Top Cyber Security Jobs

Deliver generative AI-enabled source code review and application security engagements. Coordinate with leadership, organize resources, refine and present assessment findings, document recommendations, and mentor junior red team members. Support penetration testing projects, including external and web application testing, while managing engagement delivery and improving security assessment technologies and workflows.

Partners with Sales to lead technical discovery, solution design, demonstrations, proof-of-value engagements, and customer validations for cybersecurity, identity, access, asset visibility, exposure management, and risk solutions. Advises technical and executive stakeholders, creates customer-facing documentation, delivers training, supports marketing events, and collaborates cross-functionally to advance enterprise sales cycles and customer outcomes. Travel is typically 25–50%.

Partners with Sales to lead technical discovery, solution design, demonstrations, proof-of-value and proof-of-concept engagements for enterprise cybersecurity, identity, access, asset visibility, exposure management, and risk solutions. Advises technical and executive stakeholders, translates capabilities into business outcomes, supports evaluations and deal progression, develops technical documentation, leads training, and collaborates cross-functionally. Travel is typically 25–50%.

Partners with Sales to guide enterprise cybersecurity evaluations through technical discovery, solution design, demonstrations, proof-of-value engagements, and customer validation. Advises security, identity, infrastructure, IT, risk, and executive stakeholders; explains integrations with network environments; develops technical documentation; leads training; and supports events. The role requires strong cybersecurity, identity, enterprise networking, presentation, and executive communication skills, with 25–50% travel.

Leads enterprise Employee Access Management governance, standards, controls, compliance, audit readiness, onboarding, operational processes, remediation, and continuous improvement. Oversees governance for workforce, privileged, application, machine, service-account, API, and AI-related identities. Partners with engineering, product, risk, compliance, audit, technology, and business teams to ensure secure, scalable, measurable, and regulatorily compliant access-management outcomes across a complex global environment.

Build and advance application and product security across the engineering organization. Responsibilities include establishing secure defaults, CI guardrails, security requirements, threat modeling, risk assessments, penetration testing, vulnerability remediation, secure coding education, roadmap ownership, and hands-on code review. The role partners closely with product, engineering, DevOps, and services teams to secure applications, microservices, and AI features while enabling efficient development.

Lead response and remediation for critical security incidents, coordinating global teams and executive communications. Develop and maintain incident command protocols, playbooks, and procedures; facilitate tabletop exercises; conduct investigations; track incident metrics; and support post-incident reviews and root cause analyses. The role also improves and automates major security incident processes while communicating risks, decisions, milestones, and blockers to technical and executive stakeholders.

Leads Security and Risk Services delivery across the Americas, managing technical consultants and business process consultants. Drives customer implementations, security and risk transformation programs, AI-enabled automation, delivery quality, services revenue, executive relationships, partner alignment, and practice growth. Requires extensive enterprise security, risk, compliance, consulting, and ServiceNow experience, with travel up to 40% annually.

Lead a team of SRE engineers to ensure availability, performance, and security across Windows, Linux, and GCP environments. Own container orchestration (GKE), infrastructure-as-code (Terraform, Ansible), automation, observability (Prometheus, Grafana, GCP Operations), incident response, forensics, and integration of security into CI/CD and platform operations. Partner with developers and InfoSec to harden systems, drive remediation, and document operational runbooks.

Lead a team to design, automate, and operate secure, highly available platform infrastructure across Windows, Linux, and GCP. Drive containerization (Kubernetes/GKE), IaC (Terraform/Ansible), observability (Prometheus/Grafana/Splunk), incident response, security hardening, and CI/CD security integration while partnering with developers and InfoSec to ensure compliance and resilience.

Lead a team of SRE engineers to ensure high availability, security, and performance across Windows, Linux, and GCP. Build and automate containerized platforms (GKE/Docker) with IaC (Terraform, Ansible), implement observability (SLIs/SLOs, Prometheus, Grafana), drive incident response and postmortems, integrate security into CI/CD and platform operations, and document runbooks and procedures to enable cross-team reliability and compliance.

Secure CrowdStrike’s software supply chain, open-source dependencies, GitHub organizations, repositories, and source-code environments. Assess risks, implement repository guardrails and secret scanning, investigate malicious packages and dependency threats, automate security checks, and guide engineering teams on secure coding and open-source compliance. The role also contributes to cross-team security initiatives, CI/CD and cloud security integrations, monitoring, and AI-enabled vulnerability triage.

Own and improve enterprise security platforms, cloud and infrastructure security, identity governance, endpoint protection, vulnerability management, incident response, network controls, and DevSecOps practices. Lead complex security initiatives, compliance controls, vendor assessments, security architecture reviews, and AI security governance. Build automation with PowerShell and Python, partner with IT Operations and DevOps, reduce manual work, and serve as the senior escalation point for technical security incidents.

Support clients on regulatory compliance and cybersecurity risk by conducting risk assessments, implementing frameworks (ISO 27001, NIST CSF), performing audits, developing compliance programs, analyzing data for recommendations, and preparing regulatory documentation while collaborating with teams and building client relationships.

Assess and harden software supply chain security by performing technical assessments, designing and implementing security controls and monitoring for build pipelines, investigating systems for vulnerabilities, creating tooling to address gaps, and leading cross-team projects to improve CrowdStrike's product security posture.

The role involves implementing data protection measures, managing insider risk, and overseeing identity governance to secure sensitive data.

Lead design and implementation of security frameworks for AI systems, performing threat modeling, adversarial defense, secure MLOps, architecture reviews (including MCP and agentic systems), authoring standards and reference architectures, managing large AI security projects, and mentoring cross-functional teams to strengthen AI security posture.

Design and implement secure-by-default cloud infrastructure across AWS: build secrets management and IAM solutions, ship production backend changes, model threats and prioritize risk-based controls, guide partners on security and privacy, and participate in incident response and mitigation.

Build and operate high-signal detections across cloud, identity, endpoints, and SaaS. Improve detection platforms, automation, and triage tooling (including LLM-based workflows). Translate threat TTPs into telemetry and detections, participate in incident response/on-call, track metrics like MTTD and alert quality, and drive detection engineering improvements across the org.

Lead architecture and delivery of DigitalOcean's audit logging, SIEM integrations, and unified security visibility platform. Define multi-year roadmap, design high-throughput Go-based telemetry pipelines, ensure compliance-grade immutable audit records, build customer-facing visibility/control planes, and drive org-wide logging standards while mentoring engineers and coordinating cross-team integrations for consistent, high-fidelity security telemetry.

Define and drive the multi-year roadmap for audit logging, SIEM integration, and unified security visibility. Architect high-throughput, fault-tolerant Go/gRPC pipelines (Kafka/Flink), build customer-facing security dashboards and integrations, ensure compliance-grade immutable logs, set org-wide logging and observability standards, partner across platform teams, and mentor senior engineers while authoring RFCs.

Lead the Identity Access Management team, define IAM strategy, design security controls, oversee security reviews, mentor engineers, and collaborate with stakeholders.

Lead incident response and threat hunting efforts at CoreWeave, owning cybersecurity incidents end-to-end and developing AI-powered tools to enhance defense against threats.

The Security Engineer will enhance corporate security controls, develop policies, manage AI security, and assess risks while ensuring secure employee operations.

Owner of Vannevar's authentication and authorization platform: build tenant-isolated auth systems, self-service user/group/permission admin UI, tooling to visualize and validate access, feature-flag and platform management interfaces, and shared authorization capabilities across products.