Top Cyber Security Jobs

Support and maintain IT security applications and systems, focusing on security controls, risk management, and resilience. Collaborate with IT and business teams to develop security procedures, contribute to threat operations, enforce policy, lead cybersecurity awareness initiatives, and communicate technical security concepts to varied stakeholders.

Define and document enterprise mobile security requirements and controls (MDM, MAM, encryption, offline storage). Perform mobile security assessments (code review, threat assessment), create security testing standards and checklists, ensure regulatory compliance, and recommend security protocols, tools, and products. Provide mobile security architecture and documentation for Health Net; familiarity with enterprise SSO (OAuth, SAML) preferred.

Lead design and delivery of secure storage software across OS, kernel drivers, microservices and containerized environments. Act as security consultant, manage vulnerability backlog and remediation, influence architecture and compliance (FIPS, Common Criteria, DISA STIG), mentor engineers, and evaluate vendors and technologies to ensure product security and certification readiness.

Protect systems and data by enforcing IT security policies, monitoring for intrusions, investigating incidents, overseeing patch management, collaborating with IT and business groups, and supporting audits and compliance activities across networks, databases, applications, and web services.

Investigate and remediate embedded firmware vulnerabilities, analyze firmware packages and exposed interfaces, support secure boot/firmware signing and update validation, conduct threat modeling and risk assessments, manage vulnerability response workflows, maintain SBOMs and supplier security documentation, ensure compliance with cybersecurity standards, and collaborate with firmware, QA, and compliance teams on security testing and release readiness.

Lead enterprise security operations: secure endpoints, servers, networks and third-party services; manage IAM, vulnerability management, EDR, intrusion detection, and incident response; support pen testing, compliance, audits, physical security, and employee security training while collaborating with engineering, ops, and legal.

Support RMF/A&A efforts to achieve ATOs, act as liaison to ISSOs, administer security toolsets on Windows and RHEL, run SCAP/STIG scans, track patches and vulnerabilities, lead POA&M and PTI/PTT activities, support continuous monitoring, and assist incident response and IA training.

Lead FedRAMP, SOC 2, and ISO 27001 compliance efforts by hardening AWS and Kubernetes infrastructure, implementing security controls, automating evidence collection, improving CI/CD security, and collaborating with security, legal, and engineering teams to support regulated customers.

Lead design, build, and operation of security infrastructure protecting ground stations, cloud, and corporate systems. Own SIEM, EDR, UEBA, firewall and VPN/ZTNA operations, DLP controls, Okta administration, IaC and automation, and mentor a growing security engineering team. Drive detection engineering, incident response playbooks, compliance alignment (CMMC/NIST/FedRAMP), and partner cross-functionally to embed security across on-prem and GovCloud/GCC environments.

Lead detection, response, and remediation of security incidents; maintain and improve security architecture, policies, and controls across cloud and on‑prem environments; manage security technologies (SIEM, IDS/IPS, vulnerability scanning, endpoint, WAF); perform threat hunting, vulnerability management, audits/pen tests response, and security project management; provide technical risk guidance and lead teams.

Assess and remediate security and compliance risks by analyzing test results and vulnerability assessments, developing policies and documentation, coordinating remediation across stakeholders, tracking action plans, and reporting status. Enforce security procedures, conduct gap analyses, and proactively identify vulnerabilities to reduce organizational risk.

Build and operate Okta's Security Posture Management program: aggregate and automate ingestion, prioritization, tracking, and remediation across cloud and SaaS tooling. Implement DevSecOps practices, secrets rotation, agentic automation and AI-driven analysis, configure scanners (Snyk, Semgrep, Qualys), collaborate with SRE and engineering, and produce dashboards and executive reporting to drive ownership and measurable risk reduction.

Serve as the program's ISSO to implement and enforce information systems security policies, maintain operational security posture, perform day-to-day security operations, evaluate security solutions for classified processing, conduct vulnerability/risk assessments, manage configuration and changes, and prepare SSPs, C&A packages, SRTMs, and RMF-aligned authorization documentation.

Own end-to-end network security across enterprise, on‑prem, cloud, and vessel communications. Design firewalls, segmentation, VPN/ZTNA, AWS VPC controls, and cryptographic key management for constrained maritime links. Improve observability (flow logs, telemetry), support a NOC, and automate segmentation/configuration via scripting and infrastructure-as-code.

Support and maintain enterprise security controls and tools, investigate security events, manage tickets and remediation, perform threat and vulnerability assessments, maintain Microsoft security platform (Azure Conditional Access, Intune, Defender), assist auditors, develop security documentation and awareness, mentor analysts, and support deployment of data-loss prevention and remote access solutions.

Design, assess, and implement cloud and application security solutions (primarily AWS). Identify risks, propose controls, perform architecture reviews, threat modeling, code/penetration testing, author documentation, and assist clients with security troubleshooting and implementation.

Support and administer identity and privileged access management across Entra ID, Active Directory, CyberArk and connected applications. Manage JML lifecycle, user access reviews, provisioning, deprovisioning, and access certifications. Drive compliance, audit readiness, remediation of access risks, and identity automation while partnering with HR, IT, security, application owners, and business stakeholders.

Designs and implements network security solutions (firewalls, IDS/IPS, proxies, routers) for client networks. Maintains security hardware/software, conducts packet analysis and routing protocol configuration, investigates incidents, manages security policies, and supports customer change requests and remediation.

Lead and deliver large, complex IT and security projects in a healthcare environment. Manage multi-location delivery teams, define plans and forecasts, enforce PMO processes, report status to executives, and apply information security controls, governance, and stakeholder management to achieve project objectives.

Design and implement security for SAP HANA and SAP BusinessObjects landscapes: create and manage HANA DB roles, analytic and object privileges, enforce DB admin controls and password policies, configure BOBJ groups/folder/object-level access, enable SSO with AD/LDAP, handle transport of security objects, and integrate BOBJ security with HANA roles.

Lead and oversee system security engineering and certification activities for SAP/SCI systems. Chair cybersecurity working groups, assess designs for compliance with NIST/RMF and JSIG, provide risk management and accreditation support, assist program protection planning, and coordinate with approval authorities to obtain Authorization to Operate.

Lead the security posture strategy for an NSPM platform: design and maintain posture assessment rule frameworks, map device configurations to compliance standards, define risk scoring, ensure scalable rule execution across heterogeneous network devices, translate emerging threats and regulations into automatable rules, engage customers and stakeholders, and mentor engineers and analysts on posture rule design and compliance mapping.

Serve as primary security partner for assigned business units, embedding security by design across products and platforms, leading risk assessments, overseeing tooling and remediation, advising on architecture, and reporting security metrics to leadership.

Lead enterprise cybersecurity and privacy as the CISO/CPO: set strategy, security architecture, incident response, risk management, and privacy programs (DPO duties). Drive cloud, ERP, eCommerce, and AI security controls, ensure compliance (PCI, SOX, data privacy laws), manage audits, cyber insurance, vendor risk, and build the security team to enable secure business growth.

Support DoD cybersecurity programs for PEO STRI: administer RMF activities, vulnerability management, security assessments, accreditation/authorization support, policy development, continuous monitoring, POA&M management, and compliance with DoD/NIST requirements. Collaborate with systems and engineering teams to remediate vulnerabilities and maintain security posture for mission-critical systems.