Top Senior Cyber Security Jobs

Leads product security engineering for satellite and ground systems, including cybersecurity architecture, RMF implementation, risk and vulnerability assessments, cryptographic keying, security requirements, certification, supplier security, and lifecycle resiliency. Coordinates with engineering teams, customers, government agencies, suppliers, and senior leadership while supporting classified environments and accreditation activities.

Leads security engineering efforts by designing secure enterprise solutions, developing and reviewing production code, conducting threat modeling and vulnerability testing, and strengthening security controls. Uses authorized AI tools to accelerate security workflows while validating outputs, protecting sensitive data, and maintaining auditability. Partners with stakeholders to address vulnerabilities and improve resiliency across the SDLC.

Owns the vision, roadmap, backlog, and delivery of cryptographic services and data protection cybersecurity products. Translates customer and business needs into engineering objectives, user stories, acceptance criteria, and prioritized features. Partners with product, engineering, architecture, and cross-functional teams in Agile and SAFe ceremonies. Uses expertise in PKI, encryption, cloud security, risk management, analytics, resilience, and emerging technologies such as post-quantum cryptography to improve cybersecurity capabilities.

Build and operate secure, resilient distributed systems for secrets and key management across Cloudflare’s global network. Re-architect internal PKI and machine or workload identity systems, participate in on-call incident response, support internal developers, and advise engineering teams on secure system design. The role requires software development, distributed systems expertise, Linux/UNIX administration, and hands-on security implementation experience.

Designs and delivers cloud and on-premises security platforms, automated controls, IAM, endpoint, network, and data protection systems. Develops automation for vulnerability management, detection, and compliance monitoring; advises on incident response and forensics; integrates security into enterprise platforms; evaluates security technologies; establishes engineering standards; and supports security tools. Requires at least five years of cybersecurity or IT experience, cloud experience, and experience implementing automated security solutions.

Lead secure software development for JPMorganChase’s Cybersecurity and Technology Controls team. Responsibilities include designing, coding, testing, troubleshooting, and improving reliable, scalable applications and platforms. The role leads resiliency reviews, incident response, observability, service-level objectives, automation, performance improvements, and technical initiatives. It requires expertise in Python or Java, cloud-native systems, containers, CI/CD, networking, reliability engineering, and security best practices.

Lead system security engineering efforts by analyzing adversary threats, designing security architectures, implementing and testing countermeasures, and delivering defense-in-depth solutions. The role involves writing system requirements, defining architectures, integrating hardware and software, validating solutions, applying U.S. Government guidance, using advanced security technologies, and leading an engineering team in a fully onsite defense environment.

Leads enterprise PAM engineering, including credential vaulting, secrets management, session control, least-privilege enforcement, automation, and Zero Trust modernization. Manages engineers, platform roadmaps, risk reduction, incident response, cloud and hybrid integrations, DevSecOps enablement, compliance, resource planning, and talent development. Partners across IAM, cloud, infrastructure, architecture, and application teams to deliver scalable privileged access solutions.

Leads an enterprise PAM engineering organization responsible for credential vaulting, secrets management, session control, least-privilege enforcement, and privileged identity risk reduction. Oversees modernization, automation, DevSecOps integration, cloud-ready architectures, incident response, compliance, and platform roadmaps across hybrid environments. Manages engineers, resources, and investments while partnering with IAM, cloud, infrastructure, application, and security architecture teams. Develops talent and ensures responsible use of AI-assisted development tools.

Leads an enterprise Privileged Access Management engineering organization, overseeing PAM strategy, platform modernization, credential vaulting, secrets management, session control, least-privilege enforcement, automation, and cloud-ready access solutions. Manages engineers, drives DevSecOps and Zero Trust integration, reduces privileged-access vulnerabilities, partners across security and infrastructure teams, provides technical oversight for enterprise initiatives, responds to access incidents, manages resources and budgets, and develops engineering talent.

Secure Runpod’s multitenant GPU cloud infrastructure across bare-metal and virtualized environments. Responsibilities include designing workload and network isolation, hardening Linux kernels and container platforms, testing hypervisor and hardware security, developing low-level controls in C, Go, or Rust, securing GPU and PCIe interactions, and responding to infrastructure security incidents with forensic capabilities for ephemeral containers.

Leads product security engineering for defense training systems across requirements, architecture, assessment, testing, certification, and sustainment. Develops cybersecurity controls aligned with DoD RMF, JSIG, and NISPOM; conducts threat and risk assessments; identifies vulnerabilities; tracks mitigation; advises stakeholders; and supports cyber validation, audits, and certification. The role collaborates with engineering, customer, supplier, and industry partners while independently completing cybersecurity tasks.

Designs and delivers cloud and on-premises security platforms, automated controls, IAM, endpoint, network, and data protection solutions. Develops vulnerability management and compliance automation, advises on incident response and forensics, integrates security into enterprise platforms, evaluates security technologies, establishes engineering standards, and supports security tools. Requires cybersecurity experience, cloud expertise, automation capabilities, and familiarity with Palo Alto Networks, infrastructure as code, CI/CD, and security engineering practices.

Lead enterprise cybersecurity engineering strategy across encryption, data protection, cryptographic policy, cloud security, DevSecOps, and automated security controls. Architect scalable key management and tokenization solutions, establish security reference architectures, automate detection and remediation, resolve systemic vulnerabilities, and embed security into software, cloud, infrastructure, and data platforms. Mentor senior engineers, influence technical roadmaps, and translate emerging threats into proactive architectural mitigations.

Leads security engineering across multiple technology domains, clarifies security requirements, supports multi-level network security, and advises stakeholders during vulnerabilities and disruptive events. Performs threat modeling, risk assessment, vulnerability and penetration testing, and validates AI-assisted security recommendations. Designs and implements enterprise security solutions while ensuring security testing, control validation, traceability, auditability, and resiliency throughout software development lifecycles and toolchains.

Leads AI-focused application security across software, cloud, hardware, and firmware. Conducts security assessments and AI-driven red-team exercises, develops secure-code fixes and AI-enabled security tooling, validates controls for LLM and agentic systems, and shapes organization-wide AI security strategy. Partners with engineering, hardware, and executive stakeholders to identify threats, implement mitigations, and safely adopt AI within security operations.

Designs and implements network security architecture for CoreWeave’s hyperscale AI cloud infrastructure. Responsibilities include firewalls, intrusion prevention, segmentation, Zero Trust, monitoring, incident response, and securing GPU clusters and high-speed interconnects. The role collaborates with networking, infrastructure, DevOps, and software teams; develops security policies; supports compliance; leads initiatives; and mentors engineers.

Secures Snyk’s GCP and AWS cloud platforms through threat modeling, IAM hardening, Kubernetes and container security, Terraform and pipeline fixes, CSPM integration, and secure configuration baselines. Uses AI coding agents and MCP integrations to scale infrastructure remediation while reviewing changes for unsafe defaults, excessive permissions, and agent-related risks. Works consultatively with platform teams to implement and measure security improvements.

Architects and manages enterprise security engineering, threat detection, vulnerability assessment, security hardening, incident response, and security policies across cloud, on-premises, and SaaS environments. The role monitors security logs, supports compliance, advises on vendors and implementations, integrates security into the development lifecycle, and participates in on-call and change management activities.

Lead Snap’s Production Security team and secure infrastructure across AWS and Google Cloud. Set technical strategy for perimeter security, workload identity, secrets management, CI/CD, and cloud controls; oversee service reliability, incident response, vulnerability remediation, security reviews, and risk acceptance. Partner with engineering teams to embed security by default, guide responsible AI adoption, recruit and develop engineers, and drive company-wide security platform adoption.

Designs and implements security controls for backend services and multi-cloud infrastructure. Conducts security reviews, remediates vulnerabilities and misconfigurations, secures CI/CD pipelines, and embeds secure design practices across engineering teams. The role also supports responsible AI and LLM adoption, mentors junior engineers, and champions security and privacy.

Build and operate MITRE ATT&CK-aligned threat detections across cloud, endpoint, identity, email, and application telemetry. Own the full detection lifecycle, advance detection-as-code platforms, improve data pipelines and observability, integrate threat intelligence, evaluate AI-powered security capabilities, and support investigations and incident response. Partner with Security Operations and engineering teams while independently taking projects from concept through production.

Own enterprise security reference architectures, secure-by-design standards, and modernization roadmaps. Lead architecture transformation, threat modeling, risk reviews, and regulatory control mapping across Azure and hybrid environments. Build AI-enabled security automation, guide distributed delivery teams, review designs, mentor engineers, and align security architecture with operations, compliance, product, and platform stakeholders.

Designs, implements, and maintains global network and perimeter security infrastructure. Responsibilities include firewall rule analysis and optimization, security solution integration, network monitoring, troubleshooting, technical support, and collaboration on security projects with internal teams and data center partners. The role requires onsite work in Chicago at least three days weekly and occasional nighttime or weekend on-call availability.

Build and mature Headway’s infrastructure security program across AWS and application platforms. Partner with Product and Infrastructure teams on secure system design, security reviews, platform guardrails, vulnerability remediation, and continuous infrastructure improvement. Support incident response and security operations while advancing AI-native cloud security practices. The role requires strong technical depth, cross-functional collaboration, and the ability to establish secure-by-default engineering practices in an ambiguous, fast-paced environment.