Top Cyber Security Jobs

Perform manual and automated dynamic security testing (DAST) and ethical hacks of web and mobile applications to identify OWASP Top 10 and other vulnerabilities. Use Burp Suite and Agentic AI tools, validate findings, review results with stakeholders, help determine risk ratings, and improve application security techniques and processes.

Serve as the ISSO for classified systems: implement and maintain information security policies, execute RMF processes, perform continuous monitoring and security assessments, prepare technical reports and briefings, identify/prioritize threats and corrective actions, mentor the security team, and support enterprise-wide security policy development and system accreditation.

Lead SAP Security, IAM, and GRC for the Retail Spine transformation. Manage role design, access controls, SoD, Firefighter, GRC Access Control, audit readiness (SOX/PCI/GDPR), IAM integration (SSO/MFA/Azure AD), SI vendor governance, and team development across S/4HANA, BTP, Fiori, and integrated systems.

Lead the Information Security function, manage security operations, ensure compliance with regulations, and develop a high-performing security team at WHOOP.

Design and build agentic AI orchestration and MCP systems to automate SOC workflows. Architect proactive threat hunting, E2E incident response automation, purple-team feedback loops, and simulation testing. Serve as a technical escalation lead and collaborate across Cloud, DevOps, Compliance, and Security teams to drive automation-ready systems.

This role involves defining and leading the security and risk strategy for Circle's products, ensuring compliance across jurisdictions while managing product security, compliance operations, and risk assessment.

The role involves overseeing cybersecurity responsibilities within Capital One's Financial Services, ensuring risk management and process improvement. You'll collaborate with teams, manage projects, and deliver presentations to stakeholders.

The Senior Manager, Information Security Office (ISO) Consultant role involves leading cybersecurity strategies, securing AI/ML systems, and advising senior leadership on risks and governance in AI innovation.

The Security Sales Engineer will support the enterprise sales team, drive security product adoption, conduct demos, and provide technical support throughout the sales cycle.

Ensure Rubrik products meet security standards by integrating AppSec into the SDLC, performing automated and manual assessments, threat modeling, hardening applications and deployments, tracking AppSec metrics, and producing security guidance for engineering and operations teams.

The Cloud Security Architect designs and implements cloud security strategies, ensuring the safety of data and applications in cloud environments and conducting security assessments.

The Mainframe Security Engineer will optimize cybersecurity processes, manage risk assessments, analyze security vulnerabilities, and report on cybersecurity threats using various frameworks and tools.

Lead and perform manual and automated security assessments of applications, APIs, cloud, networks, AI systems, and devices. Administer DAST and vulnerability scanning, develop AI-powered testing tooling, perform targeted penetration tests, research emerging threats, validate vulnerabilities, and provide remediation guidance while mentoring others.

Perform manual and automated dynamic security testing and ethical hacking of web, mobile, and API applications to identify OWASP Top 10 vulnerabilities. Use Burp Suite, Agentic AI, and DAST tools, review results with stakeholders, rate risk, validate findings, develop new testing techniques, and assist in designing security solutions. Mentor others and continuously enhance application security methodologies.

Lead audit, compliance, and control frameworks: design, document, implement, and monitor security controls; conduct audits and compliance reviews; recommend remediation; collaborate with business units; report control effectiveness and compliance posture; research standards and improve processes.

Lead audit, compliance, and control frameworks for Mastercard security operations. Design, document, monitor, and assess security controls, conduct audits, recommend remediation, integrate requirements with business units, and report on compliance posture and control effectiveness. Advise on risk management and regulatory changes.

Lead design, documentation, monitoring, and assessment of security controls and compliance frameworks. Conduct audits, identify gaps, recommend remediation, and collaborate with business units to embed security requirements. Provide expertise on risk management, regulatory obligations, cloud security, and report control effectiveness to stakeholders.

Lead and grow multiple Code Security products and PM team to drive strategy, roadmap, GTM, pricing/packaging, and execution to achieve large revenue targets. Collaborate cross-functionally with engineering, sales, marketing, and customer teams, represent product externally, mentor PMs, and use data-driven insight to prioritize features and deliver customer value.

Responsible for leading security initiatives, implementing policies, evaluating security architectures, and ensuring compliance with firewall and cloud security standards.

Design and implement automated compliance workflows and continuous control monitoring for SOC 2, ISO 27001/27017, PCI, and SOX ITGCs. Integrate and customize compliance automation platforms, collect scripted evidence, validate controls, partner with engineering and risk teams, and apply AI/automation to scale GRC operations.

Lead Security Engineering & Operations: develop and execute information security strategy, manage security infrastructure (firewalls, IDS/IPS, SIEM, endpoint protection), oversee detection engineering and incident response, manage teams and vendor relationships (MSSP/XDR), collaborate with engineering/DevOps, and maintain security metrics and compliance.

Lead and execute authorized red team and adversary emulation operations across enterprise, cloud, identity, endpoint, and retail tech. Develop and operate C2 infrastructure and offensive tooling, research endpoint telemetry and evasion techniques, identify AD/cloud attack paths, partner with detection and response teams, map findings to MITRE ATT&CK, and translate results into prioritized remediation, reports, and executive summaries.

Own and build Grow Therapy's data security infrastructure: automated data classification, field-level masking/tokenization, encryption and key management, secure data connectors to AI tooling, and access controls. Define a multi-year vision, implement pipelines and services, and partner across Data, Engineering, and Detection & Response to make secure-by-default the company standard.

The Senior Staff Security Engineer will lead edge and network security strategies, overseeing design, operation, and incident response for Gusto's security posture, requiring substantial expertise in Cloudflare and AWS.

The role involves leading security initiatives, building security tools, conducting vulnerability assessments, and collaborating with teams to enhance cloud security and risk management.