Top Cyber Security Jobs

Provide engineering-first customer support for security, privacy, and assurance tooling. Triage and resolve authentication and access issues, build automation and runbooks, maintain support tooling, and improve developer experience. Use Generative AI responsibly to accelerate triage, documentation, and automation while advocating for customers and collaborating with product and engineering partners.

Architect and implement system-level security for Open Connect edge and gaming appliances across hardware (FPGA, BMC, BIOS/UEFI), kernels and dual OS (FreeBSD/Linux). Improve platform integrity (measured/secure boot, BMC controls), triage system-level vulnerabilities, build low-level tooling and automation, and partner cross-functionally and with vendors to harden binary ingestion and execution.

Lead application security engineer responsible for designing and implementing Zero Trust application and network security across enterprise/DoD environments. Develop and troubleshoot network infrastructure, integrate security controls (firewalls, application delivery, micro-segmentation), improve reliability and availability, lead cross-functional teams, and ensure compliance with DoD/ federal security requirements. Requires Secret clearance.

Lead development and implementation of cybersecurity solutions for USAF SAP cloud, perform RMF risk and vulnerability assessments, implement infrastructure controls, leverage SEIM tools (Splunk/Elastic) and network devices (Palo Alto/Cisco), analyze threats using big-data analytics, and support classified system-to-cloud integration.

Own protocol and cryptographic foundations for Netflix Open Connect edge appliances. Design and implement security primitives, optimize crypto/transport for performance, build DoS mitigations, conduct vulnerability research, and partner cross-functionally to deploy end-to-end security controls across delivery infrastructure.

Lead product security for the platform: prioritize threats, design and architect defenses, embed security early in designs, build platform-level safe defaults, find vulnerabilities in code, and raise team-wide security capability without becoming a bottleneck.

Manage security projects end-to-end: define activities with stakeholders, track status/issues/risks, allocate and manage resources, engage cross-country stakeholders, and provide leadership, reporting, and facilitation to deliver security systems.

Support enterprise data protection across Microsoft 365 by configuring Microsoft Purview, DLP, and sensitivity labels; monitor and investigate data protection alerts; assist with data exposure risk assessments for AI/Copilot; provide configuration guidance, runbooks, and remediation during incidents; partner with engineering and privacy teams to implement policies and controls.

Assess and design security controls and policies for complex IT and operational systems. Conduct broad-scope technical reviews across on-prem, cloud/hybrid, virtualization, OT, cross-domain solutions, and AI/ML; mentor staff; communicate findings to government clients; operate with significant autonomy.

Operate and maintain ACAS vulnerability scanning across classified and unclassified networks, analyze scan data, and generate remediation reports. Automate tasks and tooling with PowerShell, support RMF auditing via eMASS, and document/log vulnerabilities. Collaborate with cyber teams to identify and remediate system vulnerabilities and maintain security posture.

Design, implement, and document strategic security controls for Windows-based IT platforms. Deliver and automate endpoint and vulnerability management solutions, investigate threats, build scalable tooling, and advise IT teams on remediation and security best practices.

Design, deploy, and operate network security infrastructure including firewalls, segmentation, and DMZ. Collaborate with Cybersecurity and Network teams to detect/mitigate threats, evaluate new platforms, improve observability through scripting, and support business workflows securely.

Deploy and document security controls at scale, run vulnerability management, support incident response, collaborate with IT/engineering to build technical and procedural solutions, and maintain operational playbooks for Windows-focused environments.

Lead migration and optimization of log ingestion and observability pipelines. Design, implement, and operate load-balanced, highly available Cribl/Splunk pipelines; onboard and tune security log sources; apply data reduction; collaborate with SOC/IR; monitor pipeline and SIEM health; document governance, retention, and cost-savings metrics.

Design, implement, and govern cloud cybersecurity architecture across multiple domains. Automate Continuous Authorization to Operate (CATO), evaluate changes against RMF/STIG, support A&A and DevSecOps pipeline security, and mentor team members. Collaborate with cloud infrastructure teams using Agile practices to ensure continuous monitoring, verification, and compliance of cloud solutions.

Lead cyber security analyst responsible for detecting, analyzing, and reporting security events using IDS, firewalls, and network logs. Develops and enforces cybersecurity policies, performs risk assessments and compliance audits, evaluates hardware/firmware/software security impacts, investigates incidents, and provides advanced guidance to junior staff. May serve as a technical team/task leader.

Analyze and prioritize cyber vulnerabilities across systems and networks, produce remediation plans and threat reports, collaborate with cyber teams, enrich threat data, and support implementation of processes and tools to mature vulnerability management and threat intelligence capabilities.

Lead and mature an enterprise Identity and Access Management (IAM) program covering strategy, engineering, operations, governance, PAM, authentication, secrets/PKI, and compliance. Drive IAM roadmap, deliver transformation initiatives (RBAC, IGA, PAM modernization, passwordless), manage global teams and vendors, ensure audit readiness and controls, and partner with cloud, HR, application, and security teams to integrate identity controls.

Lead global security architecture, engineering, and Continuous Threat Exposure Management (CTEM). Own platform/tool decisions across cloud, endpoint, network, data, collaboration, and OT security; operationalize vulnerability/exposure management; drive automation, zero-trust, compliance, and cross-functional remediation to measurably improve enterprise security posture.

Design, build, and operate secure cloud CI/CD pipelines and automation (Ansible, Terraform, Packer). Lead identity governance for AI/non-human identities in SailPoint, automate access reviews/certifications, collaborate with InfoSec and platform teams to enforce controls, troubleshoot production issues, and drive centralized agent identity governance across cloud environments.

Designs and implements secure, fully automated CI/CD pipelines and identity controls for cloud deployments. Builds infrastructure-as-code (Ansible, Terraform, Packer), integrates identity and auth (AWS IAM, Azure/Entra ID, SailPoint, OAuth/OIDC/SAML/SCIM), and automates guardrails for non-human identities and agent workloads. Partners with architecture, InfoSec, and engineering to ensure compliance, observability, and scalable, secure deployments.

Design, build, and operate secure cloud CI/CD pipelines and automation (infrastructure as code) to support cloud deployments. Partner with InfoSec, architecture, and engineering to enforce identity and non-human identity governance, implement IAM integrations, secrets management, and automated guardrails. Troubleshoot production pipeline issues, develop tools to reduce errors, and research technologies to improve DevSecOps effectiveness.

Serve as a public-facing Web3 security researcher: engage the community via social media, speak at conferences, give interviews, collaborate cross-functionally with CertiK teams, and support marketing and product feedback while performing technical Web3 security work.

Lead and perform application and network penetration tests, source code and cloud security reviews, and produce clear pentest reports. Research and develop pentesting tools/methods for blockchain and Web3, contribute to community content, and support client security engagements.

Perform smart contract and protocol audits, consult with external blockchain teams on remediation, conduct security research, and build internal security tools and methodologies to protect Web3 projects and clients.