.
• Operationalize Zero Trust (ZTA): Execute the tactical rollout of Zero Trust controls, such as identity and micro-segmentation to enable secure collaboration. You deliver technical architecture that allows partners to access shared mission data without compromising national security.
• Tactical Exercise Platform: Spearhead the technical delivery of cyber range solutions for emulated environments. You provide the range infrastructure and real-time technical mentorship that matures partner nation response capabilities under combat-speed conditions.
• Technical Advisory for Procurement: Conduct deep-dive evaluations of cyber solutions to ensure partners acquire battle-ready, DoD-compatible technology that fits their specific operational requirements and workforce maturity level.
Qualifications:
Required:
• 3+ years of experience in cybersecurity engineering, including deploying technical solutions in support of DoD or international security cooperation
• Experience in configuring SIEM/XDR platforms and managing virtualized lab environments, such as VMware, AWS, or Azure
• Experience applying NIST, RMF, and NATO standards, such as FMN, to ensure technical systems are mission-ready for joint operations
• Ability to translate complex technical concepts into structured training and performance-based evaluations for broad audiences
• Secret clearance
• Bachelor’s degree in Cybersecurity, Computer, Electrical, or Electronics Engineering, or Mathematics
• Information Assurance Management (IAM), Information Assurance Technical (IAT), or Information Assurance System Architect and Engineer (IASAE) Level I DoD 8570.1M certification
Preferred:
• Experience working with foreign military cyber units in OCONUS environments
• Experience in Python or PowerShell to automate range deployments and data normalization for partner networks
• TS/SCI clearance
• CISSP, GCIH, or GCIA certification
• Completion of specialized training in cyber range orchestration
Company:
Booz Allen Hamilton is a consulting firm that specializes in analytics, technology, and engineering. Founded in 1914, the company is headquartered in Mclean, USA, with a team of 10001+ employees. The company is currently Late Stage.

What Booz Allen Hamilton employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Booz Allen Hamilton logo

About Booz Allen Hamilton

Sourced by ZipRecruiter

Booz Allen Hamilton is a leading provider of management and technology consulting services to the US government in defense, intelligence, and civil markets. Headquartered in McLean, Virginia, the firm also serves major corporations, institutions, and not-for-profit organizations. Founded in 1914 by Edwin G. Booz, the company has a long-standing tradition of helping clients achieve success by delivering a wide range of consulting services that include strategic planning, human capital and learning, communication, systems development, and others. The company's mission is to empower people to change the world, and it has a reputation for maintaining the highest standards of integrity and-excellence.

Industry

It services

Company size

10,000+ Employees

Headquarters location

McLean, VA, US

Year founded

1914

View All Booz Allen Hamilton Jobs

Apply