Top Cybersecurity Jobs

Leads and matures an enterprise digital forensics capability within Cyber Defense. Conducts complex investigations across endpoint, network, cloud, identity, application, and mobile environments; manages evidence collection, preservation, analysis, and chain of custody; supports incident response and insider-risk investigations; translates findings into detections and security improvements; evaluates forensic tooling; develops automation; and provides technical leadership, mentorship, reporting, and stakeholder guidance.

Design, develop, and support security logging and event collection pipelines across on-premises and cloud environments. Build solutions using Logstash, Kafka, and cloud platforms; monitor pipelines with Splunk and Grafana; troubleshoot alerts and high-priority incidents; facilitate deployments, upgrades, and break-fixes; and develop expertise in Terraform, AWS Lambda, and related technologies.

Triages security alerts, supports users with security issues, investigates suspicious activity, escalates incidents, documents resolutions, and improves security workflows and detections. The role uses SIEM, EDR, email security, DLP, and other security tools while collaborating with IT, compliance, and security teams. It is fully telecommute within the United States and emphasizes user education, process improvement, automation, and enterprise-approved AI tools.

Lead public cloud PCI compliance certification and internal and external audits. Translate regulatory and technical security requirements into cloud solutions and evidence, coordinate remediation with engineering and operations teams, automate evidence collection and control monitoring, and use AI-driven insights to improve security workflows and business outcomes.

Engineer and administer enterprise email security across Microsoft 365 tenants, including Defender, Exchange Online Protection, authentication, mail flow, threat investigations, automation, governance, and control validation. Support Proofpoint integrations and a Google Workspace to Microsoft 365 migration while documenting remediation, maintaining operational evidence, and coordinating incident, change, risk, and security governance activities.

Provides L1.5 escalation support for enterprise security, gateway infrastructure, IAM, MFA, SSO, authentication, and privacy issues in a 24/7 remote call center. Troubleshoots escalated calls and tickets, investigates security and privacy incidents, verifies identities, documents resolutions, follows compliance procedures, and coordinates with Tier 2/3 teams. The role requires rotational shifts, strong multitasking, fast accurate typing, and adherence to HIPAA and data privacy standards.

Lead complex cybersecurity due diligence programs across mergers, acquisitions, and enterprise integration efforts. Coordinate architects, engineers, legal teams, and business leaders; translate technical risks into executive recommendations; develop governance, dashboards, KPIs, and reporting; facilitate risk decisions; and establish repeatable assessment frameworks. The role requires strong program management, cybersecurity knowledge, dependency and risk management, presentation design, and data visualization skills.

Owns engineering and operations for Microsoft Entra ID and Microsoft 365 identity capabilities across complex tenant environments. Responsibilities include configuring authentication, Conditional Access, MFA, SSO, privileged access, identity governance, lifecycle processes, automation, monitoring, migration, documentation, incident response, and change governance. The role supports a Google Workspace-to-Microsoft 365 migration and identity services for approximately 10,000 external agents.

Manage and triage information security risk records in eGRC, engage technical stakeholders for risk reviews, support risk services modernization, ensure SLAs, drive remediation, and educate business units on compliance and security frameworks.

Designs and deploys threat intelligence capabilities across enterprise security tooling. Integrates TIPs, SIEM, SOAR, EDR, and intelligence feeds; builds automated pipelines, detection mechanisms, enrichment workflows, and response playbooks. Develops integrations, orchestrates security tools, and applies AI, LLMs, and RAG to accelerate intelligence processing. Provides technical leadership for CTI, SOC, incident response, threat hunting, fraud, insider risk, and red-team teams.