Top Cyber Security Jobs

Provide independent oversight of digital-asset cyber and technology risk across custody, trading, blockchain infrastructure, and supporting platforms. Assess control effectiveness, identify and escalate material gaps, influence remediation and risk acceptance, support regulatory engagement, improve risk metrics/reporting, and coach CTIS/NFR team members on digital asset security issues.

Lead OT security monitoring and triage operations, investigate suspicious activity across industrial networks, tune detections, manage vulnerabilities and asset classification, and escalate findings to incident responders and threat hunters. Produce customer-facing reports, support platform operations, mentor analysts, and collaborate across cybersecurity teams. The role requires shift-based coverage, remote coordination, and expertise in network security with a strong interest in ICS/OT environments.

Administer and secure Windows, virtualization, directory, cloud-connected, and related infrastructure platforms. Own vulnerability remediation from assessment through closure, prioritize risks, coordinate patches and changes, maintain secure configuration baselines, and develop automation. Monitor infrastructure health and security events, support incident response, disaster recovery, audits, and technical documentation while collaborating with security, infrastructure, application, vendor, and audit teams. Participate in on-call rotations and scheduled maintenance.

Lead offensive security engagements across corporate, cloud, application, and mobile environments, including red, purple, and orange team exercises. Develop covert engagement infrastructure, custom implants, payloads, and exploits; model threats and killchains; assess detection coverage; produce remediation-focused reports; support incident response; and advise security teams on vulnerabilities, threat intelligence, and defensive improvements.

Supports security operations through alert monitoring, incident triage, evidence collection, log analysis, phishing investigations, vulnerability management, identity and access reviews, audits, compliance documentation, and security awareness activities. The role collaborates with IT and business teams to remediate vulnerabilities, maintain operational records, escalate incidents, and improve defensive processes across endpoint, cloud, network, identity, and application environments.

Serve as a strategic and operational partner to the CISO by leading InfoSec planning, operating reviews, metrics, risk management, workflows, dashboards, knowledge management, and cross-functional security programs. Establish change-management and continuous-improvement practices, translate technical risks into executive decisions, and build, coach, and manage a team of Technical Program Managers.

Leads Generac’s global cybersecurity and product security organization, owning enterprise strategy, cyber risk reduction, IT/OT and IoT security, security operations, incident response, compliance, third-party risk, and Board-level reporting. The CISO oversees global teams, security investments, manufacturing and product security programs, regulatory readiness, and executive response to material cyber incidents while developing security culture and aligning cybersecurity with business objectives.

Investigate, assess, and remediate vulnerabilities across NVIDIA data center platforms. Responsibilities include vulnerability triage, exploitability analysis, CVSS and CWE assessment, security fixes, regression testing, dependency updates, automation, and coordinated disclosure. The role also improves secure development lifecycle practices through threat modeling, security reviews, testing, and security automation while collaborating across distributed engineering teams.

Analyze, debug, and secure diverse codebases; implement features; refactor legacy software; conduct audits and penetration tests; optimize backend performance; and document findings to improve AI training datasets.

Leads cybersecurity solution delivery for classified and regulated federal environments. Designs and implements secure Azure cloud architectures using Microsoft Defender, Entra, and Azure Policy; drives ATO readiness, security-control automation, risk mitigation, and technical remediation. Develops architecture specifications, operations guides, and project plans while supporting deployment and resolving technical issues. Collaborates with architects, engineers, and program stakeholders to align cybersecurity solutions with mission requirements and customer outcomes.

Implements and monitors information security programs, controls, and risk management processes. Engineers security solutions, audits identity and access management, conducts vulnerability scans, monitors intrusion prevention and security events, supports investigations, performs phishing simulations, analyzes threats, documents test results, and collaborates with IT and business teams to resolve security issues.

Lead cybersecurity research and red-team efforts protecting critical infrastructure and federal networks. Analyze source code, binaries, firmware, malware, and operational technology systems to identify vulnerabilities and attack vectors. Develop proof-of-concept exploits, mitigation strategies, adversary-emulation tools, and penetration-testing capabilities. Collaborate with multidisciplinary teams, sponsors, and senior stakeholders; contribute to research proposals, funding, technical strategy, and team mentorship. Higher-level duties include directing complex projects, setting research vision, and advancing cybersecurity programs.

Leads security data engineering initiatives that integrate and enrich data from security, cloud, application, endpoint, vulnerability, identity, governance, and risk platforms. Builds governed Snowflake data products, pipelines, analytics, dashboards, KPIs, KRIs, and control-effectiveness metrics. Provides technical leadership, mentors staff, partners with cross-functional stakeholders, improves risk prioritization and remediation visibility, and supports security automation and AI-enabled capabilities.

Supports DoD cybersecurity and RMF activities for NIPR/SIPR systems, including security evaluations, vulnerability assessments, ATO lifecycle management, POA&M tracking, STIG and CSSP compliance, and remediation. The role manages RMF artifacts, analyzes vulnerability scans, supports risk determinations, provides security training, and helps maintain system security posture across cloud and enterprise environments.

Designs and maintains secure, DFARS-compliant networks, infrastructure, cloud services, endpoints, servers, and OT/IoT environments. Assesses cybersecurity risks, monitors vulnerabilities, validates remediation, develops mitigation strategies, and supports governance, risk, and compliance activities. The role researches threats and NIST standards, creates security documentation, analyzes reports, and collaborates with networking engineers, stakeholders, and third parties to implement zero-trust and security best practices.

Own security end to end as AIUC’s first security hire, securing its product, agent evaluation platform, infrastructure, corporate systems, vendors, data, and customer environments. Build sandboxing, credential isolation, least-privilege access, detection, logging, incident response, and automated security controls. Investigate emerging agent attacks, turn research into production defenses, support customer security reviews, and contribute findings to AIUC-1 standards and its CISO consortium.

Leads Fastly’s Platform Security organization, defining multi-year technical strategy and roadmaps for foundational infrastructure, secrets, identity, PKI, and trust services. Manages engineering teams and principal-level contributors, drives reliability and security best practices across the organization, establishes metrics and accountability, and communicates strategy and risk to executives. Requires deep experience with distributed systems, infrastructure as code, Linux, cloud and on-premises environments, and security technologies. Coding is not expected, but strong technical expertise is essential.

Supports information security awareness, risk assessments, compliance requirements, security documentation, reporting, technology evaluations, and project implementation. Analyzes security risks related to new technologies, researches solutions, resolves security issues across platforms, and advises business and information systems teams. Requires at least three years of information security experience and hands-on knowledge of networking, intrusion detection, VPN, PKI, firewalls, identity management, and encryption.

Leads enterprise product security architecture and engineering strategy across application, cloud, infrastructure, vulnerability management, and IT operations. Defines security roadmaps and standards, evaluates security platforms, embeds security into SDLC and CI/CD pipelines, guides secure multi-cloud integrations, supports complex incident escalations, and develops security engineering leaders and teams. Partners across Engineering, IT, Infrastructure, and Compliance to modernize security programs and achieve measurable risk reduction.

Integrate application security practices throughout the software development lifecycle. Lead Secure SDLC assessments, architecture reviews, threat modeling, security tool evaluations, software supply chain security initiatives, and client engagements. Translate technical risks into executive briefings and actionable roadmaps, mentor team members, and contribute to application security program development. The role requires expertise in cloud-native architectures, DevSecOps, vulnerability management, and modern application security technologies, with travel up to 50% depending on client needs.

Sets the technical vision for enterprise security across cloud, identity, application, data, endpoint, and network environments. Leads security architecture, threat modeling, DevSecOps, incident response, compliance evidence, security roadmap planning, and AI security initiatives. Advises executives and cross-functional stakeholders, handles high-severity escalations, mentors security engineers, and strengthens healthcare security controls for AWS, Azure, FHIR, Medplum, Snowflake, HITRUST, HIPAA, and NIST requirements.

Manages daily operations, monitoring, troubleshooting, and administration of DLP and enterprise security solutions. Supports Windows and Linux servers, security alerts, infrastructure changes, technology deployments, audits, compliance evidence, and technical documentation. Collaborates with network, infrastructure, application, help desk, local, and Korea Headquarters teams to resolve issues and implement security requirements. Professional Korean and English proficiency is required.

The Senior ISSO manages cybersecurity compliance for mission-critical IT systems. Responsibilities include implementing and assessing NIST and RMF controls, maintaining SSPs and POA&Ms, supporting A&A and ATO processes, conducting risk and vulnerability assessments, hardening systems using STIGs, monitoring security events, supporting incident response, maintaining documentation, and briefing stakeholders. The role is fully on-site in Springfield, Virginia, and requires an active TS/SCI clearance with the ability to obtain TS/SCI with Polygraph.

Supports cybersecurity compliance for mission-critical IT systems by managing RMF artifacts, implementing NIST security controls, supporting A&A and ATO activities, conducting risk and vulnerability assessments, and enforcing DISA STIG hardening. Performs continuous monitoring with security tools, supports incident response and forensic analysis, delivers security awareness training, and prepares risk reports and leadership briefings. Requires on-site work, an active TS/SCI clearance, U.S. citizenship, and ability to obtain TS/SCI with polygraph.

Build and operate MITRE ATT&CK-aligned threat detections across cloud, endpoint, identity, email, and application telemetry. Own the full detection lifecycle, advance detection-as-code platforms, improve data pipelines and observability, integrate threat intelligence, evaluate AI-powered security capabilities, and support investigations and incident response. Partner with Security Operations and engineering teams while independently taking projects from concept through production.