Top Cyber Security Jobs

Supports Mastercard’s Subsidiary Security team in helping acquired companies securely integrate into Mastercard. The intern will assess security risks and emerging technologies, contribute to integration roadmaps, complete cybersecurity-related projects, and communicate technical concepts to diverse audiences. The role also involves managing multiple priorities, collaborating across teams, developing cybersecurity expertise, and applying foundational AI knowledge.

Leads Mastercard’s global Enterprise Resilience function, including crisis, operational, business, technology, cyber, and cloud resilience. Develops strategy, governance, policies, regulatory compliance, risk mitigation, and end-to-end exercising and testing. Manages global senior teams, budgets, stakeholders, suppliers, clients, audits, regulatory inspections, emergency response, recovery procedures, and continuous improvement programs.

Develop secure platform services and security features using Go, Scala, or Python; identify attack surfaces, harden products, debug system issues, and participate in security code and design reviews. Collaborate across engineering and product teams, contribute to secure coding guidelines, and assess AI-generated code and AI-powered features. The role offers mentorship in cryptography, threat modeling, distributed systems, API security, and system-level testing.

Leads full-stack engineering projects and developers building cloud-based, distributed microservices and cybersecurity solutions. Defines service boundaries, integration patterns, coding standards, and reusable frameworks; mentors engineers; evaluates emerging technologies; improves system performance and reduces technical debt. Works with product managers, architects, and Agile teams using modern programming languages, databases, containers, cloud platforms, CI/CD, infrastructure as code, automated testing, observability, and AI-assisted development tools.

Evaluate and mature cybersecurity capabilities using frameworks such as NIST CSF. Analyze cyber data, risks, vulnerabilities, controls, and logging strategies; lead assessments; identify root causes; track maturity objectives; and create executive and technical risk reports. Coordinate governance, metrics, and reporting across teams while partnering with stakeholders and executives to drive cybersecurity improvements.

Lead and mature the enterprise information security program, oversee cybersecurity operations, GRC, risk management, IAM, vulnerability and third-party risk programs, ensure regulatory compliance, drive incident response and cyber resilience, and advise executive leadership and the Board on security strategy and investments.

Lead end-to-end execution of a 12+ initiative product security program, managing cross-team dependencies, vendor procurement, BAU security operations, and executive reporting. Maintain roadmap and tracking in Jira/Confluence, drive procurement/POCs, produce executive-ready metrics, and establish program cadence to ensure timely remediation and predictable delivery.

Supports enterprise IT and cybersecurity risk management by leading risk assessments, maintaining risk inventories, applying frameworks such as NIST and COBIT, generating Archer reports, automating oversight analytics, and presenting findings to governance committees and regulators. The role collaborates with IT, Security, Legal, Compliance, Internal Audit, and third-party risk teams while improving risk methodologies, controls, policies, and issue tracking.

Cybersecurity interns support SOC operations by monitoring SIEM and EDR alerts, triaging and investigating threats, analyzing security logs, assisting incident response and phishing analysis, researching vulnerabilities, and maintaining playbooks and documentation. They collaborate with cybersecurity professionals on client-facing deliverables while developing practical experience in threat detection, security operations, and incident response.

Leads enterprise PAM engineering, including credential vaulting, secrets management, session control, least-privilege enforcement, automation, and Zero Trust modernization. Manages engineers, platform roadmaps, risk reduction, incident response, cloud and hybrid integrations, DevSecOps enablement, compliance, resource planning, and talent development. Partners across IAM, cloud, infrastructure, architecture, and application teams to deliver scalable privileged access solutions.

Leads Internal Audit assurance and advisory coverage for global cybersecurity, infrastructure, cloud, identity, threat detection, third-party risk, and IT operations. Owns risk assessments, audit planning, execution, reporting, remediation validation, and methodology. Advises CISO and CTO leadership, evaluates AI-enabled security risks and controls, expands analytics and continuous auditing, and develops a global team of technology and cybersecurity auditors. Communicates risk insights to executives, Audit Committee members, and risk committees.

Leads an enterprise PAM engineering organization responsible for credential vaulting, secrets management, session control, least-privilege enforcement, and privileged identity risk reduction. Oversees modernization, automation, DevSecOps integration, cloud-ready architectures, incident response, compliance, and platform roadmaps across hybrid environments. Manages engineers, resources, and investments while partnering with IAM, cloud, infrastructure, application, and security architecture teams. Develops talent and ensures responsible use of AI-assisted development tools.

Leads an enterprise Privileged Access Management engineering organization, overseeing PAM strategy, platform modernization, credential vaulting, secrets management, session control, least-privilege enforcement, automation, and cloud-ready access solutions. Manages engineers, drives DevSecOps and Zero Trust integration, reduces privileged-access vulnerabilities, partners across security and infrastructure teams, provides technical oversight for enterprise initiatives, responds to access incidents, manages resources and budgets, and develops engineering talent.

Lead design and implementation of security frameworks for AI systems, performing threat modeling, adversarial defense, secure MLOps, architecture reviews (including MCP and agentic systems), authoring standards and reference architectures, managing large AI security projects, and mentoring cross-functional teams to strengthen AI security posture.

Leads enterprise data security and information governance by building data intake, catalog, marketplace, classification, lineage, and access-control programs. Translates privacy and security requirements into technical controls, self-service workflows, and governance documentation. Partners with Legal, InfoSec, engineering, product, and data teams to support compliant data use, AI/ML initiatives, and regulatory requirements including HIPAA, GDPR, and CCPA. Measures adoption, turnaround times, and governance maturity across a global SaaS organization.

Lead and scale a platform security engineering team to protect product, cloud, and infrastructure. Build security strategy, implement vulnerability and access management, enforce data protection, and collaborate with product units to reduce risk and ensure secure service delivery.

Secure Runpod’s multitenant GPU cloud infrastructure across bare-metal and virtualized environments. Responsibilities include designing workload and network isolation, hardening Linux kernels and container platforms, testing hypervisor and hardware security, developing low-level controls in C, Go, or Rust, securing GPU and PCIe interactions, and responding to infrastructure security incidents with forensic capabilities for ephemeral containers.

Supports IT and Security operational risk management through risk assessments, control evaluations, risk inventories, regulatory alignment, and governance reporting. Leads risk intake and enterprise assessments using NIST, COBIT, RSA Archer, JIRA, and ServiceNow. Develops AI governance protocols and risk registers, audits distributed ledger technology programs, and reviews IAM controls including RBAC, access reviews, and least-privilege policies. Collaborates with technology, compliance, legal, audit, and business stakeholders to improve ORM methodologies and resolve findings.

Lead security risk and compliance programs by translating objectives into engineered controls, acceptance criteria, monitoring, and evidence readiness. Evaluate infrastructure and system changes, advise on compliance impacts, coordinate remediation of control deficiencies, and align requirements across NIS2, CCPA, ISO 27001, SOC 2, ISO 42001, and other frameworks. Partner with engineering and business teams to deliver measurable security outcomes.

Own application security for backend services, APIs, cloud infrastructure, and edge systems handling financial transactions. Responsibilities include validating red-team findings, assigning severity, hardening services, implementing WAF and rate-limiting defenses, creating automated security configuration checks, expanding pull-request security gates, reviewing architectures, managing attack-surface coverage, and evaluating security tools. The role also partners with engineers and Security Operations to drive effective remediation.

Own and execute the application security program, including SIEM management, threat detection, architecture and code reviews, vulnerability management, security testing, incident response, forensic investigations, and security tooling. Partner with engineering and infrastructure teams to remediate vulnerabilities, promote secure coding, develop training, and improve enterprise security through cloud, container, compliance, and monitoring practices.

Leads cybersecurity consulting and governance for a business line, coordinating information security assessments across infrastructure, data, network, cloud, resiliency, and access management. Manages cyber risk, supports security capability adoption, advises leadership, and provides updates on information security health. The role also contributes to threat analysis, architecture reviews, incident analysis, third-party risk management, monitoring, and cybersecurity program development.

Lead full-stack engineering projects and developers building cloud-based identity security solutions. Design distributed microservices and APIs, establish engineering standards, partner with architects and product managers, reduce technical debt, optimize performance, mentor engineers, and influence technology strategy. The role uses modern programming languages, databases, containers, cloud platforms, CI/CD, infrastructure as code, automated testing, and observability in an Agile environment.

Leads CDW’s Security Cyber and Physical Professional Services organization, overseeing customer satisfaction, financial performance, utilization, staffing, retention, professional development, service delivery, capacity planning, budgeting, forecasting, and portfolio expansion. Partners with sales, presales, solutions, legal, finance, vendors, and operations teams to develop offerings, improve delivery efficiency, scale capabilities, and drive revenue. Champions responsible AI adoption and continuous improvement while managing senior leaders and ensuring teams meet customer, coworker, operational, and profitability goals.

Owns Cleo’s application and product security strategy across SaaS and customer-hosted products. Responsibilities include maturing the SSDLC, threat modeling, security scanning, vulnerability triage, penetration testing, coordinated disclosure, CVE management, product security controls, customer-facing advisories, and NIST CSF evidence. The role also leads security enablement, roadmap prioritization, AI security reviews, and hands-on exploit reproduction and patch validation while guiding engineers and security partners.