Top Cyber Security Jobs

Monitor and analyze security events across enterprise systems, tune and operate Splunk ES, investigate incidents, perform threat hunting, onboard log sources, optimize detections to reduce false positives, and collaborate with cross-functional teams to drive remediation and document playbooks and procedures.

Lead application security efforts: perform automated and manual analyses (SAST, SCA, fuzzing, code reviews), integrate and tune security tooling in CI/CD/DevSecOps pipelines, support developers on secure design and remediation, lead threat modeling and documentation. Work on mission-critical DoD software; must be U.S. citizen and able to obtain DoD Secret clearance.

Lead application security code reviews and risk assessments; use automated application security testing and integrate testing into DevSecOps/CI-CD pipelines; review architecture, source code, IaC, and deployments; evaluate cloud, network, and enterprise security; provide remediation guidance, technical writing, training, and mentoring; support federal cybersecurity compliance and secure development lifecycle requirements.

Designs, implements, and operates enterprise security solutions; monitors and responds to security events; leads vulnerability assessments; creates security policies and procedures; ensures regulatory/HIPAA compliance; mentors IT security staff and coordinates with vendors and compliance teams to improve security posture.

Administer, integrate, automate, and optimize enterprise security tools. Develop APIs, scripts, and automation for tool interoperability. Design vulnerability scanning strategies and SIEM data models. Build dashboards and alerts for SOC/CDM stakeholders, aggregate logs and asset data, support audit readiness, and use CI/CD, containers, and cloud-native automation to improve security engineering workflows.

Implement and integrate Black Duck application security products for enterprise customers on the West Coast. Drive customer onboarding, training, solution design, custom integrations into SDLC/DevOps, and own delivery from project initiation to completion while advising on secure development practices.

Perform SAST/DAST and vulnerability assessments, create FISMA threat models, support incident response, document system security and contingency plans, harden Linux and cloud infrastructure, advise development teams on secure coding and cryptography, and ensure compliance with federal security controls.

Lead design and operation of an enterprise cybersecurity program: architect detection and response, manage Defender XDR/SIEM/MDR and endpoints, run incident response and forensics, perform audits, vulnerability assessments and pen tests, enforce NIST/ITAR controls, automate security workflows, and develop change control and security awareness programs.

Serve as primary SIEM/SOC escalation point: investigate and triage network security events, document findings, communicate with stakeholders, tune detections, oversee threat and vulnerability management, implement automations with platform teams, and lead brand collaboration calls. Provide incident response, threat intelligence analysis, and occasional on-call support across a global enterprise.

Lead design and implementation of a secure software supply chain and high-assurance CI/CD platform. Secure build and deployment environments, enforce artifact signing, provenance and SBOM generation, target SLSA 3/4 and NIST SSDF compliance, integrate AI governance and agentic controls into pipelines, and grow/mentor the security team.

Lead design and implementation of IGA and PAM shared services; define reference architectures and standards; evaluate vendors and technologies; partner across business, security, and engineering to deliver scalable identity solutions; drive compliance, audit readiness, and stakeholder alignment; mentor engineers and represent identity domains in enterprise initiatives.

Support security and architecture team to design, accredit, and maintain systems handling extremely sensitive data across multiple network fabrics and cloud/on‑prem environments. Lead A&A activities, incident response, POA&M tracking, cloud cost optimization, vulnerability focal duties, technical reviews, and support adoption of security tools and encryption solutions.

Lead and build Crossmint's security function end-to-end: set strategy, manage a small security team, oversee cloud/application/CI/CD security (AWS primary), own audit and compliance (SOC 2, DORA, MiCA), manage third-party risk and incident response, and act as a hands-on practitioner during high-stakes reviews and incidents. Communicate risk to executives and scale security without blocking product velocity.

Design, secure, and authorize multi-enclave cloud and big-data systems using RMF/DIACAP. Create and maintain DoD-aligned security documentation, run vulnerability scans, recommend mitigations, support accreditation (eMASS/POA&Ms), and coordinate with development, infrastructure, and government stakeholders to enforce security across system architectures.

Lead design, implementation, and maintenance of enterprise PKI systems. Support certificate lifecycle management (CLM), configure CAs and templates, manage HSMs and RAs, automate processes with Ansible, Terraform, and PowerShell, enforce key-management policies, and troubleshoot certificate/TLS issues to maintain secure operations.

Lead design and implementation of cloud security controls and PaC/IaC (Terraform). Use CSPM tools (Wiz, Defender), conduct security assessments, respond to incidents, mentor junior engineers, and collaborate with security champions to embed security into development workflows.

Serve on the CISO Cybersecurity Architecture team to embed security into Azure-native and hybrid cloud solutions, define reusable security patterns across Microsoft ecosystems, evaluate designs/PoCs, mentor engineering teams on secure coding and cloud-native controls, and drive governed, scalable security architectures that support AI, low-code, and data governance adoption.

Lead and maintain the enterprise Information Security GRC program. Ensure IT controls and regulatory compliance (HIPAA, PCI, privacy). Manage vulnerability, vendor and risk programs, change management, audit liaison, security exceptions, IT risk register, and security awareness training. Serve as SME for HIPAA, PCI, and privacy requirements.

Lead design, governance, and implementation of enterprise ZTNA and SSE architectures. Create standards, HLDs/LLDs, and decision records; drive multi-vendor platform evaluations, vendor engagements, migrations (VPN modernization), integrations with SIEM/SOAR and DLP, and operational readiness across identity‑centric, least‑privilege access models.

Lead cross-service cybersecurity programs for enterprise cryptographic and trust services (PQC, PKI, secrets management, machine identity). Coordinate engineering teams, manage dependencies, track milestones/risks, analyze architectures, run governance and readiness assessments, and deliver metrics and executive updates to align cryptographic platforms with enterprise initiatives.

Lead an identity-centric workforce security team to design and implement authentication, authorization, access management, and governance solutions across hybrid and cloud environments. Provide technical consultation, drive zero-trust and least-privilege patterns, secure applications (Java/React/mobile), implement protocols (OAuth/OIDC/SAML/MFA), support CIEM, threat modeling, and incident troubleshooting using Sentinel/KQL. Mentor engineers and collaborate with stakeholders to integrate identity, privileged access, and cloud security controls.

Provide cloud and security operations support: run Nessus scans; manage McAfee installs and policy updates; configure Splunk forwarders and dashboards; monitor AWS security configurations; support incident response, vulnerability analysis, remediation, and change control activities.

Serve as part-vCISO and account manager: assess client security posture, design and customize security programs mapping controls to infrastructure, liaise with auditors, guide implementations, advise engineering on integrations, and communicate with stakeholders to ensure compliance and operational security.

Harden and extend a Chromium-based browser runtime running in microVMs: debug and optimize Chromium builds, implement network isolation and proxy/IP handling, collaborate on unikernel isolation and kernel security, build tooling for binary analysis, crash triage, and vulnerability monitoring, and support secure supply chain and reproducible browser images.

Implement and maintain the organization's risk management framework: perform risk identification, assessment, tracking, third-party supplier risk assessments, document security policies and controls, recommend remediation, report risks to stakeholders, and support security awareness, audits, and continuous improvement.