Top Cyber Security Jobs

Own and implement security measures across cloud infrastructure and the software lifecycle: threat modeling, risk assessments, security testing, incident response, secure CI/CD, and developer enablement to remediate vulnerabilities and ensure compliance with standards.

Design, implement, and support enterprise network security solutions (firewalls, IPS/IDS, proxies, load balancers). Provide after-hours support, troubleshooting, packet analysis, vulnerability management, and collaborate with global partners on security projects and remediation.

Responsible for implementing and maintaining IT security controls, monitoring networks for threats, performing vulnerability assessments, responding to incidents, and supporting compliance and security best practices.

No responsibilities listed. Based on title, likely responsibilities include monitoring SIEM alerts, investigating security incidents, tuning detections, and producing incident reports.

Support and enforce information systems security policies and RMF activities. Maintain operational security posture, develop and update SSPs/SRTMs, perform vulnerability assessments, support ATO/C&A, and collaborate with administrators and engineers to ensure compliance for mission-critical systems.

Serve as senior technical authority leading DOJ Security Assessment and Authorization (SAA) and RMF programs: guide system categorization, select and implement security controls, oversee assessments and continuous monitoring, advise leadership on risk, support incident response and audits, mentor security staff, and ensure audit-ready authorization artifacts.

Own and scale Mozilla's web bug bounty program, triage and validate incoming reports, drive vulnerability remediation with engineering teams, perform targeted code reviews (JS/Python), collaborate with SIRT on incidents, and develop tooling to improve triage and program insights.

Lead security architecture design and implementations, provide L2-L3 support and 24x7 incident response, manage work orders/change requests, perform on-site technical implementations and client consulting, and ensure delivery of enterprise security solutions.

Perform software vulnerability assessments (blackbox/whitebox), remediate OWASP Top 10 issues, and advise development teams. Leverage penetration testing frameworks, scanners, and source code analysis while working with Java/.NET web apps and SQL databases. Communicate findings and conduct debriefs with engineering teams.

Design, implement, and scale enterprise security architecture across identity, endpoints, network, SaaS, and AI systems. Lead zero-trust transformation, automate security workflows, build AI-augmented detection and response tooling, perform risk assessments and threat modeling, and mentor junior engineers while partnering cross-functionally to improve telemetry, monitoring, and incident response.

Execute and maintain access controls, process user access requests, review audit trails, respond to help-desk issues (Remedy), support security implementations, develop/update security procedures, assist auditors, participate in business continuity testing, and provide technical support for head office and trading-room systems.

Lead security operations and IT administration across Windows, Linux, and cloud environments. Maintain the System Security Plan, support audits (NIST 800-171, ISO 27001), perform log review, vulnerability scanning, access and configuration management, incident response, and manage Microsoft 365, XDR, and Linux systems while documenting configurations and procedures.

Maintain and mature Mozilla's ISMS and support ISO 27001 and SOC 2 Type 2 audit programs. Author system descriptions and policies, manage risk treatment plans, track remediation, support internal audits, and partner with Engineering, Legal, Privacy, and Product to drive control ownership and audit readiness.

Own Odyssey's application security posture: perform code reviews, run SAST/DAST/SCA and vulnerability assessments, embed security in CI/CD and cloud infrastructure, mature SOC 2 Type II compliance, use AI-assisted tooling, translate findings into actionable remediation, and lead security projects end-to-end.

Perform ISSO duties supporting system and enclave security: evaluate and implement security solutions, manage configuration and authorization, maintain security documentation per ODNI/DoD, track authentication mechanisms, support ISSM/ISSO activities, manage changes and day-to-day cybersecurity operations, and interface with stakeholders to meet security objectives.

Lead development and maintenance of certification and accreditation (C&A) frameworks from scratch. Manage NIST-800 or DIACAP certification/accreditation, FISMA reporting, security analyses, risk/vulnerability assessments, tests and evaluations. Prepare briefings for senior officials, maintain certification documentation and POA&Ms, coordinate C&A activities with FSO and DAA, and enforce information assurance policies.

Manage and optimize the Tripwire deployment, perform discovery and health checks, develop remediation plans, and lead incident response including advanced malware detection, mitigation, and security event analysis. Work under variable schedules to troubleshoot, configure, and maintain security tooling and analytics.

Design, build, and maintain developer-focused security tooling and automation. Deploy and optimize Wiz and Fastly WAF across CI/CD and Kubernetes, integrate cloud security tooling, perform code reviews and threat modeling, and build AI-assisted workflows to scale product security.

Support DoD modernization engagements by implementing and validating secure configurations, supporting ATO/eMASS activities, producing operational runbooks, coordinating cutovers and testing, remediating vulnerabilities, and automating operations (scripting/AIOps) with emphasis on mainframe/legacy environments and DoD security frameworks.

Embed security into software delivery by partnering with engineering teams to improve CI/CD pipeline security, triage and remediate findings, perform threat modeling, design secure-by-default patterns, build reusable templates and automation, support compliance and audit evidence, and communicate security standards and best practices.

Design, implement, and manage GCP infrastructure using Terraform; architect GCP environments; integrate Vertex AI and BigQuery for ML and analytics; integrate Wiz Security Control and implement Policies-as-Code; automate tooling and perform security assessments to ensure compliance.

Lead and deliver cross-functional cybersecurity programs: define scope and success criteria, manage timelines/budgets/resources, coordinate with security teams and vendors, track risks and metrics, establish governance, and drive continuous improvement across the portfolio.

Provide Nexpose and Nessus implementation, configuration, tuning, and reporting. Collaborate with staff to identify risks, develop mitigation plans, improve scanning processes, manage projects, and transfer knowledge to technical teams. Produce technical and management reports and ensure environment meets agency requirements.

Lead SAP security and GRC strategy across on-prem and cloud landscapes. Design roles and authorizations, configure GRC modules, manage access provisioning and emergency access, perform SoD/critical access analysis, support compliance and audits (SOX, GDPR, HIPAA, NIST), monitor incidents, and provide technical leadership, documentation, and training to stakeholders.

Lead day-to-day cybersecurity operations and long-term security strategy. Manage MSSP/MSP relationships, drive cloud and application security (AWS/Azure), oversee detection/response (SIEM/EDR), tune alerts, conduct incident response, maintain policies, run awareness training, and report security posture to leadership.