Top Cyber Security Jobs

Own end-to-end cybersecurity, insider threat, and external threat incident response for Microsoft Quantum. Lead detection, triage, investigation, containment, recovery, root-cause analysis, executive communications, and remediation. Define the architecture and operating model for an AI-enabled security operations center, establish detection engineering requirements, onboard security data, evaluate solutions, and improve controls, runbooks, and monitoring. Coordinate with engineering, CISO, legal, HR, national security, and trade compliance teams.

Develop and operate security tooling, SIEM detections, dashboards, data integrations, and AI-assisted SOC automation. Investigate and respond to incidents, improve detection quality, troubleshoot network, infrastructure, and physical security issues, and automate operational workflows. Partner with engineering, facilities, networking, and security teams to strengthen resilience and protect sensitive quantum research and intellectual property.

Lead a global security operations team providing 24x7 support for WAF, DDoS, bot mitigation, API and edge security. Oversee incident response, change governance, application onboarding, operational readiness, compliance, and continuous improvement. Partner with engineering, infrastructure, business teams, and vendors to ensure secure deployments, define KPIs and roadmaps, and report risks and incidents to senior leadership.

The OT Network Security Engineer supports 24/7 operations for the Bulk Electric System. Responsibilities include maintaining NERC/CIP compliance, configuring and managing network devices, securing SCADA infrastructure, troubleshooting network security issues, analyzing logs and events, responding to incidents, supporting development projects, and coordinating across teams. The role requires on-call participation, crisis management, strong communication, and experience in transmission utility or SCADA environments.

Leads OT security compliance engineering and GRC teams supporting critical infrastructure. Oversees Splunk, Tenable or Nessus, and Tripwire operations; NERC CIP compliance; audits; regulatory engagement; violation management; risk registers; policies; controls; evidence; and executive reporting. Manages technical and analyst teams, translates technical findings into business risks, supports facility onboarding and certifications, and maintains continuous audit readiness across multiple entities.

The Security Specialist manages the workforce identity access management product and backlog, collaborates with engineering teams, supports delivery planning, and ensures compliance with security protocols while acting as a liaison to business stakeholders.

Perform security risk assessments for third parties and new technologies, collaborate with engineering and threat teams on onboarding/PoCs, oversee security observation risk tracking, review configuration compliance for Windows/Linux, prepare executive reporting, manage intake and remediation tracking, and support audit/compliance validation and knowledge transfer to analysts.

Leads cybersecurity strategy and risk posture for the North America Client Group. Oversees cybersecurity uplift programs, coordinates incident management, strengthens security practices, and serves as the liaison between Global Information Security and business stakeholders. The role develops risk-aware solutions, implements privacy and data protection controls, and aligns security priorities with organizational objectives while influencing stakeholders across the company.

Develop and maintain cybersecurity solutions; monitor and analyze security events; investigate potential threats; strengthen controls across cloud and on‑prem environments; use security tools, automation, and threat intelligence; support secure code/configuration changes and vulnerability remediation; collaborate with engineering and infrastructure teams and leverage AI-powered technologies for detection and response.

Leads cybersecurity oversight for federal information systems, managing RMF and ATO activities, vulnerability remediation, POA&Ms, compliance documentation, continuous monitoring, and security governance. Supervises ISSOs, coordinates with Authorizing Officials, system owners, engineers, assessors, and program leaders, and communicates risk and compliance status to senior leadership. Requires DoD or federal cybersecurity experience, NIST and RMF expertise, an aligned certification such as CISSP, and an active Secret clearance.

Maintain cybersecurity compliance for assigned information systems by managing RMF documentation, System Security Plans, POA&Ms, vulnerability remediation, continuous monitoring, STIG compliance, audit evidence, and authorization packages in eMASS. Coordinate incident response and collaborate with system owners, engineers, administrators, ISSMs, and leadership to resolve security issues and support DoD and NIST requirements.

Lead and deliver technical cybersecurity and compliance programs for clients, manage a small security analyst team, run gap and risk assessments, drive SOC 2/ISO/PCI audits, track project milestones and SLAs, and ensure timely achievement of security and compliance objectives.

Support Security Program Managers by designing and implementing compliance programs, configuring compliance platforms, liaising with clients and auditors, conducting tabletop exercises (incident response, business continuity), completing security questionnaires, training staff, and helping build risk management programs across cloud environments.

Designs and develops embedded diagnostics and cybersecurity features for Ford’s next-generation electric vehicle infotainment controllers. Responsibilities include defining requirements, developing software and tooling, creating functional and CI/CD tests, integrating code, troubleshooting vehicle systems, collaborating across hardware and software teams, and using data-driven tools to diagnose field issues. The role requires extensive embedded software experience and expertise in C, C++, Python, RTOS, Linux, automotive networks, and cybersecurity-related vehicle technologies.

Secure AWS cloud environments through architecture and network reviews, IAM and policy guardrails, workload protection, monitoring, threat detection, encryption, runtime controls, and secure CI/CD automation. Develop scalable security tooling, including AI-augmented solutions, and establish secure integrations with third-party services. Partner with engineering, product, DevOps, and compliance teams through design reviews, code reviews, documentation, and technical guidance.

Own Fetch’s information security function, including vulnerability management, application security, incident response, forensics, security architecture, GRC, compliance, third-party risk, AI governance, and security awareness. Serve as incident commander and senior technical authority, mature the security program, lead audits and executive reporting, manage security risks, and hire and develop the Security Engineering team.

Build and own automated security control monitoring, continuous control monitoring, AWS evidence collection, control-failure workflows, and AI-native GRC processes. Integrate APIs and data systems, maintain cross-framework control libraries, support audits, validate remediation, administer GRC technology, and establish engineering standards for automation. Partner with Platform Engineering, DevOps, and IT to implement preventive guardrails, dashboards, self-service evidence, and measurable improvements in audit readiness and risk reduction.

Lead Workday Security subject matter expert responsible for designing, configuring, and maintaining Workday security models, role/group assignments, and access controls. Partner with HR, IT, audit, and stakeholders to evaluate changes, manage governance, perform SOD audits, support releases, troubleshoot access issues, and ensure compliance and data protection across Workday modules.

Develops and maintains AI security governance and assessment frameworks for federal systems. Defines authorization boundaries, evidence standards, continuous monitoring requirements, and policy-to-control mappings using NIST and Zero Trust principles. Integrates adversarial threats into assessments, coordinates cross-team framework application, briefs stakeholders, and advises Authorizing Officials on authorization decisions, risk posture, and residual risk acceptance.

Conduct security control assessments of intelligence-community information systems, focusing on Zero Trust maturity across identity, device, network, application, data, and analytics domains. Validate technical evidence, assess cloud security implementations, identify capability gaps, document risk-based findings, communicate results to technical and executive stakeholders, and recommend improvements to cyber threat protection. The role requires extensive cybersecurity, SCA, defensive cyber operations, cloud assessment, vulnerability scanning, and compliance framework experience.

Manage cybersecurity risk and authorization processes for customer information systems. Support RMF workflows, review access and device authorizations, maintain ServiceNow records, evaluate system changes, manage A&A activities through ATO, coordinate vulnerability remediation, review SSP compliance, maintain security configuration and documentation, monitor recovery processes, and participate in governance reviews.

Manage information system security and customer RMF workflows from authorization planning through ATO. Review access and system-change requests, coordinate POA&M vulnerability remediation, enforce NIST and cybersecurity controls, maintain security documentation and configuration management, monitor recovery processes, conduct internal audits, and support governance reviews. The role requires extensive RMF, A&A, NIST, STIG, ServiceNow, Tenable, and SCAP experience, along with an active TS/SCI clearance and polygraph.

Provides multidisciplinary security support for Special Access Programs, SCI, and classified activities. Ensures compliance with NISPOM, DoD, intelligence, and SAP policies; develops procedures and security training; identifies vulnerabilities and risks; conducts facility compliance reviews; tracks corrective actions; investigates classified information compromises; briefs government and civilian personnel; and mentors security staff. Requires 10+ years of related experience, including two years of SAP experience, TS/SCI clearance, U.S. citizenship, and ability to obtain a CI polygraph.

Designs, deploys, and supports enterprise network security systems, including BGP routing, DDoS mitigation, cloud network security, and WAF solutions. Leads security engineering initiatives, defines requirements, manages technical risks and vulnerabilities, develops test plans, reports metrics, collaborates with stakeholders, resolves complex security issues, and mentors team members.

Administers DoD and DC3 security programs covering personnel, information, system, COMSEC, physical, and industrial security. Manages classified material, clearance applications, DISS/NBIS/e-QIP processing, visitor certifications, facility inspections, access control, security briefings, document control, and SCIF-related procedures. Supports classified information protection, new-hire security packages, badges, foreign visitor registration, and compliance with federal and DoD security requirements.