Top Cybersecurity Jobs

Leads enterprise Network Detection and Response architecture, deployment, optimization, and threat detection engineering across hybrid cloud and on-premises environments. Analyzes packet captures, network flows, protocols, and encrypted telemetry to identify advanced threats and lateral movement. Integrates NDR with SIEM, SOAR, and EDR platforms to automate response and improve detection and response times. Partners with threat intelligence, hunting, and incident response teams, conducts security architecture reviews, and mentors security engineers.

Designs and deploys proactive cyber defense and counter-adversary capabilities. Responsibilities include threat research, adversary behavior analysis, threat hunting, security automation, detection logic, attack-surface evaluation, vulnerability mitigation, and telemetry improvements across network, cloud, and endpoint environments. The role collaborates with threat intelligence and incident response teams and mentors security personnel on defensive engineering and advanced threat mitigation.

Monitors AI solution registrations, security reviews, compliance evidence, approved use records, telemetry, and control performance. The role triages alerts, policy violations, exceptions, incidents, and control gaps; supports root cause analysis and remediation; maintains audit-ready workpapers, logs, repositories, and metrics; and coordinates with engineering, application, identity, data protection, vendor risk, and Responsible AI teams. It also provides operational support for AI security governance processes.

Lead complex internal and external cybersecurity fraud investigations, including evidence collection, analysis, interviews, chain-of-custody documentation, and case reporting. Advise stakeholders on investigations and law-enforcement referrals, maintain external law-enforcement relationships, support digital-fraud collaboration, and help develop investigative processes aligned with industry best practices.

Triage security alerts from SIEM, EDR, email, and other sources; support users with security issues; investigate suspicious activity; escalate incidents; document resolutions; and collaborate with IT, compliance, and security teams. The role also identifies recurring patterns and process gaps, improves detections and workflows, evaluates automation opportunities, and uses approved AI tools to streamline security operations.

Leads enterprise GRC transformation and enablement across cyber, technology, AI, and business risk functions. Responsibilities include designing and operationalizing the GRC operating model, driving change management and adoption, embedding risk and control processes into workflows, managing transformation roadmaps, defining accountability models, measuring maturity and risk reduction, and influencing senior leaders in a regulated environment.

Leads Connected Device Security, Data Protection, and Insider Risk programs across healthcare environments. Develops cybersecurity roadmaps, DLP and information protection capabilities, insider threat governance, IoMT/IoT security processes, operational metrics, and investigative workflows. Partners with Security Operations, Engineering, Clinical Engineering, Privacy, Legal, HR, Compliance, and IT. Ensures alignment with HIPAA, HITECH, NIST, CIS Controls, and HITRUST while using approved AI tools to automate analytics and improve operations.

Oversee segment information risk management and support enterprise security processes. Partner with business and technology leaders on risk mitigation, audits, regulatory requirements, customer security needs, and contractual security reviews. Advise senior management on risks and mitigation strategies, lead security process improvements, and provide guidance and accountability to managers and senior professionals while supporting the BISO and Office of Information Security.

Lead design, development, and maintenance of Splunk SOAR playbooks, automations, and custom actions. Integrate SOAR with security tools and cloud platforms, deploy AI-assisted analyst workflows, identify automation opportunities with SOC and incident response teams, mentor analysts, and evaluate emerging AI and security automation trends.

Provides cybersecurity advisory and engineering support for healthcare operations and acquired entities. Responsibilities include risk assessments, vulnerability management, incident response coordination, remediation, security control implementation, enterprise security tool administration, compliance tracking, and integration support. The role also develops AI-powered security automations, uses approved AI tools to improve workflows and threat detection, and collaborates with IT, infrastructure, application, compliance, and security teams.