Top Cyber Security Jobs

Designs and hardens on-device security for Specs, including access control, secure IPC, sandboxing, trusted execution, cryptography, and platform protection. Develops privacy and security controls for on-device AI, protects sensitive data and model integrity, and secures OS, firmware, applications, services, sensors, and cloud-connected surfaces. Improves fuzzing infrastructure, automated security testing, threat modeling, vulnerability assessment, code review, and continuous validation across embedded and AI/ML system boundaries.

Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, and communicate findings to technical, executive, legal, and compliance stakeholders. Build investigation scripts, runbooks, automated workflows, and security operations capabilities. Mentor engineers and support insider threat initiatives while collaborating across teams on cloud security and incident response.

Lead the technical direction of Uber’s identity-first Zero Trust security foundation. Design and operate highly available identity, authorization, PKI, secrets, device trust, and policy systems; guide agent identity and authorization; drive fleet-wide migrations from legacy credentials; mentor senior engineers; and influence architecture across infrastructure, AI, product, and business teams.

Designs, deploys, and maintains network security controls across enterprise, cloud, and hybrid environments. Responsibilities include firewall engineering, segmentation, secure connectivity, monitoring, incident response, vulnerability remediation, compliance support, automation, and security architecture reviews. The role partners with infrastructure, cloud, DevOps, and application teams and participates in a 24x7 on-call rotation.

Leads the strategic direction and operational effectiveness of enterprise security assessments and penetration testing. Oversees end-to-end testing, evaluates tools and procedures, guides offensive security methodologies, coordinates vendors and cross-functional teams, and provides regulatory and risk-based recommendations. The role drives process improvement, control automation, monitoring enhancements, reporting standards, and compliance while serving as a penetration testing subject matter expert.

Maintain and mature Mozilla's ISMS and support ISO 27001 and SOC 2 Type 2 audit programs. Author system descriptions and policies, manage risk treatment plans, track remediation, support internal audits, and partner with Engineering, Legal, Privacy, and Product to drive control ownership and audit readiness.

Maintain and mature Mozilla's ISMS, support ISO 27001 and SOC 2 Type 2 audits, author compliance narratives, track remediation, lead policy program, scale compliance for products, and partner with cross-functional teams to drive control ownership and audit readiness.

Lead the design, implementation, testing, deployment, and operation of GCP cloud security controls. Translate security and regulatory requirements into preventive, detective, and corrective policies across organization guardrails, Terraform, CI/CD, runtime monitoring, and CSPM. Build remediation automation, policy libraries, testing standards, and control evidence. Partner with engineering, architecture, risk, and incident response teams while providing technical direction and mentorship.

Leads Uber’s global Security Risk & Compliance function by setting strategy, managing cybersecurity risk registers, driving policy and standards adoption, scaling assurance and vendor risk management, aligning with audit and compliance teams, and developing high-performing security teams. The role requires extensive security leadership experience and executive influence across a large technology enterprise.

Lead enterprise security operations, resilience, incident response, threat intelligence, cloud security, IAM, and risk management. Serve as deputy to the CISO and primary incident commander while advising executives on cyber risk. Build and scale multidisciplinary security teams, modernize cloud-native defenses, embed security-by-design across products and AI/ML systems, and establish metrics-driven governance, automation, regulatory alignment, and business-focused security strategies.

Designs vulnerable and secure application fixtures addressing OWASP LLM risks, creates deterministic tests and security manifests, develops answer keys for AI and scanner evaluation, and improves AppSec assessment pipelines. The role also evaluates traditional and agent-based security architectures, documents technical findings, and collaborates on peer reviews and actionable security recommendations.

Supports cybersecurity architecture, Risk Management Framework compliance, Assessment and Authorization, Continuous Monitoring, vulnerability remediation, incident response, and security control implementation for defense systems. Develops security documentation, risk assessments, criticality analyses, Plans of Action and Milestones, and Authority to Operate requests. Collaborates with technical teams and government stakeholders to maintain secure system operations across classified environments.

Leads FedRAMP High compliance, NIST RMF, and Authority to Operate processes. Maintains security documentation, assesses controls, coordinates audit evidence, identifies risks and vulnerabilities, tracks remediation, reports control gaps, and advises stakeholders on information security compliance and risk management.

Operate and manage enterprise security solutions, including SIEM, EDR, IPS, WAF, firewalls, and endpoint protection. Monitor logs and network traffic, detect and investigate threats, respond to incidents, conduct vulnerability assessments and security reviews, maintain security policies, deliver awareness training, support audits, and integrate security requirements into systems. The role also manages physical security controls and collaborates with technical teams, stakeholders, and vendors in English and Korean.

Supports Conagra’s cybersecurity Governance, Risk and Compliance program by managing third-party risk assessments, security policies, control compliance, risk treatment plans, metrics, exceptions, waivers, and audit coordination. The role applies ISO 27001/27002 and NIST 800-53 frameworks, communicates technical risks to varied audiences, and helps improve enterprise information security processes. This hybrid position requires travel of up to 10%.

Monitors, triages, diagnoses, and escalates security events within a security operations center. Supports remediation, security infrastructure and configuration changes, stakeholder coordination, and collaboration with IT and security teams. Investigates security issues, performs risk and vulnerability assessments, and prepares SOC procedures, reports, and documentation. The role also requires effective communication, customer service, and reliable attendance.

Build and scale platform security through architecture reviews, threat modeling, IaC hardening, IAM improvements, Kubernetes security, and disaster recovery exercises. Develop automation for detection, response, compliance, onboarding, access anomaly detection, and self-service security posture checks. Investigate incidents, track root-cause remediation, support SOC 2 evidence collection, and collaborate closely with software engineers on secure development and incident response.

Provides first-line IT and security operations support, including Windows and Mac device setup, troubleshooting, onboarding and offboarding, access management, endpoint patching, vulnerability review, security alert monitoring, documentation, and escalation. Works under the guidance of a Security/IT Lead while learning tools such as Google Workspace, Authentik, Linux, Ansible, and Elastic.

Leads security operations and incident response, serving as incident commander, managing detection engineering, exposure remediation, threat intelligence, tabletop exercises, and managed detection provider governance. Builds and develops a senior security team, coordinates with counsel and leadership during incidents, drives post-incident remediation, and reports on detection effectiveness, risk, and compliance.

Manage enterprise vulnerability and penetration testing, analyze scan results, validate findings, prioritize risks, coordinate remediation, and support incident response. The role maintains security platforms, documents compliance and risk processes, communicates vulnerabilities and mitigation strategies to technical and executive stakeholders, evaluates emerging threats and security technologies, and partners with technology teams to reduce organizational risk.

Designs and manages web and API security controls, including WAF, bot management, DDoS protection, and detection policies. Conducts threat hunting, analyzes security telemetry and logs, investigates incidents, responds to vulnerabilities, and develops detection logic, playbooks, procedures, and automation. Partners with engineering and security teams to improve security operations, monitoring, and response capabilities across Coupang’s large-scale global technology environment.

Supports the ISSO with information assurance, system accreditation, and RMF compliance for Army GEOINT systems. Responsibilities include planning and improving security controls, conducting risk assessments and vulnerability testing, reviewing access, tracking POA&Ms, managing configuration and change controls, preparing for inspections, and coordinating incident response, security training, and awareness. The role requires an active TS/SCI clearance and up to 10% travel to Fort Gordon, Georgia.

Monitors and investigates cybersecurity alerts, events, and incidents across enterprise systems, networks, cloud environments, and messaging platforms. The analyst triages alerts using SIEM, IDS, EDR, and related tools; communicates findings; supports incident response; improves detection coverage; prepares reports and briefings; maintains SOC procedures and documentation; and records activities in case management and ticketing systems.

Lead product security initiatives across the product lifecycle by integrating security controls into cloud platforms, creating secure design patterns, guiding secure development, and conducting threat modeling, risk assessments, vulnerability assessments, and code reviews. Drive DevSecOps practices, security awareness, policy improvements, and executive reporting while partnering with engineering, architecture, and cross-functional teams.

Leads security governance engineering by translating regulatory, compliance, and security requirements into implementable engineering controls. Partners with Engineering, Product Security, Legal, and Assurance to evaluate control design and operation across applications, platforms, infrastructure, and cloud environments. Develops oversight, control incident management, change enablement, security champion engagement, M&A risk assessments, and executive reporting. Tracks emerging regulations, including AI governance and the EU AI Act, and improves control reliability and enterprise risk visibility.