Top Cyber Security Jobs

Configure, administer, and support SAP security and GRC across ECC, BI, BPC, PI, Enterprise Portal and related modules. Gather security requirements, design role-based authorization models, perform user administration, and participate in project workshops. Provide production support, test/security configuration, and mentor junior team members while ensuring segregation-of-duty and internal control considerations.

Provide onsite and remote desktop support and manage the full lifecycle of end-user devices. Implement and enforce endpoint security controls, configure SSO and IAM integrations, support EDR and SIEM tools, assist with audits and remediation, and partner on network and firewall security projects.

Perform security engineering for design, implementation, and assessment of secure networks/enclaves. Conduct technical security assessments, risk analysis, and recommend mitigations. Validate security requirements, integrate cybersecurity components, and support trusted relationships among systems.

Lead and scale Phylo's security, privacy, and compliance program: own the compliance roadmap, prepare for SOC 2/ISO 27001/GDPR/HIPAA readiness, support FedRAMP and NIST planning, partner with engineering to implement controls, run risk assessments and audits, manage customer security reviews and RFPs, and automate evidence collection and compliance workflows.

Maintain and produce IAM documentation (business roles, application-specific), support user administration/provisioning and identity governance, identify control gaps and action plans, and collaborate with IT and business partners to implement IAM processes.

Lead operations and strategy for the Risk and Security organization, partnering with the CSRO to translate strategy into roadmaps, run PMO and portfolio governance, oversee security culture and awareness, manage BISOs and shared services, drive financial planning and vendor/tool oversight, and deliver executive reporting, change management, and M&A/security integration support.

Build and maintain automated security systems: SOAR/SIEM integrations, AI/LLM automation, end-to-end vulnerability management, policy-as-code compliance, cloud hardening and IaC security (Terraform/CDK), IAM lifecycle automation, and MDM/EDR endpoint operations while partnering with infrastructure, engineering, and compliance teams.

Support cybersecurity engineering for a VA healthcare modernization project: secure AWS and hybrid environments, support RMF/ATO and compliance, configure and monitor AWS security services, produce SSPs/POA&Ms/SOPs, perform vulnerability assessments and DISA STIG hardening, integrate security into DevSecOps and CI/CD, and collaborate with stakeholders on security controls and remediation.

Lead strategy and technical execution of vulnerability management, offensive security, and AI-augmented defenses. Own full VM lifecycle, integrate scanning and asset systems, automate remediation, generate security insights, define KPIs/SLAs, advise executives, and mentor engineers to improve organizational security posture and compliance.

Work on infrastructure email security projects: coordinate with teams, analyze gateway logs, implement SPF/DKIM/S/MIME controls, test email security software, and maintain process documentation.

Lead as the primary liaison between the Online Store and the client InfoSec team. Provide guidance on engineering projects, drive updates and ticket resolution for time-critical deployments, and manage information security program activities in a fast-moving e-commerce/software environment.

Lead design, deployment, and operation of endpoint, network, cloud, and identity security. Run vulnerability management, SIEM detection engineering, incident response, and compliance (NIST 800-171/CMMC). Harden IAM, manage cloud security in AWS, perform security assessments, deliver awareness training, and maintain DLP and security policies.

Manage and enforce information security for defense systems: develop policies, maintain ATOs, conduct assessments and incident response, manage security tools, ensure compliance with NIST/DFARS/ITAR, and report security posture to stakeholders.

Lead presales technical strategy for cloud security solutions: design cloud-native/hybrid architectures (AWS required), run discovery workshops, own PoCs, support proposals and sales, ensure compliance and smooth handover to delivery teams.

Lead and build Pivotal Health's security program: set strategy, embed secure-by-design practices with engineering, own SOC 2/HIPAA compliance and audits, monitor threats, represent security to customers and auditors, drive companywide security culture, and define AI/LLM guardrails.

Assess and validate security controls for Air Force weapon systems using RMF and NIST SP 800-53. Produce A&A artifacts (Security Plans, Assessment Reports, POA&Ms), perform hardware/software assurance, SCRM analysis, continuous monitoring, onsite inspections/audits, and support Authorizing Officials and Program Offices at Wright-Patterson AFB.

Design, develop, and implement cybersecurity methodologies, tools, policies, and baselines. Advise stakeholders, manage and deploy security technologies, perform incident identification/response, ensure compliance with NIST/CNSSI frameworks, and maintain system authorization. Position requires an active TS/SCI with polygraph.

Provide network and mainframe security oversight, evaluate infrastructure and applications for security, recommend hardware/software, participate in security projects, support disaster recovery testing and documentation, and assist in creating and reviewing information security policies and standards.

Lead design, implementation, tuning, and administration of enterprise ArcSight SIEM (ESM/Logger/SmartConnectors). Develop content (reports, filters, dashboards, FlexConnectors), optimize deployments, translate use cases to detection content, and support DoD information assurance and log management requirements.

Provide system administration and security engineering for Focused Operations (FO) FISMA systems across on-prem and cloud. Maintain forensic and threat detection tools, manage firewalls/switches, PKI and patching, implement automation/orchestration, perform health monitoring, follow RFC/change control, produce security reports and documentation, and support incident remediation and system testing.

Lead implementation and integration of UEBA and SOAR for a Zero Trust initiative at USSOCOM. Provide Tier 3/4 engineering, RMF/ATO lifecycle management, DISA STIG interpretation, telemetry integration, assessments of enclave and network infrastructure, and collaborate with ISSOs and stakeholders to improve processes and ensure product quality and security.

Lead SOC investigations and incident response in a 24x7 environment: monitor, triage, and analyze alerts across endpoints, network, identity, email, cloud, and applications; coordinate containment, remediation, and escalation; improve detection rules and SIEM/EDR/XDR tuning; conduct threat hunting and root-cause analysis; document cases, report to stakeholders, track remediation, and mentor analysts to raise SOC maturity.

Design, implement, and manage SAP security roles and SAP GRC Access Control modules (ARA, ARM, BRM, EAM). Perform SoD analysis and remediation, lead provisioning/de-provisioning and access reviews, support audits, maintain security policy/control documentation, respond to SAP security incidents, and ensure compliance with federal and organizational security standards.

Lead design and management of security architecture (SIEM, EDR, DLP, firewalls, VPNs), drive incident response and detection tuning, perform vulnerability and risk assessments, support compliance/audits (HIPAA, PCI-DSS, NIST, ISO 27001), and provide cross-functional security guidance and training.

Manage and maintain application, network, and data security; administer user credentials and SAP security (roles, objects, user profiles); operate RACF and related security tools; resolve low-to-medium security incidents; follow and refine security processes; consult with business owners and participate on cross-functional teams.