Top Cyber Security Jobs

Own protocol and cryptographic foundations for Netflix Open Connect edge appliances. Design and implement security primitives, optimize crypto/transport for performance, build DoS mitigations, conduct vulnerability research, and partner cross-functionally to deploy end-to-end security controls across delivery infrastructure.

Lead product security for the platform: prioritize threats, design and architect defenses, embed security early in designs, build platform-level safe defaults, find vulnerabilities in code, and raise team-wide security capability without becoming a bottleneck.

Support enterprise data protection across Microsoft 365 by configuring Microsoft Purview, DLP, and sensitivity labels; monitor and investigate data protection alerts; assist with data exposure risk assessments for AI/Copilot; provide configuration guidance, runbooks, and remediation during incidents; partner with engineering and privacy teams to implement policies and controls.

Manage security projects end-to-end: define activities with stakeholders, track status/issues/risks, allocate and manage resources, engage cross-country stakeholders, and provide leadership, reporting, and facilitation to deliver security systems.

Assess and design security controls and policies for complex IT and operational systems. Conduct broad-scope technical reviews across on-prem, cloud/hybrid, virtualization, OT, cross-domain solutions, and AI/ML; mentor staff; communicate findings to government clients; operate with significant autonomy.

Operate and maintain ACAS vulnerability scanning across classified and unclassified networks, analyze scan data, and generate remediation reports. Automate tasks and tooling with PowerShell, support RMF auditing via eMASS, and document/log vulnerabilities. Collaborate with cyber teams to identify and remediate system vulnerabilities and maintain security posture.

Design, implement, and document strategic security controls for Windows-based IT platforms. Deliver and automate endpoint and vulnerability management solutions, investigate threats, build scalable tooling, and advise IT teams on remediation and security best practices.

Design, deploy, and operate network security infrastructure including firewalls, segmentation, and DMZ. Collaborate with Cybersecurity and Network teams to detect/mitigate threats, evaluate new platforms, improve observability through scripting, and support business workflows securely.

Deploy and document security controls at scale, run vulnerability management, support incident response, collaborate with IT/engineering to build technical and procedural solutions, and maintain operational playbooks for Windows-focused environments.

Lead migration and optimization of log ingestion and observability pipelines. Design, implement, and operate load-balanced, highly available Cribl/Splunk pipelines; onboard and tune security log sources; apply data reduction; collaborate with SOC/IR; monitor pipeline and SIEM health; document governance, retention, and cost-savings metrics.

Design, implement, and govern cloud cybersecurity architecture across multiple domains. Automate Continuous Authorization to Operate (CATO), evaluate changes against RMF/STIG, support A&A and DevSecOps pipeline security, and mentor team members. Collaborate with cloud infrastructure teams using Agile practices to ensure continuous monitoring, verification, and compliance of cloud solutions.

Lead cyber security analyst responsible for detecting, analyzing, and reporting security events using IDS, firewalls, and network logs. Develops and enforces cybersecurity policies, performs risk assessments and compliance audits, evaluates hardware/firmware/software security impacts, investigates incidents, and provides advanced guidance to junior staff. May serve as a technical team/task leader.

Analyze and prioritize cyber vulnerabilities across systems and networks, produce remediation plans and threat reports, collaborate with cyber teams, enrich threat data, and support implementation of processes and tools to mature vulnerability management and threat intelligence capabilities.

Lead global security architecture, engineering, and Continuous Threat Exposure Management (CTEM). Own platform/tool decisions across cloud, endpoint, network, data, collaboration, and OT security; operationalize vulnerability/exposure management; drive automation, zero-trust, compliance, and cross-functional remediation to measurably improve enterprise security posture.

Designs and implements secure, fully automated CI/CD pipelines and identity controls for cloud deployments. Builds infrastructure-as-code (Ansible, Terraform, Packer), integrates identity and auth (AWS IAM, Azure/Entra ID, SailPoint, OAuth/OIDC/SAML/SCIM), and automates guardrails for non-human identities and agent workloads. Partners with architecture, InfoSec, and engineering to ensure compliance, observability, and scalable, secure deployments.

Lead and mature an enterprise Identity and Access Management (IAM) program covering strategy, engineering, operations, governance, PAM, authentication, secrets/PKI, and compliance. Drive IAM roadmap, deliver transformation initiatives (RBAC, IGA, PAM modernization, passwordless), manage global teams and vendors, ensure audit readiness and controls, and partner with cloud, HR, application, and security teams to integrate identity controls.

Design, build, and operate secure cloud CI/CD pipelines and automation (infrastructure as code) to support cloud deployments. Partner with InfoSec, architecture, and engineering to enforce identity and non-human identity governance, implement IAM integrations, secrets management, and automated guardrails. Troubleshoot production pipeline issues, develop tools to reduce errors, and research technologies to improve DevSecOps effectiveness.

Serve as a public-facing Web3 security researcher: engage the community via social media, speak at conferences, give interviews, collaborate cross-functionally with CertiK teams, and support marketing and product feedback while performing technical Web3 security work.

Lead and perform application and network penetration tests, source code and cloud security reviews, and produce clear pentest reports. Research and develop pentesting tools/methods for blockchain and Web3, contribute to community content, and support client security engagements.

Perform smart contract and protocol audits, consult with external blockchain teams on remediation, conduct security research, and build internal security tools and methodologies to protect Web3 projects and clients.

Perform end-to-end blockchain security services including consulting, manual code reviews and audits of smart contracts and protocols (Solidity, Go, Rust), threat modeling, property-based and gas-related testing, penetration testing, and deliver detailed security assessments to clients.

Develop and optimize LLM-driven AI agents to automate smart contract security audits. Collaborate with blockchain security teams to research, prototype, and productionize threat detection, risk assessment, and automated vulnerability analysis for blockchain environments.

Join a security research team to develop analysis tools, review sandbox/VM and network modules, discover vulnerabilities and create PoC exploits for distributed systems, and publish findings. Research areas include malware analysis, vulnerability detection, network anomaly detection, mobile app analysis, reverse engineering, and fraud detection.

Perform guided audits of smart contracts, blockchain protocols, and dApps to identify and remediate vulnerabilities. Contribute to security tooling and research, explore attack vectors, and support process and methodology improvements under senior guidance.

Perform smart contract and blockchain audits to find and analyze vulnerabilities, define attack models, extract exploit characteristics to build feature-analysis tooling, and research/adopt analysis tools and emerging blockchain security technologies.