Top Senior Cyber Security Jobs

Designs, deploys, and manages enterprise identity and security platforms across Azure, AWS, Windows, Linux, and network environments. Responsibilities include IAM, IGA, PAM, RBAC, Zero Trust, Active Directory hardening, Entra ID migration, automation, incident escalation, troubleshooting, documentation, and security tool integration. The role partners with architecture and risk teams, improves security controls and operational processes, and provides technical guidance on cybersecurity policies, standards, and emerging threats.

Designs, automates, and supports complex cybersecurity solutions across cloud and infrastructure environments. Responsibilities include security alert monitoring, incident and vulnerability management, security architecture, SIEM tuning, access reviews, compliance with frameworks such as SOC 2 and CMMC, risk assessments, third-party security reviews, scripting, and secure technology guidance. The role also mentors team members and partners with technical and business stakeholders to improve security posture.

Own Forterra’s product security program across autonomous vehicle platforms, including security strategy, governance, DoD ATO and IATT lifecycles, STIG compliance, threat modeling, SBOM and vulnerability management, incident response, and security requirements. Lead product security engineers and cross-functional contributors, brief executives and government stakeholders, support bids and customer evaluations, and build a security-focused engineering culture.

Owns product security for DoD autonomous systems, including end-to-end RMF and ATO execution, security architecture, requirements, threat modeling, STIG applicability, vulnerability management, monitoring, secure updates, SBOMs, and secure SDLC practices. Acts as the security subject-matter expert for engineering teams and government cyber or program offices, securing embedded hardware, software, air-gapped systems, and command-and-control platforms through authorization.

Provides senior security guidance and hands-on DevSecOps engineering for Cisco Intersight. Responsibilities include assessing application and delivery-workflow security, interpreting security mandates and audit requirements, conducting architecture and threat assessments, prioritizing vulnerability remediation, supporting compliance and build-environment security, and developing automation, reporting, hardening, and remediation solutions. The role collaborates with engineering, architecture, product, SRE, compliance, and corporate security stakeholders.

Architect and engineer multi-tenant SIEM, SOAR, EDR, telemetry, and cloud security platforms for managed security services. Build detection content, automate response workflows, optimize log ingestion, and secure customer connectivity. Lead technical discovery, onboarding, security assessments, remediation planning, escalations, solution design, and customer advisory engagements. Create architectures, runbooks, and documentation while shaping the MSSP technology strategy.

The Security Engineer will design and implement security controls, enhance security posture, collaborate with IT, and leverage AI tools for cybersecurity. Key responsibilities include managing documentation and leading security initiatives.

Leads end-to-end cybersecurity architecture for Aurora’s autonomous vehicle platform, including embedded systems, safety-critical ECUs, vehicle hardware, cloud services, and infrastructure. Responsibilities include threat modeling, secure design reviews, cryptographic architecture, supplier security requirements, security roadmaps, governance, and risk mitigation. The role partners with Security, Engineering, Product, suppliers, and Tier 1 partners to integrate defense-in-depth security across the product lifecycle.

Build secure-by-default infrastructure platforms, policy-as-code guardrails, identity and access automation, and automated security and compliance controls. Develop reusable infrastructure patterns, self-service workflows, CI/CD and GitOps protections, least-privilege enforcement, and continuous compliance capabilities. Detect configuration drift and automate remediation across cloud environments and engineering workflows while collaborating with teams across the organization.

Lead cybersecurity engineering and Risk Management Framework activities for DoD mission systems. Design secure architectures, integrate security requirements, maintain authorization documentation, validate NIST and DISA controls, analyze vulnerability assessments, coordinate remediation, and support continuous monitoring, inspections, assessments, and ATO renewals. Provide technical guidance on system risks, Zero Trust modernization, interconnections, and secure design to system owners, leadership, and engineering teams.

Lead and execute red team operations against Azure and Microsoft services to discover and exploit vulnerabilities, prototype offensive tools, analyze data for breach points, collaborate with blue teams to improve defenses, and advocate for security improvements across the company.

Designs, develops, and operates encryption, tokenization, and key management platforms that protect sensitive data. Leads secure, scalable architecture and production implementation, ensuring high availability, disaster recovery, observability, compliance, and auditability. Partners with security, compliance, governance, product, and application teams; applies cryptography standards; mentors engineers; and improves platform performance, cost efficiency, reliability, and developer experience. Requires strong software engineering, cloud, SRE, cryptography, stateful systems, CI/CD, and infrastructure-as-code expertise.

Owns federal system authorization, security posture, and remediation for CBP systems. ISSOs manage authorization decisions, control implementation, POA&Ms, security reviews, and documentation. Security engineers harden, monitor, and remediate systems, develop secure configurations and tooling, and address findings at their root causes. Leads oversee security engineering standards and accountability. The role requires collaboration with network, cloud, deployment, and government security teams in a documentation-heavy RMF environment.

Define, build, secure, and operate Front’s internal software platform across AWS and Snowflake. Establish engineering standards, infrastructure-as-code, CI/CD, observability, secrets management, vulnerability controls, RBAC, security monitoring, DLP, incident response, compliance support, and AI client integrations. Partner with engineering, data, GTM Systems, IAM, Enterprise Security, and Legal while enabling self-service deployment and maintaining reliable internal infrastructure.

Provides onsite cybersecurity engineering for classified defense intelligence systems. Responsibilities include supporting DIA authorization and accreditation under RMF, obtaining IATT, ATC, and ATO approvals, designing secure systems and physical controls, configuring and validating security tools, developing test plans, analyzing scan results, remediating vulnerabilities, and supporting incident response. The role requires advanced Windows and Linux administration, security tool expertise, IAT Level 2 compliance, and a TS/SCI clearance with polygraph.

The Information Security Architect develops enterprise security architectures, standards, reference patterns, and secure design practices. They advise application, infrastructure, product, DevOps, and technology teams; conduct architecture reviews and threat modeling; integrate security controls and GRC requirements; evaluate emerging technologies; support vendor assessments; and advance security strategy and roadmaps. The role requires strong cross-functional influence, communication, technical analysis, and the ability to translate business needs into scalable, secure solutions.

Develop and lead enterprise security architecture across on-premises, cloud, and containerized environments. Establish security standards, roadmaps, hardening practices, and AI security controls; review architectures, guide implementations, evaluate security tools, and mitigate technology risks. Advise business and engineering stakeholders, oversee proof-of-concepts and integrations, monitor security effectiveness, and address emerging cyber threats through threat intelligence and strategic risk management.

Designs, engineers, administers, and supports enterprise Exchange environments across Microsoft 365, hybrid, and on-premises systems. Owns mail flow, SMTP, transport, migration, identity integration, and messaging architecture. Administers Proofpoint, EOP, DMARC, SPF, DKIM, anti-phishing, and anti-spoofing controls. Leads incident response, root-cause analysis, security investigations, change and release management, vendor coordination, documentation, and collaboration with security operations and infrastructure teams.

Provides cybersecurity engineering and architecture support for classified information systems. Develops secure technical standards, evaluates technologies, performs gap and risk analyses, advises stakeholders, and leads cybersecurity initiatives. Collaborates with architecture, engineering, and operations teams to deploy compliant solutions, improve efficiency, and reduce technical debt. The role is 100% onsite in Tucson, requires an active Secret clearance, and includes up to 10% business travel. A DoD 8570.01 IAM Level III certification must be obtained within six months if not already held.

Defines enterprise OT cybersecurity strategy, architecture, standards, and roadmap across global manufacturing, distribution, and laboratory operations. Leads initiatives involving segmentation, monitoring, secure remote access, risk remediation, policy development, audits, and executive engagement. Partners with operational and engineering stakeholders to improve security, uptime, resilience, and organizational maturity.

Designs, implements, and sustains cybersecurity capabilities across enterprise and mission systems. Performs continuous monitoring, vulnerability scanning, SIEM analysis, technical security assessments, control validation, risk prioritization, and remediation leadership. Engineers security controls into virtualized platforms, shared storage, and mission networks while troubleshooting Linux and Windows servers, endpoints, Cisco devices, and enterprise file systems. Ensures compliance with NIST, CNSS, DISA STIG, and related security frameworks.

Leads the design and implementation of secure IT infrastructure, performs security monitoring and threat analysis, enforces security controls, evaluates security technologies, manages patching and vulnerability scanning, and maintains continuous system security. Provides guidance to stakeholders, manages security projects, mentors junior engineers, and participates in incident-response on-call rotations.

Leads and supports offensive security consulting engagements, including network, web application, wireless, social engineering, red team, and purple team testing. Evaluates controls and security configurations, performs cybersecurity assessments, recommends remediation, and presents findings to technical and executive stakeholders. Supports client program execution, metrics, issue remediation, and continuous improvement. Mentors junior consultants and contributes to cybersecurity practice development, methodology innovation, and thought leadership.

Lead pre-sales security architecture engagements by designing and validating defense-in-depth solutions across hybrid, cloud, application, identity, endpoint, network, and data environments. Conduct security assessments, create remediation roadmaps, integrate security platforms, and support DevSecOps, SOC, detection engineering, incident response, compliance, and risk programs. Collaborate with sales, engineering, clients, and executive stakeholders to communicate technical trade-offs and deliver scalable enterprise security strategies.

Designs and delivers security solutions for enterprise information systems and network architectures. Ensures classified systems meet information assurance requirements through RMF authorization and accreditation, including IATT, ATC, and ATO. Develops security designs and test plans, analyzes scans and findings, prioritizes remediation, and implements corrective measures. Supports security tools and collaborates with clients on technical requirements. Requires expertise in Windows, Linux, cloud or DevOpsSec, ACAS, Trellix, Splunk, STIGs, and classified systems.