Top Cyber Security Jobs

Lead and coordinate enterprise-wide cybersecurity incident response across detection, investigation, containment, remediation, and documentation. Work with internal teams, vendors, and MSSPs; analyze SIEM/EDR and security event data; maintain and improve the Security Incident Response Plan (aligned to NIST/ISO/MITRE); run tabletop exercises and readiness assessments; leverage threat intelligence and track incident response metrics and KPIs.

Design, implement, operate, and improve enterprise network security controls (WAF, NAC, IDS/IPS). Monitor and tune security platforms, support secure network design with IT Networking, investigate security events, participate in incident response, maintain documentation and lifecycle management, and support vulnerability remediation and change management.

Designs, implements, and operates enterprise security technologies (DLP, IDS/IPS, WAF, endpoint protection). Monitors threats, leads incident response, performs vulnerability assessments, and supports audits and compliance while improving security processes and tooling.

Define and maintain Secure SDLC policies, manage hardened cloud container image repository, embed automated SAST/DAST/OSS scanning into CI/CD, drive container security and image hardening, manage vulnerability triage and remediation, support threat modeling and application security reviews, and enable development teams to remediate security issues before release.

Design, architect, and administer Windows/Linux systems and IP networks across multi-domain virtualized environments. Deploy, maintain, and integrate Forescout CounterACT appliances and cybersecurity data (e.g., Splunk). Ensure security upgrades, troubleshoot systems, and apply federal information security standards and risk management practices.

Design, deploy, tune, and operate enterprise security technologies; conduct risk assessments and penetration tests; monitor, detect, and remediate incidents; support vulnerability management, compliance, and incident response; produce security reports and runbooks; provide cross‑functional security guidance and after‑hours on‑call support.

Maintain and enforce cloud security standards across AWS, Azure, and GCP. Ensure cloud logging is ingested into centralized SIEM, operate CSPM tools to detect and drive remediation of misconfigurations, support incident response and risk assessments, and collaborate with engineering and security teams to enforce governance and improve cloud security posture.

Design and implement enterprise cloud security architecture across multi-cloud environments. Integrate cybersecurity tools, apply IaC (Terraform/CloudFormation/Bicep), enforce multicloud governance and networking, implement cloud security controls and telemetry, and apply Zero Trust principles. Meet DoD 8570 certification requirements and obtain required DoD cybersecurity certifications promptly.

Perform application-security engineering: run SAST/DAST scans, triage and remediate vulnerabilities, integrate Fortify/JFrog Xray/OWASP ZAP into CI/CD, support software-supply-chain/SCA efforts, and collaborate with developers to document and resolve security findings.

Serve as a senior security technical advisor for strategic enterprise customers, driving adoption and optimization of Fastly Security products. Build deep cross-functional relationships, resolve complex security issues, deliver tailored workshops and enablement, advocate customer needs internally, and mentor junior TAMs while improving processes, automation, and documentation to scale the Security TAM function.

Lead go-to-market strategy, messaging, and positioning for Fastly's security portfolio (WAF, DDoS, Bot Management, TLS). Drive product launches, sales enablement, competitive differentiation, compliance messaging, cross-sell narratives, content and campaigns, and public product evangelism in partnership with Product, Sales, Customer Success, and Marketing.

Lead and scale Platform Security engineering: define multi-year technical vision and roadmap, manage and develop senior engineers, drive cross-functional adoption of security and reliability best practices, oversee PKI and secrets/workload identity solutions, and communicate strategy and risks to executives.

Design and drive technical data security strategy across corporate and production systems. Embed data protection into system design, implement enterprise tooling (discovery/classification, DLP), harden access controls, assess and mitigate data risks, and translate governance/privacy requirements into scalable technical controls while partnering with Product, Engineering, Legal, and system owners.

Design, implement, and operate public-facing backend APIs and services in Go; author design and architecture docs; collaborate with frontend, product, and security teams; ensure stability, performance, and scalability; mentor engineers; use AI coding agents in daily work; participate in on-call rotation and support CI/CD-driven deployments.

Contribute to corporate information security by assessing designs, selecting controls, performing threat modeling and vulnerability management, supporting risk and vendor assessments, and advising engineering teams on secure solutions and governance.

Contract SAP Security consultant role requiring hands-on experience with SAP GRC 10. 3-month engagement (possible extension) based in Plano, TX. Must have 5–7 years of relevant experience and strong communication skills. Start date around May 1.

Serve as IAM SME for Windows environments: manage onboarding/offboarding/transfers/UARs, process access requests per SLA, document procedures, support audit/compliance, identify automation opportunities, use Quest and AD tools, troubleshoot, and collaborate globally.

Develop and maintain Java/Java EE applications with a strong focus on security: SSL, cryptography, authentication/authorization (LDAP, SSO, SAML, OAuth, x509, WS-Security), PCI compliance, configurable data security, scripting, audits/compliance across projects, independent problem-solving, and managing parallel tasks.

Serve as an IAM SME for Windows/Active Directory environments: process access requests, troubleshoot IAM tools (Quest, ARS, RMAD, RPM), document procedures, support audits/compliance, identify automation opportunities, and provide after-hours support as needed.

Develop and document information security policies and standards; implement security measures, risk assessments, encryption, firewalls, and compliance testing; monitor and safeguard data access; maintain policy repositories; train users and promote security awareness; track security issues and remediate risks across applications and infrastructure.

Manage information security projects, ensuring delivery and compliance with ISO/IEC 27000 series. Requires 7+ years project management experience, strong communication, and ability to work with government clients (preferred). Contract role (3+ months) with phone and face-to-face interactions.

Lead database security initiatives including planning, design, implementation and maintenance of server-class databases. Configure and monitor Database Activity Monitoring tools (e.g., Imperva, Guardium, ArcSight), deploy agents and write alert policies, support audit/compliance projects, produce technical/process documentation, provide project leadership, and transfer knowledge to InfoSec and DBA teams while mentoring junior staff.

Perform security operations tasks including implementing vulnerability scanners, managing log/SEIM systems (Splunk/Elasticsearch), patching and configuring Windows and Linux systems, supporting incident management, applying IT security best practices, and communicating with customers and remote teams to resolve security issues.

Implement and manage security tools (vulnerability scanners, log management), patch and configure OS/applications, support incident management, communicate with customers and remote teams, and protect confidential information while prioritizing tasks and troubleshooting security issues.

Administer and customize Mainframe TopSecret security, support security administration across business areas, perform system and token updates, advise on roles/groups/users, and collaborate with security analysts. Requires understanding of mainframe environment, JCL, DB2, COBOL, LDAP/AD, and two-factor/token authentication.