Top Cyber Security Jobs

Leads end-to-end incident response, including investigation, containment, recovery, and postmortems. Builds security telemetry pipelines and high-fidelity detections across cloud, Kubernetes, identity, endpoint, SaaS, and application environments. Develops threat intelligence, threat hunting, automated response tooling, incident plans, and tabletop exercises. Partners with infrastructure, research, product, legal, and leadership teams to address sophisticated threats targeting AI labs, including model theft, supply chain compromise, and AI-specific abuse.

Design, build, and automate database and infrastructure security solutions across cloud and on-prem environments. Partner with product and engineering teams to implement monitoring, vulnerability management, privileged access reporting, compliance (SOX/CIS), and integrations (ServiceNow, Splunk). Apply IaC, scripting, DevSecOps practices, and perform patching, DR, and security lifecycle activities while mentoring team members.

Administers day-to-day cybersecurity systems, including vulnerability scanning, endpoint protection, secure messaging, access controls, audits, configuration reviews, backups, and incident response. Troubleshoots security hardware, software, operating systems, and network systems; supports compliance, testing, documentation, and security tool evaluations. The role works with security engineers to maintain system performance, confidentiality, integrity, availability, and policy compliance.

Leads the strategy, architecture, delivery, and lifecycle management of secure multi-cloud products across AWS, Azure, GCP, and Oracle Cloud. Oversees cloud engineering teams, sets technical standards, drives modernization and DevSecOps adoption, establishes reliability and security metrics, and ensures alignment with CIS Benchmarks and governance requirements. Partners with product, engineering, sales, and customer teams while managing cloud maintenance, marketplace publishing, and organizational growth.

Leads client-facing cybersecurity assurance activities, including DDQs, RFPs, vulnerability inquiries, presentations, and trust collateral. Maintains approved security content, communicates BNY’s cybersecurity posture, uses AI tools responsibly to improve workflows, tracks service demand, and escalates legal or high-risk disclosure issues. The role requires cybersecurity knowledge, familiarity with controls and industry frameworks, excellent communication, sound judgment, and the ability to manage concurrent priorities in a complex financial organization.

Leads the strategy, implementation, monitoring, and improvement of SaaS security configuration practices. Manages security analysts and engineers, defines configuration standards and risk-based roadmaps, oversees SaaS posture monitoring, identifies configuration drift and control gaps, and drives remediation with technology, security, risk, and business teams. Establishes metrics, supports regulatory and audit requirements, evaluates SaaS platforms, and develops technical talent across SaaS security, posture management, configuration engineering, and automation.

Serves as an Information System Security Officer for an Azure-based federal system. Provides RMF documentation, security testing, vulnerability assessments, compliance analysis, continuous monitoring, incident response, secure architecture guidance, and remediation tracking. Collaborates with Agile development and engineering teams to implement cloud security controls, address findings, support audits, and maintain compliance with federal standards and DHS requirements.

Leads enterprise cybersecurity, privacy, technical risk, compliance, and business resiliency programs. Advises executives and the Board, oversees incident response, security assessments, vendor risk, continuity planning, disaster recovery, privacy obligations, and security awareness. Develops strategy, policies, processes, and teams while managing talent, performance, succession planning, and strategic partners. The role requires at least seven years of relevant experience with a bachelor’s degree or ten years with an associate’s degree, and may involve up to 10% travel.

The posting provides conflicting information: the title indicates a Senior Associate in Cyber Security, while the description identifies the role as a Senior Payroll Analyst. No specific responsibilities are provided.

Supports the information security program by monitoring and triaging alerts, investigating and documenting security events, assisting with incident response, identity and access management, vulnerability remediation, security awareness, and security tool configuration. Collaborates with IT teams and an MSSP, maintains security documentation, and provides escalation support, including 24/7 availability for access management and incident response.

Designs, assesses, and strengthens cybersecurity solutions for mission-critical government systems. Leads RMF activities, security requirements analysis, network architecture reviews, security control implementation, vulnerability mitigation, and accreditation documentation. Advises government stakeholders, validates SSPs and SRTMs, supports Assessment and Authorization activities, and ensures compliance with NIST, DISA, and DoD security requirements.

The Application Security Engineer embeds security throughout the software development lifecycle. Responsibilities include secure system design, vulnerability identification, code review, SAST/DAST/SCA implementation, cloud security, authentication and authorization reviews, security automation, and collaboration with engineering teams. The role also involves offensive and defensive security activities, risk reduction, and communicating security recommendations to technical and non-technical stakeholders.

Design and implement security controls, threat models, and incident response capabilities for AI and machine learning systems. Address risks involving LLMs, model APIs, training data pipelines, prompt injection, model abuse, data exfiltration, and AI supply chains. Apply application security, identity, cryptography, cloud security, and infrastructure expertise while conducting architecture reviews and defending AI-powered applications and infrastructure.

Designs, implements, and operates SAP security and access-control frameworks across enterprise SAP landscapes. Responsibilities include SAP role design, user provisioning, segregation-of-duties analysis, audit support, remediation, and operation of SAP GRC Access Control and Process Control. The role secures Fiori, BTP, HANA, and cloud SAP applications while partnering with audit, compliance, and business teams. It also supports regulatory compliance, identity integrations, continuous controls monitoring, and secure SAP operating models.

Designs, implements, and operates security controls across OCI, Oracle Cloud Applications, and hybrid Oracle environments. Responsibilities include cloud security architecture, workload hardening, identity and access management, vulnerability and compliance programs, threat detection, incident response, SIEM integration, and security automation. The role also involves troubleshooting, documentation, design and code reviews, cross-functional collaboration, and mentoring junior engineers.

Supports corporate security and insider-risk initiatives through data gathering, process and gap analysis, risk reporting, and executive-level insights. The role tracks security reports, synthesizes complex information, identifies emerging intelligence needs, and supports decision-making for business segments, channels, and products. It requires sound judgment, discretion with sensitive matters, regulatory understanding, strong communication, and collaboration.

Performs systems security vulnerability and risk assessments for the Sentinel defense program, develops mitigation plans, evaluates security designs, and communicates findings to stakeholders. Supports program initiatives, milestone requirements, systems security engineering activities, and program protection practices. Requires active DoD Secret clearance, U.S. citizenship, STEM education, substantial systems engineering experience, and eligibility for Top Secret and SAP access. Travel is approximately 10%.

Conduct offensive security research focused on software supply chain threats, zero-day vulnerabilities, malicious code, third-party libraries, and CI/CD systems. Develop exploit techniques, collaborate on detection and mitigation capabilities, publish research through blogs and security conferences, and contribute open-source tools and methodologies. The role requires deep expertise in vulnerability research, reverse engineering, application security, exploit development, and software supply chain security.

Design and implement an upgraded high-performance testing network involving hardware, software, virtual images, DevOps services, and automated testing. Develop infrastructure automation and configuration management, manage hybrid cloud and Linux workloads, support CI/CD and monitoring, troubleshoot complex systems, and translate strategic architectures into standardized implementations while enforcing security and documentation standards.

Leads client information security programs, advising executives on strategy, policies, threats, incidents, business continuity, and security solutions. Oversees risk assessments, vulnerability testing, audits, certifications, control mappings, regulated-data scoping, and remediation across frameworks including NIST, ISO 27001, HIPAA, SOC 2, and PCI DSS. Coordinates incident response and security teams while delivering security awareness training and secure cross-functional solutions. Requires substantial security leadership, consulting, compliance, and regulated-industry experience, plus CISSP certification.

Executes end-to-end red team and adversary emulation operations across cloud, identity, network, endpoint, hardware, and operational environments. Develops offensive tooling, implants, and evasion tradecraft; operates and improves AI-driven security agents; discovers and exploits vulnerabilities; and communicates findings to customers and internal security teams. The role also contributes to operational playbooks, product hardening, detection improvements, and scalable offensive security practices.

Leads investigations of critical vulnerabilities, zero-days, KEVs, and security exposures. Correlates technical data, determines scope and impact, coordinates remediation, commands incidents, escalates potential compromises, and maintains operational continuity across coverage periods. The role also mentors analysts and collaborates with SOC, incident response, technology, and security teams to reduce enterprise risk.

The Data Protection Analyst supports data protection operations by triaging alerts, maintaining procedures and metrics, implementing security controls, automating analytical processes, and investigating data loss incidents. The role develops and maintains DLP policies, collaborates with engineering and Insider Threat teams, advises employees, and helps align data protection practices with organizational risk tolerance.

Designs, develops, tests, deploys, and maintains cybersecurity automation playbooks using SOAR, Python, APIs, CI/CD, infrastructure-as-code, and LLMs. Partners with SOC, DLP, threat intelligence, red team, insider risk, and detection teams to automate workflows, improve incident response, tune detections, and measure efficiency gains. Leads automation initiatives, enforces quality and standardization, and supports continuous improvement across security functions.

Leads security compliance assessments and audit readiness across cloud infrastructure and delivery services. Translates regulatory standards into technical guidance, evaluates architectures and controls, conducts risk assessments, directs remediation, and develops compliance playbooks and automated monitoring workflows. The role also mentors team members, coordinates audit evidence collection, and represents the organization during external certification assessments and audits.