Top Cyber Security Jobs

Supports cybersecurity governance, risk management, compliance, and audit activities. Conducts risk and control assessments, maintains risk registers and audit evidence, reviews vendor security documentation, supports IT audits and privacy reviews, develops policies and compliance reports, coordinates remediation and security awareness training, and evaluates emerging technology and AI risks.

Manage application security vulnerabilities using SAST, web application scanning, secret scanning, and dependency analysis. Partner with development teams to integrate security into the SDLC, promote secure coding, triage findings, and accelerate remediation. Support threat and risk assessment in a Cyber Fusion Center environment, monitor emerging threats, and provide vulnerability metrics and KPIs to operational teams and leadership.

Build and lead a scalable application security and secure SDLC program across engineering teams. Establish policies, standards, tooling, vulnerability management, threat modeling, developer enablement, security champions, software supply-chain controls, and executive reporting. Partner with development, platform, DevOps, product, and leadership teams to integrate security into CI/CD, source control, build, release, and deployment workflows while supporting audits, advisories, incident response, and regulatory requirements.

Own daily SOC operations, incident monitoring, alert triage, threat detection, investigations, and response. Manage Palo Alto firewalls, EDR/XDR platforms, email security gateways, vulnerability management, threat intelligence, and detection engineering. Tune security rules, automate response workflows, maintain runbooks and threat models, and communicate risks to IT leadership.

Provides organization-wide technical leadership for AWS cloud infrastructure and security architecture supporting a connected-home energy platform. Designs scalable infrastructure, infrastructure-as-code standards, security controls, identity and access management, threat modeling, observability, and cost optimization. Partners with SRE and product engineering teams on reliability, secure coding, technical strategy, tooling evaluations, and mentorship. The role requires hands-on expertise in cloud platforms, distributed systems, security engineering, containers, CI/CD, and modern observability.

Leads product security strategy and engineering execution across embedded, IoT, cloud, mobile, and digital products. Establishes security governance, secure development lifecycle practices, vulnerability management, incident response, compliance processes, threat modeling, security testing, and DevSecOps controls. Partners with enterprise cybersecurity, engineering, regulatory, quality, and legal teams to operationalize security requirements, improve remediation, manage risks, and strengthen security-by-design across the global product lifecycle.

Provides multidisciplinary security support for Special Access Programs, SCI, and collateral activities. Ensures compliance with NISPOM, DoD, ICD, and SAP policies; assesses vulnerabilities and risks; develops security procedures and training; conducts facility compliance reviews and corrective-action tracking; investigates potential information compromises; briefs personnel; and mentors security staff.

Leads the Threat and Vulnerability Management team, overseeing threat assessments, vulnerability scanning, risk prioritization, remediation, security reporting, metrics, cross-functional collaboration, and continuous improvement of the organization’s security posture.

Designs and operates controlled cyber-capability evaluations for frontier AI models and agentic systems. Builds vulnerable applications, cyber ranges, exploit-development targets, and evaluation harnesses; runs experiments; collects telemetry; analyzes model behavior and evaluation artifacts; and documents security findings. The role also develops sandboxing, containment, access, and secrets-management controls while collaborating with red-team operators, researchers, engineers, and Responsible AI stakeholders.

Research and analyze advanced cyber threats, attacker behavior, and real incidents to develop durable detection strategies, custom alerts, and security automation. The role partners with Microsoft Threat Experts, engineering teams, customers, and senior security leaders to improve cloud detection and response offerings, support threat hunting, and deliver innovative security services at global scale. It also provides technical leadership and contributes to customer satisfaction and partnership development.

Leads AEP’s enterprise OT Security strategy, operating model, services, risk management, and multidisciplinary team across transmission, distribution, generation, and nuclear operations. Oversees architecture, vulnerability management, monitoring, incident response, recovery, vendor risk, compliance, and capability development. Partners with business-unit, enterprise security, regulatory, and executive stakeholders to reduce cyber risk while maintaining safety, reliability, and operational resilience. The role is fully onsite in Columbus, Ohio, or Austin, Texas.

Provides executive leadership for the cybersecurity organization’s AI strategy and program. Establishes Cyber AI vision, portfolio priorities, governance, operating models, investment plans, and accountability. Leads AI security operations and AI-enabled cybersecurity products, promotes responsible AI adoption, manages enterprise risk and readiness reporting, and represents cybersecurity in enterprise AI forums. Builds multidisciplinary leadership teams and partnerships across technology, governance, privacy, legal, compliance, data, and business functions.

Provides information assurance and independently assesses security controls for IT systems using NIST guidelines and the Risk Management Framework. Responsibilities include validating controls, identifying vulnerabilities, preparing Security Assessment Reports, supporting authorization to operate processes, maintaining security policies, ensuring regulatory compliance, reviewing cloud environments, and advising technical teams. The role also mentors junior staff and communicates with stakeholders, vendors, and customers.

Supports the organization’s Data Loss Prevention program across email, cloud, and endpoint environments. Administers and tunes DLP technologies, investigates alerts, coordinates incident response, develops policies and workflows, creates metrics, and implements automation. The role also supports broader cyber operations, security incident response, compliance activities, security technology administration, and cybersecurity projects. Requires participation in a 24/7 on-call rotation and collaboration with technical, clinical, business, and managed security service partners.

Provides enterprise cybersecurity leadership through incident response, vulnerability assessments, penetration testing, firewall administration, network security troubleshooting, risk analysis, security education, and security consulting. Mentors IT staff, coordinates security requirements across projects, manages access-control requests, and monitors emerging threats. Requires extensive experience in complex IT environments and multiple cybersecurity disciplines.

Designs, implements, and evaluates cloud security architectures for mission-critical systems. Responsibilities include securing AWS environments, applying RMF and STIGs, hardening Linux and AMIs, managing IAM and security controls, implementing logging and threat detection, remediating vulnerabilities, maintaining security documentation, and mentoring cloud security professionals.

Administers Microsoft 365 GCC G5 security, compliance, identity, and data protection controls. Manages Purview DLP, Defender, Entra ID, cloud security policies, alerts, incident investigations, access controls, documentation, KPI reporting, and authorization evidence. Supports cybersecurity operations, risk reviews, remediation, and knowledge transfer. The role requires six years of cybersecurity experience, extensive Microsoft 365 security administration, Security+ certification, U.S. citizenship, and favorable Tier 2 Public Trust adjudication.

Supports the Information Security Operations team through monitoring and incident triage, phishing investigations, vulnerability management, identity and endpoint security reviews, security hardening, remediation tracking, and documentation. The intern will use enterprise security tools, assist with control validation and change management, collaborate with technical teams, and complete a scoped security improvement project during a 10-week hybrid summer internship.

Designs and maintains secure infrastructure, CI/CD components, and security services for product development. Automates security tooling, vulnerability management, compliance reporting, and developer workflows. Collaborates with engineering and DevSecOps teams to embed secure-by-design practices, supports security monitoring and incident response, and improves security controls. Experience with cloud platforms, infrastructure as code, containerized environments, risk management, and secure software delivery is required; industrial cybersecurity and ISA/IEC 62443 familiarity is valued.

Designs, implements, and optimizes enterprise, cloud, and operational security controls. Responsibilities include managing firewalls, SIEM, EDR, SOAR, IAM, vulnerability assessments, penetration testing, incident response, security monitoring, architecture documentation, compliance alignment, and remediation support. The role collaborates with IT, DevOps, and security teams to improve detection, response, resilience, and audit readiness.

Owns the engineering lifecycle and operations of enterprise authentication and information security platforms. Maintains Java applications, configures MFA and RADIUS integrations, certifies SafeWord releases, validates security patches, develops Bash and SQL automation, troubleshoots production issues, and supports migration from virtual machines to containerized OpenShift platforms. The role also documents operating procedures and collaborates with operations, security, and engineering teams to maintain secure, resilient authentication services.

Manage identity security operations, governance, engineering, incident response, playbooks, tooling, and continuous improvement. Maintain identity and authentication systems, configure applications and infrastructure, monitor operational performance, support security reporting, and lead modernization initiatives. Collaborate with IT and security teams on projects, standards, reference architectures, risk mitigation, and compliance. Provide technical leadership and 24/7 availability for critical security incidents.

Leads technical pre-sales engagements for Microsoft security and compliance solutions. Designs architectures, delivers presentations, demonstrations, workshops, pilots, and proof-of-concept solutions focused on XDR, zero trust, cloud security, Purview, data protection, governance, privacy, and compliance. Partners with sales, consulting, and internal and external technical teams to resolve blockers, influence competitive strategy, and help customers implement Microsoft and third-party cloud security technologies.

Reviews client evidence and controls for SOC 2, ISO 27001, PCI, HIPAA, and GDPR audit readiness. Supports security program managers with client consultations, control implementation, policies, procedures, integrations, auditor coordination, and stakeholder communication. Identifies evidence gaps, documents actionable findings, tracks readiness metrics, contributes to QA standards, and provides product feedback. The role combines internal audit quality assurance with client-facing security compliance support.

Leads cloud security architecture, governance, and implementation across Azure, AWS, GCP, and hybrid infrastructure. Designs Zero Trust frameworks, secure landing zones, identity and network controls, threat models, and cloud security testing. Automates controls using Terraform, Python, PowerShell, and policy-as-code, integrates security into CI/CD, manages cloud security platforms, drives remediation and compliance, and mentors engineering teams.