Top Senior Cyber Security Jobs

Leads cybersecurity product strategy and roadmaps for enterprise network security services. Evaluates threats, risks, technologies, and build-versus-buy options; manages RFI/RFP processes; translates security objectives into product backlogs and engineering requirements; defines metrics and value propositions; advises executives; and mentors teams. The role partners extensively with engineering, operations, developers, and business stakeholders to deliver scalable security capabilities.

Lead cryptographic security assessments of protocols, libraries, applications, and high-assurance systems. Analyze advanced cryptographic constructions, identify design and implementation weaknesses, validate exploitability, and recommend remediation. Build testing and analysis tools, manage client delivery, write precise technical reports, mentor engineers, contribute to methodologies and services, and support open-source research and technical publications.

Leads cybersecurity engineering teams developing enterprise security solutions across multiple technology domains. Clarifies security requirements, supports multi-level network security, performs threat modeling and vulnerability assessments, and advises leaders during security risks. Uses and validates enterprise-authorized AI for risk analysis, documentation, security testing, and control validation while ensuring data sensitivity, auditability, and resiliency. Coaches, develops, hires, and recognizes engineering talent.

Designs and deploys enterprise IAM frameworks, automated security controls, cloud and on-premise security platforms, and vulnerability and compliance automation. Partners with software, cloud, and infrastructure teams to embed security by design, evaluates security technologies, establishes engineering standards, and supports investigations and troubleshooting. Requires cybersecurity experience, cloud expertise, automation skills, and preferred SailPoint ISC and IdentityIQ experience.

Leads anti-tamper systems security engineering, including threat and countermeasure analysis, security architecture, requirements development, hardware/software integration, verification, validation, and technical writing. Provides technical leadership to engineers, collaborates with customers, applies government security guidance and state-of-the-art technologies, and supports task planning and budget ownership. The role is fully onsite and focuses on protecting critical defense technologies from exploitation.

Build security infrastructure for Datadog’s CI/CD systems, including trusted build provenance, secure secret delivery, access controls, and real-time policy enforcement. Design highly performant, reliable systems operating in the critical path of software delivery, partner with platform and infrastructure teams, guide adoption, mentor junior engineers, and participate in incident response. The role focuses on protecting software supply chains while maintaining developer experience and high throughput.

Lead platform security architecture and implementation across hardware, firmware, Linux, and networking operating systems. Define root of trust, secure and measured boot, attestation, firmware integrity, key lifecycle management, UEFI Secure Boot, provisioning, and platform identity strategies. Conduct threat modeling and security reviews while mentoring engineering teams. The role requires deep expertise in C/C++, Python or shell, Linux boot and kernel architecture, UEFI, hardware root of trust, firmware, drivers, and SONiC or similar systems.

Own and implement Sandbar’s backend security, including encryption, key management, confidential computing, identity, secrets, supply-chain security, incident response, compliance, and data-handling controls. Build features in Python real-time services, conduct threat modeling and design reviews, and guide secure engineering practices. The role requires deep cloud security, applied cryptography, production incident response, and backend ownership, with confidential computing and mobile or device security experience preferred.

Provides Level 3 engineering and operational support for CIAM and IAM platforms. Supports SSO, MFA, passwordless, federation, adaptive authentication, cloud and hybrid identity services, privileged access, and Zero Trust controls. Troubleshoots authentication and directory integrations, onboards applications, performs deployments and upgrades, manages vulnerabilities, monitors platform reliability, and drives automation and modernization initiatives across customer and workforce identity environments.

Engineer secure government network environments, supporting 20–30 users, maintaining Linux and Windows systems, configuring Cisco routers, switches, and firewalls, managing VMware vSphere, and ensuring reliable network operations. Responsibilities include troubleshooting, secure solution implementation, disaster recovery planning, network redundancy, and customer technical support in classified environments.

Performs enterprise cybersecurity engineering, vulnerability and compliance assessments, STIG benchmarking, security tool administration, incident response, and Tier II/III SOC support. The role manages Tenable platforms, endpoint and SIEM technologies, Windows and Active Directory security, Azure and Microsoft 365 environments, remediation activities, security metrics, and automation using PowerShell or Python. It also investigates cyber incidents, documents findings, and collaborates with infrastructure, identity, networking, cloud, and application teams.

Own enterprise IAM and PAM engineering across Entra ID, hybrid Active Directory, Microsoft 365, and privileged-access platforms. Manage identity lifecycle, federation, access governance, endpoint and mobile security, vulnerability management, and security configurations. Support incident response as a Tier 3 escalation point, translate compliance requirements into technical controls, automate workflows and evidence collection, and partner with IT, GRC, and CSIRT teams. Provide documentation, standards, mentorship, and technical guidance across cloud, SaaS, endpoint, and infrastructure security.

Leads HDCP security activities across SoC projects, including roadmap ownership, protocol implementation, compliance certification, and delivery. Develops secure firmware on RISC-V processors and integrates solutions across Linux and Android platforms. Drives production signing, rollback prevention, key provisioning, threat modeling, vulnerability remediation, and security compliance. Collaborates with hardware, boot firmware, validation, power management, and GPU display teams from architecture through product delivery.

Designs, implements, administers, and improves enterprise cybersecurity controls across identity and access management, cloud, applications, data protection, security operations, and governance. Conducts security assessments, vulnerability management, risk analyses, incident response, and threat investigations. Partners with technical teams and vendors, evaluates emerging technologies, develops security documentation and metrics, and mentors security analysts.

Architects and integrates Zero Trust cybersecurity capabilities for a mission-critical DoD Command and Control enterprise. Responsibilities include engineering SIEM and SOAR platforms, security data pipelines, detection rules, endpoint protection, vulnerability management, Linux infrastructure, automation, STIG and SCAP compliance, and RMF documentation. The role partners with SOC teams, engineers, government leaders, vendors, and coalition partners while supporting classified mission operations and producing security reporting.

Investigates and responds to security incidents, designs secure architectures, leads vulnerability assessments and compliance initiatives, and provides guidance on security controls, policies, and enterprise security strategy. The role requires expertise in cybersecurity operations, incident response, threat analysis, security frameworks, secure architecture, and security risk assessments, while mentoring junior engineers and collaborating with IT, compliance, and audit teams.

Provides engineering and administration support for enterprise cybersecurity applications, including Tenable Nessus vulnerability scanning and ServiceNow integrations. Manages scan policies, dashboards, reports, patching, backups, and Tier 2/3 support. Troubleshoots scanning issues, automates workflows, supports Assessment and Authorization activities, maintains security artifacts, and recommends improvements to cybersecurity operations and compliance.

Leads architecture and implementation of Microsoft Red Team visibility, telemetry, monitoring, detection, alerting, deconfliction, and operational security capabilities. Designs scalable services and data pipelines, maintains authoritative operational asset inventories, identifies systemic security gaps, and drives durable engineering solutions. Provides hands-on technical leadership, architecture reviews, debugging, incident response, mentorship, and cross-organizational influence while enabling authentic Red Team operations with strong defensive visibility and control.

Designs, implements, and maintains enterprise Data Loss Prevention and data classification solutions using Microsoft Purview. Integrates DLP with SIEM, CASB, endpoint protection, and other security platforms; tunes policies, manages exceptions, analyzes data protection risks, supports regulatory alignment, leads change initiatives, collaborates with stakeholders and vendors, and develops testing and deployment plans across hybrid environments.

Secure and harden AWS and GCP infrastructure, manage vulnerabilities, implement compliance controls, maintain audit evidence, improve Kubernetes and CI/CD security, support reliability and incident response, and develop automation for security and infrastructure workflows. The role also contributes to application security, code reviews, production troubleshooting, detection, and FedRAMP readiness.

Designs and governs secure enterprise architecture across cloud, hybrid, and on-premises environments in a regulated financial institution. Responsibilities include threat modeling, security design reviews, architecture risk assessments, shift-left security integration, encryption and cryptographic key management, PKI and certificate lifecycle governance, regulatory compliance, audits, and collaboration with engineering, infrastructure, legal, and risk teams.

Design and build reproducible enterprise security environments across Azure, AWS, GCP, on-premises, and third-party systems. Develop infrastructure automation, telemetry, identity integrations, AI agent interfaces, and isolated environments for reinforcement learning and security evaluation. Own platform capabilities from architecture through operations, troubleshoot cross-stack failures, collaborate with security researchers and AI engineers, and mentor other engineers.

Engineer and maintain enterprise network security platforms across on-premises and cloud environments. Design firewall and network security solutions, troubleshoot complex connectivity and security issues, and automate infrastructure operations using scripting, APIs, Infrastructure as Code, configuration management, and CI/CD pipelines. Support platform upgrades, vulnerability remediation, monitoring integrations, validation processes, and modernization initiatives while collaborating with network, cloud, application, and security teams.

Designs, deploys, and maintains network security controls across enterprise, cloud, and hybrid environments. Responsibilities include firewall engineering, segmentation, secure connectivity, monitoring, incident response, vulnerability remediation, compliance support, automation, and security architecture reviews. The role partners with infrastructure, cloud, DevOps, and application teams and participates in a 24x7 on-call rotation.

Build and scale platform security through architecture reviews, threat modeling, IaC hardening, IAM improvements, Kubernetes security, and disaster recovery exercises. Develop automation for detection, response, compliance, onboarding, access anomaly detection, and self-service security posture checks. Investigate incidents, track root-cause remediation, support SOC 2 evidence collection, and collaborate closely with software engineers on secure development and incident response.