Top Cyber Security Jobs

Lead the company's security posture across application, infrastructure, and operational domains. Perform code reviews, threat modeling, and penetration testing; design security controls, monitoring, and incident response; establish compliance frameworks (SOC 2, PCI-DSS); build internal security tooling; and hire/manage security contractors and future hires while embedding security into the development lifecycle.

Support and operate security controls across endpoints, cloud, identities, applications, and infrastructure. Monitor and track vulnerabilities, access reviews, and remediation. Collaborate with engineering and product teams on application and cloud security. Maintain evidence, reports, and inventories; assist with security tooling, automation, and continuous improvement to keep controls audit-ready.

Provide INFOSEC program support including public-release reviews, classification marking guidance, and training. Support industrial security and DD Form 254 reviews, liaise with contract offices, and perform Foreign Disclosure Representative duties. Advise leadership on safeguarding classified and CUI information and assist in investigating security violations.

Serve as the ISSO/ISSM for a DoD application: integrate cybersecurity across the lifecycle, implement and monitor RMF controls, identify and remediate vulnerabilities using Fortify, and develop POA&Ms to achieve and maintain authorization.

Provide M365 security architecture and administration across Microsoft 365 and Power Platform, integrate Purview and AvePoint protections, support SharePoint (online and on-prem), Windows servers and SQL clusters, develop Power Platform solutions, implement Microsoft security products (Defender, Copilot, Graph connectors), manage security change requests, audit logging, and deliver regular team status reporting.

Monitor IDS sensors and SIEM platforms, perform intrusion protection, vulnerability assessments and ad-hoc scanning, evaluate risk models, remediate incidents, provide senior advisement, and develop scripts to analyze network traffic and anomalies.

Responsible for driving new logo acquisition and expanding enterprise accounts by selling data-centric security software. Tasks include prospecting, developing pipeline, consulting with VP/C-level executives, responding to RFPs, building partner/GSI relationships, managing complex sales cycles, coordinating cross-functional teams, and closing contracts with F2000 technology and semiconductor firms.

Lead SOTG's global information security program: develop strategy and governance; oversee network, endpoint, cloud, identity, application, and data security; advise executive leadership; manage ERP and AI security, incident response, BCDR, vendor and third-party risk; build and mentor the security team; deliver executive reporting and ensure regulatory compliance across frameworks like NIST CSF, ISO 27001, SOC 2, and GDPR.

Lead and implement security guardrails for AI-enabled development and AWS cloud infrastructure. Design IAM and least-privilege controls, secure AI/ML pipelines, integrate security into CI/CD and developer tooling, run cloud/IAM audits, build AI-driven security monitoring and incident response, ensure HIPAA and other compliance, and mentor engineering teams.

Lead cloud and infrastructure security and detection engineering: deploy SIEM, author MITRE-mapped detections, build cloud security posture and IaC gates, own incident response playbooks and SOC 2 Type II operational evidence, and drive vulnerability remediation and security reporting.

Design, implement, operate, and improve enterprise security technologies and processes. Monitor and respond to incidents, perform vulnerability assessments and penetration testing, harden networks/hosts, support audits and compliance, produce security reporting, and provide training and runbook documentation to strengthen organizational security posture.

Design, deploy, tune, and operate enterprise security technologies; conduct risk assessments and penetration tests; monitor, detect, and remediate incidents; support vulnerability management, compliance, and incident response; produce security reports and runbooks; provide cross‑functional security guidance and after‑hours on‑call support.

Lead and coordinate enterprise-wide cybersecurity incident response across detection, investigation, containment, remediation, and documentation. Work with internal teams, vendors, and MSSPs; analyze SIEM/EDR and security event data; maintain and improve the Security Incident Response Plan (aligned to NIST/ISO/MITRE); run tabletop exercises and readiness assessments; leverage threat intelligence and track incident response metrics and KPIs.

Perform application-security engineering: run SAST/DAST scans, triage and remediate vulnerabilities, integrate Fortify/JFrog Xray/OWASP ZAP into CI/CD, support software-supply-chain/SCA efforts, and collaborate with developers to document and resolve security findings.

Lead go-to-market strategy, messaging, and positioning for Fastly's security portfolio (WAF, DDoS, Bot Management, TLS). Drive product launches, sales enablement, competitive differentiation, compliance messaging, cross-sell narratives, content and campaigns, and public product evangelism in partnership with Product, Sales, Customer Success, and Marketing.

Contract SAP Security consultant role requiring hands-on experience with SAP GRC 10. 3-month engagement (possible extension) based in Plano, TX. Must have 5–7 years of relevant experience and strong communication skills. Start date around May 1.

Serve as an IAM SME for Windows/Active Directory environments: process access requests, troubleshoot IAM tools (Quest, ARS, RMAD, RPM), document procedures, support audits/compliance, identify automation opportunities, and provide after-hours support as needed.

Serve as IAM SME for Windows environments: manage onboarding/offboarding/transfers/UARs, process access requests per SLA, document procedures, support audit/compliance, identify automation opportunities, use Quest and AD tools, troubleshoot, and collaborate globally.

Develop and document information security policies and standards; implement security measures, risk assessments, encryption, firewalls, and compliance testing; monitor and safeguard data access; maintain policy repositories; train users and promote security awareness; track security issues and remediate risks across applications and infrastructure.

Develop and maintain Java/Java EE applications with a strong focus on security: SSL, cryptography, authentication/authorization (LDAP, SSO, SAML, OAuth, x509, WS-Security), PCI compliance, configurable data security, scripting, audits/compliance across projects, independent problem-solving, and managing parallel tasks.

Lead database security initiatives including planning, design, implementation and maintenance of server-class databases. Configure and monitor Database Activity Monitoring tools (e.g., Imperva, Guardium, ArcSight), deploy agents and write alert policies, support audit/compliance projects, produce technical/process documentation, provide project leadership, and transfer knowledge to InfoSec and DBA teams while mentoring junior staff.

Implement and manage security tools (vulnerability scanners, log management), patch and configure OS/applications, support incident management, communicate with customers and remote teams, and protect confidential information while prioritizing tasks and troubleshooting security issues.

Manage information security projects, ensuring delivery and compliance with ISO/IEC 27000 series. Requires 7+ years project management experience, strong communication, and ability to work with government clients (preferred). Contract role (3+ months) with phone and face-to-face interactions.

Perform security operations tasks including implementing vulnerability scanners, managing log/SEIM systems (Splunk/Elasticsearch), patching and configuring Windows and Linux systems, supporting incident management, applying IT security best practices, and communicating with customers and remote teams to resolve security issues.

Senior SAP Security Engineer responsible for gathering requirements, designing SAP roles, performing user administration, testing and documentation, supporting SAP GRC components and SOX compliance, and coordinating multiple projects. Strong communication and GRC experience required for upgrade and implementation projects.