Top Cyber Security Jobs

Conduct application security assessments, discover and validate vulnerabilities, analyze code and architectures, perform threat modeling, build security tooling, and develop proof-of-concept exploits. Own scoped assessment components from discovery through client delivery, communicate findings and remediation guidance, and contribute to security research, open-source tools, and technical documentation. The role requires hands-on coding, vulnerability research, memory-corruption knowledge, operating-system familiarity, and independent technical investigation.

Leads cybersecurity capability advancement, governance, risk assessments, control monitoring, and remediation tracking. Analyzes cyber and fraud intelligence data to produce risk indicators, metrics, dashboards, and actionable insights. Drives automation for security workflows, presents risk trends to senior leaders, supports incident analysis, and mentors cybersecurity associates. The role requires expertise in cybersecurity frameworks, cloud environments, security tooling, cyber-enabled fraud investigations, database querying, programming, and regulated-industry risk management.

Leads cybersecurity product strategy and roadmaps for enterprise network security services. Evaluates threats, risks, technologies, and build-versus-buy options; manages RFI/RFP processes; translates security objectives into product backlogs and engineering requirements; defines metrics and value propositions; advises executives; and mentors teams. The role partners extensively with engineering, operations, developers, and business stakeholders to deliver scalable security capabilities.

Leads cybersecurity risk reduction initiatives, capability assessments, control evaluations, and continuous improvement programs. Advises on cybersecurity tools, frameworks, threats, vulnerabilities, and remediation strategies while coordinating efforts across cyber programs. Mentors associates, communicates risks and control gaps to leadership, supports cybersecurity metrics and dashboards, and drives alignment with enterprise standards, business objectives, and regulatory expectations across multi-cloud environments.

Triage bug bounty and vulnerability management reports, validate findings, assess severity, identify duplicates, and coordinate remediation through closure. Collaborate with PSIRT, engineering, legal, communications, customer success, and security teams. Support CVE assignments as a CNA representative, communicate with researchers and customers, maintain accurate records, monitor operational metrics, and improve vulnerability-handling procedures, runbooks, and documentation.

Lead cryptographic security assessments of protocols, libraries, applications, and high-assurance systems. Analyze advanced cryptographic constructions, identify design and implementation weaknesses, validate exploitability, and recommend remediation. Build testing and analysis tools, manage client delivery, write precise technical reports, mentor engineers, contribute to methodologies and services, and support open-source research and technical publications.

Leads cybersecurity engineering teams developing enterprise security solutions across multiple technology domains. Clarifies security requirements, supports multi-level network security, performs threat modeling and vulnerability assessments, and advises leaders during security risks. Uses and validates enterprise-authorized AI for risk analysis, documentation, security testing, and control validation while ensuring data sensitivity, auditability, and resiliency. Coaches, develops, hires, and recognizes engineering talent.

Own Alloy’s AWS cloud security program, partnering with Infrastructure and engineering teams to secure new designs, reduce infrastructure risk, manage CSPM findings, and implement Terraform-based remediations. Build SIEM and CSPM detections, alerts, dashboards, and runbooks; improve AWS permissions and network security; participate in on-call incident response; and drive root-cause remediation and preventative controls.

Build and lead a scalable application security and secure SDLC program across engineering teams. Establish policies, standards, tooling, vulnerability management, threat modeling, developer enablement, security champions, software supply-chain controls, and executive reporting. Partner with development, platform, DevOps, product, and leadership teams to integrate security into CI/CD, source control, build, release, and deployment workflows while supporting audits, advisories, incident response, and regulatory requirements.

Designs and deploys enterprise IAM frameworks, automated security controls, cloud and on-premise security platforms, and vulnerability and compliance automation. Partners with software, cloud, and infrastructure teams to embed security by design, evaluates security technologies, establishes engineering standards, and supports investigations and troubleshooting. Requires cybersecurity experience, cloud expertise, automation skills, and preferred SailPoint ISC and IdentityIQ experience.

Evaluate and mature cybersecurity capabilities using frameworks such as NIST CSF, analyze cyber risks and vulnerabilities, lead control assessments, track maturity objectives, and develop executive and technical risk reports. Collaborate with stakeholders across business lines to improve governance, metrics, controls, and remediation activities. Translate technical findings into actionable insights and coordinate cybersecurity reporting across multiple domains.

Leads cybersecurity capability advancement, third-party risk management, control and risk assessments, issue remediation, and cyber-risk reporting. Uses security frameworks, tools, automation, and data analysis to identify trends and mitigation opportunities. Presents insights to senior leaders, improves monitoring workflows, supports incident analysis, and mentors cybersecurity associates.

Partner with sales teams to win strategic data security opportunities. Present technical solutions, gather customer requirements, lead product evaluations, configure solutions, and design evaluation test plans. The role requires extensive pre-sales experience, security and networking expertise, data protection and web technology knowledge, and collaboration across matrixed go-to-market and partner teams.

Leads security engineering for SaaS Intelligence, including scalable SaaS application onboarding, connector development, integration validation, testing, quality controls, governance, and incident remediation. Manages engineering delivery, resources, budgets, and stakeholder relationships while developing engineers and enforcing standards for code, APIs, security, AI-assisted workflows, resiliency, and auditability.

Own Oracle Fusion Cloud security architecture, environment administration, role governance, and platform integrity. Manage environment refreshes, cloning, quarterly updates, security roles, least-privilege controls, segregation of duties, and Risk Management Cloud controls. Provide advanced troubleshooting and root-cause analysis while designing AI, MCP, Terraform, and automation solutions to improve security operations and governance across Oracle Cloud.

Operate application security across the SDLC, including secure design, code reviews, threat modeling, API security, DevSecOps tooling, CI/CD security gates, cloud and container security, vulnerability management, and risk communication. Partner with engineering teams on secure coding standards, AWS, Kubernetes, Terraform, mobile ecosystems, and responsible AI integration. Participate in an on-call rotation and develop scalable security platforms, paved roads, documentation, and developer training.

Leads anti-tamper systems security engineering, including threat and countermeasure analysis, security architecture, requirements development, hardware/software integration, verification, validation, and technical writing. Provides technical leadership to engineers, collaborates with customers, applies government security guidance and state-of-the-art technologies, and supports task planning and budget ownership. The role is fully onsite and focuses on protecting critical defense technologies from exploitation.

Build security infrastructure for Datadog’s CI/CD systems, including trusted build provenance, secure secret delivery, access controls, and real-time policy enforcement. Design highly performant, reliable systems operating in the critical path of software delivery, partner with platform and infrastructure teams, guide adoption, mentor junior engineers, and participate in incident response. The role focuses on protecting software supply chains while maintaining developer experience and high throughput.

Supports information security initiatives through automation for vulnerability management, detection engineering, cloud identity management, and SOC 2/SOX ITGC compliance. Learns security tooling, identifies process improvements, and performs Level 1 security alert triage and investigations. The internship is full-time for 12 weeks in summer 2027 and requires hybrid work in Denver three days per week.

Owns security trust and compliance programs, audits, policies, control design, continuous monitoring, evidence pipelines, and security automation. Leads framework implementations, identifies risks, manages auditor relationships, develops control health metrics, and mentors practitioners without direct authority. The role requires deep knowledge of security and privacy frameworks, GRC engineering, cloud infrastructure, SaaS environments, identity governance, and modern security practices.

Own security and privacy compliance programs, audits, policies, controls, evidence pipelines, continuous monitoring, and automation. Lead framework gap assessments, control design, risk analysis, and auditor relationships. Build sustainable GRC workflows across SaaS and cloud environments, establish KPIs and SLAs, mentor practitioners, delegate work, and drive technical direction without formal authority.

Designs and maintains cloud security controls across AWS and Azure, including Terraform and Python automation, posture hardening, and account guardrails. Owns vulnerability management, detection tuning, SIEM and log-ingestion pipelines, container scanning, and incident response participation. Partners with engineering and product teams on architecture, authentication, application security, and code reviews. Supports FedRAMP and other compliance programs through documentation, evidence collection, monitoring, training exercises, and customer security questionnaires.

Engineer and support secure infrastructure and data security services across cloud and on-premises environments. Build automation with Python, PowerShell, Ansible, APIs, and YAML; implement secure AI-enabling technologies; operate data security, database monitoring, and data loss prevention platforms; and coordinate incident response, vulnerability remediation, changes, documentation, and engineering handoffs.

Serves as the primary ISSO for classified, air-gapped federal cloud environments. Manages ATO/RMF documentation, NIST 800-53 controls, DISA STIG compliance, Tenable.sc and Nessus vulnerability scanning, offline content updates, remediation tracking, audit readiness, incident response, and continuous monitoring. Partners with cloud and infrastructure teams to improve secure configurations and automate vulnerability and compliance workflows.

Leads HPE’s enterprise security architecture strategy, governance, standards, and roadmap while managing a global architecture team. Partners with enterprise architecture, engineering, infrastructure, product security, and risk teams to embed security into technology decisions. Oversees architecture reviews, secure-by-design enablement, Zero Trust and cloud security adoption, and AI security architecture for platforms, models, agents, and data. Advises executives and governance boards on security risks, technology investments, and enterprise transformation.