Top Cyber Security Jobs

Leads the cybersecurity operations program, overseeing monitoring, incident response, vulnerability management, threat intelligence, endpoint security, identity protection, and security controls. Manages security technologies, vendors, incident playbooks, compliance support, dashboards, and on-call processes while protecting regulated healthcare and financial information. Partners with IT, compliance, legal, privacy, risk, and executive teams, and leads and develops security operations personnel.

Implements and improves security controls across cloud, endpoint, network, identity, and application environments. Manages security technologies, investigates alerts and incidents, develops detections and response workflows, performs vulnerability management, and supports penetration testing. The role secures Azure and AWS environments, assists with IAM and CI/CD security, analyzes logs and forensic evidence, and supports compliance audits involving HIPAA, HITRUST, SOC 2, and PCI-DSS. It partners with technical and GRC teams to remediate risks and maintain security documentation.

Leads Generac’s enterprise-wide product security strategy across connected energy products, software, and digital services. Establishes IEC 62443-based governance and secure development lifecycle practices, including threat modeling, secure coding, security testing, SBOM, vulnerability management, and certification readiness. Builds product security incident response and coordinated vulnerability disclosure capabilities, manages global regulatory compliance, and advises executives, boards, customers, auditors, and regulators. Builds and develops a high-performing product security organization while embedding security champions across engineering teams.

Designs, governs, and improves secure enterprise architectures across cloud, hybrid, and on-premises environments in a regulated financial setting. Responsibilities include threat modeling, security design reviews, architecture risk assessments, shift-left security integration, encryption and PKI strategy, HSM and key management oversight, certificate lifecycle automation, regulatory compliance, audits, and control validation. The role collaborates with engineering, infrastructure, legal, risk, product, and business teams to translate security risks into actionable architectural requirements.

Manages security activities for designated programs, integrating security into business capture, proposals, and program execution. Oversees NISP compliance, classified-program regulations, contractual security documentation, Security Classification Guides, secure-area administration, training, recordkeeping, and policy development. Coordinates with government agencies, customers, suppliers, program protection teams, leadership, and business development. Reviews requirements, resolves compliance conflicts, and develops security infrastructure supporting defense and engineering programs.

Own Watcher’s product security posture, including identity and access management, cloud and infrastructure security, endpoint management, incident response, vendor assessments, and security standards. Lead security projects, customer security questionnaires, whitepapers, penetration-test support, and incident communications. Partner with customers and product teams to understand enterprise security needs, shape the security roadmap, and prioritize controls for coding-agent deployments handling sensitive data.

Leads security engineering and the full RMF and ATO lifecycle for mission-critical cloud and on-premises systems. Implements NIST controls, manages POA&Ms, vulnerability assessments, patching, continuous monitoring, contingency planning, and security inspections. Reviews technical changes, oversees AWS and Azure security, authors cybersecurity documentation, and briefs risks to stakeholders while coordinating with developers, systems engineers, SCAs, and DAOs.

Supports the cybersecurity team through vulnerability data analysis, phishing and social engineering campaigns, ethical hacking, threat monitoring, identity and access management, tabletop exercises, cyber strategy development, privacy, and data protection. The 10-week hybrid internship provides practical cybersecurity experience and professional development in Raleigh, North Carolina.

Own federal security and compliance workstreams for a FedRAMP High program, including control implementation, evidence collection, continuous monitoring, vulnerability remediation, risk tracking, audit readiness, authorization artifacts, and customer assurance. Partner with technical and business teams to close remediation items and support compliance-as-code using machine-readable artifacts, automation, validation, and document generation.

Leads digital forensics investigations supporting cybersecurity incidents, legal matters, compliance reviews, and employee misconduct inquiries. Collects, preserves, analyzes, and documents evidence across enterprise systems while maintaining chain of custody. Performs forensic triage, root-cause analysis, timeline reconstruction, and artifact analysis; supports incident response and prepares defensible reports. Partners with Legal, HR, Compliance, and Audit, evaluates forensic methods and tools, provides expert testimony when needed, and mentors junior analysts.

Own Connexure’s information security program, including strategy, policies, risk management, security architecture, tooling, SOC 2 and HITRUST certification oversight, client and vendor due diligence, AI governance, and incident response. Lead the Security Analyst, manage security vendors, partner with Engineering, Sales, Legal, and executives, and report security posture and material risks to leadership and the board.

Design, implement, maintain, and support cybersecurity tools and platforms, including EDR, DLP, web proxy, messaging security, vulnerability management, and identity and access management. Develop security playbooks and troubleshooting documentation, assist with incident response, collaborate across teams, and improve the confidentiality, integrity, and availability of systems and data.

Designs, implements, maintains, and supports information security tools and platforms protecting systems, networks, and data. Performs security engineering, operations, vulnerability management, incident management, threat intelligence, threat hunting, and cyber threat analytics. Manages EDR, DLP, web proxy, messaging, vulnerability management, and identity-access tools; develops playbooks and troubleshooting documentation; and assists with incident response while collaborating cross-functionally to improve security posture.

The Senior ISSO monitors and assesses information-system compliance, conducts audits and technical assessments, develops security plans, investigates security violations, and documents corrective actions. The role reviews configuration-management requests, implements cybersecurity processes and tools, supports security documentation and technical writing, and provides security education. Work is fully onsite in Dulles, Virginia, supporting classified defense environments and compliance with NIST, NISPOM, DAAPM, JSIG, RMF, STIG, and related government requirements.

Serves as the technical authority for corporate security engineering, detection infrastructure, threat visibility, and security strategy. Builds alerting and automation, manages endpoint, identity, data exposure, phishing, vulnerability, and DLP risks, and establishes scalable workflows for triage, escalation, reporting, and incident response. Partners with IT leadership, conducts threat hunting and security assessments, develops executive metrics, and leads strategic global security initiatives.

Serve as a fractional CISO advising alternative asset firms and family offices on building, maintaining, and operating full cybersecurity programs. Provide hands-on leadership, risk assessment, policy and controls development, and program execution on project-based engagements.

Provide fractional cybersecurity advisory and hands-on operations for hedge funds and family offices: conduct assessments, run vulnerability management and incident response, implement policies and controls, monitor logs and network traffic, test BCDR plans, advise on vendor selection, and report KPIs and remediation plans.

Designs and develops secure cloud-native integration services, APIs, and automation supporting access management, encryption, security platforms, and hybrid cloud environments. Builds containerized applications with Kubernetes, CI/CD, Infrastructure as Code, and DevSecOps practices. Contributes to security architecture, risk assessments, vulnerability response, incident planning, technical escalations, reporting, and merger and acquisition initiatives while serving as a senior information security subject matter expert.

Designs, builds, and operates enterprise security platforms including SIEM, EDR, IAM, and CSPM. Owns logging and detection pipelines, incident response tooling, vulnerability integrations, cloud security guardrails, identity workflows, and network and endpoint controls. Translates compliance frameworks into technical controls, supports audits, evaluates security technologies, mentors team members, and participates in on-call support.

Lead enterprise endpoint and defense architecture across endpoint, cloud, SaaS, email, network, and perimeter security. Own vulnerability and exposure management, reference architectures, technical standards, telemetry integration with SIEM and SOAR, threat modeling, automation, technology evaluations, PoCs, RFPs, and acquisition assessments. Partner with product, engineering, and program teams on security roadmaps, platform modernization, and deployment across on-premises, hybrid, and multi-cloud environments.

Own security governance, risk, compliance, and accreditation initiatives for Salesforce Government Cloud. Advise business and technical stakeholders on information security requirements, support federal authorization and continuous monitoring activities, communicate accreditation programs, and improve operational processes through automation. The role requires cloud security experience across AWS, Azure, or GCP, knowledge of FedRAMP 20x and DoD SRG frameworks, compliance engineering expertise, metrics and dashboard development, and collaboration with authorizing officials, auditors, regulators, engineers, and security teams.

Supports the bank’s information security program through technical audits, access reviews, security log and SIEM analysis, vulnerability and asset scans, trend reporting, and discrepancy investigation. The analyst uses advanced Excel functions and PowerShell for data analysis, prepares reports for security and IT leadership, supports audit remediation and security implementation projects, and collaborates with IT, business departments, management, and vendors.

Designs, implements, and optimizes enterprise, cloud, and operational security controls. Responsibilities include managing firewalls, SIEM, EDR, SOAR, IAM, vulnerability assessments, penetration testing, incident response, security monitoring, architecture documentation, compliance alignment, and remediation support. The role collaborates with IT, DevOps, and security teams to improve detection, response, resilience, and audit readiness.

Serve as the primary specialist Account Executive for data security (DLP, CASB, DSPM). Own regional quota and territory growth, build account-based strategies, partner with solution engineers, engage C-level and technical stakeholders, and collaborate with sales leadership to land and expand enterprise data security solutions.

Lead CoreWeave's Platform Security engineering, managing a team to ensure security in Kubernetes and multi-cloud environments, and drive security posture management.