Top Cyber Security Jobs

Lead modernization of a global Third-Party Risk Management (TPRM) program by shifting from questionnaire-centric assessments to a data-driven model using technical validation, automation, continuous monitoring, and AI. Partner with Procurement, Legal, Privacy, and Supply Chain to standardize contracts and controls, maintain centralized third-party inventories, report risks to senior leadership, and build a high-performing TPRM team while overseeing advanced technical assessments for critical suppliers.

Manage PCI/security compliance for retail POS environments: govern programs, oversee IRM deliverables, validate encryption/security testing, document designs and operations, review technical configurations, verify vendor PCI implementations, and coordinate with Trustwave.

Provide design, deployment, and operational support for network security (firewalls, VPN, IPS). Configure and maintain Cisco ASAs and Checkpoint/Solaris firewalls, perform vulnerability and intrusion work, manage NAT and SSL VPNs, update IPS signatures, produce technical documentation, and participate in on-call rotation and after-hours support.

Plan and implement security solutions across business integrations and healthcare acquisitions. Configure and test hardware, coordinate deployments and vendor product procurement, ensure corporate compliance, and provide security consulting across multiple IT projects. Support off-hours deployments and site testing as needed.

Lead implementation of a Cyber Security Operations Center (SOC) and SIEM platform. Manage project schedule (MS Project), scorecards, coordinate infrastructure teams, ensure ordering/installation, run cross-team meetings, and drive timely hand-offs. Requires strong IT and project leadership experience; PMP preferred.

Senior PeopleSoft Security Administrator responsible for administering PeopleSoft Campus Solutions 9.0 security: managing roles, permissions, access provisioning, audits, compliance, troubleshooting, and coordinating with IT and business stakeholders to support implementations and upgrades.

Lead design, deployment, and operation of Jazzs security stack; mentor security engineering and operations teams; manage SIEM, incident response, threat detection, and automation across cloud, endpoints, network, and applications; liaise with IT and business stakeholders to improve security posture and run investigations/forensics.

Lead and mature the company's cybersecurity program for a distributed, remote workforce. Develop strategy, governance, risk management, incident response, compliance (SOC 2/ISO/NIST), vendor assessments, device and identity controls, security awareness, and executive reporting to reduce organizational cyber risk and enable growth.

Lead design and implementation of embedded device security across firmware, OS, and cloud interfaces. Perform threat modeling, architect hardware-backed identity and secure key management, implement TrustZone/TEE/kernel solutions, integrate biometric sensor security, and apply secure SDLC and vulnerability management practices across multi-disciplinary teams.

Lead and execute network and information security operations: install and maintain security software, develop disaster recovery and business continuity plans, troubleshoot virtual infrastructure issues, deploy global infrastructure securely, and produce actionable security reporting and processes to protect networks and data.

Design and enforce secure AI architecture and controls across the enterprise. Partner with Architecture, Delivery, Privacy, IAM, Vendor Risk, CSOC, Legal and business owners to translate AI risk, security, privacy and compliance requirements into reference architectures, implementation guidance, and reviews. Provide technical oversight for complex projects, mentor staff, evaluate vendor solutions, author whitepapers, and support RFPs and audits to ensure AI solutions are secure and compliant.

Serve as the embedded product security SME, owning threat modeling, security architecture, secure coding practices, testing coordination, vulnerability remediation, and vendor/cloud risk. Translate policy into controls, monitor Key Risk Indicators, deliver security artifacts to review boards, and drive risk reduction across product technology supply chains while partnering with Tech Leads, Business Architects, and risk teams.

Review and secure application releases by analyzing source code, validating vulnerabilities, producing proof-of-concept exploits, threat modeling, improving DevSecOps pipelines (SAST/DAST/SCA/IaC), securing container runtimes, and producing clear remediation reports for engineers and executives.

Provide strategic leadership for enterprise cybersecurity to protect PHI and critical systems. Lead risk management, regulatory compliance, security operations, incident response, business continuity, governance, and security awareness to support safe, continuous healthcare delivery.

Lead the company's security posture across application, infrastructure, and operational domains. Perform code reviews, threat modeling, and penetration testing; design security controls, monitoring, and incident response; establish compliance frameworks (SOC 2, PCI-DSS); build internal security tooling; and hire/manage security contractors and future hires while embedding security into the development lifecycle.

Lead and coordinate security managers and engineers to oversee security operations, incident response, patching, intrusion prevention, log monitoring, risk assessments, audits, and remediation. Ensure compliance with security policies and regulatory standards (SOX, PCI), manage the risk and audit programs, and drive security awareness and training across the organization.

Lead information security risk management activities including system security testing, vulnerability scanning, reverse engineering, log analysis, incident response, scripting to automate analysis, and ensuring SOX/PCI compliance while supporting audits and legal/investigator coordination.

Designs and implements security architectures, configures firewalls and IDS, performs vulnerability management and patching, automates security tasks with scripts, supports incident response and CSIRT documentation, and manages certificates, keys, and identity management systems.

Support and operate security controls across endpoints, cloud, identities, applications, and infrastructure. Monitor and track vulnerabilities, access reviews, and remediation. Collaborate with engineering and product teams on application and cloud security. Maintain evidence, reports, and inventories; assist with security tooling, automation, and continuous improvement to keep controls audit-ready.

Provide INFOSEC program support including public-release reviews, classification marking guidance, and training. Support industrial security and DD Form 254 reviews, liaise with contract offices, and perform Foreign Disclosure Representative duties. Advise leadership on safeguarding classified and CUI information and assist in investigating security violations.

Serve as the ISSO/ISSM for a DoD application: integrate cybersecurity across the lifecycle, implement and monitor RMF controls, identify and remediate vulnerabilities using Fortify, and develop POA&Ms to achieve and maintain authorization.

Provide M365 security architecture and administration across Microsoft 365 and Power Platform, integrate Purview and AvePoint protections, support SharePoint (online and on-prem), Windows servers and SQL clusters, develop Power Platform solutions, implement Microsoft security products (Defender, Copilot, Graph connectors), manage security change requests, audit logging, and deliver regular team status reporting.

Lead and execute enterprise detection and response across cloud, OT/ICS, endpoint, identity, and network. Manage security tools and vendors, mature SIEM/cloud logging, embed security into cloud/IaC, run incident response, perform OT assessments, and maintain policies and compliance (NIST/SOC2/ISO27001).

Monitor IDS sensors and SIEM platforms, perform intrusion protection, vulnerability assessments and ad-hoc scanning, evaluate risk models, remediate incidents, provide senior advisement, and develop scripts to analyze network traffic and anomalies.

Responsible for driving new logo acquisition and expanding enterprise accounts by selling data-centric security software. Tasks include prospecting, developing pipeline, consulting with VP/C-level executives, responding to RFPs, building partner/GSI relationships, managing complex sales cycles, coordinating cross-functional teams, and closing contracts with F2000 technology and semiconductor firms.