Top Cyber Security Jobs

Install, configure, and support security appliances and solutions (Next‑Gen firewalls, Cisco ASA, IPSEC VPNs, IDS/IPS, secure mail/web gateways, AV, mobile security, DLP). Document and communicate technical details clearly; maintain and troubleshoot network security infrastructure.

Lead execution of SOC1/SSAE16 audits and manage IT risk, compliance, and security controls. Advise stakeholders on IT risk mitigation, vendor controls, incident management, IAM, and security monitoring. Develop policies, metrics, documentation, and remediation plans; support audits, provide technical support for security tools, and lead multiple initiatives to improve enterprise IT risk and compliance maturity.

Designs, implements, and maintains enterprise identity and access management (AD DS, Entra ID, SSO, MFA). Architects RBAC, JIT, conditional access and non-human identity governance. Leads PKI, privileged access, detection engineering, identity incident response, automation (PowerShell, APIs, IaC), and Tier-3 support. Collaborates across security, DevOps, and infrastructure, authors documentation and runs on-call rotation.

Lead design, implementation, and management of enterprise security measures. Investigate breaches and conduct forensics, lead threat hunting and incident response, maintain security tooling and documentation, recommend security investments, mentor junior analysts, and deliver advanced security training to staff.

Lead technical security architect responsible for administering network security devices, performing security assessments against NIST/PCI/SCSEM controls, conducting incident response analysis, advising on vulnerability remediation and hardening, evaluating exceptions and privileged access requests, and administering Tenable and McAfee security tooling.

Manage and operate network security tools (Juniper firewalls, McAfee ePO, WSUS), administer Windows/Linux systems, analyze security events from firewalls/IDS/HIPS/AD/syslog, test and validate intrusion detection rules, investigate intrusion events, and support ICS/SCADA and process control network security.

Perform intrusion detection sensor threat analysis, monitor IDS/IPS systems, and support network security operations. Work may require off-shift coverage supporting a 24x7 operations team and familiarity with multiple IDS vendors.

Lead enterprise strategy and engineering to defend against AI-powered threats. Design detection, prevention, and response architecture for adversarial AI, integrate controls into cyber tooling, build threat models, prototype defensive AI, and mentor teams while influencing leadership and vendor selection.

Performs information risk assessments for services and technologies, communicates findings to business partners, recommends and evaluates controls, drives remediation or mitigation, and maintains relationships across the organization to improve overall risk posture.

Provide FireEye application and system administration (CM, NX, HX), support incident analysis and alert triage, investigate endpoint/agent issues and false positives, liaise with network and threat response teams, engage vendors for updates, support APT/malware services, and troubleshoot across Windows and Linux environments.

Manage and implement McAfee endpoint security (antivirus, DLP, HIPS) and Symantec endpoint encryption (PGP). Define SLAs and SOPs, perform remote infrastructure management, handle incident/change management using ticketing tools, lead a team, interact with customers, and support 24x7 operations.

Perform detection and response for security events and incidents, analyze malware and network traffic, manage SIEM and IDS/IPS, run vulnerability and web app scans, perform penetration testing, maintain security metrics, develop encryption standards and security advisories, and support incident response and remediation.

Own and mature Odysseys application security posture: perform code reviews, run SAST/DAST/SCA assessments, remediate vulnerabilities, embed security into CI/CD, maintain SOC 2 Type II compliance, evaluate AI/data pipeline risks, and partner cross-functionally to translate findings into actionable remediation.

Own Coinflow's defensive and offensive security posture: deploy and operate SIEM and SecOps dashboards, run continuous internal pentests, triage CVEs and manage dependency upgrades, integrate SAST/DAST/secret scanning into CI, define secure-by-default patterns, and produce audit-ready evidence for PCI DSS, SOC 2, ISO 27001, and DORA compliance.

Member of the security team responsible for host, network, data and application security. Monitor and maintain security platforms, manage vulnerabilities, perform risk analysis, enforce security policies, create security reports and dashboards, coordinate with stakeholders, implement security plans, and respond to security events.

Serve as the directorate's C&A/RMF expert for SCI and below. Use eMASS/Xacta/EBS to obtain IATO/ATO, prepare and track C&A packages, manage POA&Ms, update registration workbooks, coordinate AO/DAO changes, perform maintenance, backups, upgrades, vulnerability scans and DISA STIG reviews, produce IA artifacts, assess and mitigate risks, and coordinate system documentation with program managers.

Designs, implements, and supports network security for tier-one financial clients. Requires deep knowledge of routing protocols, Cisco and Juniper appliances, F5 load balancers, proxies, multicast/market-data networks, diagnostic tools, and strong problem-solving, leadership, and communication skills.

Serve as the Endoluminal business unit's product security lead for embedded and cloud-connected medical products. Provide hands-on security architecture, threat modeling, risk assessment, code and design reviews, vulnerability management, pen testing, and incident response. Translate corporate security standards into product implementations and collaborate across engineering, compliance, and centralized security teams while mentoring engineers and shaping security operating practices.

Provide IT support for business units on low-complexity, low-risk tasks. Support application, distributed, and mainframe environments; assist with SAP security administration, roles, and policies; analyze information, implement basic process changes under supervision, and deliver customer service in a global team.

Provide Level III administration, troubleshooting, and recovery for a large Global Active Directory environment. Configure and diagnose domain infrastructure (DNS, DHCP, ADLDS, ADFS, FIM Sync), Windows servers, RADIUS/NPS, Office365/Azure identity integration, and federation protocols. Support M&A AD activities, perform outage communications, rotate on-call shifts in a 24x7 operations center, and apply remediation procedures for hardware/software failures.

Lead product strategy for the Threat Research Unit, translating threat research into a prioritized product roadmap. Drive data-driven prioritization (Salesforce, Jira, SQL), lead customer discovery, design scalable solutions, enable sales with demos and content, and communicate complex security capabilities across stakeholders.

Lead security compliance and GRC programs: manage audits (ISO, PCI, NIST, FedRAMP, HIPAA), define scope, assess readiness, drive remediation, build automated compliance workflows, and embed controls across cloud, containers, Kubernetes, and AI platform infrastructure.

Design, operate, and govern Northwood's identity architecture and Okta tenant, implementing SSO, MFA, RBAC, MDM policies, privileged access, and integrations to meet CMMC/ITAR/FedRAMP requirements while feeding identity telemetry into SIEM and supporting audits.

Lead the security design, architecture, and implementation for an enterprise AI platform. Define secure deployment patterns, embed security into CI/CD and operations, secure GenAI workflows, and lead customer security reviews and compliance activities for Fortune 1000 deployments.

Develop and document information security policies and standards; plan, coordinate and implement security measures; perform risk assessments, compliance reviews, encryption and firewall configurations; monitor and safeguard data access; maintain policy repository and train users on security awareness.