Top Cyber Security Jobs

Designs and builds security orchestration and automation workflows for SOC processes, including alert triage, incident response, case management, integrations, scripting, error handling, and secure execution. The role translates client requirements into automation build plans, integrates SIEM, EDR/XDR, ticketing, threat intelligence, and email security tools, and may apply AI, cloud security, detection engineering, and automation-as-code practices.

Supports cybersecurity governance, risk, and compliance activities, including policy and control documentation, risk register maintenance, third-party vendor assessments, security awareness campaigns, audits, vulnerability metrics, and compliance reporting. The intern develops dashboards, reports, and presentations while collaborating with Information Security and GRC teams to improve organizational security processes.

Drives application security initiatives for complex desktop CAD software, including secure SDLC controls, threat modeling, architecture reviews, vulnerability remediation, and security requirements. Leads SOC 2 readiness, annual assessments, audits, DevSecOps and CI/CD security integration, and rollout of SAST, DAST, and SCA tools. Partners with engineering, security, compliance, and external stakeholders to address AI security, cloud-connected components, open-source risks, incident response, and product security standards.

Oversee the security of firm applications, networks, systems, hardware, and mobile devices throughout their lifecycles. Develop security requirements and architecture, manage controls and configurations, perform certification and accreditation, maintain asset inventories, and ensure secure development and acquisition practices. Collaborate across departments and mentor team members while serving as a primary technical security contact. The role requires independent judgment, strong analytical ability, knowledge of security frameworks and technologies, and at least seven years of related experience.

Designs, implements, and maintains enterprise network security infrastructure and architecture. Develops security policies, evaluates controls and technologies, supports compliance, advises on technology purchases, and oversees secure implementations across networks, endpoints, cloud services, identity systems, and physical security. Collaborates with engineering teams, vendors, business units, and senior management while troubleshooting complex systems and translating business needs into long-term security solutions.

Embed security throughout the software development lifecycle by partnering with engineering teams to design secure systems, perform code reviews, identify vulnerabilities, and integrate SAST, DAST, SCA, and CI/CD security tooling. The role applies offensive and defensive security practices, cloud security controls, authentication and cryptography expertise, and automation to reduce production risk. Responsibilities also include communicating with technical and non-technical stakeholders and supporting secure software delivery in Agile environments.

Owns security operations and compliance for a multi-tenant GPUaaS platform. Maintains SOC 2 and SOC 3 programs, coordinates audits and penetration tests, manages IAM and security tooling, leads vulnerability management and incident response, supports customer security reviews and contracts, maintains policies, and drives security awareness and phishing programs.

The Information System Security Officer ensures classified information systems comply with NISPOM, DAAPM, JSIG, and related cybersecurity policies. Responsibilities include auditing, security plan development, security awareness training, investigating violations, documenting corrective actions, collaborating with security teams and government representatives, and performing hardware/software change management, account management, media protection, and file-transfer controls. The role is fully onsite in Woburn, Massachusetts, and requires an active Secret clearance.

Lead and grow Security and IT technical program management teams, oversee the cybersecurity and IT portfolio, establish prioritization and reporting processes, translate strategy into roadmaps, manage enterprise risks and dependencies, and communicate delivery status and trade-offs to executives. The role requires strong program leadership, technical fluency, cybersecurity knowledge, and experience managing people and complex cross-functional initiatives.

Designs, implements, and maintains information security systems and network security infrastructure for an intelligence customer. Responsibilities include RMF and A&A compliance, security policy and documentation, incident response, vulnerability remediation, audit and log analysis, security configuration, infrastructure troubleshooting, and AWS-based security solutions. The engineer supports firewalls, gateways, IDS, load balancers, and monitoring tools while collaborating with developers, system engineers, project managers, and users.

Provides information assurance and cybersecurity engineering for government systems. Responsibilities include security policy and A&A documentation, RMF compliance, incident response, vulnerability remediation, audit and forensic log analysis, network security infrastructure operations, system hardening, security architecture, troubleshooting, and integration testing. The role supports AWS-based environments, perimeter security technologies, security tools, network infrastructure, and collaboration with developers, engineers, project managers, and users.

Lead cybersecurity detection and response operations, including complex incident handling, alert triage, SIEM rule authoring and tuning, threat hunting, playbook development, and response automation. Mentor SOC analysts, establish documentation and escalation standards, conduct post-incident reviews, and drive remediation and detection strategy improvements. Present technical findings to executives and influence cross-functional security outcomes.

Leads Ferguson’s network security program, managing a team of up to six and overseeing firewalls, IDS/IPS, VPN, URL filtering, endpoint, cloud, and perimeter security. Develops strategic roadmaps, manages budgets and vendors, oversees solution design and deployments, supports major projects, and ensures operational documentation and training. The role also evaluates emerging technologies, partners with architecture and engineering teams, and provides cybersecurity domain expertise across Zero Trust, SASE, and network security.

Secure and optimize enterprise network infrastructure through firewall lifecycle management, GlobalProtect VPN support, vulnerability remediation, incident response, monitoring, troubleshooting, and automation. Develop Ansible and Python workflows for threat defense, data collection, investigation, threat hunting, and user access management. The role also designs, configures, maintains, and monitors cybersecurity capabilities and supports onsite testing and deployments.

Lead and administer the credit union’s cybersecurity risk management program. Oversee security technologies, vulnerability management, incident response, governance, regulatory compliance, third-party cybersecurity risk, identity and access controls, security policies, and employee awareness initiatives. Coordinate remediation, audits, risk assessments, incident exercises, reporting, and compliance with NCUA and other applicable regulations.

Designs and implements secure cloud and mobile platforms supporting law enforcement. Responsibilities include developing cybersecurity and infrastructure controls, conducting risk and vulnerability assessments, enhancing threat detection and event correlation, analyzing security data, and developing incident response and cyber resiliency strategies. The role also requires secure architecture guidance, federal compliance, executive briefings, cross-functional collaboration, and potential Public Trust eligibility.

Supports third-party risk management and corporate security compliance by reviewing vendor requests, maintaining NERC CIP controls, analyzing regulatory requirements, tracking compliance metrics, and preparing reports. The role administers OneTrust and Kaseware workflows, updates policies and procedures, coordinates audits and regulatory meetings, monitors regulatory changes, and helps improve compliance processes and documentation.

Maintains enterprise information security policies, standards, and procedures while designing and supporting secure network, access control, cloud, data protection, and messaging solutions. Provides hands-on support for Protegrity, Terraform, Kubernetes, Splunk, ServiceNow, Snowflake, HashiCorp Vault, and HSMs. Troubleshoots integrations, manages infrastructure and secrets, supports incident and change workflows, and ensures complex security solutions comply with enterprise, regulatory, and industry standards.

Designs and maintains secure IT services for a Defense Intelligence Agency customer. Responsibilities include implementing Zero Trust and ICAM capabilities, applying RMF security controls, developing cybersecurity test cases, preparing Assessment and Authorization documentation, overseeing security testing and evidence collection, supporting vulnerability remediation, and advising on information assurance, physical security, and special-program controls.

Design and build AI-powered cybersecurity platforms that ingest and normalize massive security telemetry, correlate events, predict threats, and generate explainable findings. Develop Python backend services, distributed storage systems, and AIDevOps pipelines for rapid experimentation. Integrate foundation models, agentic systems, RAG, embeddings, and graph-based models into analyst workflows. Collaborate with product teams, security experts, and engineers to deliver scalable, trusted threat detection and automation capabilities.

Design and build AI-native cybersecurity platforms that analyze large-scale security telemetry, correlate events, predict threats, and generate explainable alerts. Develop scalable distributed systems, data pipelines, AI DevOps workflows, agentic systems, RAG and embedding solutions, and model integrations. Collaborate with security researchers, SMEs, product managers, and engineering teams to create trusted automation and analyst-focused threat detection, investigation, and response capabilities.

Design and build AI-powered cybersecurity platforms that process large-scale telemetry, detect and predict threats, and generate explainable alerts. Develop scalable Python services, distributed data systems, AI DevOps pipelines, agentic workflows, RAG capabilities, and model integrations. Collaborate with security experts, product managers, and engineers to validate AI features and improve analyst workflows for security operations.

Administer and improve the organization’s information security program, including Zero Trust, endpoint, email, and security awareness platforms. Triage alerts and phishing threats, coordinate incident response and remediation, manage vulnerabilities and misconfigurations, maintain security documentation, track security posture metrics, support audits, and provide leadership reporting. The role also communicates security practices to employees and coordinates security activities with IT, engineering, and operations teams.

Participate in IT security operations, including cataloging on-premises and cloud log sources, maintaining SIEM reporting, analyzing and improving alerts, reviewing security events, supporting audit compliance, correlating changes with tickets, identifying malicious activity, and conducting vulnerability scans. The intern will work with security technologies such as SIEM, DLP, antivirus, firewalls, DAST, SAST, and file integrity monitoring while developing practical information security experience.

Leads the cybersecurity strategy and roadmap for a regulated, multi-site organization. Implements and tunes network, endpoint, identity, and cloud security controls; maintains policies aligned with NIST, ISO 27001, CIS, and regulatory requirements; manages SIEM, EDR, vulnerability remediation, incident response, audits, vendor risk, identity hardening, and security awareness programs.