Top Cyber Security Jobs

Lead definition and delivery of centralized enterprise security services (authentication, authorization, encryption). Gather and prioritize business needs, liaise with stakeholders and vendors, govern service lifecycle, estimate and secure funding for initiatives, and communicate security metrics to senior IT leadership.

Lead cyber security engineer to design, implement, and support data protection (DLP), encryption, API security, and Layer7 API Gateway solutions. Provide L3 production support, HA architecture design, incident response, SIEM integration, automation/DevOps improvements, technical leadership, documentation, and cross-team collaboration for secure, scalable deployments.

Operate vulnerability scanning (Nessus), manage McAfee and Splunk agents/policies, monitor AWS security controls, support incident response and security operations, assist with security hardening (RHEL), application security tasks, and participate in change control and ACI-related security activities.

Design and implement Identity & Access Management solutions (RSA SecurID). Lead process architecture, development/configuration, validation, deployment, and project/talent management. Requires extensive travel and strong communication and analytical skills.

Perform web and network penetration testing and secure code analysis using tools such as HP Fortify, WebInspect, Nessus, Burp, and IBM AppScan. Apply security frameworks (OWASP, NIST, ISO27001, PCI), analyze security NFRs/metrics, coordinate multiple projects, manage stakeholders, and support global delivery. Mobile security and telco domain experience are a plus.

Design, configure, validate and deploy Identity & Access Management solutions (RSA SecurID). Provide business process consulting, architecture/design, development/configuration, solution evaluation, and project/talent management in a consulting environment with regular travel.

Owner of the site cybersecurity program for classified/controlled systems: lead RMF/JSIG/DAAPM A&A and continuous monitoring, manage vulnerability/patching and SIEM, drive ATOs for SAP/SCI systems, coach ISSOs/ISSEs, interface with DCSA/SAPCO, and ensure audit readiness.

Perform web and network penetration testing and secure code analysis using tools like HP Fortify, WebInspect, Nessus, Burp, and IBM AppScan. Apply security frameworks (OWASP, NIST, ISO27001, PCI), collaborate with stakeholders, coordinate projects, and work within global delivery teams. Mobile security and telco domain knowledge are a plus; relevant security certifications encouraged.

Develop, audit, and migrate Zapier automations to use Custom Actions and API Call Actions, reducing static API keys. Ensure workflows are secure, scalable, and documented while collaborating with tech and security teams and optimizing for maintainability.

Lead application security activities including static and dynamic code analysis, penetration testing, and use of tools like Fortify, AppScan, CodeSecure, BurpSuite, Paros, and TemperIE. Perform development/configuration, solution validation and deployment, manage projects and talent, and work in a consulting environment requiring regular travel.

Manage user access, credentials, and routine security operations across business systems. Handle password management, account provisioning/deprovisioning, security ticket resolution, basic monitoring, documentation, and escalate incidents to the Security Director.

Lead application security consulting: define business processes, design secure architectures, perform source-code analysis and penetration testing, use Fortify/AppScan/CodeSecure and proxy tools (BurpSuite/Paros/TemperIE). Configure, validate, deploy solutions, manage projects and talent, and support client engagements requiring regular travel.

Lead infrastructure vulnerability assessment and security management activities, manage Air-Watch MDM and Symantec solutions, perform development/configuration/validation/deployment, provide business process consulting, and manage projects and talent in a consulting environment that requires regular travel.

Own integration, configuration, and output quality of security tooling; tune findings to reduce noise; design severity scoring, triage flows, and enrichment; build a security judgment layer; partner with engineering, product, and design; engage with customers; benchmark and contribute to open-source security tooling.

Lead vulnerability assessment and infrastructure security activities, manage AirWatch MDM and Symantec tools, develop/configure and validate security solutions, perform business process consulting, manage projects and talent, and travel regularly for management consulting engagements.

Lead application security activities including security code reviews, vulnerability assessments, tool-based scanning, and consulting product development teams. Manage project delivery, customer relationships, and documentation while aligning work to OWASP/OSSTMM/SANS standards and security best practices. Work requires travel and project management in a consulting environment.

Lead assessments, design secure infrastructure and controls, implement scalable security solutions, operate and administer enterprise security tools, drive vulnerability management, incident response, and risk analysis, and report security posture to stakeholders and senior leadership.

Contract Information Security Consultant to perform PCI assessments for a client in Sacramento through Dec 31, 2017 (possible extension). Requires documented experience conducting PCI assessments and holding CISSP and QSA certifications. Candidates must be authorized to work in the U.S.; employer cannot sponsor visas.

Design, configure, operate, and troubleshoot endpoint DLP systems; create and deploy access control rules; monitor and investigate DLP logs and incidents; coordinate testing with business owners; balance data protection with business needs and participate in incident response.

Lead application security activities including static and dynamic analysis, source code review, and penetration testing using Fortify, AppScan, CodeSecure, BurpSuite and related tools. Provide security architecture and process design, manage projects and talent, perform solution validation and deployment, and support consulting engagements that require regular travel.

Lead application security and business process consulting efforts: design and detail secure architectures, perform source-code analysis and penetration testing, use SAST/DAST tools (Fortify, AppScan, CodeSecure, BurpSuite, Paros, TemperIE), support development/configuration/validation/deployment, manage projects and talent, and travel regularly for consulting engagements.

Design, implement, and manage large-scale network and security solutions (Cisco/Juniper). Lead incident resolution, stakeholder communications, IPv4 planning, monitoring, and customer-facing technical consulting with regular travel.

Design, implement, and manage enterprise risk management and GRC processes. Perform risk and third-party assessments, document policies and controls, report findings, and coordinate remediation, training, and compliance activities.

Operate and maintain endpoint DLP systems; design and implement DLP architecture and controls; create, test, and deploy access rules; monitor and investigate DLP logs and incidents; coordinate with business owners, apply risk methodology, and support security incident response.

Lead and deliver Identity & Access Management solutions: design IAM processes, manage privileged accounts across platforms, administer DELL TPAM (PPM/PSM), perform development/configuration/deployment, ensure information security controls, and support project and consulting engagements that require regular travel.