Top Cybersecurity Jobs

Own administration, configuration, and lifecycle management of security tooling. Improve detection quality and reduce false positives, enforce change control and governance, maintain MITRE ATT&CK mapping and coverage analysis, and drive continuous optimisation of security tooling across enterprise, cloud, and network environments.

Monitor and analyze user activity and security logs to detect insider risks, perform investigative triage, conduct forensic analysis, document findings, and collaborate with HR, Legal, Privacy, and InfoSec to mitigate insider threats and improve detection processes.

Design and build Python-based automation workflows and API integrations to onboard and integrate security tools across acquisitions. Support Cloudflare domain onboarding and DNS troubleshooting, validate security configurations (WAF, SSL/TLS, caching), create Splunk SOAR playbooks, document processes, and collaborate with security and networking teams to resolve cross-system integration issues.

Assess and audit information security risks, develop and maintain risk tracking and executive reporting, partner with business and technology teams to remediate control gaps, support SOC/ICFR and internal/external audit readiness, and drive process improvements for risk visibility and accountability.

Lead governance and lifecycle management of enterprise Splunk knowledge objects, enforce CIM normalization and taxonomy, build automations for data quality, author standards and documentation, train teams, and act as SME across detection, SOC, and platform engineering to ensure high-fidelity SIEM detections at scale.

Lead cloud security product vision and roadmap, drive end-to-end lifecycle and enterprise adoption, champion DevSecOps, align executives and cross-functional teams, define technical requirements and KPIs, guide SAFe Agile delivery, and evaluate emerging cloud security technologies to ensure compliant, resilient cloud architectures.

Manage and administer Tanium modules and enterprise patching; perform vulnerability assessment and remediation; develop automation and remediation scripts; maintain Windows endpoints and system images; package and deploy software; troubleshoot OS/application/hardware issues; generate compliance/security reports and collaborate with security teams to meet audit requirements.

Lead and contribute to identity and access management (IAM/PAM) and security operations. Implement, deploy, and optimize SailPoint and PAM solutions, integrate with SIEM/SOC, enforce access governance and compliance, remediate identity risks, support incident escalation, deliver metrics and automation (including AI/Copilot), maintain SOPs, and mentor team members.

Provide high-level administrative support to senior security leaders, managing complex calendars, travel, meetings, communications, expense reporting, reports, and cross-functional coordination while handling confidential information and leveraging AI and automation tools to improve workflows.

Lead and execute identity and privileged access management, provisioning lifecycle, PAM and IAM implementations, incident escalation, SIEM/SOC enablement, compliance and audit support, metrics reporting, automation (including AI/Copilot), documentation, and mentoring to improve security operations and access governance.