Top Cyber Security Jobs

Leads architecture and implementation of Microsoft Red Team visibility, telemetry, monitoring, detection, alerting, deconfliction, and operational security capabilities. Designs scalable services and data pipelines, maintains authoritative operational asset inventories, identifies systemic security gaps, and drives durable engineering solutions. Provides hands-on technical leadership, architecture reviews, debugging, incident response, mentorship, and cross-organizational influence while enabling authentic Red Team operations with strong defensive visibility and control.

Leads security analysis, compliance oversight, vulnerability management, risk mitigation, audits, and Authority to Operate activities for a federal CMS program. Reviews architectures and designs, integrates security into Agile development, maintains policies and documentation, monitors regulatory requirements, supports remediation, and advises technical and nontechnical stakeholders on secure, compliant solution delivery.

Designs, develops, validates, and optimizes security detections across endpoint, network, cloud, identity, and application environments. Translates threat intelligence, threat hunting, and incident response findings into detection content, maps coverage to MITRE ATT&CK, reduces false positives, automates workflows, and analyzes telemetry gaps. Collaborates with security teams during purple-team and adversary-emulation exercises, while supporting cyber deception technologies such as honeypots and deceptive credentials.

Provides Tier 3 cybersecurity incident response for 24x7x365 operations, including containment, eradication, recovery, malware analysis, digital forensics, reverse engineering, incident investigation, adversary attribution, and indicator-of-compromise development. Coordinates with government, law enforcement, counterintelligence, and other cyber teams; documents incidents, develops reports and briefings, executes authorized defensive measures, maintains response tools and scripts, and reviews Tier 2 tickets for quality.

Administer and maintain SailPoint Identity Security Cloud, including identity lifecycle management, provisioning, access workflows, certifications, segregation of duties, integrations, and audit reporting. Provide Tier 2/3 support, validate AI-driven access recommendations, maintain documentation and disaster recovery procedures, and manage platform releases and vendor support. Partner with service desk and stakeholders to ensure secure, compliant identity and access operations.

Leads AT&T’s enterprise network security program, including firewall strategy and governance, network segmentation, IDS/IPS, threat prevention, security architecture, compliance, automation, and modernization. Oversees cybersecurity engineering teams, develops roadmaps and executive risk metrics, improves operational effectiveness, and partners across technology and business organizations to reduce cyber risk. The role requires extensive enterprise cybersecurity leadership experience in complex, regulated environments.

Designs, implements, and maintains enterprise Data Loss Prevention and data classification solutions using Microsoft Purview. Integrates DLP with SIEM, CASB, endpoint protection, and other security platforms; tunes policies, manages exceptions, analyzes data protection risks, supports regulatory alignment, leads change initiatives, collaborates with stakeholders and vendors, and develops testing and deployment plans across hybrid environments.

Leads cybersecurity strategy, risk oversight, resilience, governance, regulatory engagement, and security outcomes for Sun Life’s U.S. business group. Advises senior executives, challenges risk decisions, oversees third-party and technology risks, supports incident preparedness, and aligns enterprise security services with business priorities. The role leads security professionals, guides transformation and secure adoption of cloud and AI, represents the business with regulators and auditors, and communicates cyber risk to executive and board-level audiences.

Leads the enterprise cybersecurity program, including strategy, governance, risk management, regulatory compliance, security architecture, incident response, resilience, third-party risk, budgeting, and team development. Advises executives and the Board on cyber risk, oversees core security capabilities, improves program maturity, coordinates audits and regulatory obligations, and builds security awareness across the organization.

Provide legal counsel on information security, privacy, and compliance for software, AI/SaaS/cloud, and professional services contracts. Negotiate security/privacy terms, liaise with commercial, security, sales, and technical teams, ensure contractual alignment with internal controls and global regulations, and develop standard contract language and playbooks for telecom/ISP customers worldwide.

Leads enterprise security architecture across hybrid environments, advising CISO, network, endpoint, and vendor stakeholders. Responsibilities include threat modeling, architecture reviews, remediation, security governance, continuous monitoring, policy enforcement, automation, and roadmap development across edge defense, cloud, PKI, endpoint protection, and security operations. The role translates technical vulnerabilities into business-risk metrics and aligns infrastructure security with NIST and CIS frameworks.

Leads CrowdStrike Falcon MSS, MDR, and NG-SIEM engagements, including deployments, optimization, detection engineering, automated response, and platform health. Advises clients, translates security telemetry into executive insights, manages engagement finances, mentors delivery teams, supports proposals and alliance growth, and strengthens SOC capabilities. Requires extensive cybersecurity consulting experience, hands-on CrowdStrike expertise, relevant certifications, scripting and query skills, executive communication, and client-facing leadership. The hybrid role requires in-person attendance at least three days weekly and travel as needed.

Develop and support SailPoint IdentityIQ identity governance solutions, including workflows, rules, plugins, lifecycle events, provisioning, approvals, access requests, auditing, reporting, integrations, and production troubleshooting. The role requires Java, BeanShell, XML, SQL, Git, and SSB expertise, along with strong documentation and communication skills in an independent, project-based environment.

Engineer, package, test, automate, and deploy enterprise software and operating system patches across endpoints. Monitor vulnerability reports, remediate endpoint risks, troubleshoot deployment and configuration failures, perform root-cause analysis, and enforce endpoint hardening and compliance baselines. Maintain deployment documentation and collaborate with application owners, security, infrastructure, service desk, and end-user teams to improve endpoint reliability and security.

Own corporate detection and response, incident response, endpoint security, identity and SaaS security, Google Workspace governance, and corporate-to-production monitoring. Build LLM-driven security triage with measured evaluation, automate enforcement through vendor APIs, improve detection fidelity, and partner with engineering to ship security improvements. Manage Mac fleet security, phishing-resistant authentication, access reviews, DLP, OAuth governance, and containment playbooks.

Designs, configures, administers, and monitors enterprise information security controls for a bank. Supports risk assessments, vulnerability reduction, incident response, security technology research, automation, data analysis, SQL administration, documentation, change management, and on-call support. The role requires administration of Windows, Linux, networks, cloud security, Active Directory, firewalls, SIEM platforms, and related security tools while ensuring regulatory and internal policy compliance.

Leads enterprise technology operations, infrastructure, cloud, networks, cybersecurity operations, resilience, asset lifecycle management, audit readiness, compliance controls, vendor relationships, budgets, and multidisciplinary teams. Owns incident response, vulnerability remediation, disaster recovery, technology risk, service reliability, and operational roadmaps while translating CIO strategy into measurable operating plans and ensuring secure, resilient, cost-effective technology services.

Supports cybersecurity for digital products and connected medical technologies by integrating security into product development, conducting risk assessments, threat modeling, and vulnerability analysis, coordinating security testing, managing findings, and maintaining security standards. Partners with engineering, quality, regulatory, and IT teams to support secure design, remediation, audits, and regulatory inquiries in a regulated medical device environment.

Lead security investigations for AI systems used in scientific discovery. Develop threat models, test defenses through adversarial assessments and technical analysis, define security requirements, evaluate evidence, and drive improvements with Security, Safety, and engineering teams. The role addresses dangerous misuse, model and data compromise, deployment risks, and safeguards for increasingly capable AI systems.

Owns the day-to-day security posture of classified information systems across two facilities. Maintains RMF authorization packages, performs vulnerability scanning and continuous monitoring, hardens enclaves, manages access controls, responds to incidents, supports inspections and assessments, and coordinates with government authorizing officials, DCSA, ISSM, and program security teams. Requires active DoD clearance, U.S. citizenship, Secret-level access, and eligibility for Special Access Program briefings.

Secure and harden AWS and GCP infrastructure, manage vulnerabilities, implement compliance controls, maintain audit evidence, improve Kubernetes and CI/CD security, support reliability and incident response, and develop automation for security and infrastructure workflows. The role also contributes to application security, code reviews, production troubleshooting, detection, and FedRAMP readiness.

Leads industrial cybersecurity operations for global customers, monitoring SIEM and OT infrastructure, evaluating and escalating incidents, developing SOAR playbooks, conducting malware analysis and threat hunting, supporting forensic investigations, tuning detection rules, coordinating remediation, and mentoring SOC analysts. The role serves as an L2 SOC escalation point and develops security documentation, recommendations, and communications.

Leads an application security scrum team and integrates security throughout software development. Responsibilities include vulnerability testing and remediation, securing CI/CD pipelines, threat modeling web and AI applications, managing SBOMs and dependencies, integrating security tools, verifying and signing artifacts, and guiding developers on secure engineering practices in a federal environment.

Designs and governs secure enterprise architecture across cloud, hybrid, and on-premises environments in a regulated financial institution. Responsibilities include threat modeling, security design reviews, architecture risk assessments, shift-left security integration, encryption and cryptographic key management, PKI and certificate lifecycle governance, regulatory compliance, audits, and collaboration with engineering, infrastructure, legal, and risk teams.

Evaluates, implements, and maintains technical security controls across Windows, cloud, mobile, and standalone environments. Manages assets, accounts, patches, configurations, vulnerability remediation, system recovery, backups, and access controls. Develops PowerShell automation and secure baseline configurations, supports SIEM and incident response activities, evaluates vendor security products, and contributes to FISMA and FedRAMP authorization, continuous monitoring, and security documentation processes.