Top Cyber Security Jobs

Leads the organization’s information security program, including security team management, policy development, risk assessment, vulnerability remediation, network and security tool oversight, incident response, compliance monitoring, employee training, and third-party vendor risk management. Advises leadership on cybersecurity posture and ensures security requirements align with IT objectives, regulatory obligations, business continuity plans, and organizational policies.

Designs and maintains security architectures, access controls, identity governance, segregation-of-duties policies, and SAP role administration across public-cloud SAP environments. Implements IAM, SSO, MFA, provisioning, vulnerability monitoring, compliance controls, and HANA security. Supports SAP security incident investigations and remediation while collaborating with cloud, SAP functional, GRC, and integration teams. The hybrid Dearborn role requires occasional travel to suppliers, test houses, and customer sites.

Implement and operationalize Microsoft Purview and Microsoft 365 data protection controls for clients. Responsibilities include designing classification frameworks and sensitivity labels, configuring and tuning DLP, retention, lifecycle, and Insider Risk Management policies, assessing Microsoft 365 security settings, protecting sensitive data, facilitating requirements workshops, producing technical documentation, and supporting client handoff. The role requires hands-on production implementation, direct client engagement, and expertise across Microsoft 365 workloads.

Owns security for a regulated blockchain platform, including continuous detection and response, PKI and certificate lifecycle management, threat intelligence, transaction monitoring, and on-chain analytics. Partners with reliability teams during security and availability incidents, establishes the security operating model, and produces evidence for regulators. The role requires leadership of security operations in financial services or another regulated industry, with blockchain, digital asset, and client-tooling experience helpful but not essential.

Audits information systems and technical controls for security, compliance, and architectural standards. Monitors firewalls, IDS/IPS, anti-malware, logs, patching, SIEM tools, and audit scans. Investigates incidents and performs forensics, develops security procedures and standards, recommends enterprise security solutions, and provides risk mitigation guidance and compliance reports. The role collaborates with technical and non-technical teams and requires occasional after-hours and weekend support.

Design and productize Hardware Security IP and subsystems for SoCs. Develop architectures, RTL, constraints; drive verification, debug, optimization, and sign-off. Mentor teammates and contribute to roadmaps, processes, and cross-team collaboration.

Own strategic post-sales relationships with enterprise customers, advising them on AI security and governance. Lead discovery, define measurable outcomes, drive adoption, support retention and expansion, and coordinate Product, Engineering, Security, Support, and operationalization teams. Translate CISO-level strategy, GRC concerns, business objectives, and technical requirements into practical solution strategies while identifying new AI security use cases and growth opportunities.

Build and maintain an AI-native application security program for autonomous trucking software and infrastructure. Partner with engineering teams on secure design and remediation, investigate vulnerabilities, threat model systems, contribute production code, develop security automation and developer tooling, and integrate preventative controls into the software development lifecycle. Use AI to scale investigations while validating results and explaining technical reasoning.

Provides hands-on technical leadership for enterprise AI security and supporting infrastructure. Responsibilities include designing AI security frameworks, reference architectures, threat models, privacy controls, secure pipelines, and proof-of-concept implementations. The role applies MITRE ATLAS, NIST, and emerging AI standards; secures hybrid and cloud environments using Zero Trust; conducts assessments; supports governance, compliance, audits, and risk management; and advises cross-functional engineering, legal, privacy, architecture, and business teams.

Lead cloud and identity security across Snyk's multi-cloud estate (AWS/GCP). Own cloud IAM and least-privilege, CSPM/CNAPP posture, detection and prevention, Kubernetes and enterprise IdP security. Build preventative IaC guardrails, AI/agent automation for remediation and investigations, secure AI adoption and model pipelines, and mentor engineers while participating in on-call rotations and incident response.

Monitors, detects, investigates, and responds to enterprise cybersecurity threats within a Security Operations Center. Responsibilities include SIEM and EDR alert triage, incident response, endpoint and identity threat analysis, cloud security monitoring, vulnerability remediation support, and investigation of phishing, malware, ransomware, and unauthorized access. The analyst also supports Zero Trust initiatives, SOAR automation, playbook development, root-cause analysis, and continuous improvement of security operations.

Defines, develops, and implements technology controls and information security policies, programs, and tools. Assesses risks, identifies control gaps, recommends mitigation solutions, and provides expert guidance to project teams, business units, and vendors. Leads complex projects and delivers enterprise-level security reporting, analysis, and assessments. Requires advanced knowledge of information security, technology controls, and security risk disciplines.

Partner with engineers on secure SDLC activities, including secure code reviews, threat modeling, vulnerability remediation, security testing, and risk assessment. Drive SAST, DAST, SCA, AI-assisted security testing, and external penetration testing. Translate security and privacy requirements into technical requirements, train teams on secure coding, and address modern AI security threats in a regulated healthcare environment.

Oversee cybersecurity compliance and accreditation for classified government information systems. Partner with ISSMs, ISSEs, administrators, development teams, facility security, and government representatives throughout system lifecycles. Conduct audits, develop security plans, support RMF and accreditation activities, investigate violations, manage security controls, patching, accounts, media protection, and change management, and deliver security awareness training. The role also supports vulnerability assessments, STIG implementation, system hardening, and compliance monitoring.

Lead strategy and roadmap for platform security and data capabilities. Partner cross-functionally to discover, prioritize, and deliver features that improve security, governance, data quality, access, and platform scalability. Drive initiatives from discovery through delivery, align stakeholders, measure outcomes, and support operational readiness and product trust.

Design, deploy, and maintain cloud and edge security across AWS/GCP/Azure including Cloudflare WAF and SASE. Implement zero-trust access, CSPM, IaC security, threat modeling, incident runbooks, detection tuning, and mentor junior engineers while participating in on-call rotation.

Supports Cisco security consulting projects under mentorship. Responsibilities include attending design and configuration sessions, gathering customer requirements, defining integration goals, analyzing security policies and configurations, and recommending improvements. The intern will learn to design policies for identity services, firewalls, visibility, and cloud solutions, while developing customer automation capabilities using Java, Python, C++, Ansible, Chef, Terraform, and Cisco APIs.

Leads cybersecurity risk identification and mitigation, application governance, access controls, incident response, security awareness, and OT infrastructure management at a manufacturing site. Owns manufacturing data health, application compliance, cybersecurity governance, vendor relationships, and digital capability initiatives. Works onsite five days weekly in Mehoopany, Pennsylvania, supporting operational resilience and loss elimination.

Lead Johnson & Johnson’s enterprise data protection program, including governance, exception management, risk assessments, metrics, policies, data classification, control implementation, awareness, and continuous improvement. Partner with security, privacy, legal, HR, compliance, and business teams to protect critical information assets, reduce security exceptions, assess threats and vendors, and deliver executive-level risk insights.

Perform hands-on validation and monitoring of system security controls across the SDLC. Conduct hardening, vulnerability management, and audit log review; produce RMF documentation (SSP, SAR, POA&M); run scans (ACAS, Nessus, SCAP); and provide cybersecurity guidance to technical and non-technical stakeholders.

Monitor, investigate, and respond to cybersecurity threats across enterprise and AWS environments. Analyze alerts using SIEM, EDR, and AWS security tools; investigate account misuse, malware, network activity, and indicators of compromise; conduct threat hunting; document findings; escalate incidents; and improve SOC detections, playbooks, and processes.

Monitor and analyze SIEM alerts, develop and tune detection rules, dashboards, searches, and correlation logic, and investigate events across multiple log sources. Support log onboarding, parsing, normalization, validation, troubleshooting, threat hunting, incident investigations, reporting, and documentation. Improve security visibility and reduce false positives while collaborating with SOC analysts, engineers, and cybersecurity teams. The role requires extensive cybersecurity and SIEM experience plus an active TS/SCI clearance.

Leads the enterprise information security and IT risk management program, including security strategy, policies, compliance, incident response, disaster recovery, and risk assessments. Oversees implementations of security technologies such as EDR/XDR, PAM, MFA, SSO, DLP, and IDS/IPS. Manages cybersecurity experts, partners with global business units, negotiates with vendors, and provides strategic technology leadership.

Supports and expands client cybersecurity services through relationship management, security strategy sessions, vulnerability management, incident response, remediation planning, policy and compliance documentation, and business continuity guidance. Manages ConnectWise service deliverables, maintains security system documentation, tracks metrics and OKRs, coordinates with internal teams, and communicates security risks and actions to clients and stakeholders.

Lead end-to-end RMF accreditation and continuous monitoring for classified and unclassified systems. Own SSPs, ATO packages, evidence, audit interactions, compliance reviews, remediation, and POA&M closure. Advise engineering and mission teams on security architecture, regulatory requirements, cloud and wireless approvals, NIST controls, CMMC, and DoD Zero Trust. Maintain authorization coverage, establish security reporting rhythms, and serve as the primary bridge between the information security program and government partners.