Top Cyber Security Jobs

Lead product strategy and roadmap for authentication, authorization, and identity verification across digital channels. Partner with cross-functional teams to prioritize features, ensure secure scalable IAM solutions, engage clients, produce product/security documentation, analyze metrics and threats, and support go-to-market and compliance activities.

Design and operationalize an enterprise API security program: implement runtime protections, embed security into CI/CD, provide secure API design guidance, build telemetry-driven analytics, define governance, support audit readiness, and partner with engineering to reduce API risk at scale.

Engineer, implement, and support enterprise network security controls across on-premises, cloud, and hybrid environments. Enhance NDR capabilities (ExtraHop), build detection analytics and automated response workflows, collect and analyze network telemetry, administer firewalls/VPNs/IDS/IPS, and support vulnerability management, incident investigations, and documentation.

Serve as an ISSO managing day-to-day security operations for Collateral, SCI, and SAP systems. Responsibilities include developing/updating RMF/A&A authorization packages, continuous monitoring, incident handling, configuration/change coordination, audit review, and security training coordination while supporting DoD SAP/SCI environments.

Manage day-to-day security operations for information systems within Collateral, SCI, and SAP environments. Develop and update RMF/A&A authorization packages, conduct continuous monitoring, assess security impacts of changes, coordinate configuration management, handle incidents, ensure documentation/audit trails, and support DoD SAP security requirements.

Lead engineering and integration of perimeter security controls across on-premises and cloud infrastructure. Collaborate with stakeholders to align capabilities with policies, coordinate deployments to minimize service disruption, work in agile sprints, produce technical documentation, provide Tier 4 support and on-call coverage, and drive operational excellence.

Lead technical strategy and execution for application security and attack surface management. Drive AppSec tooling, CI/CD security automation, vulnerability and configuration monitoring, risk governance, exploit validation, and developer-first secure-by-design practices. Advise senior leadership, mentor team members, evaluate new technologies, and ensure regulatory-aligned policies and reporting to reduce application risk across cloud-native, DevOps environments.

Drive cloud and container security for the Attack Surface Management team: design and operate monitoring/assessment capabilities, triage and remediate misconfigurations, advise stakeholders, report compliance/risk, improve processes and policies, and support cloud/container security maturity across the enterprise.

Support the Data Security Lead by performing control quality assessments, validating technical controls across cloud and on-prem platforms, tracking remediation, maintaining audit evidence, and producing reports and metrics. Collaborate with platform owners and product teams to improve data security posture and assist continuous improvement efforts while developing expertise in enterprise data security technologies and governance.

Lead Infrastructure Security Engineer on the Identity Governance and Administration team to design, implement, and maintain identity management solutions (SailPoint IIQ, PingOne, ForgeRock). Collaborate with product owners, architects, ops and security to ensure compliance, perform root-cause analysis, onboard applications, integrate security features, and mentor team members while working in agile delivery.

Design, implement, and operate enterprise data security controls across cloud and SaaS environments using CASB, DSPM, and Microsoft 365 security. Support data discovery/classification, create monitoring alerts and enforcement policies, investigate data security incidents, assist Microsoft 365 security administration, and collaborate with engineers and compliance teams to maintain data protection and compliance.

Lead design, implement, and operate enterprise data security across cloud and SaaS using CASB, DSPM, and Microsoft 365 security. Configure CASB, integrate with identity and SIEM, deploy DSPM for data discovery/classification, and enforce DLP and governance controls. Collaborate with SOC/IR for threat detection and response, ensure regulatory compliance, and automate detection and remediation workflows.

Design, build, and automate database and infrastructure security solutions across cloud and on-prem environments. Partner with product and engineering teams to implement monitoring, vulnerability management, privileged access reporting, compliance (SOX/CIS), and integrations (ServiceNow, Splunk). Apply IaC, scripting, DevSecOps practices, and perform patching, DR, and security lifecycle activities while mentoring team members.

Lead the adoption and communication of information security policies and standards across business, product, and technology teams. Build stakeholder partnerships, develop change management and communications, create toolkits and guidance, track adoption metrics, and translate security requirements into practical, audience-tailored guidance to improve governance and risk visibility.

Lead the build-out of Information Security Governance BI capabilities: design and deliver Power BI dashboards and AI-enabled reports, develop data models and SQL queries, establish metric governance and reporting standards, ensure data quality, and partner with stakeholders to enable trusted, executive-ready insights and automation using Microsoft Power Platform, Fabric, Copilot, and Claude.

Lead RMF activities and author A&A artifacts (SSPs, SARs, POA&Ms); enforce NIST/FedRAMP/FISMA compliance; run vulnerability scans (Nessus/Tenable.sc); support incident response; collaborate with engineers to integrate security; provide briefings to leadership and manage account recertifications and security training.

Perform hands-on digital forensics and malware analysis for an IC program: image and analyze storage and volatile memory, extract forensic artifacts across Windows/Linux/iOS/Android, reverse-engineer mobile devices and malware, use debuggers/disassemblers, and work within virtualized environments to detect kernel-level compromises and report findings.

Support FedRAMP and IC ATO processes, RMF lifecycle, continuous monitoring, risk and control assessments, POA&M remediation, security documentation, incident response, vulnerability analysis, audit support, cloud security, and liaison with SOC, engineering, and compliance teams.

Lead FedRAMP/IC ATO and RMF lifecycle activities, conduct risk and security control assessments, manage vulnerability and continuous monitoring programs, integrate security into cloud and DevSecOps pipelines, support incident response and audits, maintain security documentation, and advise/mentor teams on compliance and secure architecture for government cloud and classified environments.

Own and execute end-to-end collaboration platform integrations for acquisitions: scope, migrate users, Slack channels, Drive, mailboxes, and configurations. Maintain Google Workspace, Slack, and Zoom at enterprise scale; manage email and domain security, DNS consolidation, phishing response, DLP, and platform incident response. Lead compliance/eDiscovery, archiving architecture, vendor selection, and automation to standardize governance across brands. Coordinate cross-functional stakeholders during M&A and build repeatable playbooks and tooling.

Design, review, and verify security architecture across infrastructure, applications, blockchain, and AI projects; conduct security assessments and audits; advise blockchain teams on secure operations; stay current on security threats and mitigations.

Lead and manage SOC 1/SOC 2 exams and SOX/ICFR activities, assess and remediate ITGCs/ITACs, translate audit requirements into scalable controls, partner with engineering and finance, drive audit readiness, documentation, and automation to improve control effectiveness and audit outcomes in a cloud-native environment.

Design, deploy, and secure scalable cloud network infrastructure. Manage cloud networking, firewalls, access controls, monitoring, and compliance (PI/PHI). Automate with scripting/Ansible, troubleshoot performance issues, and maintain documentation while collaborating with DevOps and IT teams.

Senior ISSO responsible for sustaining authorization and RMF compliance for a 30+ application portfolio: create and maintain SIAs, POA&Ms, SCAs, support ATO packages, coordinate vulnerability remediation and continuous monitoring, lead knowledge sharing and client meetings, and support cloud migration and O&M efforts.

Design, plan, and maintain enterprise cyber architectures for Health IT; translate requirements into prototypes, write/debug code, integrate systems, enforce information assurance, test with customers, and document solutions.