Top Cyber Security Jobs

Lead design, implementation, and operation of enterprise information security tools. Translate requirements into secure solutions, monitor and respond to incidents, evaluate vulnerabilities across applications and infrastructure, develop remediations, mentor junior engineers, and support security program and compliance activities.

Conducts RMF- and JSIG-based assessments of collateral, SCI, and SAP information systems. Evaluates security controls, authorization packages, threats, vulnerabilities, hardware, software, continuous monitoring, and system changes. Advises system owners and authorizing officials, prepares Security Assessment Reports and POA&Ms, supports inspections and incident response, and recommends authorization decisions and corrective actions.

Implements and administers application security testing and posture management tools, integrates security testing into CI/CD pipelines, and supports developers in triaging and remediating vulnerabilities. Develops security reports, evaluates exceptions, communicates risks, promotes secure coding practices, and coaches junior engineers. The role also supports tooling consolidation, workflow automation, CSPM integration, DevSecOps pipeline logging, and collaboration with vulnerability and risk management teams.

Own the security authorization posture for assigned DoD information systems. Develop and maintain SSPs, POA&Ms, ATO packages, SAPs, and continuous monitoring programs. Use eMASS and related automation tools to manage RMF workflows and artifacts, coordinate with engineering and security operations teams, and support control validation, SAR development, supply chain risk planning, and RMF lifecycle improvements.

Designs and secures enterprise AI platform foundations for mission-critical environments. Responsibilities include threat modeling, tenant isolation, identity and authorization architecture, secure CI/CD, compliance-by-design, and protection of systems executing untrusted code, tools, or agent actions. The role partners with client engineering, product, security, and business stakeholders to deliver secure, reliable, and compliant platform capabilities.

Architect, build, and support highly available enterprise edge infrastructure and security controls. The role includes threat hunting, mitigation, monitoring, DNS and load balancing, infrastructure automation, security standards, observability, technical documentation, technology evaluations, and cross-functional delivery. The engineer participates in an on-call rotation and helps shape the organization’s edge security strategy and roadmap.

Conduct cybersecurity risk and vulnerability assessments for USSOCOM networks, systems, applications, and technology initiatives. Analyze security architectures, implement and monitor security controls, maintain Authorization to Operate documentation, and develop security policies and procedures. Evaluate network security products, validate design solutions, support NIST and CNSSI control compliance, maintain Assessment and Authorization packages, and advise stakeholders and senior management on risks and remediation.

Own end-to-end development of hardware security IP from architecture through silicon validation. Collaborate with SoC, firmware, verification, and physical design teams to deliver RTL designs, drive PPA optimization, perform signoff (CDC, RDC, LINT, synthesis, STA), implement cryptographic accelerators, secure boot and key management, lead pre/post-silicon debug and root-cause analysis, and mentor engineers to improve design quality and automation.

Provide independent oversight of digital-asset cyber and technology risk across custody, trading, blockchain infrastructure, and supporting platforms. Assess control effectiveness, identify and escalate material gaps, influence remediation and risk acceptance, support regulatory engagement, improve risk metrics/reporting, and coach CTIS/NFR team members on digital asset security issues.

Leads enterprise cybersecurity programs from strategy through operational acceptance within an Agile/SAFe model. Manages integrated delivery plans, dependencies, risks, governance, financial controls, vendors, testing, change management, executive reporting, and operational readiness across security initiatives including IAM, GRC, SOC, vulnerability management, application security, cloud security, and data protection.

Owns the security authorization posture for assigned DoD information systems. Responsibilities include developing SSPs, managing POA&Ms, compiling ATO packages, conducting continuous monitoring, tracking RMF workflows in eMASS, coordinating security control validation, supporting SAP and SAR development, and creating supply chain risk management plans. The role requires active Secret or Top Secret clearance, RMF/ATO experience, eMASS expertise, and knowledge of NIST SP 800-53 and DoD RMF processes.

Own and improve corporate security across identity and access management, endpoint protection, SaaS applications, Zero Trust, automation, detection, and incident response. Implement Entra ID controls, SSO, SCIM, MFA, RBAC, JML workflows, Intune policies, EDR, and security baselines. Automate security processes with Python or JavaScript, investigate alerts, remediate incidents, and partner with IT, Security, Engineering, and business teams in a fast-moving startup environment.

Monitor and analyze SIEM alerts, conduct vulnerability scans, assess cloud workloads, manage endpoint security policies, and monitor firewall and secure-access activity. Detect, document, and escalate incidents, produce continuous-monitoring reports and security dashboards, and present security KPIs to leadership. The role supports DoD systems and requires an active Secret or Top Secret clearance, cybersecurity certification, and quarterly travel to Scott Air Force Base.

Secure applications throughout the software development lifecycle by performing SAST, DAST, penetration testing, secure code reviews, vulnerability remediation tracking, and DoD security control validation. The role uses Fortify and SonarQube, produces assessment reports, supports secure SDLC process design, and partners with developers, architects, and cybersecurity specialists.

Manage and optimize vendor-provided network and security platforms, including firewalls, VPNs, SD-WAN, and monitoring tools. Administer user access, permissions, MFA, SSO, and identity integrations. Monitor performance, troubleshoot connectivity issues, coordinate vendors, oversee upgrades, maintain compliance documentation, and support incident response and disaster recovery. Provide Tier 2–3 help desk escalation, onboarding and offboarding support, and recommendations for secure, scalable network improvements.

Lead two engineering teams that build and operate the Detection Engine, Threat Intelligence Platform, SOAR, and Case Management. Own hiring, delivery quality, production operations, roadmaps, and partner-visible surfaces. Provide technical architecture guidance (~20% hands-on), ensure SLOs and incident management, coordinate with security practitioners and central engineering, and enable AI/LLM-driven workflows and platform extensibility for SOC, Detection Engineering, and Threat Intelligence customers.

Ten-week information security technology internship in Chicago. The intern will work with cybersecurity professionals on threat management, identity and access management, data protection, technology risk, governance, risk and compliance, security automation, intrusion detection, infrastructure security, compliance analysis, and risk assessment. The role includes coding or low-code automation, generative AI exposure, professional development, mentorship, and cross-functional projects.

Leads North American customer-facing cybersecurity and compliance programs for physical security, building automation, AV, and IT/OT solutions. Establishes secure architecture reviews, hardening standards, verification processes, governance, risk reporting, vendor evaluations, and customer questionnaire responses. Manages cybersecurity agreements, vulnerability timelines, incident response coordination, and cross-functional integration with sales, engineering, operations, legal, and corporate security teams. Recruits and develops cybersecurity architects and program managers while maintaining authority over high-risk designs.

Set technical strategy and architecture across security engineering domains, build AI security foundations, and lead cross-cutting initiatives from concept through production. The role requires hands-on development and operation of production security systems, deep IAM or cryptography expertise, broad security engineering knowledge, cross-organizational influence, ambiguity management, collaboration, and mentorship.

Lead presales engagements and practice development for security operations solutions. Design SOC architectures involving SIEM, SOAR, EDR/XDR, threat intelligence, detection, incident response, and automation. Conduct discovery sessions, demonstrations, POCs, presentations, vendor evaluations, and internal enablement. Develop technical collateral, support partner solutions, identify revenue opportunities, and advise clients on SecOps maturity and target-state architectures.

Design, deliver, and support Microsoft cloud security solutions for mission-critical customers. Provide proactive and reactive support, lead architectural sessions, implement identity and Zero Trust controls, optimize Azure resiliency and security posture, coordinate incident resolution with internal teams, and contribute to on-call rotations and continuous improvement.

The provided description contains no specific responsibilities or qualifications for this Security Engineer II role. It primarily presents Lennar’s benefits, equal employment statement, and company information.

Designs and reviews cloud security architectures across AWS, Azure, GCP, and internet-facing environments. Partners with engineering, identity, network, application, and security teams to implement Zero Trust, IAM, segmentation, perimeter, encryption, monitoring, and other controls. Evaluates risks against security standards and regulatory frameworks, documents findings and exceptions, prioritizes remediation, and promotes secure-by-design practices and consistent cloud governance across multi-cloud deployments.

Perform cloud security assessments and TEMs, design/review cloud systems (AWS/Azure/Oracle/GCP), analyze scans with Rapid7/Nessus/Qualys, manage POA&Ms, support RMF A&A activities, use compliance tools (Xacta 360, Risk Vision, RSA Archer), prepare security packages/reports, and provide project management and metrics for compliance.

Perform cloud security assessments and technical exchange meetings, evaluate AWS/Azure/Oracle/GCP architectures, analyze vulnerability scans (Rapid7, Nessus, Qualys), manage POA&Ms, use compliance tools (Xacta 360, Risk Vision, RSA Archer), support NIST RMF activities, prepare security packages and technical briefings, and perform information system security engineering and project management tasks.