Top Cyber Security Jobs

Perform advanced forensic investigations, incident analysis, and data recovery within a 24/7 SOC. Develop security protocols, conduct audits, train staff, advise asset owners, supervise junior analysts, and recommend security improvements using SIEM and endpoint tools.

Support and improve IT security processes for SAP and mainframe environments. Participate in design, development, testing, implementation, and support of low-to-moderate complexity technology and business processes. Analyze security roles, user profiles, and policies; perform SAP security administration; collaborate with global teams and provide customer-focused support.

Lead Workday security architecture and administration for HCM, Payroll, and Finance. Manage role-based access, security groups, integration security, audits, SOX/GLBA compliance, security testing for releases, and partner with HR/Finance/Identity teams to implement controls, trainings, and remediation.

Designs, deploys, and manages information security systems (firewalls, IPS/IDS, SIEM, WAF, IAM). Performs vulnerability scanning, incident response, audits, protocol analysis, and security consulting. Develops BCP/DR plans, researches new technologies, and collaborates with legal, HR, and law enforcement on investigations.

Lead application security reviews and SDLC engagement across North America, advise on secure design and remediation, apply secure coding and broad cybersecurity expertise (pen testing, vulnerability management, IAM, network/cloud security), evaluate AI risks, and partner with technology and business leaders to embed security throughout development and production.

Contract IAM Security Specialist responsible for IAM documentation, business and application role maintenance, and supporting identity provisioning, governance and controls. Requires IAM platform experience (SailPoint, AD, LDAP, ACF2), strong technical writing, communication, and the ability to manage IAM implementation and remediation tasks.

Lead design, implementation, and management of security infrastructure across on-prem, cloud, and hybrid environments. Drive incident response, threat detection tuning, vulnerability assessments, risk and compliance (HIPAA, PCI-DSS, NIST, ISO 27001), security policy development, and security training. Collaborate with IT, DevOps, legal, and procurement to integrate security into SDLC and vendor selection.

Lead and mentor the Cyber Operations team, evaluate and implement security tools, manage SIEM/IDS/IPS, perform vulnerability assessment and mitigation, develop SOPs, support FISMA and DISA STIG compliance, and assist with audits and continuity/disaster recovery planning.

Support federal identity management and credentialing operations by issuing and maintaining PIV credentials, tracking background investigations, maintaining compliance with ICAM/HSPD-12/PACS/Privacy Act, handling PII securely, preparing records and reports, coordinating audits, and collaborating with security teams.

Provide enterprise security architecture consulting: advise clients on security strategy, design and implement security solutions, perform risk and network security assessments, develop policies, review system deliverables, and lead senior client engagements and delivery oversight.

Provide industrial and program security support across ISSO, alternate CPSO, and Industrial Security Generalist tracks. Maintain DoD Top Secret clearance, enforce cybersecurity compliance and SOPs (NISPOM, DFARS, JSIG), manage personnel security records and visits (SIMS, JPAS, Scattered Castles, DISS), conduct inspections, training, access control, and classified material accountability.

Build and operate an internal Red Team to continuously find vulnerabilities across protocol, consensus, bridges, and execution clients. Develop Rust-based fuzzers and custom security tooling, simulate economic attacks on testnet, analyze game-theoretic risks (MEV, staking), and partner with engineering teams to review critical architecture and mitigate exploits.

Produce and maintain cyber threat actor profiles and intelligence requirements, brief stakeholders up to the Board, integrate cyber risk methodologies, support threat detection with technical analysis, and develop intelligence-sharing relationships with critical infrastructure and financial partners.

Oversee and manage DLP/security responsibilities, take on new tasks and influence others to deliver consistent results, and demonstrate strong analytical skills under varying conditions.

Support daily information security operations, detect and investigate threats, lead incident response, maintain enterprise anti-virus/host IPS deployments, apply secure coding practices and perform deep packet network analysis across Windows and Unix environments.

Design and build security features across product, cloud, and infrastructure. Anticipate vulnerabilities, implement secure defaults, enable developer-friendly security, and ship robust protections for code, agents, and tooling.

Design, implement and maintain network security solutions (firewalls, IDS/IPS, proxies, VPNs) for customer networks; perform packet analysis, incident identification and remediation support; manage security policies, encryption and network device configurations; document processes and deliver billable project work on schedule.

Support STARE Product Office cybersecurity activities at Redstone Arsenal: manage ATO/A&A packages, assess system confidentiality/integrity/availability, enforce DoD/Army CS standards, coordinate RMF and eMASS activities, prepare briefings, support security testing, and liaise with program offices. Approximately 25% travel.

Designs, implements, and maintains Palo Alto-based secure network access for enterprise customers. Migrates legacy firewalls, builds security policies, troubleshoots via log/packet analysis, supports SD‑WAN/remote access, mentors on upgrades, and collaborates with network, cloud, and operations teams. Provides on-call support and ensures deliverables meet project scope.

Provide IAM/security support by specifying security requirements, advising implementation options, defining security requirements for new solutions, designing centralized authorization frameworks, evaluating cloud/mobile authentication and authorization technologies, integrating/testing IAM solutions, and coordinating with security teams to develop enterprise risk profiles.

Design and implement information security architecture and controls. Configure and develop SIEM solutions, administer Tenable Security Center, conduct risk and vulnerability assessments, implement application security, RBAC, IAM, DLP/data discovery, and secure web apps, databases, operating systems and network infrastructure (Cisco/Juniper).

Hands-on senior security engineer role building and operating cryptographic, key-management, and signing services for Citi's digital assets platform. Develop Java backend services, integrate and operate HSMs, implement MPC/TSS schemes, enforce crypto best practices, embed CI/CD security tooling, and lead threat modeling and incident escalation.

Lead and manage a security team to design, implement, and improve enterprise DLP and DSPM programs across on‑prem, cloud, and SaaS. Oversee TPRM, enforce policies, coordinate incident response and forensic investigations, perform security architecture reviews, and ensure regulatory compliance (GDPR/CCPA).

Lead product security governance across business units: define frameworks for threat modeling, vulnerability management, regulatory readiness, and supply-chain security; drive cross-functional adoption, metrics, executive reporting, and industry engagement.

Provide security oversight for network and mainframe systems, conduct security auditing, risk assessments and penetration testing, evaluate security architecture, recommend hardware/software, support disaster recovery testing and documentation, and help create and review information security policies and standards.