Top Cyber Security Jobs

Serve as the primary security consultant for a line of business, advising on infrastructure, application, data, network, and access security. Lead security risk assessments, architecture reviews, escalate/manage cyber risk, coordinate cross-functional security solutions, support executives with security posture updates, and provide guidance on modern platforms including cloud, containers, APIs, and generative AI security.

Assess and audit information security risks, develop and maintain risk tracking and executive reporting, partner with business and technology teams to remediate control gaps, support SOC/ICFR and internal/external audit readiness, and drive process improvements for risk visibility and accountability.

Lead cloud security product vision and roadmap, drive end-to-end lifecycle and enterprise adoption, champion DevSecOps, align executives and cross-functional teams, define technical requirements and KPIs, guide SAFe Agile delivery, and evaluate emerging cloud security technologies to ensure compliant, resilient cloud architectures.

Secure IBM i (IBMi) servers and applications to prevent unauthorized access; produce audit evidence for ICFR/SOC/HITRUST; manage security reporting and investigations; build security reports using security tools, programming and SQL; review, prioritize, and remediate vulnerabilities.

Lead and run enterprise compliance and audit programs (PCI DSS 4.0, SOC 2, ISO 27001, SOX) across multiple business units. Manage external auditors and control-owner relationships, drive continuous audit readiness, track remediation, maintain PCI scope/ISA functions, and integrate a multi-framework Secure Controls Framework into BAU. Provide GRC leadership on architecture and product changes and mature cloud-native compliance practices.

Lead the end-to-end architecture and governance of enterprise Identity and Access Management (IAM) solutions. Design scalable, automated identity lifecycle, authentication, authorization, and integration capabilities across on‑prem, cloud, and hybrid environments. Establish standards and guardrails, drive remediation of audit findings, influence IAM roadmap, lead architecture reviews, mentor engineers, and ensure architectures meet security, compliance, and operational requirements.

Lead IAM architect responsible for defining, governing, and evolving enterprise identity and access management solutions across on‑premises, cloud, and hybrid environments. Own target-state architectures, enforce standards and guardrails, guide integrations and migrations, remediate audit findings, mentor architects and engineers, and influence IAM roadmaps to ensure secure, automated, auditable identity lifecycle and provisioning.

Lead the end-to-end architecture and governance of enterprise Identity and Access Management across on-prem, cloud, and hybrid environments. Define target-state and transition architectures, enforce standards, integrate IAM with applications and directories, support compliance and audit remediation, lead architecture reviews, influence roadmaps, and mentor engineers to deliver scalable, automated, and secure identity solutions for human and non-human identities.

Lead the end-to-end architecture and governance of enterprise Identity and Access Management (IAM) solutions across on-prem, cloud, and hybrid environments. Define target-state architectures, enforce standards and controls, integrate IAM with applications and directories, drive automation and remediation, support audit and compliance, and mentor engineers and stakeholders on identity security.

Lead a team delivering policy-as-code guardrails across multi-cloud and Kubernetes environments. Own policy lifecycle, Terraform/IaC controls, admission controllers, continuous compliance automation, drift detection, AI-assisted policy tooling, and threat modeling. Mentor engineers, set engineering standards, manage contractors, and collaborate cross-functionally to ensure secure, automated cloud platforms.

The Industrial Security Specialist ensures compliance with security regulations, manages personnel and material security, conducts training, and develops security programs.

Assess risks, develop and coordinate system security requirements, produce security documentation, support testing and sustainment of digitally-connected Boeing airplanes, and ensure configuration management and continued product security.

The Senior Industrial Security Specialist at Boeing manages classified information, ensures compliance with security protocols, conducts training, and coordinates with teams to secure program success.

Lead and scale Comcast's SOC, incident response, threat hunting, and detection engineering. Serve as senior incident commander for high-severity events, partner with engineering to build security tools and pipelines, drive detection strategy and continuous improvement, own metrics and executive reporting, manage vendor/partner relationships, and provide leadership for workforce planning and performance management across cyber operations.

Support and operate enterprise PKI and certificate lifecycle management, perform PKI/cryptography assessments, remediate cryptographic weaknesses, onboard systems to xPKI, automate certificate operations, maintain inventories, support KMS and HSMs, contribute to PQC readiness, and liaise with engineering and security teams to resolve cryptographic incidents and improve processes.

Support and maintain enterprise PKI and certificate management programs, automate certificate lifecycle processes, investigate and remediate cryptographic issues, support KMS and HSM operations, assess PKI configurations and inventories, and collaborate with engineering and security teams to improve cryptographic posture and prepare for post-quantum transitions.

Design and own the Machine Identity service architecture, drive PoCs (SPIFFE/SPIRE), enable Non-Human Identity governance, lead cross-team delivery and migrations, build SDKs, and define identity/authorization models for LLM and AI agent workloads.

Own and evolve Zscaler's shift-left data security program: operate data discovery and code-scanning tools, build PII/sensitive data inventories, define/enforce classification standards, lead DSPM and AI data governance evaluations, embed data security into the SDLC, and maintain audit evidence for SOC 2, FedRAMP, and ISO.

The Senior Security Engineer will design secure development lifecycles, integrate security tools, lead remediation of security issues, and mentor teammates, ensuring systems resilience and security across DraftKings.

The Security Analyst II will enhance Garner's security posture by monitoring threats, conducting risk analysis, ensuring compliance, and communicating effectively with stakeholders.

Drive application security by running SAST/SCA, threat modeling, vulnerability management, and remediation. Advise on secure architecture, train engineers, support pentests/bug bounties, and administer AWS Control Tower and IAM. Innovate with AI to improve AppSec tooling and practices.

The Senior Security Engineer will design and implement logging systems, automate threat detection, investigate incidents, and collaborate during security responses while utilizing AI tools and strong programming skills.

As a Senior Security Engineer, you will automate incident response processes, enhance security detection, and collaborate with red teams to improve defenses using AI technologies.

The Cloud Security Engineer will secure cloud infrastructure, implement solutions for systemic risks, and support internal projects using Kubernetes and service mesh technologies.

The Enterprise Security Engineer will focus on establishing a security program centered on zero trust, identity management, and automation while ensuring compliance and protecting sensitive data.