Top Cyber Security Jobs

Lead FedRAMP/IC ATO and RMF lifecycle activities, conduct risk and security control assessments, manage vulnerability and continuous monitoring programs, integrate security into cloud and DevSecOps pipelines, support incident response and audits, maintain security documentation, and advise/mentor teams on compliance and secure architecture for government cloud and classified environments.

Lead and manage SOC 1/SOC 2 exams and SOX/ICFR activities, assess and remediate ITGCs/ITACs, translate audit requirements into scalable controls, partner with engineering and finance, drive audit readiness, documentation, and automation to improve control effectiveness and audit outcomes in a cloud-native environment.

Own and execute end-to-end collaboration platform integrations for acquisitions: scope, migrate users, Slack channels, Drive, mailboxes, and configurations. Maintain Google Workspace, Slack, and Zoom at enterprise scale; manage email and domain security, DNS consolidation, phishing response, DLP, and platform incident response. Lead compliance/eDiscovery, archiving architecture, vendor selection, and automation to standardize governance across brands. Coordinate cross-functional stakeholders during M&A and build repeatable playbooks and tooling.

Design, review, and verify security architecture across infrastructure, applications, blockchain, and AI projects; conduct security assessments and audits; advise blockchain teams on secure operations; stay current on security threats and mitigations.

Design, deploy, and secure scalable cloud network infrastructure. Manage cloud networking, firewalls, access controls, monitoring, and compliance (PI/PHI). Automate with scripting/Ansible, troubleshoot performance issues, and maintain documentation while collaborating with DevOps and IT teams.

Senior ISSO responsible for sustaining authorization and RMF compliance for a 30+ application portfolio: create and maintain SIAs, POA&Ms, SCAs, support ATO packages, coordinate vulnerability remediation and continuous monitoring, lead knowledge sharing and client meetings, and support cloud migration and O&M efforts.

Design, plan, and maintain enterprise cyber architectures for Health IT; translate requirements into prototypes, write/debug code, integrate systems, enforce information assurance, test with customers, and document solutions.

Implement and support data and system security measures focusing on encryption and PKI. Manage encryption tools (Vormetric, CloudLink), administer PKI solutions (ADCS and external providers), troubleshoot security issues, and provide customer-facing support and investigative problem solving.

Design, implement, and manage AWS cloud security controls; perform vulnerability assessments and penetration testing; monitor and respond to security events and incidents; automate security in CI/CD; develop policies and documentation; train engineers on secure practices; lead AWS security projects and ensure compliance with industry frameworks.

Lead design and implementation of security architecture and controls across Macroscope’s distributed systems. Protect customer data, harden production, embed secure-by-default practices, and partner with engineering to improve IAM, cloud security, secrets management, CI/CD, vulnerability management, and monitoring.

Lead application security assessments (code review, penetration testing, design review, threat modeling), evaluate and document secure architecture and policies, identify vulnerabilities and remediation, research secure cloud adoption, perform threat analysis and test-case development, and provide security consulting and guidance to engineers and incident/forensic teams.

Support Head of Security Governance to maintain and enhance GIS governance: assess regulatory compliance, manage third‑party due diligence, audits and regulatory engagements, track KRIs/KORIs and metrics, execute KRCSA, maintain policies/procedures, and manage assigned GIS initiatives.

Perform security assessments and architecture reviews for applications and infrastructure (on‑prem and cloud). Advise engineering teams on security-by-design, threat modeling, vulnerability remediation, penetration testing, third‑party risk reviews, and implementation of security controls. Contribute to detection tuning and sensory tool improvements and communicate technical risk and status to stakeholders.

Design, implement, and maintain enterprise network and security infrastructure. Lead firewall engineering, segmentation, zero trust, and DoD compliance efforts. Monitor and respond to security incidents, deploy and manage CrowdStrike Falcon EDR, remediate vulnerabilities, and support audits and cross-functional projects.

Design, develop, deploy and support the bank's data security capabilities (DLP, email encryption). Build Splunk dashboards/alerts/reports, implement use cases, test, document, troubleshoot production issues, and coordinate with teams and vendors for change requests and maintenance.

Lead design, deployment, operation and enhancement of data security capabilities (DLP, email encryption, key management). Develop rules from business requirements, run product evaluations/POCs, manage upgrades, incident response, audits, vendor coordination, and continuous improvement to reduce data leakage risk.

Lead offensive application security work across the core product: hunt and remediate vulnerabilities, harden systems, safeguard PHI, scale AI-driven vulnerability discovery, mentor engineers, and partner with SRE and security teams to improve resilience and disaster recovery.

Operate and enhance the bank's security stack: manage IDS/APT/NDR appliances, support log management and SIEM, tune IDS rules, perform packet/network forensics, drive upgrades/migrations, respond to incidents, support audits, and collaborate with internal teams to troubleshoot and document security events and changes.

Perform security assessments for application and infrastructure projects; advise on secure design and cryptography; evaluate cloud, on‑premises, web and mobile systems; assess third‑party integrations for compliance; support detection tooling and reporting; identify and communicate security gaps to engineers.

Provide enterprise cybersecurity monitoring, detection, incident response, threat hunting, vulnerability assessment and remediation. Design, implement and maintain security controls (SIEM, endpoint, DLP, MFA, IDS/IPS), collaborate with IT teams, support audits and document security practices to improve global security posture.

Perform security assessments of applications and infrastructure, advise on cloud and network protections, design detections and incident response playbooks, conduct hypothesis-driven threat hunting and forensic analysis, tune SIEM/EDR and logging telemetry, and collaborate with engineering teams to integrate security and detection-by-design across the SDLC.

Perform application and cloud security architecture reviews (AWS focus), assess vulnerabilities via pentests and code review, recommend mitigations, develop secure cloud-native design patterns, integrate AI/LLM tools into review workflows, liaise with developers/architects, and mentor junior team members.

Lead and support implementation of static and dynamic analysis and security awareness across the secure SDLC. Integrate application security controls, remediate tool-identified issues, design scalable secure solutions, build testing suites, and perform source code reviews, attack surface analysis, and risk assessments to embed security early in development.

Lead the Vendor Technology Risk program, managing a team to assess and reduce vendor information security risk. Conduct deep-dive technical assessments (cloud, application, mobile, network), design security controls and architectures via threat modeling, advise on regulatory applicability, negotiate contractual security requirements, and embed security reviews into procurement and SDLC processes.

Design, build, and maintain scalable batch and streaming data pipelines and data models for security telemetry. Implement CI/CD, containerized deployments (Kubernetes), data quality monitoring, and observability. Perform application and infrastructure security assessments, threat modeling, penetration testing, code reviews, and remediation. Partner with global security teams to improve detection, tooling, and cyber defense capabilities.