Top Cybersecurity Jobs

Leads independent oversight of operational, technology, cybersecurity, and AI/ML risks across the firm. Evaluates AI/ML platforms and use cases, performs thematic risk analysis, challenges first-line mitigation strategies, assesses threat exposures and controls, and collaborates with technology and risk stakeholders to support resilient, responsible AI adoption.

Lead technology risk and controls management for foundational platforms. Identify, quantify, report, and mitigate operational, compliance, and cybersecurity risks; evaluate control effectiveness; manage issues and governance; and advise technology stakeholders and senior leaders. Use authorized AI tools to synthesize evidence and develop reporting while validating outputs for security, auditability, data sensitivity, and regulatory compliance. Drive continuous control improvements and cross-functional collaboration.

Leads firmwide technology and cyber risk assessments, evaluates control effectiveness, develops risk reporting, monitors emerging threats and regulations, and drives remediation and governance activities. Partners with technology, audit, compliance, and risk teams to strengthen security and resilience, support regulatory examinations, and translate technical findings into business impact narratives. Requires expertise in technology risk frameworks, AI risk governance, data security, and control assurance.

Leads and scales Capco’s cybersecurity and AI practice for financial services clients. Responsibilities include defining Cyber AI strategy, developing offerings and reference architectures, leading complex security engagements, building executive client relationships, driving business development, closing deals, and developing high-performing teams.

Leads technology and cybersecurity audits covering cloud infrastructure, application controls, emerging technology, third-party management, and technology risk. Performs risk assessments, evaluates control effectiveness, analyzes evidence, documents findings, communicates results to management, tracks budgets, and supervises or coaches less experienced auditors. The role requires collaboration with clients and audit teams while delivering independent assurance over governance, risk management, and internal controls.

Conduct technology and cybersecurity audits for a global payment network, including risk assessments, control testing, cloud infrastructure, application controls, third-party management, and technology implementations. Document audit work, communicate risks and recommendations, track remediation actions, use data analytics, and collaborate with business partners and Audit teams.

Designs and implements Zero Trust architectures, leads customer engagement and solution design, gathers requirements, evaluates existing systems, and provides technical leadership for deployment optimization. The role requires deep networking and cybersecurity expertise, knowledge of NIST Zero Trust Architecture, advanced technical credentials, customer-facing communication, cloud familiarity, and the ability to apply AI tools to improve workflows and problem-solving.

Leads DigitalOcean’s security and core platform services portfolio, including security products, security engineering, identity, billing, secrets management, and observability. Owns strategy, roadmap, business outcomes, operational excellence, compliance, and executive reporting. Builds and scales product and engineering organizations, manages investment trade-offs, defines performance metrics, supports incident escalation, and partners cross-functionally to deliver secure, reliable, customer-focused cloud capabilities.

Partner with sales teams to win strategic data security opportunities. Present technical solutions, gather customer requirements, lead product evaluations, configure solutions, and design evaluation test plans. The role requires extensive pre-sales experience, security and networking expertise, data protection and web technology knowledge, and collaboration across matrixed go-to-market and partner teams.

Own the vision, roadmap, go-to-market strategy, datasets, scoring, findings, automation, integrations, pricing, and reporting for CrowdStrike’s automated AI red-teaming product. Partner with engineering, data science, security research, sales, marketing, and customers to improve AI threat detection and define a new product category. Translate offensive security research and emerging AI threats into product requirements, technical strategy, and prioritized execution.

Lead technology risk and controls activities across employee and data platforms. Identify, assess, quantify, and mitigate operational, compliance, cybersecurity, and data risks; evaluate control effectiveness; maintain control inventories; manage issues and governance reporting; and advise technology stakeholders, auditors, regulators, and executives. Use authorized AI capabilities to support risk evidence synthesis and reporting while validating outputs for security, auditability, and regulatory compliance.

Leads multiple engineering teams delivering customer-facing cybersecurity products. Sets technical direction and strategy, partners with Product Management, mentors engineering managers and engineers, establishes performance metrics, manages cross-organizational projects, hires engineering talent, and drives continuous improvement while fostering an empathetic, results-oriented engineering culture.

Leads technology risk and controls for an AI/ML data platform. Responsibilities include identifying and quantifying technology risks, evaluating control effectiveness, managing issues, supporting governance and regulatory compliance, and reporting risk posture to senior leadership. The role partners with technology, business control, data, assessment, and regulatory stakeholders, while using and validating enterprise-approved AI tools for risk evidence synthesis and reporting.

Leads cybersecurity detection engineering across enterprise and customer environments. Designs SIEM, EDR, SOAR, AI-driven, and automated detection capabilities; develops detection rules, remediation playbooks, and threat-hunting frameworks; manages log ingestion and data lake infrastructure; conducts attack simulations and purple-team exercises; and partners with Incident Response, Threat Intelligence, Vulnerability Management, Engineering, and Product teams. Provides technical mentorship, improves detection coverage, supports compliance, and contributes to off-hours response activities.

Conduct cybersecurity and technology risk assessments of third-party suppliers and cloud environments. Evaluate security controls, architectures, evidence, and compliance with industry frameworks; identify risks; document findings; recommend remediation; and communicate business impacts to stakeholders. The role also supports governance, escalation, reporting, threat monitoring, and continuous improvement of assessment methodologies while using approved AI tools responsibly.

Serve as a senior Second Line of Defense cybersecurity risk partner, independently assessing cybersecurity controls, secure development practices, cryptographic strategies, AI governance, and technology risks. Provide risk opinions, challenge risk acceptance decisions, recommend remediation, and enhance cybersecurity frameworks, standards, policies, and governance. Engage with technical and executive stakeholders, monitor emerging threats and regulatory expectations, and support research and testing across a complex financial services environment.

Partners with Sales to advise enterprise customers on cybersecurity, identity, access, asset visibility, exposure management, and risk solutions. Leads technical discovery, solution design, demonstrations, proof-of-value engagements, customer validation, training, and executive discussions. Translates technical capabilities into business outcomes while supporting complex enterprise sales cycles. Collaborates with Product, Marketing, Customer Success, and Support teams, and travels approximately 25–50% as required.

Leads cybersecurity compliance for classified information systems, including RMF assessment and authorization, risk assessments, continuous monitoring, configuration management, audits, incident response, and security documentation. Advises management and government customers, oversees staff and system security posture, and ensures compliance with federal and industry standards across classified computing environments.

Leads IT audit engagements assessing digital environments, processes, controls, cybersecurity, data integrity, and AI systems. Manages client relationships, audit teams, project delivery, compliance challenges, data quality validation, governance improvements, and risk management. The role also involves mentoring staff, applying IT governance frameworks, promoting innovative audit technologies, and ensuring assurance standards are met.

Leads customer success for healthcare cybersecurity accounts, managing ARR, retention risks, onboarding, adoption, risk reviews, compliance readiness, and executive relationships. Develops healthcare-specific playbooks covering medical device security, clinical network segmentation, protocols, incident response, and regulatory frameworks. Mentors Technical CSMs, coordinates cross-functional mitigations, gathers customer feedback, supports product improvements, and scales security practices across hospitals, laboratories, imaging centers, and clinical environments.

Lead critical cybersecurity incident response across on-premises and cloud environments. Analyze alerts, manage containment and remediation, coordinate with security, privacy, compliance, legal, and architecture teams, and drive corrective actions. Mentor analysts, improve security tooling and procedures, produce incident reports, and provide security engineering consultation. The role includes on-call responsibilities and a Wednesday-to-Saturday schedule.

Designs, implements, and maintains cybersecurity controls including firewalls, encryption, IDS/IPS, MFA, and network security measures. Conducts vulnerability assessments and penetration testing, monitors and responds to incidents, supports security audits, and develops security documentation. Collaborates with engineering teams on secure software development, cybersecurity requirements, compliance, and cyber supply chain threat monitoring. Provides technical troubleshooting and stays current with emerging threats and security practices.

Monitors and investigates security alerts, endpoint detections, vulnerabilities, and suspected incidents. Performs triage, documents findings, escalates threats, supports containment and remediation, and helps maintain cybersecurity tools. Collaborates with IT and other departments on incident response, audits, compliance assessments, tabletop exercises, reporting, and security improvements. The role requires foundational cybersecurity, networking, logging, threat, vulnerability, and security framework knowledge, along with relevant education, experience, and certifications.

The Cybersecurity Engineer III manages enterprise vulnerability programs across infrastructure, endpoints, applications, cloud, and networks. Responsibilities include developing scanning strategies, analyzing vulnerabilities and threat intelligence, prioritizing remediation, coordinating remediation teams, managing exceptions and compensating controls, producing risk reports, integrating security platforms, supporting assessments and audits, and automating scanning and reporting workflows. The role also provides technical guidance and communicates emerging security risks.

Advise Rapid7 customers on improving security posture, optimizing platform usage, and advancing security program maturity. Provide tailored recommendations, threat awareness reporting, customer deliverables, incident response assistance, and executive business reviews. Build relationships with technical and executive stakeholders, coordinate support, support renewals and retention, identify customer risks, and relay client requirements to influence the managed services roadmap.