Top Cyber Security Jobs

Performs cloud security engineering across AWS and GCP, including system hardening, patching, vulnerability remediation, compliance scanning, security tool management, incident response, and cloud operations. Troubleshoots Linux, Windows, network, application, and identity issues; supports FedRAMP, FISMA, and NIST 800-53 requirements; documents procedures and incidents; contributes to automation; mentors junior engineers; and participates in a 24×7 on-call rotation.

Designs and operates security controls for AI/ML systems, including threat detection, incident response, cloud and application security, model governance, adversarial testing, and security automation. Builds production tooling across AI platforms such as SageMaker, Azure OpenAI, and Databricks; applies MITRE ATLAS, OWASP AI Top 10, and NIST AI RMF frameworks; and integrates enterprise security platforms to protect models, data, pipelines, and AI applications.

Build and operate cloud platform security controls across AWS, GCP, Azure, and Kubernetes. Develop cloud guardrails, workload protections, AI security controls, CI/CD scanning integrations, infrastructure-as-code solutions, and automated remediation. Lead threat modeling, detection validation, incident response readiness, and security initiatives from scoping through production ownership. Collaborate with engineering teams on secure coding and risk remediation while mentoring team members.

Supports information security governance, risk, and compliance activities, including risk assessments, risk-register maintenance, security policies, third-party risk reviews, audit responses, ISO 27001 and ISO 27701 system operations, security awareness training, exceptions tracking, and reporting. The role collaborates with IT, Legal, Procurement, Marketing, and business stakeholders to evaluate technology risks, maintain security controls, and improve governance processes.

Build and operate Coupang's security infrastructure and IAM platforms. Design and implement backend APIs and scalable distributed systems, collaborate cross-team for platform adoption, ensure reliability and operational excellence, and mentor other engineers.

Develops and maintains security across applications, platforms, and cloud environments. Responsibilities include application and platform security testing, incident response planning, cyber resiliency, monitoring and alerting, secure cloud infrastructure operations, COMSEC or cryptographic key management, vulnerability coordination, compliance monitoring, and security policy development. The role requires an active TS or higher clearance, a bachelor’s degree, cloud experience, and at least 10 years of experience.

Senior Application Security Engineer responsible for threat modeling, application security reviews, and operating SAST, DAST, SCA, secrets detection, IaC, and container scanning tools. The role integrates security controls into CI/CD pipelines, supports API and software supply chain security, improves Secure SDLC maturity, assists with PCI DSS compliance and penetration testing, automates security workflows, and partners with developers on remediation, secure coding, incident response, documentation, and security metrics.

Leads federal vulnerability management and remediation efforts, conducts vulnerability assessments, validates fixes, maintains scanning and security tools, and develops related policies and reports. Supports NIST RMF, security audits, incident response, configuration management plans, security baselines, and compliance monitoring. The role requires extensive A&A experience, knowledge of NIST standards, vulnerability scanning platforms, a security certification, U.S. citizenship, and a Secret clearance.

Develop browser plugins for Windows with cross-browser compatibility across Chrome, Firefox, and Internet Explorer. Apply Windows API, registry, privilege, authentication, encryption, SSL/TLS, PKI, X.509, and digital-signature security expertise. Write and test software using C#/.NET, Managed C++, Java, Python, and JavaScript. Collaborate in Scrum environments using version control and strong communication skills.

Designs and deploys secure, high-performance cloud networking architectures across public cloud, data center, and edge environments. Develops SD-WAN, SASE, routing, segmentation, automation, and DevOps solutions using infrastructure-as-code and cloud-native technologies. Leads proofs of concept, customer validations, reference architecture development, integrations, documentation, and technical guidance for product, engineering, sales, professional services, and customers.

Conduct application security reviews, source-code audits, penetration tests, architectural reviews, and vulnerability assessments. Guide development teams on secure SDLC, threat modeling, DevSecOps, and vulnerability mitigation. Lead static and dynamic application security testing programs, design security tools and controls, manage responsible disclosure cases, research emerging attack vectors, and coach teams on application security practices.

Leads Weatherford’s global cybersecurity strategy, governance, operations, identity management, data protection, and risk management programs. Oversees security operations, threat detection, vulnerability management, incident response, cloud and network security, OT environments, AI governance, IAM, DLP, and Zero Trust initiatives. Partners with executive, technology, legal, compliance, and business leaders while building a high-performing cybersecurity organization, managing vendors and budgets, and communicating enterprise cyber risk.

Leads enterprise IAM engineering strategy, architecture, delivery, and operations, including IGA, directory services, cloud identity, API and agentic identity management. Manages IAM engineering teams, drives Zero Trust and adaptive access modernization, establishes architectures and automation practices, ensures regulatory compliance, remediates identity risks, and communicates strategy and performance to executives and stakeholders.

Leads hands-on application security research, vulnerability discovery, reverse engineering, secure code review, penetration testing, threat analysis, and remediation. Partners with security operations, threat intelligence, incident response, and engineering teams to improve detection and protection. Oversees security testing, vulnerability management, compliance, incident investigations, reporting, training, and application security programs. Guides responsible AI use, prompt design, and AI-enabled cybersecurity operations while mentoring teams and advising senior leadership.

Leads enterprise Privileged Access Management within Identity and Access Management, overseeing cybersecurity teams, strategy, controls, compliance, risk, incident response, vulnerability management, and security architecture. Directs PAM transformation through Agentic AI, manages budgets and resources, mentors talent, collaborates with senior stakeholders, and ensures secure access to critical infrastructure and applications across a complex global organization.

Leads Risk Management Framework and authorization activities for Air Force Financial Management systems. Provides cybersecurity policy guidance, manages eMASS and ITIPS artifacts, conducts vulnerability and risk assessments, oversees POA&M remediation, supports security control assessments, prepares A&A decision packages, and briefs senior leadership. Coordinates continuous monitoring, configuration and patch compliance, incident analysis, system inventories, cybersecurity policies, and enterprise governance reporting.

Supports Department of the Air Force financial-management cybersecurity through RMF lifecycle activities, authorization artifacts, vulnerability management, compliance assessments, POA&M tracking, continuous monitoring, and A&A decision packages. The analyst coordinates remediation, reviews security data and alerts, supports DISA STIG compliance and incident reporting, maintains system inventories, and prepares controlled cybersecurity documentation while collaborating with system owners, engineers, PMOs, and government stakeholders.

Supports the DoD Risk Management Framework lifecycle for assigned Air Force financial management systems. Maintains SSPs, RARs, POA&Ms, control evidence, and other authorization artifacts in eMASS and ITIPS. Performs vulnerability and risk analysis, coordinates remediation, tracks compliance and authorization status, supports security-control assessments and ATO decision packages, and prepares audit-ready cybersecurity documentation, reports, policies, and leadership briefings.

Lead the RMF and authorization lifecycle for Air Force Financial Management systems. Manage security artifacts in eMASS and ITIPS, conduct vulnerability and risk assessments, coordinate remediation, support ATO decisions, oversee continuous monitoring, brief leadership, maintain compliance documentation, and advise government stakeholders on DoD and Air Force cybersecurity policy.

Provides day-to-day cybersecurity and Risk Management Framework support for defense research laboratory systems and networks. Maintains RMF documentation, eMASS records, security plans, assessments, POA&Ms, inventories, and STIG checklists. Supports vulnerability scanning, remediation tracking, audits, account access, training compliance, cloud initiatives, and ATO maintenance. The role requires on-site work, occasional after-hours support, and eligibility for a Secret clearance.

Leads information security and cybersecurity risk for Asset Management, overseeing GRC, application security, product security, and technology risk teams. Advises engineering and business leaders on security controls, application risks, resiliency, regulatory compliance, remediation, and secure SDLC practices. Develops security testing strategies, evaluates emerging threats, supports risk assessments, and drives adoption of security standards and controls across applications and technology initiatives.

Manage and optimize vulnerability scanning platforms, patching technologies, automation, and security dashboards. Build test environments, support air-gapped systems, prioritize vulnerabilities based on risk, and apply infrastructure security, threat intelligence, monitoring, and vulnerability assessment practices. Use networking fundamentals, segmentation, traffic analysis, and incident response knowledge to support secure IT operations.

Leads information security audit engagements from planning through reporting, evaluating risks, controls, audit evidence, and management action plans. Reviews audit work for quality and compliance with internal policies and IIA Standards, monitors schedules, coaches audit staff, and collaborates across lines of defense. The role requires strong cybersecurity knowledge across areas such as cloud architecture, APIs, DevSecOps, encryption, Zero Trust, and vulnerability management, along with experience applying technology frameworks and conducting risk-focused audits.

Designs, implements, and supports enterprise IAM capabilities across Microsoft Entra ID, Active Directory, and identity governance platforms. Integrates applications using SSO and automated provisioning protocols; manages RBAC, lifecycle processes, Conditional Access, MFA, PIM, and least-privilege controls. Troubleshoots complex identity and federation issues, automates operations with PowerShell and Microsoft Graph, supports migrations and production changes, and creates technical and audit documentation. Collaborates across engineering, application, risk, and audit teams while mentoring peers and participating in Agile delivery.

Manages user access, provisioning, identity lifecycle processes, and data entitlements across systems and applications. Investigates access issues, coordinates with application and data owners, enforces least-privilege and security policies, and supports risk management. The role also trains junior staff, maintains documentation, collaborates with global teams, and drives process improvements through workflow enhancements and automation.