Top Senior Cyber Security Jobs

Deploys and operates OT security platforms across manufacturing sites, designs IT/OT convergence and Purdue-model segmentation, manages asset discovery and enterprise security integrations, and supports PLC/HMI backup, incident response, recovery, and technology rollouts. The role requires hands-on OT/ICS cybersecurity experience in industrial environments, production-floor work, multi-site support, and collaboration with network engineering teams.

Lead Prelim’s security program across secure SDLC, application and cloud security, IAM, incident response, endpoint management, vendor risk, security reviews, and SOC 2 Type II compliance. Partner with DevOps and engineering, coordinate penetration testing, develop policies and risk roadmaps, manage audits and customer questionnaires, and improve detection and access controls. The role is the company’s first dedicated security hire and requires strong judgment, communication, and hands-on technical skills.

Manage and administer Check Point firewalls, Infoblox DNS and IPAM, and web application firewalls. Implement cybersecurity controls, improve threat detection and vulnerability management, correlate security events, and research emerging security technologies. The role requires troubleshooting complex network security challenges, supporting enterprise infrastructure, tuning security solutions, and participating in rotating on-call duties. Preferred experience includes Cloudflare, Zero Trust, cloud security across Azure, AWS, and GCP, and CISSP certification.

Owns company-wide security across product, infrastructure, corporate systems, and IT. Responsibilities include fixing authentication and authorization issues, managing keys and secrets, hardening internal tools, improving permissions, contributing to backend engineering, and leading security reviews, incident response, and security tooling. This hands-on role requires broad security expertise, strong software engineering ability, and comfort working in an ambiguous early-stage startup environment.

Build and operate automated security infrastructure across AWS and Kubernetes, including cryptographic-material lifecycles, security telemetry, compliance automation, policy-as-code, threat modeling, and CI/CD security controls. Develop agentic AI workflows using tools such as Claude Code and MCP integrations. Support incident response, review security architecture, automate evidence collection, and partner with engineering, audit, risk, vendors, and clients to improve security posture at scale.

Applies security best practices to optimize systems, analyzes and resolves security challenges, drives cross-functional security initiatives, and collaborates with engineers to improve security processes and overall organizational security posture.

Senior hands-on engineer responsible for hybrid infrastructure operations and IT security. Maintains Windows, macOS, Linux, cloud, networking, virtualization, identity, endpoint, and security environments; investigates incidents, vulnerabilities, and alerts; supports incident response, access management, audits, and compliance; and develops automation and documentation. The role requires troubleshooting across complex systems, improving security controls and operational processes, and collaborating with IT teams, stakeholders, vendors, and managed service providers. The position is temporary and requires working onsite in San Francisco four days per week.

Lead automated security validation deployments, assess customer security postures, design solutions, troubleshoot security systems and networks, and support enterprise cybersecurity strategies. The role requires expertise in cyber threat techniques, adversary tactics, MITRE ATT&CK, log ingestion, operating systems, networking, and security platforms. Engineers collaborate with customers and internal teams, manage multiple projects, deliver training and enablement, and may apply red or purple team practices and BAS tools.

Designs, deploys, configures, monitors, and troubleshoots Cisco ISE for AAA, RADIUS/TACACS+, wired and wireless 802.1X, endpoint profiling, posture checks, and certificate-based authentication. Supports migration from ForeScout CounterACT, integrates ISE with Active Directory, LDAP, Cisco 9800 controllers, and PKI, and improves Zero Trust access controls. Performs health checks, upgrades, root-cause analysis, documentation, cross-team coordination, and mentoring while working onsite in Suitland, Maryland.

Supports cybersecurity and systems security engineering for mission-critical NC3 and weapon systems. Responsibilities include RMF authorization and accreditation, security requirements, architecture reviews, threat assessment, risk mitigation, cybersecurity strategy, vulnerability scanning, DevSecOps security reviews, contingency planning, and compliance with DoD and Air Force requirements. The role requires collaboration with government, contractor, vendor, and program management teams.

Lead and grow a security engineering team as a technical player-coach; implement security tooling and automation across corporate, infrastructure, and application layers; define data-driven security strategy, OKRs, and KPIs; manage compliance with frameworks (SOC2, CIS, GDPR); lead incident response and threat modeling; govern AI/ML security risk; and drive security culture and cross-functional education.

The Information Security Engineer will secure Palantir's Windows and Active Directory environment, focusing on attack surface reduction, tooling deployment, automation for security operations, and incident response.

Lead a global security engineering org (~20 engineers) to design, deliver, and operate enterprise security platforms including an AI-driven security copilot, endpoint/server antivirus, and container security (image scanning, policy enforcement, runtime protection). Set technical direction, partner with product and infrastructure teams to embed security into workflows, own roadmaps, staffing, budget, and drive adoption across the firm.

Own and secure enterprise server, network, cloud, and hybrid infrastructure. Administer firewalls, VPNs, identity services, virtualization, and core network systems. Deploy and manage SIEM, DLP, IDS/IPS, and EDR tools; apply zero-trust access controls; assess vulnerabilities and risks; monitor systems; strengthen recovery and incident response; and mentor IT support staff. The role is onsite in Tucson, Arizona and supports aviation-related technology subject to export regulations.

Designs and governs enterprise identity security architectures across on-premises and cloud environments. Responsibilities include authentication, authorization, SSO, MFA, PAM, IGA, RBAC, access certification, threat modeling, risk assessments, architecture reviews, compliance support, documentation, and technical leadership. Requires extensive cybersecurity and IAM architecture experience with platforms such as Microsoft Entra ID, Active Directory, Okta, SailPoint, CyberArk, and cloud identity services.

Designs and governs enterprise identity security architecture across on-premises and cloud environments. Responsibilities include architecting SSO, MFA, PAM, IGA, federation, identity lifecycle management, RBAC, least privilege, and access certification. The role leads IAM architecture reviews, threat modeling, risk assessments, compliance alignment, technology evaluations, documentation, and technical mentorship for engineering teams.

Designs and maintains security controls across cloud, SaaS, on-premises, and corporate environments. Embeds security into software development and CI workflows, leads vulnerability management, conducts threat modeling and risk assessments, develops security automation, responds to incidents, and supports compliance audits. The role also guides secure coding, manages AWS and Azure security controls, develops policies, monitors threats, and mentors engineering teams.

Lead the company’s security engineering function as its first dedicated security hire. Define security architecture across the LLM pipeline, cloud infrastructure, and product; improve tenant isolation and data residency; conduct threat modeling, penetration testing, vulnerability remediation, and security operations; and support audits and enterprise security reviews. The role reports to the CTO and may eventually grow into team leadership.

Designs, deploys, and manages enterprise EDR/XDR and NGAV protections across large heterogeneous endpoint fleets. The role engineers behavioral defenses, supports SOC investigations, performs host forensics and live remediation, partners with application owners to reduce operational impact, protects hybrid and multi-cloud workloads, and validates control effectiveness through attack simulation and Purple Team exercises.

Develop and improve enterprise security controls, investigate security alerts and incidents, tune detections, automate security processes, assess hybrid infrastructure and cloud configurations, and partner with infrastructure and application teams. The role independently owns security initiatives from problem identification through implementation, documentation, operation, and continuous improvement.

Supports the information security program by engineering and maintaining security technologies, identity and access controls, monitoring capabilities, cloud and network protections, and defensive processes. Responsibilities include security architecture, risk assessments, audit and compliance support, incident response, security automation, control documentation, and collaboration with IT, business, and third-party stakeholders. The role requires 5+ years of cybersecurity or related experience, with expertise in identity security, endpoint protection, SIEM, cloud security, and regulated environments preferred.

Designs and presents Qualys security solutions for federal enterprise customers, supporting technical sales engagements, proofs of concept, architecture workshops, compliance programs, and post-sale deployment health checks. Advises customers on vulnerability, asset, patch, cloud, application, and threat security while partnering with sales, product, marketing, and strategic partners. Authors technical content, enables field teams, and travels to customer locations at least 30% of the time.

Lead development of security enforcement integrations that warn or block unsafe AI artifact installations, serve sanitized alternatives, and record audit events. Build reliable event-driven backend systems with queues, webhooks, idempotency, retries, back-pressure, approval flows, dry runs, audit logs, and rollback mechanisms. Integrate third-party security, infrastructure, and identity APIs, with potential future work on fleet-wide revocation controls and security platform integrations.

Implements, administers, monitors, and maintains enterprise security systems including firewalls, VPN, endpoint protection, SIEM, data loss prevention, vulnerability management, and access control. Responds to alerts, incidents, and service requests; performs troubleshooting, upgrades, patching, documentation, and change management. The role collaborates with vendors, supports end users, participates in on-call rotations, mentors junior engineers, and contributes to security solution design and process improvements.

Develop backend systems for large-scale web applications and security products primarily in Go. Write robust, modular code, optimize performance, participate in code reviews and documentation, and collaborate across technical and product teams. The role requires strong HTTP and networking knowledge, Linux, automation, shell scripting, and backend operations experience. Engineers participate in core US business hours and an on-call rotation, with occasional travel as needed.