Top Cyber Security Jobs

Lead enterprise identity and access management strategy across workforce, non-human, privileged, and consumer identities. Own identity platform modernization and engineering, integrate IAM tools (Saviynt, Ping, CyberArk, BeyondTrust, etc.), enforce Zero Trust via SSO/MFA and privileged access, manage machine identity and secrets lifecycle, secure IoMT/workload identities, and partner with security operations and stakeholders to detect and respond to identity-based threats.

Lead SAP security and GRC implementations, perform risk assessments, role audits, vulnerability testing and remediation, configure SSO/AD/SAML and SAP IDM, produce architectural documentation, train consultants, and deliver client-facing security solutions.

Lead FedRAMP ATO planning and execution for SAP Concur and aligned SaaS platforms, develop and maintain SSPs/POA&Ms per NIST guidance, coordinate with GSA and agency ISSOs, perform continuous monitoring and controls assessments, evaluate vendor security, support audits and remediation, and advise on secure cloud architecture and configuration baselines to sustain authorization.

Lead and perform SAP application security and GRC engagements: risk assessments, vulnerability and code testing, role/authorization and SOD audits, SSO implementation, deliver client-facing findings and recommendations, mentor consultants, and develop tools and technical documentation.

Design, implement, and maintain security controls for cloud data; perform security assessments against NIST 800-53 and FedRAMP; monitor and respond to incidents; integrate security into development lifecycles; develop documentation, training, and disaster recovery/business continuity plans to ensure federal compliance.

Senior SAP Security/GRC administrator to manage and troubleshoot SAP GRC (Access/Process Control), design and maintain roles/authorizations across ABAP/Java and S/4HANA, remediate SoD conflicts, support audits, configure BRF+/MSMP workflows and integrations (HANA, LDAP, BRM), enable SSO, produce reports/documentation, and provide second-level support for projects and compliance.

Lead cloud security architecture for the GSA GO.gov program, ensuring AWS and enterprise SaaS integrations meet FedRAMP/FISMA/NIST requirements. Design secure integrations for SAP Concur and middleware, drive ATO/FedRAMP activities, author security artifacts (SSPs, SAPs, POA&Ms), embed DevSecOps and IaC practices, support continuous monitoring, and advise stakeholders on risk mitigation and assessments.

Design and implement product-level authentication, authorization, multi-tenant isolation, and privacy-preserving data lifecycles. Ship security-sensitive changes end-to-end, own application and API security, threat modeling, telemetry for security events, and integrate conservative partner security controls.

Design, implement, and test security controls for endpoints, identity, network and infrastructure. Lead vulnerability/patch management, coordinate penetration tests, manage third-party risk, triage incidents, and assess AI/LLM risks while partnering with IT and engineering to enforce Zero Trust and secure system deployments.

Lead Security Mobile Engineer serves as product security point of contact, embedding security and privacy into the SDLC for mobile apps, SDKs, APIs, cloud, and IoT devices. Responsibilities include architecture reviews, threat modeling, secure coding guidance, testing/ethical hacking, incident response, mentoring engineers, and validating third-party installations. Role requires cross-functional collaboration to ensure scalable, high-performing, and secure product lifecycles. Approximately 15% travel.

Serve as the primary security contact for software, firmware, and product teams; guide secure development and firmware security architecture; define security requirements and support certifications; identify and prioritize vulnerability remediations; investigate threats and implement mitigations; participate across the solution lifecycle; perform penetration testing. Travel ~15%.

Protect and support IT infrastructure by implementing security controls, conducting compliance assessments (NIST 800-171, CMMC), managing vulnerabilities and patching, administering Windows Server/Active Directory, maintaining security technologies (SIEM, IDS/IPS, VPN, MFA), creating policies and documentation, working with vendors, and participating in a 24/7 on-call rotation.

Lead local implementation of product security across the product lifecycle to prevent leaks and theft. Enforce security policies and controls, perform risk assessments, manage CCTV/access control systems, monitor and audit security operations, develop metrics, lead investigations and incident response, and coordinate with internal teams, subcontractors, legal, and law enforcement.

Lead architecture and evolution of enterprise, data center, and cloud networks for hyperscale AI; design secure, high-performance fabrics (spine/leaf, RDMA); build AI-agent review frameworks; implement segmented zero-trust network designs; set resiliency, observability, and capacity standards; mentor global engineers and guide cross-functional initiatives.

Design, build, and operate firewall, segmentation, and zero-trust controls across data center, corporate, and cloud networks. Implement infrastructure-as-code for policy and CI/CD deployment, manage lifecycle and rule hygiene, build network detection capabilities, operate VPN/remote access patterns, and document architecture and runbooks while partnering with Network Engineering and Security Operations.

Lead enterprise identity architecture, designing modern authentication (adaptive MFA, passwordless) and privileged access solutions. Define reference architectures, guide security strategy and governance, partner with stakeholders, estimate and manage projects, present thought leadership, and drive continuous process and security improvements across the organization.

Join IT & Security to secure and scale enterprise IT, cloud, network, and infrastructure; build automation and tooling; support detection, response, and vulnerability management; improve identity, endpoint, and systems security; and partner cross-functionally to develop processes that enable secure, reliable, and scalable AI workloads.

Lead engineering for end-to-end security of large-scale AI clusters. Define and execute cluster security roadmap, build detection/response tooling, collaborate with corporate security and customers, and hire/lead an engineering team to deliver multi-tenant, network- and access-controlled secure cluster solutions across hardware, networking, and software layers.

Design, assess, and enhance enterprise network security across on-prem and cloud environments. Provide architecture and engineering guidance for firewalls, NDR, IDS/IPS, Zero Trust, IaC, Policy-as-Code, and automation. Conduct security reviews, risk assessments, and implement cloud-native and hybrid security controls while collaborating with engineering, DevOps, governance, and compliance teams to ensure secure, auditable, and resilient solutions.

Designs, implements, and operates cyber and physical security processes, assesses risk using industry standards, develops policies and SOAR workflows, supports compliance, and performs day-to-day security operations to reduce MTTR and protect altafiber assets.

Senior enterprise architect responsible for defining and governing secure-by-design application and cloud platform architectures across Azure and GCP. Leads secure design patterns, cloud-native controls, identity and container security, appsec platform selection (SAST/DAST/SCA/RASP), DevSecOps integration, legacy platform hardening, governance and compliance (PCI, SOC 2, NIST, ISO), and mentors architects and engineers.

Lead RMF-based A&A for Top Secret/SCI information systems, manage continuous monitoring, incident response, policy and compliance with NISPOM/DAAPM/DOD/IC requirements, liaise with DCSA/CSA, mentor ISSOs, and integrate physical and technical security controls across classified networks.

Design, implement, and operate AWS cloud security and infrastructure: least-privilege IAM, network segmentation, multi-account governance, detection and response, vulnerability management, HIPAA compliance, and embedding security into the development lifecycle. Build automated remediation pipelines, maintain GitHub CI/CD automation, validate SIEM logging, and produce prioritized gap analyses for active care programs.

Lead design, implementation, and oversight of security policies, access controls, firewalls, SIEM, IDS/IPS, and compliance (SOX/PCI). Recommend security products, manage implementations and large projects, mentor engineers, perform audits, analyze access and vulnerabilities, and maintain incident response, encryption, and disaster recovery processes.

Lead product security across application, CI/CD/supply-chain, and Kubernetes-based infrastructure. Own PKI and mTLS, vulnerability management, product incident response, infra hardening, and partner with hardware/firmware teams on secure boot, key storage, and supply-chain integrity. Drive secure SDLC, SAST/DAST/SCA, SLSA-aligned controls, and mentor engineering teams while building security programmatic controls.