Top Cyber Security Jobs

Perform COMSEC custodian duties including inventory, distribution, destruction, and accountability of keying material and secure equipment. Install and deliver STE/encryption devices, maintain records, courier classified material, enforce USG COMSEC standards, train personnel, ensure AIS security compliance, and perform physical work in production/confined environments.

Design, build, and architect IAM-focused security software, APIs, and automation. Integrate security into CI/CD and cloud-native environments, perform code reviews and threat modeling, monitor security events, support incident response, and collaborate with infra/app teams to embed identity best practices.

Own and define IAM strategy for corporate and production environments. Migrate Okta to Terraform, design least-privilege access, automate provisioning/deprovisioning and access reviews, build/manage MDM/MAM tooling, partner with platform and engineering teams, and serve as the IAM subject matter expert across Security, IT, and Engineering.

Manage and secure SAP systems by configuring roles and authorizations, provisioning user access, supporting security testing and releases, documenting procedures, and investigating/resolving authorization and access issues while ensuring compliance and integration across applications.

Build and operate high-signal detections across cloud, identity, endpoints, and SaaS. Improve detection platforms, automation, and triage tooling (including LLM-based workflows). Translate threat TTPs into telemetry and detections, participate in incident response/on-call, track metrics like MTTD and alert quality, and drive detection engineering improvements across the org.

The Security Awareness Program Manager will lead security awareness initiatives, executive communications, and board reporting, enhancing operational alignment across Cyber Operations.

The Security Detection Engineer will design and enhance detection capabilities for protecting biometric and health data, employing strategies and frameworks to improve detection quality while supporting incident response and collaboration across teams.

Lead architecture and implementation of network security across edge, backbone, and datacenter environments. Provide technical leadership, conduct threat modeling and network security assessments, build security automation and IaC, integrate controls into SDN/BGP/MPLS systems, participate in incident response, and drive security reviews and best practices across teams.

Lead threat modeling and risk management for DigitalOcean's virtualization stack. Build frameworks and rubrics to assess hypervisor risk, propose and implement defense-in-depth mitigations, collaborate with engineering teams on remediation, mentor teams on secure design, and help oversee vulnerability management and security guidance.

Own the security risk posture for the virtualization stack by building threat models, assessment rubrics, and defenses. Propose and implement mitigations, partner with engineering teams to drive remediations, mentor engineers on secure practices, and help oversee vulnerability management and security guidance.

Lead technical design and enforcement of network security for global edge, backbone, and datacenter environments. Perform threat modeling, protocol analysis, DDoS mitigation, security automation, tooling, and incident response. Partner with network teams to integrate controls, telemetry, and IaC-based validation, and mentor engineers while driving security reviews and best practices adoption.

Lead design and operationalization of enterprise GRC capabilities: build risk frameworks, implement risk-based controls testing (ITGC, cyber, privacy), develop compliance programs, advise senior leaders, standardize/automate GRC processes, and mentor team members to drive measurable risk-management outcomes.

Lead SAP/ERP risk and controls activities, execute ITGC and application testing, manage audit remediation and auditor interactions, maintain ERP risk register, establish control frameworks, and partner with technical and functional teams to reduce ERP security and compliance risks.

Design, build, and operate enterprise identity, endpoint, and security systems. Automate lifecycle management, access governance, EDR operations, and endpoint hardening. Develop AI/automation agents to eliminate manual work, run enterprise security metrics, support incident response, and establish secure-by-default SaaS onboarding standards.

Lead Klaviyo's infrastructure security architecture and programs: IAM, secrets management, network segmentation, vulnerability management, and security tooling. Build IaC guardrails, define security SLOs and compliance posture, run threat modeling and design reviews, embed controls into CI/CD and observability, and deliver code/automation while mentoring senior engineers. Drive AI-enabled security automation and audit readiness for SOC 2/ISO 27001.

Operate and improve security detection and response across endpoints, networks, identity, and cloud. Investigate incidents, perform forensics, tune alerts, hunt threats, administer security platforms, support vulnerability and IAM programs, automate workflows with scripting/APIs, and assist GRC/audit activities.

Operate and improve security detection and response across endpoints, network, identity, vulnerability, and cloud environments. Investigate incidents, perform forensics, administer enterprise security tools, automate workflows via scripting/APIs, support vulnerability and IAM initiatives, and provide audit/GRC technical support.

Lead red team researcher who designs and executes end-to-end adversary emulation, develops proof-of-concept exploits, analyzes incidents, identifies vulnerabilities and risk, conducts security assessments, and communicates mitigation strategies to technical and executive stakeholders.

Lead technical security expert for blockchain, tokenization, and digital-asset platforms. Perform threat modeling, design preventative and detective controls, direct adversarial testing, integrate smart contract security into the SDLC, assess third-party vendor risks, and partner with governance, legal, product, and engineering to embed security-by-design and ensure regulatory compliance.

Lead offensive security research and red team operations: design and execute end-to-end adversary emulation, develop proof-of-concept exploits, analyze incidents, assess vulnerabilities, and provide actionable mitigation recommendations to business and executive stakeholders.

Lead offensive security research and adversary emulation: design and execute end-to-end attack chains, develop PoC exploits, analyze incidents, identify vulnerabilities and severity, perform risk assessments, brief leadership, and advise mitigations to improve enterprise detection and response.

Lead adversary emulation and red team research: design, build, and execute end-to-end attack chains; develop proofs-of-concept and exploits; analyze incidents; identify and rate vulnerabilities; conduct risk assessments; advise business and leadership on mitigation strategies; collaborate to improve detection and response.

Lead offensive security research and adversary emulation to simulate advanced threat actor attacks, develop proof-of-concept exploits, and document end-to-end attack chains. Provide vulnerability assessments, severity ratings, mitigation recommendations, and briefings to technical teams and executive leadership to improve detection and response.

Serve as the Technical Information Security Officer for blockchain, tokenization, and digital-asset platforms. Lead threat modeling, design preventative/detective controls, direct adversarial testing, integrate smart contract security into the SDLC, assess third-party vendor risk, and partner with governance, legal, engineering, and product teams to enable secure, compliant digital-asset services.

Lead detection, response, and digital forensics for security incidents. Monitor alerts, perform technical analysis, act as Incident Commander, build automation and runbooks, mentor engineers, and coordinate cross-team investigations and insider threat work.