Top Cyber Security Jobs

Supports cybersecurity and risk management for Department of Defense information systems. Executes NIST RMF and Assessment and Authorization processes, manages security incidents, analyzes threats and vulnerabilities, maintains compliance with federal and DoD standards, and supports classified and unclassified systems. Provides cybersecurity mentorship, participates in ATO and working-group meetings, and serves as a liaison with government stakeholders in a mid-level ISSO capacity.

Lead Lightfield’s end-to-end security strategy and execution across product, infrastructure, AI agents, identity, incident response, compliance, and customer security. Perform hands-on architecture and code reviews, threat modeling, vulnerability remediation, security control implementation, and incident investigations. Own SOC 2 and enterprise security programs, advise customers, and build the security organization as the company scales.

Leads anti-tamper systems security engineering, including threat and countermeasure analysis, security architecture, requirements development, hardware/software integration, verification, validation, and technical writing. Provides technical leadership to engineers, collaborates with customers, applies government security guidance and state-of-the-art technologies, and supports task planning and budget ownership. The role is fully onsite and focuses on protecting critical defense technologies from exploitation.

Drive technical pre-sales engagements for Microsoft Security: build demos/PoCs, lead hands-on workshops, design secure cloud architectures, resolve technical blockers, and advise customers on improving security posture using Microsoft security products and AI-enabled solutions.

Maintains the operational security posture of classified information systems supporting Collateral, SCI, and SAP environments. Responsibilities include authorization package management, configuration change impact analysis, compliance reviews, audit monitoring, vulnerability identification, incident handling, media sanitization, security documentation, system recovery oversight, and coordination with ISSM and authorization officials. The role is onsite in Massachusetts and requires current TS/SCI clearance with the ability to obtain TS/SCI with CI polygraph.

Designs and implements cloud security solutions for Microsoft Azure and Microsoft 365 customers. Leads security architecture discussions, Zero Trust adoption, technical evaluations, implementation planning, troubleshooting, and enterprise security strategy. Advises executives and technical stakeholders on identity and access management, threat protection, cloud security, information protection, and secure-by-design architectures. Collaborates with Microsoft engineering, product, and security teams to remove blockers and orchestrates technical resources to deliver customer outcomes.

Perform risk-based information security audits under Internal Audit standards: plan, execute control testing, document walkthroughs and workpapers, analyze results, prepare findings and recommendations, and collaborate with stakeholders to improve controls and compliance.

Build security infrastructure for Datadog’s CI/CD systems, including trusted build provenance, secure secret delivery, access controls, and real-time policy enforcement. Design highly performant, reliable systems operating in the critical path of software delivery, partner with platform and infrastructure teams, guide adoption, mentor junior engineers, and participate in incident response. The role focuses on protecting software supply chains while maintaining developer experience and high throughput.

Supports information security initiatives through automation for vulnerability management, detection engineering, cloud identity management, and SOC 2/SOX ITGC compliance. Learns security tooling, identifies process improvements, and performs Level 1 security alert triage and investigations. The internship is full-time for 12 weeks in summer 2027 and requires hybrid work in Denver three days per week.

Lead product cybersecurity across medical devices, connected technologies, digital solutions, and software. Define security requirements, maintain threat models and risk registers, lead vulnerability and penetration testing, integrate automated security tools, mature secure development practices, support incident response, and provide technical leadership to regulators, customers, auditors, and security researchers. Collaborate across IT, R&D, compliance, and other business teams.

Secure software and cloud environments through threat modeling, code review, vulnerability remediation, security automation, detection engineering, and attack simulations. The role partners closely with Engineering, manages Snyk and Docker Scout findings, integrates security into CI/CD, coordinates third-party penetration testing for SOC 2 and HITRUST, and helps define secure architecture for mobile, data lake, AI, and production cloud systems.

Owns and improves enterprise endpoint security, including security standards, Microsoft Defender and Intune controls, vulnerability management, monitoring, incident response, remediation, compliance reporting, and audit readiness. Partners with workplace, service desk, information security, and platform engineering teams to implement scalable controls, investigate threats, validate remediation, manage exceptions, and improve control effectiveness. Provides technical guidance, mentoring, documentation, and governance support.

Lead complex digital forensics and incident response investigations across endpoints, cloud workloads, networks, and enterprise logs. Conduct evidence acquisition, memory and malware analysis, threat hunting, and timeline development. Build DFIR playbooks, automation, and forensic tooling while ensuring chain-of-custody and legal standards. Partner with Security, Legal, HR, Privacy, Compliance, and Engineering teams, produce defensible reports, improve detection and response capabilities, and mentor junior investigators.

Provides customer-facing security and compliance consulting, including risk assessments, regulatory compliance, audits, vulnerability scanning, policy development, incident response, penetration testing support, and forensic investigations. Coordinates with SOC teams and customer stakeholders, develops remediation plans, manages security tools, conducts workforce security awareness training, and supports secure architecture and disaster recovery planning. Requires at least three years of relevant experience, a bachelor’s degree, and CISSP certification.

Build security enablement resources and AI-powered workflows for go-to-market teams. Support customer security questions, questionnaires, due diligence, and deal blockers; triage escalations; explain security, privacy, compliance, integrations, and deployment models to technical and executive audiences; deliver training; maintain self-service documentation; and coordinate with Information Security, Sales, Customer Engineering, Product, and Engineering.

Leads cybersecurity strategy, operating plans, portfolio governance, executive and regulatory reporting, financial management, workforce planning, and organizational effectiveness. Serves as a strategic advisor to the CISO, coordinating cross-functional initiatives, managing risks and dependencies, overseeing investments, and strengthening accountability across the cybersecurity organization.

Build and operate secure cloud and baremetal infrastructure for customer-specific AI model training and serving. Design multi-tenant isolation across data, training runs, and models; secure AWS, Kubernetes, and external providers; and develop infrastructure-as-code patterns. Lead security operations, logging, monitoring, incident response, customer trust, security reviews, and compliance efforts while partnering with research and engineering teams.

Provides multidisciplinary security support for Special Access Programs, SCI, and collateral activities. Ensures compliance with NISPOM, DoD, ICD, DCID, and SAP policies; assesses vulnerabilities and risks; develops procedures and training; conducts facility compliance reviews; investigates classified information compromises; tracks corrective actions; briefs stakeholders; and mentors security personnel.

Provides customer-facing presales cybersecurity expertise focused on email security. Leads technical discovery, assesses security architectures, designs solution proposals, delivers demonstrations and presentations, supports proof-of-concept efforts, enables sales teams, collaborates with vendors, and ensures successful handoff to delivery teams. The role requires strong knowledge of email security, data protection, cybersecurity frameworks, hybrid environments, and consultative technical selling.

Design, implement, and operationalize cloud-native cyber defense across multi-cloud environments. Build logging/telemetry, CSPM and threat detection, train SOC analysts, integrate AI-driven automation, support incident response, vendor selection, governance, and regulatory compliance (SOC2, PCI, HITRUST, FedRAMP). Mentor staff and advise leadership.

Maintains the operational security posture of classified information systems supporting Collateral, SCI, and SAP environments. Responsibilities include authorization package management, compliance reviews, configuration change impact analysis, audit monitoring, vulnerability identification, incident handling, security documentation, system recovery oversight, and coordination with ISSM and authorization officials. The role requires SAP experience, TS/SCI clearance, eligibility for a CI polygraph, and on-site work with occasional travel.

Owns security trust and compliance programs, audits, policies, control design, continuous monitoring, evidence pipelines, and security automation. Leads framework implementations, identifies risks, manages auditor relationships, develops control health metrics, and mentors practitioners without direct authority. The role requires deep knowledge of security and privacy frameworks, GRC engineering, cloud infrastructure, SaaS environments, identity governance, and modern security practices.

Own security and privacy compliance programs, audits, policies, controls, evidence pipelines, continuous monitoring, and automation. Lead framework gap assessments, control design, risk analysis, and auditor relationships. Build sustainable GRC workflows across SaaS and cloud environments, establish KPIs and SLAs, mentor practitioners, delegate work, and drive technical direction without formal authority.

Leads IT security and infrastructure strategy, operations, risk assessments, incident response, cloud security, vendor management, budgets, standards, and technology projects. Oversees infrastructure across servers, networks, cloud services, manufacturing sites, warehouses, offices, and global IT operations. Manages teams and collaborates with business leaders, vendors, and international IT stakeholders to ensure secure, reliable, scalable, and compliant technology environments.

Manage operational, security, and compliance risks; evaluate controls, oversee risk acceptance and issue lifecycles, and drive remediation. Build automated Python, API, and AI-agent workflows to scale risk operations. Develop risk analytics, KRIs, KPIs, assessment methodologies, and executive reporting while advising stakeholders on security controls, regulatory frameworks, and risk governance.