Top Cyber Security Jobs

Lead the enterprise AI Security Program by designing and implementing security standards, controls, guardrails, governance, automation, and monitoring for LLMs, AI platforms, agents, gateways, and AI-enabled applications. Partner with application security, engineering, privacy, compliance, and operations teams to address threats such as prompt injection, jailbreaks, data exposure, excessive agency, and adversarial attacks. Provide technical leadership, threat modeling, security architecture guidance, and maturity reporting.

Build and operate security across autonomous trucking systems, including vehicle security, cloud infrastructure, Kubernetes, CI/CD, IAM, secrets management, vulnerability management, AI security, threat modeling, monitoring, and incident response. The role contributes to secure software development, system hardening, OTA updates, supply-chain protection, and security automation across onboard and platform environments.

Designs and operates security across autonomous trucking systems, including onboard vehicle security, cloud and infrastructure security, IAM, secrets management, secure OTA updates, AI safeguards, vulnerability management, threat modeling, detection, and incident response. The role also establishes secure development practices, automates security tooling, and mentors engineering teams.

Administer and improve enterprise data loss prevention and data security controls across Microsoft 365, Google, email, endpoints, browsers, networks, and SaaS applications. Configure policies, investigate alerts, tune detections, manage exceptions, support incident response, develop reporting and playbooks, and automate administrative and validation workflows. Partner with security, privacy, legal, compliance, IT, and business teams to protect sensitive data while minimizing disruption and false positives.

Designs and governs secure AI and machine learning architectures across enterprise systems. Responsibilities include securing models, data pipelines, GenAI applications, cloud workloads, APIs, and MLOps processes; conducting AI threat modeling; implementing privacy, encryption, monitoring, and access controls; establishing governance aligned with NIST and ISO standards; supporting compliance and audits; leading architecture reviews; and mentoring security engineers on AI-specific threats.

Staff Security Engineer responsible for securing AWS cloud, Infrastructure as Code, software delivery, applications, and AI platforms. The role defines security architecture, builds reusable Terraform/OpenTofu controls, strengthens identity and logging, secures GitHub Actions, conducts threat modeling, and develops protections for agentic AI systems. It also leads vulnerability remediation, detection and response improvements, incident root-cause analysis, security evaluations, and compliance evidence generation while mentoring engineers and influencing cross-functional teams.

Lead Replay’s company-wide security program as a hands-on individual contributor. Build and verify controls for application security, cloud systems, identity, authorization, sensitive data, AI workflows, vendors, workforce access, and human operations. Conduct threat modeling, architecture and code reviews, incident response, security testing, and secure tooling. Maintain SOC 2 evidence and customer trust controls while enabling product, data, machine learning, and platform teams to operate securely and independently.

Lead cybersecurity consulting and engineering engagements securing OT and IT environments for water, wastewater, and environmental infrastructure clients. Conduct ICS, SCADA, network, architecture, risk, and compliance assessments; design secure IT/OT architectures; develop governance, incident response, security plans, and improvement roadmaps; evaluate security technologies; and support proposals and client presentations. Mentor junior staff and advise on cloud, IoT, AI, and critical infrastructure security.

Own product security architecture across Enphase hardware, firmware, cloud, and embedded systems. Lead secure boot, hardware roots of trust, cryptographic key management, OTA security, vulnerability management, PSIRT, threat modeling, penetration testing, and regulatory certification. Drive compliance with the EU Cyber Resilience Act and RED Delegated Act, establish security testing and release gates, secure communication protocols, and coordinate cross-functional remediation across firmware, hardware, cloud, and product teams.

Owns security engineering for AI and ML infrastructure, including training and inference pipelines, model registries, MCP servers, and agent runtimes. Designs security controls, conducts threat modeling and adversarial assessments, maintains compliance, and drives vulnerability remediation. Partners with AI Platform, Research, ML Operations, Science, and AI Safety teams to embed security across data, models, pipelines, and agentic systems.

Own and scale application security across Redpanda’s C++ engine, Go control plane, Console, and Rust/Go SDKs. Responsibilities include threat modeling, secure design reviews, SAST/SCA/DAST, fuzzing, secure code review, PSIRT and vulnerability disclosure, software supply-chain security, security release gates, and security champions. The role partners closely with engineering to improve secure development practices, address vulnerabilities, and protect authentication, authorization, encryption, audit logging, and multi-tenant isolation.

Designs, builds, and evaluates secure generative AI applications, agentic workflows, and multi-agent systems. Responsibilities include threat modeling, prompt-injection and data-exposure assessment, identity and access controls, tool authorization, execution isolation, monitoring, auditability, and human approval controls. The role develops prototypes, architecture patterns, documentation, and evaluation methods while guiding engineers and leading design reviews. It requires strong Python, AI/ML, cybersecurity, cloud architecture, and governance expertise, with Secret clearance eligibility.

Conduct offensive security testing across web applications, APIs, hosts, cloud infrastructure, embedded devices, and industrial control systems. Perform penetration testing, code audits, reverse engineering, threat modeling, vulnerability research, and security design reviews. Build proof-of-concept exploits, static analysis rules, CI checks, and automated security tooling. Present findings and collaborate with engineering teams and vendors to remediate vulnerabilities.

Build and lead Qualitate’s security program as its first dedicated security engineer. Secure AWS or GCP infrastructure, implement logging, monitoring, detection, access controls, encryption, and vulnerability remediation, and review application architecture. Lead ISO 27001 certification, automate compliance evidence, respond to incidents, address penetration-test findings, secure LLM-based systems, and develop production security tooling while partnering with engineering, compliance, and legal.

Design and harden Nova’s cloud and future on-premise platform security, including tenant isolation, identity, access policies, secrets, keys, networks, and secure execution sandboxes. Lead red-team testing of authentication, AI agents, privilege boundaries, prompt injection, and sandbox escapes. Own SAP identity integrations, internal security standards, compliance readiness, and customer security partnerships. Research offensive and defensive AI security, contribute to product development, and represent Nova in the SAP security community.

Leads IntelliScript’s enterprise information security strategy, governance, risk management, security operations, incident readiness, compliance, audits, and security architecture for cloud-native SaaS and hybrid environments. The role oversees SOC and HITRUST certification activities, HIPAA/PHI/PII obligations, third-party risk, vulnerability management, and security awareness. It also manages and develops the Information Security team, advises senior leadership, coordinates cross-functional initiatives, and drives security-by-design practices.

Leads information security engineering across IAM, cloud infrastructure, applications, data, and security operations. The role designs security controls, monitors and responds to incidents, assesses vulnerabilities, supports compliance, integrates security throughout the software development lifecycle, and develops organizational security awareness. It partners with platform and software engineering teams on strategic initiatives, risk mitigation, secure coding, DevSecOps, and maintaining a secure SaaS environment.

Leads the engineering and operation of enterprise security platforms, including SASE/SSE, vulnerability management, firewalls, AI guardrails, SaaS protection, and ServiceNow integrations. Defines technical standards, runbooks, metrics, resilience practices, and governance; mentors engineers; coordinates cross-functional initiatives; supports audits and regulatory examinations; and evaluates security capabilities, tools, and vendors in a highly regulated financial environment.

Leads engineering and operations for enterprise security platforms, including SASE/SSE, firewalls, vulnerability management, SaaS protection, AI controls, and ServiceNow integrations. Designs scalable security capabilities, develops operational runbooks and metrics, supports platform health and vendor escalations, and ensures audit-ready controls for regulated environments. Partners with engineering, infrastructure, application, risk, and audit stakeholders on technical decisions, compliance, resilience, and measurable risk reduction.

Lead security engineering for AI and machine learning systems, including threat modeling, guardrails, runtime detection, incident response, secure training pipelines, data protection, red teaming, supply chain security, and multi-tenant authorization. The role focuses on mitigating prompt injection, jailbreaks, model abuse, data exfiltration, and adversarial machine learning risks while supporting regulatory compliance and AI security research.

Manages cybersecurity authorization and continuous monitoring for Navy information systems. Develops A&A documentation, SSPs, POA&Ms, and security evidence; executes RMF activities in Xacta; coordinates vulnerability assessments, STIG compliance, remediation, incident response, and security control monitoring. Advises technical teams and government stakeholders, tracks authorization milestones, and maintains system security posture throughout the lifecycle.

Manages cybersecurity authorization and continuous monitoring for Navy information systems. Develops A&A documentation, SSPs, POA&Ms, and security evidence; executes RMF activities in Xacta; assesses vulnerabilities and STIG compliance; coordinates remediation, incident reporting, configuration management, and security assessments; advises technical teams and government stakeholders on risks and compliance requirements.

Lead penetration testing, adversary emulation, assume-breach, and AI red-teaming engagements. Identify exploitable weaknesses, validate security controls and detection capabilities, and provide prioritized remediation guidance. Conduct testing across networks, applications, APIs, cloud, and infrastructure while mapping activity to threat frameworks. Communicate findings to technical and executive audiences, advise clients, develop methodologies and tooling, automate testing, and mentor junior team members.

Designs and implements security controls for AI and machine learning systems, including LLM threat modeling, guardrails, prompt-injection defenses, runtime detection, secure training pipelines, identity controls, and supply-chain protection. Leads AI red-team exercises, incident response, monitoring, and remediation while collaborating with privacy, legal, and compliance teams. The role also evaluates third-party AI services and stays current with adversarial ML, LLM security research, and regulatory developments.

Build and maintain security systems for an AI platform handling sensitive customer interactions. Responsibilities include application, infrastructure, and cloud security; access controls and authorization; audit logging; vulnerability scanning; dependency auditing; secrets management; automated detection; and security tooling. The role writes production code, partners with backend and infrastructure engineers, and helps address AI-agent risks such as prompt injection and data leakage.