Top Cyber Security Jobs

Lead and manage IT security operations including incident response, security tool administration, vulnerability management, IAM (IdP/MFA/SSO), security policy and compliance (ISO 27000, PCI), security awareness training, vendor security reviews, and coordination with cloud and network teams to protect systems and data.

Perform Security Control Assessments and continuous monitoring for State of Michigan applications per NIST guidance. Validate security plans, execute SCA documentation (POA&M, CAP, DTMB-170), interview and test procedures, author remediation recommendations, lead small assessments, and assist vendors and team members with artifact collection to ensure controls meet NIST and state policies.

Serve as a senior platform consultant and security architect advising engineering teams on secure-by-design platforms. Lead threat modeling, design large-scale cloud-native microservices, embed CI/CD security, drive Zero Trust and IAM strategies, mentor engineers, influence architecture and delivery, and communicate security posture to technical and business leaders.

Operate within a Managed Security Services environment to perform incident response, vulnerability scanning and remediation oversight, manage security tools (SIEM, IDS/IPS, malware defenses), automate analysis and remediation, maintain policies and SOPs, provide training and audit support, and ensure SLAs are met.

Lead vulnerability management strategy and execution across cloud and hybrid environments. Own end-to-end vulnerability lifecycle, drive automation, perform data-driven prioritization with advanced SQL, and partner with engineering, risk, and incident response teams. Provide hands-on engineering, on-call support, mentoring, and offensive security research to reduce exposure and improve operational reliability.

Implement and integrate IT infrastructure using approved processes; support and review certificate management and PKI; define requirements for infrastructure contracts and SLAs; implement multi-process changes; provide infrastructure and security support across networks, databases, and operating systems. Onsite role with potential extension.

Manage identity and access lifecycle, administer security technologies (Entra, Okta, endpoint/email protection), monitor alerts, perform risk assessments, support incident investigations, audits, policy development, and security hardening across corporate and community systems.

Perform enterprise risk assessments of networks, systems, and business applications. Collaborate with system owners and stakeholders to analyze, test, and document security controls across the agency environment.

Design and implement security controls across product, platform, and infrastructure. Threat model designs, review code and architectures, find and remediate vulnerabilities, improve detection and response, and automate security workflows and developer-friendly tooling to scale security across the company.

Lead secure design, deployment, and governance of cloud systems; assess and mitigate cloud risks; integrate security into CI/CD; perform threat modeling; evaluate third-party cloud tools; support incident response, audits, and regulatory compliance in a financial environment.

Manage and execute an IT risk and security assurance program: scope and perform control testing, reporting, remediation planning, metrics and analysis, drive regulatory and contractual compliance, develop training, and coordinate stakeholders to ensure IT controls operate effectively.

Provide operational information security functions focused on network and vulnerability management: run and analyze vulnerability scans, monitor IDS/IPS, lead penetration testing, perform forensics, define security controls, and assist with security tool implementations.

Administer and support the CyberArk PAM platform, onboard applications/infrastructure/cloud privileged accounts, drive automation and integrations, ensure governance/compliance, collaborate with security, cloud, and application teams, and improve PAM coverage, availability, and audit readiness.

Create, maintain, and enforce security policy documentation and controls mapping (NIST 800-53). Drive vulnerability assessment program, review and control document versions, coordinate technical teams, communicate with customers, and ensure compliance with PCI, HIPAA and personal data legislation.

Design, implement, and support network security and firewall solutions. Lead security architecture, policy optimization (Firemon), change monitoring, and incident/level 2-3 operational support. Deliver consulting, on-site implementations, and 24x7 response for P1/P2 incidents.

Designs and maintains enterprise security architecture aligned with NIST RMF and DoD STIGs. Performs security engineering across the SDLC, vulnerability management with Nessus/ACAS/Qualys, incident response and threat detection using Splunk, endpoint protection and PAM (CyberArk), automation with PowerShell/Python/Bash/Ansible, cloud and container security (AWS/Azure/Kubernetes), documentation, training, and technical leadership for accreditation and continuous monitoring.

Lead cross-functional security and infrastructure programs end-to-end across cloud, IAM, detection, vulnerability management, and secure delivery. Own program planning, risk tracking, and execution; shape security strategy; build security foundations (identity, access, logging, detection, incident readiness); translate ambiguous AI-related risks into measurable programs; and align stakeholders including engineering, security, product, legal, and executives.

Perform advanced security evaluations and research on embedded devices, including firmware reverse engineering, low-level code review, hardware hacking, exploit development, and vulnerability assessments. Build tools, communicate findings to technical and non-technical stakeholders, publish research, and support engagement scoping and business development.

Design, implement, and maintain enterprise security architecture; run vulnerability scans and penetration tests; monitor SIEM and respond to incidents; manage IAM, DLP, encryption, and endpoint hardening; ensure compliance (CMMC, SOC 2, GDPR, PCI-DSS); provide security training and incident reporting.

Serve as the regional security focal point for enterprise security: design/support firewall and VPN technologies, manage incidents, vulnerability and risk management, enforce compliance, deliver security training, coordinate with MSP and enterprise teams, and report on security program effectiveness.

Lead triage and resolution of hardware, firmware, and software vulnerabilities across semiconductor products; perform technical assessments (CVSS), coordinate remediations and disclosures, author advisories, run SBOM/VEX analysis, and support regulatory and standards readiness (CRA, IEC 62443, ISO/SAE 21434) across engineering and compliance teams.

Lead cloud security engineering efforts by designing and automating scalable security controls, building safe-by-default tooling, conducting assessments and threat modeling, responding to incidents, and partnering with engineering teams to improve cloud security posture across AWS and Azure.

Lead and manage IT security for the health system: develop and maintain security/privacy policies, oversee EHR user provisioning and access controls, monitor compliance, audit systems, train and develop staff, and implement operational security improvements.

Provide security oversight for network and mainframe systems to ensure confidentiality, integrity, and availability. Evaluate security architecture, recommend hardware/software, perform risk assessments and penetration testing, support security projects and disaster recovery, and assist in policy and standards creation.

Support information security and vendor risk management activities: perform due diligence for vendor assurance, track mitigation progress, contribute to policy and controls, report metrics, and assist security, risk, and compliance initiatives across the enterprise.