Top Cyber Security Jobs

Leads enterprise application security through secure code reviews, threat modeling, architecture assessments, CI/CD security controls, secure coding standards, API protections, WAF tuning, and software supply chain security. Partners with engineering, DevOps, platform, and SRE teams to remediate risks, automate controls, secure AI-enabled applications, and improve organization-wide security practices. Serves as a principal technical advisor and mentor while defining scalable guardrails, playbooks, metrics, and reference architectures.

Designs, builds, and secures enterprise AWS cloud capabilities through security architecture, guardrails, automation, governance, and operational controls. Responsibilities include incident response, digital forensics, security consulting, solution design, log analysis, vulnerability assessment, risk evaluation, and remediation. The role partners with infrastructure, IAM, application, and cybersecurity teams while applying AI-assisted development responsibly in accordance with security, compliance, privacy, and ethical standards.

Designs, builds, and secures enterprise AWS cloud capabilities through security architecture, guardrails, automation, governance, and operational controls. Leads incident response, digital forensics, security investigations, vulnerability assessments, risk evaluations, log analysis, and security solution engineering. Partners with infrastructure, IAM, application development, data protection, and risk teams. Uses AI-assisted development responsibly while ensuring security, compliance, privacy, and ethical standards.

Designs, builds, and secures enterprise AWS cloud capabilities through security architecture, guardrails, automation, governance, and operational controls. Leads incident response, investigations, digital forensics, vulnerability assessments, risk evaluations, security solution design, and log analysis. Partners with infrastructure, IAM, application development, data protection, and risk teams. Applies AI-assisted development responsibly while ensuring security, compliance, privacy, and ethical standards.

Leads software engineering projects and developers building full-stack, distributed microservices and cloud-based endpoint security solutions. Collaborates with product managers, applies modern technologies including AWS, Docker, Kubernetes, databases, and multiple programming languages, and mentors engineering teams while driving innovation and regulatory-focused solutions.

Leads enterprise Product Security Incident Response Team operations, overseeing product-related cyber incident detection, investigation, containment, remediation, recovery, and disclosure. Defines PSIRT strategy, governance, playbooks, tooling, threat intelligence integration, and secure CI/CD controls. Partners with Product, Engineering, Legal, and Cloud Infrastructure teams; briefs executives; manages audit documentation; and builds a multidisciplinary security response team.

Leads an enterprise PAM engineering organization responsible for credential vaulting, secrets management, session control, least-privilege enforcement, and privileged identity risk reduction. Oversees modernization, automation, DevSecOps integration, cloud-ready architectures, incident response, compliance, and platform roadmaps across hybrid environments. Manages engineers, resources, and investments while partnering with IAM, cloud, infrastructure, application, and security architecture teams. Develops talent and ensures responsible use of AI-assisted development tools.

Leads enterprise PAM engineering, including credential vaulting, secrets management, session control, least-privilege enforcement, automation, and Zero Trust modernization. Manages engineers, platform roadmaps, risk reduction, incident response, cloud and hybrid integrations, DevSecOps enablement, compliance, resource planning, and talent development. Partners across IAM, cloud, infrastructure, architecture, and application teams to deliver scalable privileged access solutions.

Leads an enterprise Privileged Access Management engineering organization, overseeing PAM strategy, platform modernization, credential vaulting, secrets management, session control, least-privilege enforcement, automation, and cloud-ready access solutions. Manages engineers, drives DevSecOps and Zero Trust integration, reduces privileged-access vulnerabilities, partners across security and infrastructure teams, provides technical oversight for enterprise initiatives, responds to access incidents, manages resources and budgets, and develops engineering talent.

Lead collection and analysis of open-source and third-party intelligence to assess threats to executives, employees, and assets. Produce tactical alerts, strategic reports, travel and event risk assessments, and support executive protection and threat management operations. Monitor geopolitical events, conduct investigations and due diligence, maintain monitoring tools and dashboards, and brief stakeholders and leadership with timely, actionable intelligence.

As a Senior Lead Consultant, you'll manage cybersecurity risks, improve security posture, and collaborate with various teams at Capital One.

The role involves overseeing cybersecurity responsibilities within Capital One's Financial Services, ensuring risk management and process improvement. You'll collaborate with teams, manage projects, and deliver presentations to stakeholders.

Serve as the local ISSO supporting DoD HPCMP: implement and manage RMF, build and maintain ATO packages in eMASS, oversee vulnerability scanning and remediation, validate IA controls, guide patching and hardening (HBSS, Nessus, Tanium, ACAS), deliver training and technical briefings, and perform security assessments against DISA STIGs and related tools.

Design, build, and operate secure, resilient distributed systems for secrets and key management across Cloudflare's global network. Re-architect and strengthen internal PKI and machine/workload identity, support and run services (including on-call), and consult with teams to ensure secure system design and usage.

Lead and deliver enterprise identity and access programs (workforce IAM, IGA) to enforce least-privilege and compliance. Drive stakeholder alignment, build automations and AI agents for program administration, manage roadmaps, OKRs, risks, change, and executive reporting while scaling access controls and remediation.

Lead SAP security and GRC strategy and operations across S/4HANA, BTP, Fiori and integrated systems. Manage role design, access controls, SoD frameworks, GRC platform operations, audit readiness (SOX), SI/vendor governance, and provide security leadership during transformations and go-lives while partnering with InfoSec, Audit, and SAP functional teams.

Lead enterprise security strategy and architecture, create repeatable secure reference architectures and developer guardrails, perform threat modeling, embed Security by Design across product lifecycles, mentor senior security staff, evaluate third-party tech, and communicate technical risks to business leaders to enable secure, scalable SaaS growth.

Lead and grow multiple cloud security products and a team of product managers to hit revenue targets. Define product strategy, roadmaps, pricing, packaging, and GTM. Align cross-functionally with engineering, sales, marketing, and partners; represent products to customers and analysts. Mentor PMs and drive predictable execution to build a large-scale security business.

Design, implement, and maintain cloud security solutions; own CNAPP enablement and vendor relationships (Azure, AWS, Palo Alto); serve as RCSA control owner (TEC083) and automate attestations; build Cloud Security dashboards in Microsoft Power BI; collaborate with architecture and operational partners to onboard, operationalize, and support cloud security capabilities.

Leads complex insider-threat investigations across endpoint, network, cloud, identity, and related data sources. Directs technical incident response, evidence collection, containment, stakeholder communications, and case resolution. Serves as an incident commander or technical lead for significant events, develops scalable investigative automation, and prototypes scripts and capabilities for cybersecurity, digital forensics, eDiscovery, and employee-investigation workflows. Also conducts security assessments, analyzes logs, recommends corrective actions, and develops security policies and controls.

Leads enterprise security architecture strategy, governance, standards, reference architectures, review boards, regulatory alignment, risk controls, and security-by-design initiatives. Oversees cloud, identity, data, network, application, AI, and OT/IoT security architecture while partnering with technology, legal, privacy, and compliance teams. Reports risk posture and control effectiveness to executives, supports transformation, acquisition, and divestiture programs, and develops global security architecture teams, operating models, career paths, and financial plans.

Leads enterprise security architecture strategy, governance, standards, review processes, and multi-year roadmaps. Aligns cybersecurity with business transformation, regulatory requirements, and risk appetite while overseeing Zero Trust, cloud, IAM, data, network, application, AI, and OT/IoT security architectures. Chairs architecture reviews, drives security-by-design and automated control validation, supports audits, acquisitions, ERP and cloud transformations, and reports risk posture to executives. Manages global security architects, defines operating models and career paths, and oversees financial planning.

Leads enterprise security architecture strategy, governance, standards, and multi-year roadmaps. Establishes Zero Trust architectures, security guardrails, reference architectures, review processes, and regulatory control mappings across cloud, identity, data, network, application, AI, and OT/IoT domains. Partners with enterprise architecture, technology, legal, privacy, and compliance teams; supports transformations, acquisitions, and divestitures; drives automation, risk assessment, metrics, and audit readiness. Leads global security architects, defines operating models and career paths, and reports enterprise risk posture to executives.

Leads enterprise security architecture strategy, governance, standards, review processes, risk controls, and Zero Trust target architectures. Oversees cloud, identity, data, network, application, AI, and OT/IoT security architecture while aligning controls with regulatory requirements. Partners with enterprise architecture, technology, legal, privacy, and compliance teams on transformations, acquisitions, and regulatory readiness. Establishes metrics, automation, and policy enforcement, reports risk posture to executives, and leads global security architecture teams and operating models.

Designs and engineers secure network and cloud architectures across AWS, GCP, Azure, and physical data centers. Responsibilities include threat modeling, network segmentation, monitoring, alerting, automation, attack-surface reduction, and secure connection patterns. The role drives strategic security improvements, partners with product and infrastructure teams, communicates architectural decisions, and mentors engineers. Candidates need deep hybrid networking and cloud security expertise, protocol knowledge, scripting ability, independent problem-solving skills, and strong communication.