Top Cyber Security Jobs

Lead design, implementation, and lifecycle management of Hardware Security Module (HSM) and cryptographic infrastructure. Develop architectures, runbooks, and operational processes; manage HSM platforms (Thales, FutureX), key management, and cloud KMS/HSM. Support migrations, audits, incident response, and resilience planning while validating AI-assisted security outputs and ensuring compliance.

Lead design and build secure, resilient cloud-native distributed systems; write Java/Python production code (Spring); perform threat modeling, vulnerability remediation, incident response, and ensure audit-defensible security controls and SDLC practices. Mentor engineers and validate AI-assisted security outputs.

Design and deliver enterprise-scale security engineering solutions for .NET applications; write and maintain secure production code; apply vulnerability scanning, threat modeling, and AI-assisted tools (e.g., Copilot) to identify and remediate risks; produce architecture/design artifacts; define guardrails and audit controls for agentic AI; and lead security training and resiliency activities across SDLC.

Design, implement, and operate perimeter security (firewalls, proxies) across data centers and cloud. Perform risk and vulnerability assessments, develop incident response plans, support secure operations, and collaborate with cross-functional teams to execute cybersecurity strategy and improvements.

Lead product strategy and execution for an identity-security control plane. Own roadmap, discovery, launches, and success metrics. Drive customer research, cross-functional alignment, and AI-enabled product development while iterating based on data and feedback.

Support insider risk, threat intelligence, and physical security through data analysis, AI/automation-enabled workflows, dashboards, and executive-ready briefings. Produce intelligence updates, incident trend reports, SOPs, and support operational planning and event security.

Lead enterprise data loss prevention and information protection programs: design and tune DLP policies, develop advanced IP detection (regex, fingerprints, ML), implement classification/labeling and rights management, automate remediation and workflows, monitor exfiltration/anomalous access, author standards and runbooks, and drive large-scale security initiatives across endpoints, cloud, email, SaaS, and storage.

The role involves engineering services for network infrastructure, security system implementation, and documentation for risk management frameworks. Collaboration with teams for accreditation projects and maintaining A&A processes is essential.

Lead and scale a platform security engineering team to protect product, cloud, and infrastructure. Build security strategy, implement vulnerability and access management, enforce data protection, and collaborate with product units to reduce risk and ensure secure service delivery.

Serve as the technical backbone to sales by designing, demoing, and proposing Arctic Wolf CyberSOC solutions. Educate prospects, architect technical solutions, support qualification, overcome sales obstacles, and translate customer needs to the product team. Support MSP and commercial segments with light travel required.

Designs, implements, and leads product security and resiliency across the full lifecycle for digitally-connected Boeing airplanes. Responsibilities include cloud security and PKI architecture, supplier security requirements, certification and compliance (RMF/DFARS/NIST 800-171), risk assessment, vulnerability management, DevSecOps/IaC support, regulatory coordination, research, and advising customers and stakeholders.

Assess product and production-system risks for commercial airplanes, develop security requirements and documentation, coordinate penetration testing and FAA certification reviews, lead sustainment activities ensuring continued security and resiliency of in-service aircraft, and manage configuration and security of data, networks, and resources.

Lead product security engineering for the Boeing 787 program: provide technical leadership, establish security strategies and reviews, participate in system change boards and safety/RIO processes, oversee PSE approaches across design, production, and factory environments to ensure secure, resilient airplanes.

Provide cybersecurity engineering support for programs: validate security requirements and designs, perform technical assessments and A&A documentation under NIST RMF, support incident response, identify and mitigate system risks, and implement enterprise security controls using tools like Splunk, Tenable, and HBSS. Requires coordination with engineers, PMs, and stakeholders and maintaining system Authorizations to Operate.

Provide cybersecurity engineering support to develop, validate, and maintain secure systems. Manage cyber requirements, perform technical security assessments, support Incident Response and Assessment & Authorization (A&A) per NIST RMF, produce A&A documentation, mitigate risks, and advise architects and program stakeholders on security design and compliance.

Provide cybersecurity engineering support for systems to achieve and maintain Authorizations to Operate (ATO). Validate security requirements and designs, perform technical security assessments, support RMF A&A documentation, incident response, risk management, and advise architects and PMs on secure implementations across the mission lifecycle.

Provide cybersecurity engineering support for space and mission systems: manage cyber requirements, validate technical security implementations, perform technical assessments, support RMF/A&A and authorization activities, assist incident response, advise architects on secure designs, and produce security documentation and risk mitigation strategies.

Senior security engineer responsible for developing automation and tooling, building and deploying security solutions, conducting incident response and proactive threat hunting, supporting investigations through data analysis, and advising development teams. Must document solutions, participate in agile teams, mentor juniors, and continuously research evolving security threats.

Provide day-to-day operational support for enterprise cryptographic appliances, HSMs, and PKI (ADCS); design, build, and maintain secure cryptographic platforms; automate workflows with scripts and approved AI tools; participate in 24x7 on-call rotation and occasional local data center travel.

Lead Zapiers security strategy for an AI-native SaaS platform. Own App and Infrastructure Security, Detection & Response, GRC, risk management, incident response, bug bounty triage, and enterprise security enablement. Partner with Product, Engineering, Legal, and GTM to embed secure-by-default design, shape AI-specific controls, support enterprise deals, and build a high-performing security engineering organization.

The Senior Manager for Medical Device Cybersecurity will lead the strategy and execution of cybersecurity initiatives for medical devices, ensuring compliance with FDA guidelines and integrating security into product development processes.

Lead and evolve the insider threat program by engineering detection, automating investigation workflows, tuning UEBA/SIEM/DLP/UAM/SOAR detection content, conducting threat hunting and DFIR, collaborating with HR/Legal, and using data analytics (e.g., Pandas) to investigate anomalous activity and reduce internal risk.

Lead assessment and mitigation of security risks in the virtualization stack. Build threat models, rubrics, and defenses; partner with kernel, virtualization, and provisioning teams to design and implement mitigations; mentor engineers, manage vulnerability backlog, and promote security best practices across product teams.

Lead and own the insider threat program: design detection, automate workflows, build/tune UEBA/SIEM/DLP/UAM detection content, investigate anomalous activity, collaborate with DFIR/Threat Intel/HR/Legal, perform large-scale data analytics and reporting, and improve metrics and playbooks to reduce risk and false positives.

Design, implement, and maintain scalable cloud security controls for Vercel's platform. Harden infrastructure using infrastructure-as-code and policy enforcement, secure CI/CD pipelines, perform threat modeling and risk analysis, improve monitoring and incident response, and build platform-level security tooling in collaboration with platform and infrastructure teams.