Top Cyber Security Jobs

Leads cybersecurity compliance for classified information systems, including RMF assessment and authorization, risk assessments, continuous monitoring, configuration management, audits, incident response, and security documentation. Advises management and government customers, oversees staff and system security posture, and ensures compliance with federal and industry standards across classified computing environments.

Leads cybersecurity compliance and authorization activities for classified information systems. The ISSM manages RMF assessment and authorization, security analysis, configuration management, continuous monitoring, risk assessments, incident response, inventories, compliance documentation, and protective mechanisms. The role advises management and customers, leads technical staff, and interfaces with government stakeholders and suppliers. Candidates must hold IAM Level III certification, extensive RMF experience, active CI polygraph credentials, and an active TS/SCI clearance.

Oversee supplier information security issue management and third-party risk remediation. Review assessment findings, validate supplier closure evidence, guide stakeholders on action plans and risk acceptance, and manage issues through closure. The role supports critical and high-risk suppliers, improves supplier management processes, shares best practices, and communicates risk status to senior management across business groups.

Manage supplier information-security issue lifecycles, review assessment findings, validate remediation evidence, guide stakeholders on risk reduction and acceptance, and oversee critical supplier remediation. The role requires collaboration across business groups, senior-level communication, documentation review, process improvement, compliance expertise, and supplier risk oversight.

Designs and manages security controls for AWS and Kubernetes environments, including sandboxing, infrastructure-as-code, cluster hardening, threat modeling, audits, CI/CD security, incident response, and compliance. The role collaborates with engineering and infrastructure teams, mentors engineers, and advocates for cloud security practices across the organization.

Lead system security engineering efforts by analyzing adversary threats, designing security architectures, implementing and testing countermeasures, and delivering defense-in-depth solutions. The role involves writing system requirements, defining architectures, integrating hardware and software, validating solutions, applying U.S. Government guidance, using advanced security technologies, and leading an engineering team in a fully onsite defense environment.

Partners with Sales to lead technical discovery, solution design, demonstrations, proof-of-value engagements, and customer validations for cybersecurity, identity, asset visibility, exposure management, and risk solutions. Advises enterprise security, infrastructure, IT, risk, and executive stakeholders; translates technical capabilities into business outcomes; develops technical documentation; delivers training; and supports sales pursuits, marketing events, and executive discussions.

Supports Mastercard’s Global Fusion Center through cybersecurity intelligence research, threat analysis, briefings, exercises, and cross-functional security projects. The intern will help identify emerging cyber threats, analyze security trends, communicate complex findings, and contribute to intelligence-driven security practices while developing professional skills through mentorship and networking.

Supports Mastercard’s Subsidiary Security team in helping acquired companies securely integrate into Mastercard. The intern will assess security risks and emerging technologies, contribute to integration roadmaps, complete cybersecurity-related projects, and communicate technical concepts to diverse audiences. The role also involves managing multiple priorities, collaborating across teams, developing cybersecurity expertise, and applying foundational AI knowledge.

Leads Mastercard’s global Enterprise Resilience function, including crisis, operational, business, technology, cyber, and cloud resilience. Develops strategy, governance, policies, regulatory compliance, risk mitigation, and end-to-end exercising and testing. Manages global senior teams, budgets, stakeholders, suppliers, clients, audits, regulatory inspections, emergency response, recovery procedures, and continuous improvement programs.

Develop secure platform services and security features using Go, Scala, or Python; identify attack surfaces, harden products, debug system issues, and participate in security code and design reviews. Collaborate across engineering and product teams, contribute to secure coding guidelines, and assess AI-generated code and AI-powered features. The role offers mentorship in cryptography, threat modeling, distributed systems, API security, and system-level testing.

Leads full-stack engineering projects and developers building cloud-based, distributed microservices and cybersecurity solutions. Defines service boundaries, integration patterns, coding standards, and reusable frameworks; mentors engineers; evaluates emerging technologies; improves system performance and reduces technical debt. Works with product managers, architects, and Agile teams using modern programming languages, databases, containers, cloud platforms, CI/CD, infrastructure as code, automated testing, observability, and AI-assisted development tools.

Evaluate and mature cybersecurity capabilities using frameworks such as NIST CSF. Analyze cyber data, risks, vulnerabilities, controls, and logging strategies; lead assessments; identify root causes; track maturity objectives; and create executive and technical risk reports. Coordinate governance, metrics, and reporting across teams while partnering with stakeholders and executives to drive cybersecurity improvements.

Lead and mature the enterprise information security program, oversee cybersecurity operations, GRC, risk management, IAM, vulnerability and third-party risk programs, ensure regulatory compliance, drive incident response and cyber resilience, and advise executive leadership and the Board on security strategy and investments.

Lead end-to-end execution of a 12+ initiative product security program, managing cross-team dependencies, vendor procurement, BAU security operations, and executive reporting. Maintain roadmap and tracking in Jira/Confluence, drive procurement/POCs, produce executive-ready metrics, and establish program cadence to ensure timely remediation and predictable delivery.

Supports enterprise IT and cybersecurity risk management by leading risk assessments, maintaining risk inventories, applying frameworks such as NIST and COBIT, generating Archer reports, automating oversight analytics, and presenting findings to governance committees and regulators. The role collaborates with IT, Security, Legal, Compliance, Internal Audit, and third-party risk teams while improving risk methodologies, controls, policies, and issue tracking.

The Senior Security Engineer supports application security, vulnerability assessments, penetration testing, code reviews, security training, and secure SDLC practices. Responsibilities include third-party risk assessments, audit evidence collection, policy and compliance support, vulnerability research, incident response, security metrics, and remediation tracking. The role also administers security-system access, collaborates cross-functionally, guides junior engineers, responds to inquiries, and participates in a rotating one-week-per-month on-call schedule.

Cybersecurity interns support SOC operations by monitoring SIEM and EDR alerts, triaging and investigating threats, analyzing security logs, assisting incident response and phishing analysis, researching vulnerabilities, and maintaining playbooks and documentation. They collaborate with cybersecurity professionals on client-facing deliverables while developing practical experience in threat detection, security operations, and incident response.

Provides white-glove technology and cybersecurity support to senior executives in corporate and residential environments. Responsibilities include resolving high-priority incidents, securing endpoints and home networks, executing remediation plans, conducting post-incident reviews, creating service standards, coordinating executive coverage, maintaining audit readiness, supporting collaboration technologies, and advising leadership on technology risks. Requires discretion, executive presence, strong networking and endpoint-security expertise, on-call flexibility, and domestic travel to executive residences.

Leads enterprise PAM engineering, including credential vaulting, secrets management, session control, least-privilege enforcement, automation, and Zero Trust modernization. Manages engineers, platform roadmaps, risk reduction, incident response, cloud and hybrid integrations, DevSecOps enablement, compliance, resource planning, and talent development. Partners across IAM, cloud, infrastructure, architecture, and application teams to deliver scalable privileged access solutions.

Leads Internal Audit assurance and advisory coverage for global cybersecurity, infrastructure, cloud, identity, threat detection, third-party risk, and IT operations. Owns risk assessments, audit planning, execution, reporting, remediation validation, and methodology. Advises CISO and CTO leadership, evaluates AI-enabled security risks and controls, expands analytics and continuous auditing, and develops a global team of technology and cybersecurity auditors. Communicates risk insights to executives, Audit Committee members, and risk committees.

Leads an enterprise PAM engineering organization responsible for credential vaulting, secrets management, session control, least-privilege enforcement, and privileged identity risk reduction. Oversees modernization, automation, DevSecOps integration, cloud-ready architectures, incident response, compliance, and platform roadmaps across hybrid environments. Manages engineers, resources, and investments while partnering with IAM, cloud, infrastructure, application, and security architecture teams. Develops talent and ensures responsible use of AI-assisted development tools.

Leads an enterprise Privileged Access Management engineering organization, overseeing PAM strategy, platform modernization, credential vaulting, secrets management, session control, least-privilege enforcement, automation, and cloud-ready access solutions. Manages engineers, drives DevSecOps and Zero Trust integration, reduces privileged-access vulnerabilities, partners across security and infrastructure teams, provides technical oversight for enterprise initiatives, responds to access incidents, manages resources and budgets, and develops engineering talent.

Lead design and implementation of security frameworks for AI systems, performing threat modeling, adversarial defense, secure MLOps, architecture reviews (including MCP and agentic systems), authoring standards and reference architectures, managing large AI security projects, and mentoring cross-functional teams to strengthen AI security posture.

Leads enterprise data security and information governance by building data intake, catalog, marketplace, classification, lineage, and access-control programs. Translates privacy and security requirements into technical controls, self-service workflows, and governance documentation. Partners with Legal, InfoSec, engineering, product, and data teams to support compliant data use, AI/ML initiatives, and regulatory requirements including HIPAA, GDPR, and CCPA. Measures adoption, turnaround times, and governance maturity across a global SaaS organization.