Top Cyber Security Jobs

Continuously monitor Microsoft Sentinel and Defender XDR, triage and investigate security alerts, conduct network and cloud threat hunting, correlate telemetry, and identify attack activity. The role develops detections, analytics rules, and response improvements; executes incident response from scoping through recovery; recommends containment actions; and communicates findings. Responsibilities include advanced KQL querying, MITRE ATT&CK mapping, threat intelligence use, AWS security investigations, documentation, and collaboration with state agencies.

Leads cybersecurity and AI risk governance, control frameworks, enterprise risk registers, continuous monitoring, remediation workflows, and executive reporting. Partners with engineering, assurance, architecture, and AI GRC teams to improve risk visibility, harmonize standards, and strengthen accountability. Manages and mentors a Security GRC team while influencing senior stakeholders and risk owners. Requires deep cybersecurity governance expertise, experience with risk methodologies and control effectiveness, and familiarity with cloud, application security, and modern security controls.

Develop and operationalize continuous cybersecurity risk management, including data-driven risk models, telemetry, dashboards, risk registers, control governance, and residual risk monitoring. Translate technical security signals, vulnerabilities, and control performance into business risk insights. Partner with AI GRC, security engineering, architecture, assurance, and engineering teams to improve governance, automate monitoring, identify systemic weaknesses, and drive measurable risk reduction.

Summer technology analyst internship supporting cybersecurity, digital banking, data analytics, AI innovation, and enterprise technology initiatives. Analysts may develop microservices and front-end applications, use generative AI tools, analyze customer adoption data, strengthen cybersecurity defenses, and contribute to strategic operational projects. The program includes training, mentoring, networking, global collaboration, and potential conversion to a full-time analyst role.

Administers thousands of user accounts across three financial systems, implementing role-based access controls based on need-to-know, separation of duties, and least privilege. Develops SOPs and user guidance, performs annual access recertifications, resolves tickets, provides customer support, and produces reports. Coordinates with ISSOs, ISSEs, and system support personnel to maintain access security, assess risks, and ensure compliance with FISMA, FIPS, and NIST guidance.

Leads cybersecurity governance, risk, and compliance frameworks, including policies, standards, control taxonomies, risk mapping, exception management, and control rationalization. Partners with technology and control owners to embed requirements into delivery lifecycles, improve reporting, modernize governance, and integrate AI and emerging technology oversight. Supports alignment across identity, infrastructure, application security, third-party risk, vulnerability management, and resilience domains.

Supports security operations across systems, networks, endpoints, cloud environments, applications, and data. Investigates alerts, validates MDR findings, performs incident triage and response, administers security platforms, reviews cloud security findings, supports CASB and DLP investigations, and manages vulnerability remediation. The role also tunes detections, improves playbooks, coordinates with technical teams, and independently investigates suspicious activity.

Conduct advanced offensive security and red team assessments across applications, AI-powered systems, and cloud environments. Identify, exploit, and remediate complex vulnerabilities; develop scalable automation, tools, and frameworks; bypass defensive controls; and translate technical findings into actionable business risks. Partner with stakeholders to define assessment objectives and promote secure engineering practices. Candidates must demonstrate expertise through research, projects, bug bounties, or public disclosures and work East Coast hours.

Lead infrastructure vulnerability assessments, prioritize security risks, coordinate remediation with Engineering, and ensure findings meet SLAs and FedRAMP requirements. Support security audits by preparing evidence, responding to findings, and tracking remediation. Analyze vulnerability and security metrics in Excel and management platforms, provide risk insights to leadership, and collaborate with Product, Cloud Operations, and Compliance teams to reduce the platform’s attack surface.

Monitor, detect, investigate, and respond to cybersecurity alerts and incidents in a Tier 2 SOC environment. Review logs, tool outputs, and threat intelligence; assess affected systems; support mitigation and recovery; identify attacker patterns; recommend security improvements; prepare reports; and follow escalation procedures while supporting 24/7 operations.

Leads information security and compliance for federal hybrid cloud and on-premises systems. Responsibilities include secure AWS and Azure architecture, NIST 800-53 control implementation, RMF and ATO support, threat modeling, vulnerability and compliance management, SIEM integration, STIG and CIS baseline oversight, DevSecOps security guidance, technical documentation, audits, and mentoring junior staff.

Designs and operates security and access-control frameworks across complex SAP environments. Responsibilities include SAP role design, user provisioning, segregation-of-duties analysis, SAP GRC Access Control and Process Control operations, audit support, remediation, and securing Fiori, BTP, and cloud applications. The consultant partners with audit, compliance, and business teams to maintain secure, compliant, and auditable SAP landscapes.

Designs, implements, and operates security controls across OCI, Oracle Cloud Applications, and hybrid Oracle environments. Responsibilities include cloud security architecture, workload hardening, identity and access management, vulnerability and compliance management, SIEM integration, incident response, and regulatory alignment. The engineer will collaborate across teams, conduct design and code reviews, document solutions, and mentor junior engineers.

Designs, implements, maintains, and improves enterprise cybersecurity controls and technologies. Responsibilities include administering Microsoft Sentinel, Defender XDR, Splunk, and Cisco security platforms; monitoring threats; investigating and responding to incidents; managing vulnerabilities; conducting security assessments; maintaining policies and standards; and supporting risk registers, security exceptions, remediation tracking, and control assessments. Up to 10% travel is anticipated.

Analyze in-the-wild exploits and perform deep reverse engineering to track adversaries. Build detection, automation, and classification frameworks; develop host/network signatures and tooling. Produce high-quality intelligence reports and briefings, collaborate across teams, and contribute to mitigation and large-scale hunting efforts.

Design and implement secure boot, certification, attestation, manufacturing, and runtime services for Microsoft's Data Processing Unit. Develop secure enclave architecture, cryptographic flows, and post-quantum cryptography solutions while collaborating with hardware, firmware, and systems engineers. Integrate DPU software into Azure cloud scenarios and improve technical designs, efficiency, and team productivity.

Develop and operate secure software using advanced security techniques, conduct security testing and code reviews, design solutions to mitigate vulnerabilities, and contribute across software architecture. The role involves debugging, coding, documentation, secure coding collaboration, and adopting new tools. Preferred experience includes Java or C/C++ development on Solaris or Linux, RESTful services, infrastructure as code, Ansible, Terraform, Kubernetes, NoSQL platforms, and analytics applications. The position requires extensive software engineering leadership experience and an active TS/SCI clearance with polygraph.

Develop and maintain secure software and system environments using Python, Bash, Ansible, RHEL 8, SELinux, IdM/FreeIPA, and PKI. Automate system builds, configure and harden Linux systems, support virtualization and networking, optimize legacy applications, and manage documentation. Interact with customers to prioritize defects and enhancements, and periodically travel onsite for system integration, updates, and deployments. The role requires a Secret clearance and eligibility for TS/SCI.

Leads NYCHA’s Security Operations Center and manages a team of three analysts. Oversees monitoring, alert triage, threat hunting, detection engineering, incident response, recovery, and executive communications. Develops SOC maturity roadmaps, incident response playbooks, tabletop exercises, and post-incident improvements. Drives automation and AI adoption to improve detection, enrichment, triage, and response while collaborating with IT teams to remediate events and embed monitoring into new systems.

Leads Americas security architects in customer-facing engagements, enterprise security strategy, architecture reviews, escalations, and product feedback. Drives customer growth, security adoption, resilience, risk management, and AI transformation. Develops managers and technical leaders, builds high-performing teams, engages executive stakeholders, and provides technical thought leadership across Microsoft security solutions, cloud security, identity, data protection, SIEM, XDR, and security operations.

Manages and modernizes the global information security program across traditional, cloud, and SaaS environments. Oversees technical security controls, vulnerability management, alerting, incident response, SDLC security integration, security communications, regulatory alignment, risk prioritization, metrics, and security architecture. Leads hybrid teams and coordinates with operational teams, regulators, technical stakeholders, contractors, and managed service providers.

Secure and operate AI platforms, gateways, agents, and tool integrations across their lifecycle. Build security automation, privileged access controls, network and endpoint protections, logging and telemetry pipelines, SIEM integrations, dashboards, alerts, and monitoring. Review integrations for security risks, enforce authentication, authorization, guardrails, and usage governance, and support firewall, SASE/ZTNA, WAF, identity, and infrastructure security engineering.

Lead identity and access management implementations for federal and enterprise customers. Responsibilities include IAM solution design, architecture, deployment, integration, testing, troubleshooting, documentation, customer workshops, and knowledge transfer. The consultant provides technical leadership, advises stakeholders on authentication and identity governance, collaborates across project teams, and mentors junior consultants. The role requires extensive IAM consulting experience, strong security technology knowledge, active Top Secret clearance with full-scope polygraph, and customer-facing technical leadership.

Design, build, and operate enterprise security controls as software products; own architecture, implementation, deployment, and production support. Write and maintain production code, design APIs and microservices, apply TDD and CI/CD, collaborate with product and platform teams, and drive adoption to reduce security risk.

Designs, builds, secures, and operates an enterprise Databricks data and AI platform. Responsibilities include platform administration, Terraform-based provisioning, CI/CD governance, monitoring, cost and performance optimization, reliability management, IAM, encryption, secrets management, audit-log analysis, compliance, and incident response. The role collaborates with data engineering, governance, CI/CD, and leadership teams to improve platform security, observability, compliance, and operational resilience.