Top Cyber Security Jobs

Defines enterprise OT cybersecurity strategy, architecture, standards, and roadmap across global manufacturing, distribution, and laboratory operations. Leads initiatives involving segmentation, monitoring, secure remote access, risk remediation, policy development, audits, and executive engagement. Partners with operational and engineering stakeholders to improve security, uptime, resilience, and organizational maturity.

Own Foundry Robotics’ security and compliance program, including CMMC Level 2 certification, NIST SP 800-171 and DFARS compliance, ITAR/EAR controls, and CUI protection. Lead identity, endpoint, network, cloud, edge, and on-premises security; manage incident response and third-party risk; and build the security roadmap, budget, and team. The role requires hands-on security engineering, facility security expertise, startup leadership, and collaboration across engineering, IT, quality, and operations.

Own data security posture management, classification, labeling, and protection initiatives across traditional data stores and AI/ML environments. Implement DSPM tools, define scanning patterns, integrate classification results with security systems, monitor risks, report security metrics, and advise on governance and data security strategies. Partner with privacy, IAM, engineering, legal, governance, analytics, and AI teams to enforce regulatory, privacy, retention, and data usage controls, including generative AI guardrails.

Lead the engineering modernization of enterprise data protection and DLP capabilities across cloud, SaaS, endpoints, email, and collaboration platforms. Build automated Policy-as-Code workflows, CI/CD pipelines, reusable controls, integrations, detection logic, guardrails, and operational metrics. Partner with technical, compliance, privacy, legal, and business teams to improve security effectiveness, reduce false positives, automate governance, investigate events, and demonstrate measurable risk reduction.

Leads the design and implementation of secure IT infrastructure, performs security monitoring and threat analysis, enforces security controls, evaluates security technologies, manages patching and vulnerability scanning, and maintains continuous system security. Provides guidance to stakeholders, manages security projects, mentors junior engineers, and participates in incident-response on-call rotations.

Leads client engagements focused on application security and DevSecOps transformation. Configures application security testing tools in CI/CD pipelines, supports vulnerability triage, conducts maturity assessments using BSIMM and NIST SSDF, and develops multi-year strategic roadmaps. Facilitates executive workshops, presents recommendations to security and engineering leaders, creates maturity models and dashboards, and contributes to thought leadership on secure software governance.

Lead pre-sales security architecture engagements by designing and validating defense-in-depth solutions across hybrid, cloud, application, identity, endpoint, network, and data environments. Conduct security assessments, create remediation roadmaps, integrate security platforms, and support DevSecOps, SOC, detection engineering, incident response, compliance, and risk programs. Collaborate with sales, engineering, clients, and executive stakeholders to communicate technical trade-offs and deliver scalable enterprise security strategies.

Lead product security across design, production, supply chain, and distribution. Implement security policies and controls, conduct risk assessments, audit physical and digital systems, monitor threats, manage investigations and incident response, and coordinate with internal teams, subcontractors, legal authorities, and external agencies. Develop security metrics, improve organizational security culture, and serve as the local expert for product security matters.

Manage and maintain the company’s ISO 27001 and ISMS program, including policies, document control, risk registers, control ownership, audits, corrective actions, evidence collection, GRC administration, compliance calendars, metrics, and executive reporting. Coordinate with security, IT, operations, auditors, vendors, and business stakeholders. Support incident response, business continuity, disaster recovery, crisis management, and continual improvement while ensuring physical and digital security systems meet applicable standards.

Supports the Lead ISSO in managing cybersecurity and Risk Management Framework activities for C-17 training systems. Responsibilities include vulnerability scanning, security audits, risk analysis, eMASS control monitoring, accreditation documentation, incident response, continuous monitoring, secure configuration, disaster recovery, compliance reporting, security awareness, and stakeholder coordination. The role requires frequent travel to customer and site locations and collaboration with government, contractor, engineering, maintenance, and aircraft support teams.

Design, develop, and maintain secure Linux endpoint privilege-management capabilities across Rust, C, and .NET. Build kernel-facing agents, PAM modules, privileged services, authentication and authorization workflows, systemd services, and Linux packages. Troubleshoot low-level security and execution issues involving permissions, SELinux, AppArmor, and race conditions. Collaborate with engineering and QA teams on architecture, testing, production support, and cross-platform functionality while using AI-assisted development tools.

Supports cybersecurity and Risk Management Framework activities for C-17 training systems. Performs vulnerability assessments, compliance scans, audits, risk analyses, incident response, continuous monitoring, and accreditation documentation. Maintains security authorization packages, integrates controls into sustainment activities, provides secure configuration guidance, and coordinates with engineering, operations, government, and contractor stakeholders. Frequent travel to customer and site locations is required.

Supports the Lead ISSO in managing cybersecurity and RMF activities for C-17 training systems. Responsibilities include vulnerability scanning, security audits, risk analysis, eMASS control monitoring, authorization documentation, incident response, continuous monitoring, secure configuration, sustainment cybersecurity, disaster recovery, reporting, and stakeholder coordination. The role requires frequent domestic and international travel to customer and site locations and eligibility for a DoD personal security clearance.

Supports cybersecurity and Risk Management Framework activities for C-17 training systems. Responsibilities include vulnerability scanning, security audits, risk analysis, eMASS control monitoring, accreditation documentation, incident response, continuous monitoring, secure configuration, disaster recovery, reporting, training, and coordination with government, contractor, engineering, maintenance, and aircraft support teams. The role requires frequent domestic and international travel and eligibility for a DoD personal security clearance.

Owns the enterprise control plane and product strategy for agentic technologies, AI platforms, non-human identities, and emerging technologies. Defines identity, authorization, governance, monitoring, auditability, risk, and enforcement capabilities that enable secure AI adoption. Translates security and regulatory requirements into scalable platform features, partners with engineering and control functions, manages roadmaps and operational performance, and communicates control gaps and decisions to senior stakeholders.

Leads complex cybersecurity initiatives, including Microsoft Purview DLP and data classification, third-party risk assessments, security architecture, vulnerability scanning, penetration testing, and incident response. Designs and manages enterprise security solutions, investigates application and service security, performs risk assessments and root-cause analysis, and advises stakeholders on security practices. The role also mentors colleagues, documents processes, and supports emerging AI and cloud security risks.

Leads research security and sponsored research compliance for federally funded and industry-sponsored projects. Oversees CMMC compliance, evaluates protected-data obligations, conducts gap analyses, develops project-specific control plans, supports audits and assessments, provides sponsor certifications, and maintains compliance documentation. Advises and trains researchers and stakeholders on cybersecurity, controlled data, privacy, and regulatory requirements while developing practical policies and institutional controls.

Implements and operates Identity and Access Management solutions covering provisioning, access governance, identity federation, and secure application integrations. Develops IAM architecture and design documentation, troubleshoots access issues, supports SAML and OAuth integrations, and helps ensure policy compliance and performance. The role may lead IAM projects and work across hybrid cloud and on-premise environments using platforms such as Oracle IAM and CyberArk. It also requires Linux or Unix knowledge and may involve monitoring with SIEM tools.

Owns the company-wide IT and cybersecurity program, including SOC 2 compliance, cloud security, penetration-test remediation, business continuity testing, endpoint management, access controls, onboarding and offboarding, AI security governance, vendor reviews, security training, incident response, and employee IT support. The role partners with engineering, HR, Finance, leadership, auditors, and healthcare customers while managing security across AWS, Heroku, Cloudflare, Google Workspace, GitHub, and related tools.

Supports Azure Government cloud infrastructure, web applications, and PaaS environments while partnering with infrastructure, cloud, and application teams. Performs NIST RMF security control assessments, credentialed vulnerability scans, configuration reviews, and security findings analysis. Recommends remediation, evaluates security control effectiveness, and develops artifacts for RMF documentation and accreditation. The role requires Azure administration, Windows and Linux hardening, DISA STIG/SCAP knowledge, DoD IAT III certification, and an active Secret clearance.

Lead alliance and technical product marketing: build joint positioning and go-to-market enablement with strategic partners, own competitive intelligence and technical differentiation, create content and launch programs that drive pipeline and inform product and GTM strategy.

Join a product security team to improve security across the Studio 5000 Logix Designer lifecycle. Contribute to design, code reviews, testing, threat modeling, vulnerability remediation, and security assurance. Integrate security requirements with global engineering teams, evaluate AI-generated outputs, and promote SSDLC and DevSecOps practices for Windows desktop and industrial control system software.

Lead design and implementation of security controls, drive audit readiness across multiple frameworks (FedRAMP, SOC2, ISO, CMMC), gather audit evidence, liaise with auditors and government officials, translate compliance into practical controls with engineering/product teams, draft policies, automate compliance processes, and represent the program in customer security reviews.

Lead pre-sales architecture and post-sales technical adoption for an AI-native ASPM platform. Run demos, POCs, onboarding, and executive reviews; translate complex security and SDLC requirements into architectures, drive adoption, expansion, and product feedback. Serve as senior escalation and build playbooks for secure AI-SDLC and supply chain practices.

As a Manager for CyberOps, you will lead third-party security assessments, conduct technical inspections, develop assessment tools, and manage collaborative projects to enhance information security and risk management processes.