Top Cyber Security Jobs

Serve as the cybersecurity SME for the generation fleet: lead segmented architecture deployments and vulnerability remediation, develop fleet-wide standards, oversee compliance audits, lead incident root-cause analysis, build dashboards/metrics, and represent cybersecurity on capital projects and plant upgrades.

Design, implement, and operate network and infrastructure security controls (WAF, IPS, DDoS) in production; automate deployments and validations; partner with internal teams; secure cloud and containerized environments (AWS/GCP, Kubernetes); ensure compliance with FedRAMP/DoD IL4; support U.S. Federal contracts requiring U.S. citizenship and security-clearance eligibility.

Lead IIoT product security architecture and governance across the device lifecycle. Define secure hardware/firmware controls, enforce industrial security standards, perform threat modeling and risk management, coordinate vulnerability response and supply chain security, and advise cross-functional teams during incidents and product design.

Lead Datadog-first security observability and detection engineering: design, scale and tune Datadog Cloud SIEM, log pipelines, detection rules and telemetry. Correlate signals across EDR, cloud and identity, automate detection-as-code, reduce false positives, and build dashboards, monitors and workflows in partnership with Security Ops, SRE and Engineering.

Lead technical and compliance activities for federal systems: design secure AWS/Azure/hybrid cloud architectures, implement and validate NIST SP 800‑53 controls, support RMF/ATO and continuous monitoring, manage baselines (STIGs/CIS/SCAP), run vulnerability/compliance scans (ACAS/Nessus), integrate SIEM (Splunk/Sentinel), guide DevSecOps on CI/CD, container security and IaC, produce architecture documentation, and mentor junior staff.

Serve as a Staff-level Level 3 escalation and incident commander for APTs, ransomware, insider and cloud compromises. Lead threat hunting across endpoint, network, identity, and cloud; operationalize threat intelligence into SIEM/EDR/SOAR detections; automate triage and response workflows; run post-incident reviews; mentor team members; and participate in a 24/7 on-call incident response rotation.

Senior Level 3 SOC engineer owning high-severity incident investigations and escalations. Lead threat hunting, detection engineering, automation (SOAR/SIEM), cloud and forensic investigations, and mentor SOC staff. Participate in on-call rotation and drive cross-functional remediation, threat modeling, and AI-enabled security capabilities (Agentic SOC, AI DLP).

Lead and own the enterprise SSPM program: implement and manage SSPM platform, onboard SaaS apps, tune controls, integrate with SIEM/SOAR/ITSM/identity, perform threat modeling and risk assessments, drive remediation, support compliance mapping, report metrics, and partner across cyber, IT, risk, and business teams to reduce data exposure and improve SaaS security posture.

Lead design, deployment, and scaling of enterprise DLP across cloud, endpoint, SaaS, and network with a focus on AI-driven automation. Build automated classification, remediation, and workflows, integrate DLP with SIEM/SOAR/identity/cloud, develop policies for regulatory compliance, mentor engineers, and present program insights to leadership.

Support DoD data ecosystem security by monitoring and validating Kubernetes and data lake deployments against RMF/NIST/DoD IL4-IL5, conducting vulnerability scans and continuous monitoring, maintaining SSPs/SARs/POA&Ms, enforcing IAM/RBAC/encryption/audit logging, and producing security assessment reports to support ATO and remediation.

Support DoD security and compliance for a Kubernetes-based data ecosystem: monitor deployments, run vulnerability scans, maintain continuous monitoring dashboards, prepare SSPs/SARs/POA&Ms, enforce IAM/RBAC/encryption/logging, and produce assessment reports to support ATO and risk remediation.

Support DoD cybersecurity compliance and operations by implementing monitoring and zero-trust controls, conducting vulnerability assessments and risk mitigation, managing ATO lifecycles and security documentation (SSP, SAR, POA&M), coordinating with DoD officials, and producing compliance and risk assessment reports for cloud and on-prem environments.

Support digital forensics and malware analysis for incident response: analyze digital media and malicious code, investigate and contain security incidents, coordinate with cyber defense teams, and produce forensic documentation and reports to support remediation and closure.

Support cybersecurity architecture and engineering across enterprise environments including Zero Trust, cloud security, DevSecOps, AI/GenAI security, PQC, SSO, vulnerability scanning, automation, and documentation. Develop technology roadmaps, conduct market research and proofs of concept, and support integration, CONOPS, and engineering activities.

Support DoD cloud security by implementing NIST/FedRAMP/DoD controls, configuring IAM/RBAC/Zero Trust, conducting vulnerability assessments and incident response, and producing SSPs, SARs, and POA&Ms to ensure compliance.

Implement and maintain GRC solutions, evaluate and configure security controls, inspect system configurations for compliance, analyze machine-generated log/event data, collaborate with stakeholders to remediate risk, and support continuous monitoring and accreditation processes. SES.2 hires take on broader solution development and stakeholder/priority management.

Lead and improve ZODL security posture, manage incident response, coordinate external audits, advise staff on operational and personal security, prioritize mitigations, recruit security talent, and collaborate with engineering and research to secure Zcash software and protocols.

Lead security consulting across IT and applications: drive Secure Development Lifecycle, run source-code analysis (Fortify), perform network and WLAN security assessments, penetration/red-team engagements, firewall policy design, ensure PCI/HIPAA/SOX compliance, and provide security training and threat modeling.

Designs and implements security features and information assurance requirements for servers, workstations, and networks. Analyzes network topology and vulnerabilities, monitors IDS/firewalls and SIEMs, develops documentation and recommendations, supports regulatory reviews, and provides security engineering and integration services to customers.

Manage and optimize cloud security posture across GCP and AWS, triage and remediate alerts/vulnerabilities, harden Kubernetes environments, implement secure baselines and guardrails, support secure AI/LLM integrations, produce compliance evidence, and participate in cloud incident response.

Perform advanced offensive security work: conduct complex penetration tests, teach and integrate offensive tradecraft into the AI platform, harden product and company defenses, and collaborate with core engineers to build and ship capabilities that automate red-team techniques.

Lead design and execution of enterprise security for hybrid cloud and AI initiatives. Build Zero Trust identity, AI/model security, data-centric protections, SecOps integration, API/app security, third-party risk, and continuous compliance while enabling cloud ERP migrations and data modernization.

Design and integrate diverse cybersecurity and IT tools into an AI engine, ensure common data/function models, advise on autonomous security analysis, and own corporate security posture for endpoints, cloud, and build pipelines.

Own product security across the SDLC: threat modeling, secure design reviews, application security testing (code review, SAST/DAST), supply-chain/dependency hardening, CI/CD security, and building automated security tooling and guardrails while partnering with engineering and product.

Perform information security incident response, spam and malware analysis, correlate logs across Exchange, workstations and Mimecast, analyze IDS/IPS alerts, assess vulnerabilities/penetration testing, research threats daily, and produce reports with remediation recommendations.