Top Cyber Security Jobs

Senior individual contributor owning cloud security architecture for GCP. Design edge/perimeter defenses with Cloudflare and Cloud Armor, build policy-as-code and secure Terraform modules, lead threat modeling and security reviews, advance cloud detection and incident response, translate compliance requirements into technical controls, mentor engineers, and serve as the cloud security technical authority.

Perform adversarial security analysis of SoC microarchitectures across pre- and post-silicon platforms. Review architecture, RTL, firmware, and integration to identify vulnerabilities, develop PoCs/exploits, apply automation and AI-assisted techniques, collaborate with engineering teams, and improve threat models, mitigations, and offensive security tooling and methodologies.

Detect, investigate, and respond to security incidents; maintain logging and SIEM operations; build detections and visibility; support PCI/SOC2/ISO audits; manage endpoint, email, and GitHub security; collaborate across teams and improve on-call and security tooling.

Lead product and application security by partnering with product and engineering to design secure features, perform code and architecture reviews, build AI-native security tooling, create developer guardrails, and support incident response, vulnerability management, and penetration testing to scale Headway's security program.

Lead Cloud and Platform Security engineering: define technical strategy, architect scalable data pipelines for security telemetry, ensure data quality and governance, drive risk analytics and compliance reporting, manage and mentor engineers, and partner with security, product, and platform teams to deliver actionable, developer-facing security insights on cloud platforms (AWS/GCP/Azure).

Lead cloud security design and implementation across AWS, Azure, and GCP. Build and automate cloud infrastructure with IaC and CI/CD, establish governance, identity, networking, security controls, and monitoring. Drive cloud modernization, integrations, developer enablement, and incident resolution. Partner with security, SRE, platform, and compliance teams to support audits and shape cloud strategy and standards.

Provide proactive technical leadership and support to strategic customers, manage escalations and incident response, meet with clients, deliver executive presentations, maintain deep knowledge of customer environments (network, security, messaging, systems), design and implement complex solutions, drive process improvements, plan production changes, and ensure customer satisfaction across Proofpoint solutions.

The IAM and Governance Manager will oversee identity and access management functions, develop processes and policies, and provide insights on IAM strategies while automating IT projects.

Design and implement embedded product security for Bose audio devices: secure boot, firmware encryption/signing, anti-reverse-engineering, key and credential management, ARM TrustZone applets, security assessments, vulnerability response, and cross-functional security guidance throughout the development lifecycle.

Develop, extend, and test secure bootrom/bootloader and related SDK components for Apollo SoC. Perform pre-silicon FPGA emulation, post-silicon bring-up, cryptographic hardware-accelerated testing, HAL/BSP implementation, and collaborate on test automation and security verification.

The Data Security Architect will design secure architectures for data protection in cloud and hybrid environments, partnering with various teams to embed security in systems and mentoring engineers.

Lead detection and response across cloud, blockchain, and AI surfaces. Build detection coverage, run incident response, deploy SOC AI tooling, maintain SIEM/SOAR and orchestration, and collaborate cross-functionally to remediate threats and improve visibility. Participate in on-call rotation and support threat modeling, vulnerability scans, and custom tooling.

Lead AI/ML-focused information security for enterprise agentic capabilities. Advise projects and CSOC teams on threat mitigation, compliance, automation, monitoring, and incident response. Partner with engineering and stakeholders to secure cloud, generative AI, and customer servicing platforms while driving data-driven decisions and continuous improvements.

Serve as the central information security lead for Enterprise Data, providing proactive consulting on API, data, infrastructure, network, container, and access security; perform risk assessments and architecture reviews; influence security adoption, escalate and manage cyber risk, support leadership reporting, and provide ad hoc security expertise.

Lead design, build, and management of security infrastructure across AWS and OCI; drive enterprise network security, VPNs, WAF, zero-trust, segmentation, and identity/access controls; develop IaC and automation, run vulnerability management, detection engineering, and incident response; partner with IT and engineering teams.

Lead application and product security across web, mobile, API, AI/CV, and cloud-native systems. Drive secure SDLC, DevSecOps, CI/CD and supply chain security, threat modeling, tooling/automation, vulnerability remediation, and developer enablement while partnering closely with engineering teams.

Lead design, build, and operation of security infrastructure for cloud and corporate networks. Manage AWS and OCI environments, network security (firewalls, segmentation, WAF, VPN), zero-trust, identity and access, IaC automation, vulnerability management, detection engineering, and incident response while partnering across IT and engineering teams.

Define and lead end-to-end security architecture for a large-scale AI inference service platform. Own threat modelling, tenant isolation, platform and hardware security (secure boot, attestation, firmware integrity), network and API protections, secrets and key management, monitoring and incident response, and customer assurance. Partner across engineering, operations, compliance, and customers to set requirements, validate implementations, support audits and pentests, and provide technical leadership and mentorship.

Lead AppSec efforts across product, platform, and AI features by owning secure SDLC, performing threat modeling and deep code reviews, driving vulnerability management and remediation, building AppSec tooling and automations (including AI-assisted workflows), and enabling engineering teams with secure design guidance and training.

Lead application security efforts end-to-end: own vulnerability management, API and supply chain security, integrate security into design reviews and CI/CD, develop automation and tooling (SAST/SCA/DAST/container/dependency), perform threat modeling, triage vulnerabilities, and support incident response and remediation across engineering teams.

The Security Software Engineer will design and implement security controls for MongoDB Atlas, collaborating across engineering teams and ensuring adherence to high security standards.

The Senior Site Reliability Engineer will lead security design and implementation for cloud infrastructures, mentor teams, and automate security solutions.

Leads ICAM network accreditation across unclassified and classified environments. Executes RMF activities in eMASS, manages security documentation, assesses compliance against NIST, DoD, DHA, STIG, and SRG requirements, and develops mitigation strategies. Supports penetration testing, audits, vulnerability management, incident response, contingency planning, system hardening, and continuous monitoring. Coordinates stakeholders, resolves compliance issues, and ensures security requirements are integrated throughout the system lifecycle.

Lead product strategy and roadmap for mobile and online banking security. Own authentication, MFA, device trust, session management, and access recovery across iOS, Android, and web. Coordinate cross-functional delivery with Cybersecurity, Fraud, Risk, Compliance, and Technology. Drive execution, governance, metrics, and regulatory support while mentoring product managers to reduce fraud risk and improve customer trust at scale.

Own end-to-end cybersecurity, insider threat, and external threat incident response for Microsoft Quantum. Lead detection, triage, investigation, containment, recovery, root-cause analysis, executive communications, and remediation. Define the architecture and operating model for an AI-enabled security operations center, establish detection engineering requirements, onboard security data, evaluate solutions, and improve controls, runbooks, and monitoring. Coordinate with engineering, CISO, legal, HR, national security, and trade compliance teams.