Top Cyber Security Jobs

Support cybersecurity architecture and engineering across enterprise environments including Zero Trust, cloud security, DevSecOps, AI/GenAI security, PQC, SSO, vulnerability scanning, automation, and documentation. Develop technology roadmaps, conduct market research and proofs of concept, and support integration, CONOPS, and engineering activities.

Support DoD cloud security by implementing NIST/FedRAMP/DoD controls, configuring IAM/RBAC/Zero Trust, conducting vulnerability assessments and incident response, and producing SSPs, SARs, and POA&Ms to ensure compliance.

Implement and maintain GRC solutions, evaluate and configure security controls, inspect system configurations for compliance, analyze machine-generated log/event data, collaborate with stakeholders to remediate risk, and support continuous monitoring and accreditation processes. SES.2 hires take on broader solution development and stakeholder/priority management.

Lead and improve ZODL security posture, manage incident response, coordinate external audits, advise staff on operational and personal security, prioritize mitigations, recruit security talent, and collaborate with engineering and research to secure Zcash software and protocols.

Lead security consulting across IT and applications: drive Secure Development Lifecycle, run source-code analysis (Fortify), perform network and WLAN security assessments, penetration/red-team engagements, firewall policy design, ensure PCI/HIPAA/SOX compliance, and provide security training and threat modeling.

Designs and implements security features and information assurance requirements for servers, workstations, and networks. Analyzes network topology and vulnerabilities, monitors IDS/firewalls and SIEMs, develops documentation and recommendations, supports regulatory reviews, and provides security engineering and integration services to customers.

Manage and optimize cloud security posture across GCP and AWS, triage and remediate alerts/vulnerabilities, harden Kubernetes environments, implement secure baselines and guardrails, support secure AI/LLM integrations, produce compliance evidence, and participate in cloud incident response.

Perform advanced offensive security work: conduct complex penetration tests, teach and integrate offensive tradecraft into the AI platform, harden product and company defenses, and collaborate with core engineers to build and ship capabilities that automate red-team techniques.

Lead design and execution of enterprise security for hybrid cloud and AI initiatives. Build Zero Trust identity, AI/model security, data-centric protections, SecOps integration, API/app security, third-party risk, and continuous compliance while enabling cloud ERP migrations and data modernization.

Design and integrate diverse cybersecurity and IT tools into an AI engine, ensure common data/function models, advise on autonomous security analysis, and own corporate security posture for endpoints, cloud, and build pipelines.

Own product security across the SDLC: threat modeling, secure design reviews, application security testing (code review, SAST/DAST), supply-chain/dependency hardening, CI/CD security, and building automated security tooling and guardrails while partnering with engineering and product.

Perform information security incident response, spam and malware analysis, correlate logs across Exchange, workstations and Mimecast, analyze IDS/IPS alerts, assess vulnerabilities/penetration testing, research threats daily, and produce reports with remediation recommendations.

Design and operate cloud infrastructure security for multi-tenant environments: architect multi-account AWS isolation, harden Kubernetes, deploy CSPM, enforce IaC guardrails, implement least-privilege IAM across platforms, and build incident response and logging pipelines for enterprise customers.

Lead and execute security governance, risk, and compliance activities including SOC 2 and regulatory compliance audits, internal control testing, GRC platform administration, enterprise risk register maintenance, remediation tracking, and cross-functional policy and questionnaire support. Produce audit reports, dashboards, and risk reporting to leadership.

Implement and operate security controls on AWS, perform vulnerability scanning and remediation, support ATO evidence for NIST 800-53/FedRAMP, run continuous-monitoring and threat-detection tooling, partner with DevSecOps to automate security, and support incident response and forensics.

Responsible for reducing IT security risk and responding to incidents by enforcing security policies, administering and troubleshooting security tools, documenting procedures, researching mitigation controls, and monitoring/advising on security issues across servers, networks, cloud, authentication, encryption, and applications.

Serve as the ISSO for cloud environments using Microsoft security products. Author control implementation statements, perform vulnerability scans, produce risk-based reports, assist remediation, enforce RMF-compliant controls, and collaborate with customer security teams to translate policy into operational procedures.

Provide legal counsel on information security, privacy, and compliance for software, AI/SaaS/cloud, and professional services contracts. Negotiate security/privacy terms, liaise with commercial, security, sales, and technical teams, ensure contractual alignment with internal controls and global regulations, and develop standard contract language and playbooks for telecom/ISP customers worldwide.

Lead technical strategy and architecture for application security across WAF, WAAP, DDoS, API security, bot defense, TLS, identity, and AI/ML detection. Drive modernization to cloud-native, SaaS, and API-driven services, enforce secure-by-design patterns, mentor senior architects, perform threat modeling, and align cross-functional teams on compliance, telemetry, and scalable runtime defenses.

Support cybersecurity engineering, RMF authorization packages, ATO achievement and maintenance, STIG execution, vulnerability and risk assessments, and cyber test strategies for integrated combat systems. Provide technical leadership across acquisition lifecycle to ensure protection, resilience, and compliance of systems and networks.

Support DoD network modernization by monitoring networks, collecting and analyzing CND/IA tool data, performing vulnerability assessments, incident response, risk analysis, and generating certification/accreditation reports. Ensure compliance using STIG/eMASS and communicate findings to stakeholders.

Lead cloud and cybersecurity engineering engagements: design and implement multi-cloud security architectures, detect and respond to threats, manage identity and access, enforce compliance baselines (SOC 2, ISO 27001, PCI, HIPAA), secure cloud infrastructure and DevSecOps pipelines, mentor staff, and develop AI-accelerated internal tooling and automation.

Lead end-to-end cyber security and GRC engagements as a hands-on principal consultant: perform technical assessments, framework-aligned audits (SOC 2, NIST, ISO, HIPAA), validate controls, design remediation roadmaps, advise on SIEM/MDR and IR, author policies, brief executives, and grow accounts through trusted advisory. Operate autonomously across multiple concurrent client engagements in regulated industries.

Lead cybersecurity advisory engagements including building GRC programs, conducting compliance readiness and ITGC assessments, executing remediation roadmaps, directing incident response exercises, performing IT risk assessments, managing GRC platforms, and delivering client-facing recommendations and project management.

Perform application security analysis using automated and manual techniques (SAST, SCA, fuzzing, code reviews), integrate and tune security tooling in CI/CD pipelines, support developers with remediation, conduct threat modeling and secure design reviews, document findings, and embed security into the development lifecycle for mission-critical defense software.