Top Cyber Security Jobs

Contract IT Security Analyst responsible for developing and publishing information security policies and standards, performing routine security tasks and change control, installing and maintaining security tools, implementing security controls, researching solutions, and ensuring compliance. Works collaboratively and serves as an internal security subject-matter expert.

Coordinate and maintain information security and governance documents, update templates and policies, support CMS authoring and deployment, lead EO20/SRS and supply-chain governance projects, host status meetings, develop SOPs, perform risk assessment and mitigation, and support procurement and contract modification activities.

Administer and customize Mainframe TopSecret security, support security administration across business areas, perform system and token updates, advise on roles/groups/users, and collaborate with security analysts. Requires understanding of mainframe environment, JCL, DB2, COBOL, LDAP/AD, and two-factor/token authentication.

Protect corporate systems, networks, software, and data by implementing perimeter defenses, performing incident response and malware analysis, analyzing IDS/IPS/firewall/network flow logs, using SIEM and IDS consoles, tracking malicious IP activity, producing security reports, and troubleshooting security incidents.

Perform vulnerability assessments and large-data analysis, define and implement remediation plans, conduct web application and malware analysis, analyze security logs (IDS/IPS, firewalls, network flow, AV) using SIEM, produce and automate daily security reports and feeds, create product and support documentation, troubleshoot security issues, and communicate with stakeholders.

Assess systems, applications, and activities for vulnerabilities; develop and execute risk mitigation plans; align security resources to risks; liaise with law enforcement and industry partners; protect personnel data, IP, networks, and operations.

Protect global systems, networks, and data by designing and operating perimeter defenses, investigating security incidents, analyzing security logs (IDS/IPS, firewalls, SIEM, AV), performing malware analysis, tracking malicious IP activity, and producing security reports for management and auditors.

Manage and operate the organization's security tool stack, handle platform management, and perform upgrades and patching. Requires hands-on experience with McAfee, Websense, Proofpoint, F-Secure (on Proofpoint), McAfee on Exchange, and Voltage. Strong communication skills and availability for a 12+ month contract; interviews by phone/Skype.

Senior network/security engineer to support firewalls, proxies, VPN provisioning, DNS/DHCP and IP segmentation, F5 BIG-IP load balancing, Websense and other security appliances. Participate in architectural/solution design, handle break-fix of high-severity issues, maintain proactive/reactive solutions repository, and produce documentation. Must have strong communication skills.

Designs, implements, and supports SAP security and GRC (ARA, EAM) across ECC and Portal. Manages access risk analysis, emergency access, role troubleshooting, interfaces, testing, documentation, and security controls. Collaborates with technology and business teams, performs risk assessments, supports implementations, and provides production support for security/GRC issues.

Senior SAP Security/GRC administrator to manage and troubleshoot SAP GRC (Access/Process Control), design and maintain roles/authorizations across ABAP/Java and S/4HANA, remediate SoD conflicts, support audits, configure BRF+/MSMP workflows and integrations (HANA, LDAP, BRM), enable SSO, produce reports/documentation, and provide second-level support for projects and compliance.

Design and implement product-level authentication, authorization, multi-tenant isolation, and privacy-preserving data lifecycles. Ship security-sensitive changes end-to-end, own application and API security, threat modeling, telemetry for security events, and integrate conservative partner security controls.

Lead product security across application, CI/CD/supply-chain, and Kubernetes-based infrastructure. Own PKI and mTLS, vulnerability management, product incident response, infra hardening, and partner with hardware/firmware teams on secure boot, key storage, and supply-chain integrity. Drive secure SDLC, SAST/DAST/SCA, SLSA-aligned controls, and mentor engineering teams while building security programmatic controls.

Company-wide recruiting bucket for Trace3's Security team. No specific role duties listed; applicants are encouraged to apply for a specific security opening. Describes company culture, perks (benefits, 401(k), PTO), and commitment to diversity and inclusion.

Build and ship security features for an AI control plane: enforce enterprise policies, improve risk policy systems (deterministic and LLM-judged), integrate identity providers, and harden platform security. Collaborate across product and engineering, participate in on-call rotations, and own features from design through production and support.

Perform thorough WordPress malware cleanup, remove injected scripts, resolve Google Search Console penalties, implement firewall and malware scanning protections, optimize PHP and databases, and accelerate page load speeds while documenting remediation and communicating clear project updates.

Lead Infrastructure Security Engineer on the Identity Governance and Administration team to design, implement, and maintain identity management solutions (SailPoint IIQ, PingOne, ForgeRock). Collaborate with product owners, architects, ops and security to ensure compliance, perform root-cause analysis, onboard applications, integrate security features, and mentor team members while working in agile delivery.

Support the Data Security Lead by performing control quality assessments, validating technical controls across cloud and on-prem platforms, tracking remediation, maintaining audit evidence, and producing reports and metrics. Collaborate with platform owners and product teams to improve data security posture and assist continuous improvement efforts while developing expertise in enterprise data security technologies and governance.

Perform hands-on digital forensics and malware analysis for an IC program: image and analyze storage and volatile memory, extract forensic artifacts across Windows/Linux/iOS/Android, reverse-engineer mobile devices and malware, use debuggers/disassemblers, and work within virtualized environments to detect kernel-level compromises and report findings.

Support FedRAMP and IC ATO processes, RMF lifecycle, continuous monitoring, risk and control assessments, POA&M remediation, security documentation, incident response, vulnerability analysis, audit support, cloud security, and liaison with SOC, engineering, and compliance teams.

Lead FedRAMP/IC ATO and RMF lifecycle activities, conduct risk and security control assessments, manage vulnerability and continuous monitoring programs, integrate security into cloud and DevSecOps pipelines, support incident response and audits, maintain security documentation, and advise/mentor teams on compliance and secure architecture for government cloud and classified environments.

Design, review, and verify security architecture across infrastructure, applications, blockchain, and AI projects; conduct security assessments and audits; advise blockchain teams on secure operations; stay current on security threats and mitigations.

Design, plan, and maintain enterprise cyber architectures for Health IT; translate requirements into prototypes, write/debug code, integrate systems, enforce information assurance, test with customers, and document solutions.

Implement and support data and system security measures focusing on encryption and PKI. Manage encryption tools (Vormetric, CloudLink), administer PKI solutions (ADCS and external providers), troubleshoot security issues, and provide customer-facing support and investigative problem solving.

Lead design and implementation of security architecture and controls across Macroscope’s distributed systems. Protect customer data, harden production, embed secure-by-default practices, and partner with engineering to improve IAM, cloud security, secrets management, CI/CD, vulnerability management, and monitoring.