Top Senior Cyber Security Jobs

Own security and infrastructure for a fintech payments platform, with security comprising roughly two-thirds of the role. Responsibilities include cloud and application security, IAM, secrets management, threat modeling, detection engineering, incident response, vulnerability management, compliance, privacy, CI/CD, infrastructure as code, observability, reliability, backups, disaster recovery, and on-call operations. The role reports to the CTO and will establish the security function as the company’s founding security hire.

Design, build, and maintain cloud-native security data and infrastructure platforms. Implement ETL/ELT pipelines, automate security controls with Terraform and Python, integrate log sources, and support detection, response, and compliance for federal environments.

Provides information systems security engineering for complex, geographically distributed systems. Responsibilities include designing security architectures, validating requirements, assessing and mitigating risks, applying the Risk Management Framework, conducting vulnerability and security testing, auditing configurations, supporting certification and continuous monitoring, enforcing security policies, and collaborating with engineering, development, integration, test, program management, and customer teams.

Lead Etix’s company-wide security program, strategy, roadmap, and risk management. Strengthen application, API, cloud, infrastructure, IAM, monitoring, and secure SDLC practices; establish data governance and privacy controls; maintain PCI-DSS compliance; prepare for SOC 2; and lead incident response. Partner with engineering, product, IT, legal, and executives across globally distributed teams while communicating security risks and priorities to leadership, customers, auditors, and partners.

Designs, automates, and supports complex cybersecurity solutions across cloud and infrastructure environments. Responsibilities include security alert monitoring, incident and vulnerability management, security architecture, SIEM tuning, access reviews, compliance with frameworks such as SOC 2 and CMMC, risk assessments, third-party security reviews, scripting, and secure technology guidance. The role also mentors team members and partners with technical and business stakeholders to improve security posture.

Own Forterra’s product security program across autonomous vehicle platforms, including security strategy, governance, DoD ATO and IATT lifecycles, STIG compliance, threat modeling, SBOM and vulnerability management, incident response, and security requirements. Lead product security engineers and cross-functional contributors, brief executives and government stakeholders, support bids and customer evaluations, and build a security-focused engineering culture.

Provides senior security guidance and hands-on DevSecOps engineering for Cisco Intersight. Responsibilities include assessing application and delivery-workflow security, interpreting security mandates and audit requirements, conducting architecture and threat assessments, prioritizing vulnerability remediation, supporting compliance and build-environment security, and developing automation, reporting, hardening, and remediation solutions. The role collaborates with engineering, architecture, product, SRE, compliance, and corporate security stakeholders.

Leads end-to-end cybersecurity architecture for Aurora’s autonomous vehicle platform, including embedded systems, safety-critical ECUs, vehicle hardware, cloud services, and infrastructure. Responsibilities include threat modeling, secure design reviews, cryptographic architecture, supplier security requirements, security roadmaps, governance, and risk mitigation. The role partners with Security, Engineering, Product, suppliers, and Tier 1 partners to integrate defense-in-depth security across the product lifecycle.

Build secure-by-default infrastructure platforms, policy-as-code guardrails, identity and access automation, and automated security and compliance controls. Develop reusable infrastructure patterns, self-service workflows, CI/CD and GitOps protections, least-privilege enforcement, and continuous compliance capabilities. Detect configuration drift and automate remediation across cloud environments and engineering workflows while collaborating with teams across the organization.

Designs, develops, and operates encryption, tokenization, and key management platforms that protect sensitive data. Leads secure, scalable architecture and production implementation, ensuring high availability, disaster recovery, observability, compliance, and auditability. Partners with security, compliance, governance, product, and application teams; applies cryptography standards; mentors engineers; and improves platform performance, cost efficiency, reliability, and developer experience. Requires strong software engineering, cloud, SRE, cryptography, stateful systems, CI/CD, and infrastructure-as-code expertise.

Owns federal system authorization, security posture, and remediation for CBP systems. ISSOs manage authorization decisions, control implementation, POA&Ms, security reviews, and documentation. Security engineers harden, monitor, and remediate systems, develop secure configurations and tooling, and address findings at their root causes. Leads oversee security engineering standards and accountability. The role requires collaboration with network, cloud, deployment, and government security teams in a documentation-heavy RMF environment.

Provides onsite cybersecurity engineering for classified defense intelligence systems. Responsibilities include supporting DIA authorization and accreditation under RMF, obtaining IATT, ATC, and ATO approvals, designing secure systems and physical controls, configuring and validating security tools, developing test plans, analyzing scan results, remediating vulnerabilities, and supporting incident response. The role requires advanced Windows and Linux administration, security tool expertise, IAT Level 2 compliance, and a TS/SCI clearance with polygraph.

The Information Security Architect develops enterprise security architectures, standards, reference patterns, and secure design practices. They advise application, infrastructure, product, DevOps, and technology teams; conduct architecture reviews and threat modeling; integrate security controls and GRC requirements; evaluate emerging technologies; support vendor assessments; and advance security strategy and roadmaps. The role requires strong cross-functional influence, communication, technical analysis, and the ability to translate business needs into scalable, secure solutions.

Develop and lead enterprise security architecture across on-premises, cloud, and containerized environments. Establish security standards, roadmaps, hardening practices, and AI security controls; review architectures, guide implementations, evaluate security tools, and mitigate technology risks. Advise business and engineering stakeholders, oversee proof-of-concepts and integrations, monitor security effectiveness, and address emerging cyber threats through threat intelligence and strategic risk management.

Designs, engineers, administers, and supports enterprise Exchange environments across Microsoft 365, hybrid, and on-premises systems. Owns mail flow, SMTP, transport, migration, identity integration, and messaging architecture. Administers Proofpoint, EOP, DMARC, SPF, DKIM, anti-phishing, and anti-spoofing controls. Leads incident response, root-cause analysis, security investigations, change and release management, vendor coordination, documentation, and collaboration with security operations and infrastructure teams.

Provides cybersecurity engineering and architecture support for classified information systems. Develops secure technical standards, evaluates technologies, performs gap and risk analyses, advises stakeholders, and leads cybersecurity initiatives. Collaborates with architecture, engineering, and operations teams to deploy compliant solutions, improve efficiency, and reduce technical debt. The role is 100% onsite in Tucson, requires an active Secret clearance, and includes up to 10% business travel. A DoD 8570.01 IAM Level III certification must be obtained within six months if not already held.

Defines enterprise OT cybersecurity strategy, architecture, standards, and roadmap across global manufacturing, distribution, and laboratory operations. Leads initiatives involving segmentation, monitoring, secure remote access, risk remediation, policy development, audits, and executive engagement. Partners with operational and engineering stakeholders to improve security, uptime, resilience, and organizational maturity.

Leads the design and implementation of secure IT infrastructure, performs security monitoring and threat analysis, enforces security controls, evaluates security technologies, manages patching and vulnerability scanning, and maintains continuous system security. Provides guidance to stakeholders, manages security projects, mentors junior engineers, and participates in incident-response on-call rotations.

Lead pre-sales security architecture engagements by designing and validating defense-in-depth solutions across hybrid, cloud, application, identity, endpoint, network, and data environments. Conduct security assessments, create remediation roadmaps, integrate security platforms, and support DevSecOps, SOC, detection engineering, incident response, compliance, and risk programs. Collaborate with sales, engineering, clients, and executive stakeholders to communicate technical trade-offs and deliver scalable enterprise security strategies.

Leads complex cybersecurity initiatives, including Microsoft Purview DLP and data classification, third-party risk assessments, security architecture, vulnerability scanning, penetration testing, and incident response. Designs and manages enterprise security solutions, investigates application and service security, performs risk assessments and root-cause analysis, and advises stakeholders on security practices. The role also mentors colleagues, documents processes, and supports emerging AI and cloud security risks.

Designs, implements, and operates SASE and ZTNA architecture across GCCH and commercial environments. Owns identity-driven access controls, session management, telemetry, compliance mapping, dashboards, and audit evidence. Serves as the senior escalation point for incidents, performs root-cause analysis, integrates device posture and SOAR workflows, develops AI-enabled automations, collaborates with identity, network, compliance, and vendors, and mentors junior engineers.

Implements and operates Identity and Access Management solutions covering provisioning, access governance, identity federation, and secure application integrations. Develops IAM architecture and design documentation, troubleshoots access issues, supports SAML and OAuth integrations, and helps ensure policy compliance and performance. The role may lead IAM projects and work across hybrid cloud and on-premise environments using platforms such as Oracle IAM and CyberArk. It also requires Linux or Unix knowledge and may involve monitoring with SIEM tools.

Owns the company-wide IT and cybersecurity program, including SOC 2 compliance, cloud security, penetration-test remediation, business continuity testing, endpoint management, access controls, onboarding and offboarding, AI security governance, vendor reviews, security training, incident response, and employee IT support. The role partners with engineering, HR, Finance, leadership, auditors, and healthcare customers while managing security across AWS, Heroku, Cloudflare, Google Workspace, GitHub, and related tools.

Build and automate security infrastructure across AWS and Kubernetes, including cryptographic material lifecycle, telemetry pipelines, policy-as-code, compliance monitoring, and incident-response tooling. Develop agentic AI workflows using coding assistants, MCP integrations, and custom harnesses. Apply threat modeling and secure architecture review while partnering with engineering, risk, auditors, vendors, and clients. The role emphasizes production software, cloud-native automation, continuous control monitoring, and eliminating manual security toil.

Build and operate a reliable security platform across hundreds of AWS environments. Responsibilities include security telemetry and OpenSearch infrastructure, GitOps deployments, Kubernetes and AWS security controls, cross-account and multi-region architecture, Python automation, and agentic AI workflows. The role participates in on-call support, security incident enablement, audit evidence automation, and reliability improvements while collaborating with Security Operations, Risk, and SRE teams.