Top Cyber Security Jobs

Design and build security and infrastructure systems for an AI data platform: detect and respond to security events, automate security workflows, harden cloud and production environments, enforce access control, integrate security into development workflows, own incident handling, secure data and model interaction layers, and contribute to human-in-the-loop systems and core internal tooling.

Senior cyber security engineer responsible for RMF/A&A activities for SLBM and naval warfare systems: author A&A artifacts, document systems, apply DISA STIGs/NSA guidance, lead security test and vulnerability analysis, produce SSAOM, manage IAVM and obtain ATO/IATO, and perform risk assessments and technical security design.

Lead and grow the application security practice, embed security across the SDLC, champion DevSecOps, and review DAST/SAST/IAST findings. Align secure design and testing (OWASP/API Top 10) with development projects, shape strategy and policies, and influence risk mitigation for enterprise applications and APIs.

Lead cloud and AI security strategy, governance, and operations. Oversee CSPM/CWPP/CNAPP, SIEM/SOAR integrations, identity and data protection, IaC and DevSecOps practices, compliance, incident response, and mentor a team while partnering with engineering and stakeholders.

Lead design, governance, and continuous improvement of the Cyber Security Review program. Conduct security reviews and re-reviews of projects and applications, identify control gaps and remediation needs, manage the external service provider, define program metrics and reporting, and partner with service leadership to align strategy and drive process/tooling improvements including automation and AI.

Lead design and implementation of cloud security controls across AWS/GCP, Kubernetes, and serverless environments. Harden infrastructure, automate IAM and secrets management, integrate security scanning into CI/CD, operationalize vulnerability management and threat modeling, and partner with engineering to embed DevSecOps practices across AI-driven workflows.

Design, implement, and automate cloud security controls (primarily AWS, with GCP work) using code (Python, Go) and IaC (Terraform). Build authorization and JIT access systems, harden containers and CI/CD pipelines, integrate data classification with access controls, automate security operations and incident response, and partner with engineering to embed HIPAA-compliant, secure-by-design practices.

Lead and own Moment's end-to-end security program: AppSec, cloud infrastructure security, IAM, vulnerability management, detection, and incident response. Build and hire the security team, scale programs for top-tier financial clients, manage SOC 2 and regulatory audits, run the Trust Center, represent security to customers, and lead incident response and postmortems.

Partner with product and platform teams to embed secure-by-design practices, build and deploy security tooling and application primitives, collaborate on platform mitigations, and help lead incident response efforts to raise the company's security posture.

Design, develop, and deploy cloud threat detection for AWS and GCP; integrate and normalize cloud telemetry into the enterprise SIEM; create and tune detections, dashboards, and alerting; map detections to MITRE ATT&CK; run adversary emulation and purple team exercises; produce SOPs, runbooks, and investigator playbooks; train SOC analysts; provide escalation and on-call support for cloud security incidents.

Define, govern, and maintain global security architecture spanning people, processes, data, and technology. Lead cloud security strategy for GCP and Azure migrations, embed security into CI/CD and containerization, develop guardrails for Generative AI/LLMs, conduct architecture reviews and assurance, implement security tools, produce technical design documentation, and ensure policies and controls align with risk tolerance and compliance frameworks.

Lead security for the full stack: design secure architectures, build CI/CD and IaC tooling, run threat modeling, red-team/pen tests, incident response, and operate the bug bounty program to prevent and remediate vulnerabilities.

Lead strategy, architecture, governance, and lifecycle of enterprise physical security platforms (access control, video, visitor management, badging, alarms). Support modern endpoint and mobility platforms, drive integrations with infrastructure, lead deployments, troubleshoot incidents, manage vendors, document standards, and mentor teams while aligning security and operational objectives.

Validate, reproduce, and triage vulnerability reports for web and mobile applications; assess severity and impact using CVSS and security frameworks; communicate findings and remediation to customers and researchers; leverage automation/AI workflows; collaborate cross-functionally and improve triage processes. Weekend shifts required occasionally.

Define and own vehicle system security requirements and architectures. Collaborate with OEMs and systems engineers to implement network/module security. Create security requirements for software interfaces, develop and execute V&V plans, run tests, analyze results, resolve defects, and manage delivery timing of security features and software updates across vehicle prototypes.

Lead and drive the vehicle cybersecurity roadmap across platforms, managing requirements, risk-based triage, feature design, implementation, verification, and release reporting. Coordinate cross-functional and external OEM/supplier teams, partner with fleet operations to mitigate operational friction, and ensure architectures meet automotive security standards and regulations.

Lead cybersecurity evaluations, define item boundaries and cybersecurity concepts, and perform ISO/SAE 21434-compliant threat analysis and risk assessments (TARA). Define and manage security requirements and risk treatments for self-driving platform features, collaborate with engineering and safety teams across the product lifecycle, and maintain standards compliance across multiple projects.

Manage, configure, secure, and maintain the Enterprise Security System (ESS) environment including servers, databases, storage, and security platforms. Support integrations, monitoring, SLAs, ITIL-aligned processes, documentation, disaster recovery, performance reporting, and after-hours/surge support to ensure resilient, compliant enterprise security services.

Manage, configure, secure, and maintain the Enterprise Security System environment (servers, databases, storage, access control, intrusion detection). Ensure operational resilience, compliance, integrations, monitoring, SLAs, maintenance windows, documentation, ITIL-aligned processes, and provide PPS, after-hours, and surge support.

Lead development and execution of infrastructure security strategy and roadmap across on-prem, cloud, and hybrid environments. Establish standards, implement controls (servers, endpoints, network, cloud, containers), drive automation (IaC, policy-as-code), manage security tooling lifecycle, measure KPIs/KRIs, remediate risks, mentor engineers, and partner with cross-functional teams to enable secure technology delivery and incident response.

Lead and operationalize the enterprise application security program across internal and third-party applications, APIs, cloud-native and containerized workloads. Define secure SDLC/DevSecOps standards, integrate automated testing into CI/CD, manage AppSec tooling lifecycle, perform threat modeling and architecture reviews, mentor engineers, manage third‑party risk, and report metrics to technical and executive stakeholders.

Provide cybersecurity program support for NOAA satellite systems: document security control implementations, maintain System Security Plans and Contingency Plans, manage POA&Ms, coordinate security assessments and penetration tests, monitor vulnerability scanning and patch management, support audits and continuous monitoring, and coordinate with system administrators and stakeholders.

Provide ISSO support for NOAA satellite operations: develop and maintain security documentation (SSPs, contingency plans), manage POA&Ms, coordinate vulnerability management, assessments, authorizations, incident response, and continuous monitoring while advising system owners and coordinating with administrators and operations teams.

Lead IT controls assessments and program evaluations for federal clients: conduct interviews, review artifacts, test controls against federal standards, document findings, develop remediation plans, and mentor junior staff.

Conduct FISMA/RMF security control assessments per NIST standards; perform control testing, interviews, and evidence reviews; document SARs and ATO artifacts; identify control gaps and POA&Ms with remediation guidance; coordinate with system owners and ISSOs; support continuous monitoring and agency cybersecurity compliance for cloud and inherited controls.