Top Cyber Security Jobs

Lead security reviews, code audits, penetration testing, vulnerability research, and mitigation efforts for Microsoft Windows services. Develop reusable security tools and agents, identify attack vectors and architectural risks, demonstrate exploit impact, and collaborate with product engineering teams to design scalable defenses and improve security investments.

Secure Microsoft Windows online services through offensive security, code and deployment reviews, penetration testing, vulnerability research, and scalable mitigation development. Build reusable security review tools and agents, demonstrate exploit impact, identify novel attack vectors, bypass security controls, and collaborate with product engineering teams to strengthen architecture and defenses.

Leads cybersecurity competitive strategy and execution, including deal coaching, competitive positioning, win/loss analysis, compete playbooks, field enablement, and cross-functional recommendations for sales, product, engineering, marketing, and partner teams. The role focuses on Google Security, Mandiant, Wiz, and Microsoft Security competitive scenarios, translating market and customer insights into scalable go-to-market motions and product strategy.

Provides technical leadership for Zscaler’s Layer 7 proxy architecture, specializing in QUIC, HTTP/2, HTTP/3, TLS/SSL inspection, and high-throughput network security. Defines reference architectures, guides solution design, modernizes code, addresses technical debt, mentors engineers, and governs architectural decisions across teams. The role requires extensive experience designing networking security software and public-cloud infrastructure, strong C expertise, and knowledge of advanced networking, operating systems, virtualization, and kernel-bypass technologies.

Build and mature Headway’s infrastructure security program across AWS and application platforms. Partner with Product and Infrastructure teams on secure system design, security reviews, platform guardrails, vulnerability remediation, and continuous infrastructure improvement. Support incident response and security operations while advancing AI-native cloud security practices. The role requires strong technical depth, cross-functional collaboration, and the ability to establish secure-by-default engineering practices in an ambiguous, fast-paced environment.

Provides proactive technical account management for strategic cybersecurity customers. Responsibilities include customer onboarding, platform training, health checks, issue resolution, escalation management, success planning, knowledge-base development, renewal-risk mitigation, and expansion support. The role serves as a customer advocate while collaborating with support, engineering, and sales teams. Candidates need cloud, application infrastructure, security, incident response, forensics, networking, and cloud architecture expertise, along with strong communication and customer-success skills.

Leads HonorHealth’s information security program, including security framework implementation, risk management, incident escalation, security operations, access management, data protection, and compliance. Manages security personnel, develops procedures and metrics, coordinates incident response, supports enterprise stakeholders, and improves the organization’s security posture across healthcare systems and applications.

Supports security incident response operations by correlating SIEM, EDR, IDS/IPS, and threat intelligence data; investigating suspicious activity, phishing, malware, and policy violations; documenting incidents; tuning detection rules and SOC playbooks; conducting threat hunts; and collaborating with engineering and SOC teams. Serves as a customer-facing security subject matter expert and coordinates with agency staff. The role is onsite or hybrid in Columbia, South Carolina, with local candidates required.

Conducts Risk Management Framework and JSIG-based assessments of classified information systems, evaluating security controls, threats, vulnerabilities, authorization packages, and continuous monitoring. Prepares Security Assessment Reports and POA&Ms, advises authorizing officials, supports inspections and cybersecurity incidents, and evaluates system changes, hardware, software, and sanitization procedures. Requires experience with SAP, SCI, or collateral systems security, prior ISSO/ISSM performance, active TS/SCI clearance, and willingness to complete a CI polygraph.

Own and scale LiveKit’s vulnerability management and security operations program. Responsibilities include selecting and operationalizing scanning tools, triaging vulnerabilities, assigning owners, setting remediation SLAs, building remediation dashboards, automating compliance evidence collection, and developing automation to reduce manual security work. The role partners closely with engineering and compliance teams to prioritize risk and accelerate remediation.

Own infrastructure security for LiveKit’s production platform. Map cloud security posture, prioritize and remediate infrastructure risks, harden IAM, secrets, networks, tenant isolation, and media storage, and build secure infrastructure-as-code guardrails. Partner with compliance teams on PCI-DSS and ISO 27001 controls and automate audit evidence. The role requires cloud, Kubernetes, Terraform, scripting, and production infrastructure security experience, with AI security and real-time media experience preferred.

Designs, implements, tests, and supports enterprise network security systems and web proxy capabilities. Defines security requirements, develops test plans, analyzes network traffic, manages engineering milestones, identifies vulnerabilities, and resolves complex technical issues. Requires expertise in networking, TLS, firewalls, proxies, advanced content filtering, and at least one specialized security technology such as F5 load balancers, malware scanning, NSX Defender, or cloud security solutions.

Leads Nordstrom’s enterprise Identity Security Operations function, overseeing identity platforms, access lifecycle operations, privileged access, incidents, service levels, automation, staffing, budgets, vendors, compliance, and operational roadmaps. Manages managers, engineers, analysts, and managed-service teams while partnering with Identity Engineering to ensure new capabilities are supportable, secure, observable, and production-ready.

Conduct application security assessments, discover and validate vulnerabilities, analyze complex codebases, build custom security tooling, perform threat modeling and architecture reviews, and deliver actionable findings to clients. Independently own assessment workstreams, develop proof-of-concept exploits, communicate technical conclusions, review team work, and contribute to security research, open-source tools, and technical writing.

Conduct application security assessments, discover and validate vulnerabilities, analyze code and architectures, perform threat modeling, build security tooling, and develop proof-of-concept exploits. Own scoped assessment components from discovery through client delivery, communicate findings and remediation guidance, and contribute to security research, open-source tools, and technical documentation. The role requires hands-on coding, vulnerability research, memory-corruption knowledge, operating-system familiarity, and independent technical investigation.

Investigate and respond to security alerts, phishing, and escalated incidents across corporate, cloud, and regulated SaaS environments. Build security automation, detection rules, integrations, playbooks, and CI/CD-enabled tooling. Manage incident timelines, root-cause analysis, remediation, identity and access operations, audit evidence, and cloud infrastructure supporting security tools. Participate in on-call rotations, evaluate new security technologies, measure automation impact, and support junior team members.

Leads product cybersecurity strategy, governance, compliance, vulnerability management, penetration testing, incident response, and secure development across industrial automation products. Oversees third-party security integrations, certifications, risk mitigation, and industrial communications architectures using protocols such as OPC UA, MQTT, Modbus, and IEC 61850. Partners across IT, OT, engineering, product development, and business units while managing and mentoring cybersecurity and communications professionals.

Leads cybersecurity product strategy and roadmaps for enterprise network security services. Evaluates threats, risks, technologies, and build-versus-buy options; manages RFI/RFP processes; translates security objectives into product backlogs and engineering requirements; defines metrics and value propositions; advises executives; and mentors teams. The role partners extensively with engineering, operations, developers, and business stakeholders to deliver scalable security capabilities.

Protects IT software, systems, and networks from intrusions and security breaches. Monitors threats and vulnerabilities, enforces security policies, supports compliance, communicates security posture, administers complex security tools, and serves as a security subject matter expert on projects involving departments and vendors. The role is hybrid in Washington State, salaried, and includes on-call responsibilities.

Leads CredLens’s information security program, including security operations, compliance, controls assurance, incident response, cloud security, privacy-enhancing technologies, third-party risk, customer security reviews, governance, and board reporting. The role maintains SOC 2, ISO 27001, ISO 27018, and TX-RAMP certifications; develops privacy and AI governance strategies; oversees AWS and Snowflake security; manages specialist vendors; and builds the security team and program as the organization scales.

Administer, secure, troubleshoot, and optimize Linux systems in mission-critical environments. Manage servers, services, access controls, patches, networking, firewalls, and vulnerability remediation. Diagnose issues across system, application, and network layers; develop automation with shell scripting or Python; support backup, recovery, integration, documentation, testing, deployment, and specialized defense systems.

Participate in a paid, part-time cybersecurity internship involving technical development, security response, collaborative projects, shadowing, vendor training, and certifications. Complete in-house training while working with cybersecurity experts. Interns must be U.S.-based, available primarily during weekday EST hours, attend mandatory Tampa onboarding, provide a personal computer and reliable internet, and demonstrate foundational IT, networking, operating systems, and information security knowledge.

Participates in technical aerospace and defense projects under mentorship, completing hands-on assignments, preparing documentation, analyzing technical data, attending planning meetings, supporting process improvements, and collaborating with engineering teams. The intern gains practical experience through workshops and direct involvement in company initiatives.

Develop and evaluate cloud security architectures for Intelligence Community systems. Assess security documentation, compliance, risk thresholds, software assurance, and accreditation requirements under the Risk Management Framework. Recommend security tools and capabilities across on-premises, cloud, and hybrid environments. Collaborate with clients, leaders, engineers, and managers to establish policies, procedures, and strategic security objectives while troubleshooting cloud security challenges.

Operates security monitoring, incident response, vulnerability management, and audit-readiness activities across corporate IT, cloud, and third-party environments. Investigates alerts, coordinates incident response, maintains playbooks and evidence, tunes SIEM and EDR detections, tracks vulnerability remediation, supports vendor assessments and audits, builds security metrics, and automates repetitive tasks through scripting.