Top Cyber Security Jobs

Designs, deploys, and maintains information security systems (firewalls, SIEM, IDS/IPS, WAF), performs audits, incident response, vulnerability management and penetration testing, develops access controls and BCP/DR plans, and advises stakeholders on security risks and remediation.

Provide Tier 1/2 support and subject-matter expertise for enterprise compliance archiving and Microsoft 365 Purview. Manage permissions, retention policies, eDiscovery cases, and data connectors. Build automation, monitor service resiliency and data quality, document processes, and coordinate with vendors and stakeholders to resolve compliance tool issues.

Lead implementation and management of information security programs for DoD/Army customers: ensure compliance, conduct risk assessments, manage training and resources, maintain certifications and clearances, prepare stakeholder briefings, and support emergency planning and privileged access requirements.

Support and maintain security posture for classified Collateral/SCI/SAP information systems: prepare and maintain RMF authorization packages, conduct continuous monitoring, coordinate system changes, manage vulnerabilities and configuration, assist assessment and authorization activities, and ensure compliance with security policies and incident handling.

Monitor, detect, investigate, and respond to security events using SIEM and other tools. Conduct threat hunting, malware analysis, penetration testing, and network traffic analysis. Support firewall and cloud security reviews, assist with basic network troubleshooting and configuration, and recommend process improvements to harden systems.

Design and implement software security solutions for diabetes care and digital health products. Lead product security risk assessments, vulnerability remediation, secure coding practices, static analysis, and incident response. Mentor engineers, run security reviews, and ensure compliance with regulated medical software development and quality management systems.

Provide ISSO-level information systems security support: run and analyze vulnerability scans (ACAS, Nessus, SCAP), ensure STIG/ IAVA compliance, produce remediation reports, assist RMF/A&A package development, coordinate with system owners, and drive vulnerability remediation and metrics.

Lead design and daily administration of a university research security program ensuring compliance with federal/state mandates (NSPM-33, CHIPS Act), export controls, CUI, NIST/CMMC requirements. Manage foreign travel security, training, risk assessments, stakeholder engagement, investigations, KPIs, and institutional coordination with ISO, sponsors, and regulators.

Provide enterprise security engineering support including troubleshooting and resolving tickets for firewalls, IDS/IPS, web filtering, SIEM, and endpoint security. Identify network/system security needs, conduct risk assessments and intrusion detection, implement vulnerability baseline monitoring, and help create and enforce security policies and procedures. Support web access duties related to the Affordable Care Act.

Serve as Technical Systems Analyst and functional SME for Identity and Access Management. Liaise between non-IT customers, architects, designers and operational teams. Support IDAM application modules, Identity lifecycle, ITSM, Data Center operations, SDLC and project management while coordinating onshore/offshore IT support.

Lead global information security strategy for a semiconductor company: build security programs, manage risk and incidents, protect IP and customer data, oversee security teams, ensure compliance with NIST/ISO/CMMC, liaise with stakeholders, and drive security awareness and audits.

Lead enterprise detection engineering across cloud, on-premises, and OT/ICS environments. Own detection strategy, data pipelines, content development (SIEM/EDR/XDR), purple teaming, and automation/AI integration. Deliver governance, metrics, executive reporting, coverage assessments, and capability maturation while partnering with GSOC, CTI, Vulnerability Management, IT, Legal, and business stakeholders. Build and lead distributed teams, define roadmaps, and ensure regulatory compliance and detection efficacy.

Serve as Redfin's embedded security leader translating enterprise security and compliance requirements into practical guidance. Liaise with Rocket Companies, advise on AWS security, IAM, data protection, vulnerability management, logging, incident readiness, and AI governance. Identify gaps, track remediation and risk acceptance, participate in architecture and AI reviews, and communicate business-impacting risks to leadership.

Senior ISSO to support Air Force systems: manage RMF accreditation, conduct risk and vulnerability assessments, enforce STIG/SRG configurations, support incident response and eMASS authorization packages, maintain security posture and compliance with DoD/Air Force cybersecurity requirements.

Advise the I&A CISO on cybersecurity policy; analyze Federal, DHS, and IC guidance; translate policy into implementable plans; support cloud and on-premises governance; and communicate with government stakeholders and technical teams.

Lead and operate information security controls and programs for a global organization. Perform risk assessments, vulnerability and penetration testing, incident response, IAM reviews, third-party risk assessments, phishing program management, audits/compliance, and security consulting. Manage security tooling and documentation while partnering with stakeholders to implement and mature security standards and remediation activities.

Manage GCP IAM exceptions, remediate Prisma Cloud alerts and Google CSPR findings, collaborate with Cloud Foundations to harden infrastructure, monitor and respond to security incidents, automate security operations with scripting/IaC, document processes, and provide security training and reporting.

Design, implement, and maintain network security solutions (firewalls, IDS/IPS, proxies, VPNs). Perform advanced packet analysis, incident identification and remediation, router/switch management, risk analysis, and produce process documentation. Support customer projects, troubleshoot complex connectivity issues, and stay current on network security trends.

Lead the security function end-to-end at an early-stage B2B fintech: drive application and product security, threat modeling, secure design and code review, vulnerability remediation, cloud and Kubernetes hardening, logging and detection, incident response, and SOC 2 foundations. Define roadmap, embed security into engineering, and partner with teams to build secure-by-default products.

Lead security architect to support CJIS and information security compliance: interview stakeholders, document processes, assess controls, develop and track InfoSec implementation plans, facilitate status reporting, and provide remediation recommendations.

Support OPERS' CISO to design and implement an Information Security Program and Security Awareness and Training Program; reorganize and align policies to NIST CSF; create policies, standards, procedures; conduct third-party and software development security assessments; establish policy exception and risk acceptance processes; develop and deliver role-based training and materials. Work completed on-site in Tigard, OR.

Design and review network security architectures, define security controls and hardening standards, lead teams to develop security requirements, produce high-level design (HLD) documentation, and respond to security components of RFPs while maintaining awareness of security threats and offerings.

Provide day-to-day support for a large Siteminder r6 installation, including monitoring services, configuring and maintaining policies, sites, and realms, and installing, configuring, and supporting Siteminder Agents.

Support and maintain casino cybersecurity infrastructure focusing on EDR, firewalls, NetFlow, identity-based access, PCI DSS compliance, SOC incident response, vulnerability scanning, audits, third-party risk, and on-call incident support to protect gaming and payment systems.

Design and implement firewall and network security architectures, provide engineering and operational support for internal and MSSP customers, perform packet analysis and routing troubleshooting, document processes, optimize security controls, support incident remediation, and maintain PCI-DSS compliance.