Top Fintech Cybersecurity Jobs

Develops cybersecurity awareness learning experiences, communications, campaigns, multimedia content, and social engineering initiatives. Translates technical concepts for diverse audiences using instructional design, behavioral science, gamification, and storytelling. Measures learner engagement and program effectiveness through feedback, simulations, dashboards, and analytics while collaborating with cybersecurity, communications, learning, compliance, risk, and fraud partners.

Lead the enterprise AI security and Agentic AI program by designing secure AI agents for cybersecurity operations, integrating Microsoft AI and security platforms, and establishing governance, risk controls, auditability, and responsible AI practices. Build reusable frameworks and guardrails addressing prompt injection, permissions, data leakage, and unauthorized actions. Partner with Security, Risk, Compliance, Legal, and Technology teams to enable compliant enterprise AI adoption.

Conduct application security testing across the SDLC using DAST, SAST, SCA, and manual testing tools. Analyze vulnerabilities, guide developers on remediation and secure coding, integrate security scans into CI/CD pipelines, automate processes, manage findings and exceptions, and maintain compliance with NIST, PCI-DSS, FFIEC, SOX, and CIS frameworks. The role also requires scripting, collaboration with DevOps and development teams, vulnerability documentation, and continuous improvement of application security practices.

Supports red team operations through adversary emulation, assumed-breach testing, purple team exercises, and AI security assessments. Tests prompt injection, AI guardrails, data access, developer copilots, automation platforms, APIs, identity, and permissions. Researches attacker techniques targeting applications, CI/CD, and LLM systems; contributes to playbooks, evidence collection, reporting, and defensive collaboration. Also develops custom ML/LLM models and applies AI to improve cybersecurity controls and threat response.

Cybersecurity intern supporting vulnerability management, security awareness, third-party risk assessments, and security metrics reporting. Responsibilities include prioritizing and tracking vulnerabilities, investigating suspicious emails, developing phishing campaigns and training content, designing tabletop exercises, assisting with vendor security assessments, and building dashboards in Power BI or Tableau. The intern will also shadow security teams and present a capstone project to information security leadership.

Supports and improves cybersecurity operations across cyber threat intelligence, SOC operations, network security, and proactive security. Enhances workflows, tooling, automation, and intelligence processes; investigates incidents and anomalous activity; supports network reviews, red team engagements, application security testing, and vulnerability management. Pilots AI-powered tools and briefs security leadership. Requires strong SIEM, EDR, network monitoring, MITRE ATT&CK, vulnerability management, and LLM experience.

The Privacy Engineer supports GM Financial’s Privacy Office by developing privacy controls, policies, standards, and scalable technical solutions. Responsibilities include advising stakeholders on privacy requirements, implementing consent and cookie compliance workflows, supporting marketing and ad tech strategy, conducting privacy process reviews, automating audits with Python, and applying anonymization and pseudonymization techniques. The role requires translating legal and regulatory requirements into technical solutions and managing multiple privacy projects.

Leads cryptography engineering for PKI, certificate lifecycle management, key management, and HSM systems. Designs secure, automated solutions; supports critical security platforms; handles complex incidents; evaluates architectures and technologies; and informs encryption and enterprise key management roadmaps. Serves as a senior information security consultant, collaborates with risk and security operations teams, and coaches junior professionals.

Leads application security testing across the software development lifecycle, identifying vulnerabilities and secure coding weaknesses through SAST, DAST, SCA, threat modeling, penetration testing, and API assessments. Recommends remediation, communicates risks, automates security processes, and supports secure design across applications, cloud environments, vendors, and third-party solutions. Leads AI security initiatives involving LLM threat modeling and supply-chain reviews, trains developers, and monitors emerging security threats.

Lead the Vendor Technology Risk program, managing a team to assess and reduce vendor information security risk. Conduct deep-dive technical assessments (cloud, application, mobile, network), design security controls and architectures via threat modeling, advise on regulatory applicability, negotiate contractual security requirements, and embed security reviews into procurement and SDLC processes.

Conduct forensic acquisition and analysis of computers, mobile devices, cloud accounts, and removable media for investigations, incident response, fraud, insider threat, eDiscovery, and legal matters. Maintain chain of custody, analyze digital artifacts, write technical and court-ready reports, provide testimony, and help review junior examiners’ work. The role requires strong forensic tool proficiency, knowledge of major operating systems, evidence handling expertise, and clear communication.

Supports Cybersecurity National Examination Team initiatives through project management, administrative coordination, cybersecurity awareness materials, emerging-risk research, market intelligence, and participation in examination meetings and debriefs. The intern will work on process improvements and research projects while developing exposure to bank supervision and regulation.