Top Cyber Security Jobs

Design, implement, and operate Apollo’s security controls across identity, cloud infrastructure, endpoints, and incident response. Build secure-by-default systems, evaluate security vendors, lead security projects, shape the roadmap, and promote effective security practices across the organization. Key initiatives include zero-trust migration, agentic SOC development, sandbox hardening, third-party access reviews, incident response, and penetration-testing tooling.

Secure Apollo’s internal software, infrastructure, and AI-agent environments through threat modeling, red teaming, attack-trajectory development, adversary tracking, and detection engineering. Own security findings through remediation by designing durable controls, automated tests, CI/CD integrations, and monitoring. Collaborate closely with engineers and research teams to address novel AI-agent and insider-risk threats while documenting threat models and failure modes clearly.

Designs and develops secure systems and architectures for U.S. Navy missions. Responsibilities include analyzing engineering and security requirements, hardening systems, reducing attack surfaces, applying secure coding and operating-system security practices, evaluating architectures against adversary threats, and implementing cybersecurity countermeasures across system lifecycles.

Designs and operationalizes enterprise cybersecurity capabilities, with a primary focus on vulnerability management. Responsibilities include maintaining consolidated vulnerability data, tuning scanning tools and detection policies, improving asset coverage, assessing project security risks, implementing mitigating controls, advising stakeholders, responding to SOC escalations, and participating in Blue and Red Team exercises.

Provides executive leadership for IT and cybersecurity, serving as the Information Systems Security Officer. Develops technology and security roadmaps, manages infrastructure and cloud platforms, leads risk assessments and incident response, oversees data governance, compliance, business continuity, vendors, budgets, and technology procurement, and advises leadership and the Board on technology risk. Supervises and develops IT staff while ensuring protection of sensitive child, family, employee, and agency information.

Designs and governs secure network architectures across enterprise, cloud, manufacturing, and remote-access environments. Responsibilities include creating reference architectures and standards, leading Palo Alto Networks security solutions, reviewing firewall and segmentation designs, integrating Azure and Microsoft security technologies, and defining logging and policy-management requirements. The role partners with engineering and project teams to translate business and application needs into practical, supportable network security designs.

Designs and implements cybersecurity solutions for products, critical assets, and customer data. Develops Agentic AI workflows, automates Product Cyber processes, integrates security services into software development lifecycles, and supports product certificate issuance and cryptographic signing at large scale. Collaborates with development and operations teams while applying SSDLC, DevSecOps, product security, public key infrastructure, and system integration practices.

Leads enterprise cybersecurity architecture for AI, cloud, hybrid, and on-premises environments. Designs secure AI architectures, cloud foundational controls, zero-trust identity models, API and data protections, and secure LLM, RAG, agent, and MCP integrations. Establishes governance, reusable security patterns, model-usage procedures, compliance controls, and audit readiness across AWS and Azure. Advises executives and technical teams, mentors security professionals, and drives secure cloud migrations while addressing AI/ML risks such as adversarial attacks, model poisoning, data drift, bias, and data leakage.

Participate in a paid, part-time cybersecurity internship involving technical development, security response, collaborative projects, shadowing, vendor training, and certifications. Complete in-house training while working with cybersecurity experts. Interns must be U.S.-based, available primarily during weekday EST hours, attend mandatory Tampa onboarding, provide a personal computer and reliable internet, and demonstrate foundational IT, networking, operating systems, and information security knowledge.

The Senior Cloud Security Engineer protects NYC agency systems by assessing cloud and on-premises security, identity and access management, network defenses, email filtering, and endpoint protection. The role ensures compliance with cybersecurity policies, guides security architecture and remediation, operates defensive technologies, coordinates technical projects, communicates with stakeholders, and documents deployment plans. Work occurs within a 24/7 operation and may require nights, evenings, or weekends.

Lead application security assessments across New York City agencies by operating SAST, DAST, and SCA platforms, validating vulnerabilities through manual testing and exploit reproduction, providing remediation and secure coding guidance, identifying systemic weaknesses, mentoring assessment staff, and producing technical and executive security reports.

Supports federal IT system cybersecurity and privacy compliance under the NIST RMF. Responsibilities include RMF/ATO documentation, SSPP maintenance, continuous monitoring, vulnerability assessment and remediation tracking, POA&M management, incident response, audits, privacy assessments, change-impact reviews, SOP development, briefings, and advising system owners. The role also supports assessments, contingency exercises, SDLC activities, and cybersecurity documentation within GRC repositories.

Designs and implements secure cloud solutions, establishes enterprise security architecture and access controls, and serves as an Information Assurance authority. Supports federal A&A/ATO activities, NIST and RMF compliance, security control implementation, POA&M management, and boundary defense initiatives. Partners with PMOs, platform teams, development teams, and Salesforce stakeholders to embed security into configurations, integrations, and CI/CD pipelines.

Conduct security control assessments, vulnerability evaluations, and compliance activities for regulated federal cloud environments. Support RMF and A&A/ATO efforts by maintaining SSPs, POA&Ms, assessment artifacts, continuous monitoring documentation, and compliance reports. Evaluate AWS, Azure Government, Salesforce, and other SaaS/PaaS platforms, recommend remediation, and collaborate with engineering and government stakeholders to implement security controls. The role is onsite in the Washington, DC area and requires U.S. citizenship and an active TS/SCI clearance.

Provides senior-level information security engineering and advisory support across IT and business teams. Administers and monitors security controls, endpoint, identity, cloud, email, SIEM, and vulnerability management systems. Investigates security violations and attempted compromises, develops remediation recommendations, maintains security policies and procedures, supports IT projects, educates stakeholders, and advises management on security risks and business impacts. Participates in complex security projects and provides technical guidance and mentoring.

Manages identity and access lifecycles, security technologies, vulnerability remediation, access reviews, security monitoring, risk assessments, incident investigations, audits, policies, business continuity, and cybersecurity education. Partners with infrastructure, application, and business teams to protect organizational, resident, and clinical information and strengthen security controls.

Leads LCS’s enterprise information security strategy, governance, risk management, regulatory compliance, privacy protection, third-party risk, vulnerability management, incident response, and security operations. Advises executives, oversees security assessments and remediation, manages budgets and vendors, and leads the information security team. The role develops security culture and ensures protection of resident, employee, operational, and technology data across a complex, multi-site organization.

The Cloud Security Engineer will design, implement, and maintain cloud-based security services, ensuring consistent integration of security in DevOps practices and collaborating on security compliance and vulnerability management.

Lead product vision and strategy for security operations services, defining outcomes for managed investigation, response, threat hunting, and advisory services. Partner with customer security ops, product, and marketing teams to deliver AI-driven, automated features, represent Zscaler to customers, and drive measurable security outcomes and operational alignment.

Serve as a Cybersecurity Systems Engineer for a U.S. Navy weapon system: apply MBSE and RMF to identify threats, assess and mitigate security risk, develop SSE deliverables, coordinate with government stakeholders, support integration/verification/testing, and present program status to senior leadership.

Lead Coinbase's global IT and security audit program, delivering complex cross-functional audits across cloud, infrastructure, cybersecurity, IAM, data protection, and third-party risk. Manage and develop a global audit team, partner with first- and second-line stakeholders to drive integrated assurance, and report executive-level findings to senior leadership and the Audit Committee. Modernize audit execution through data analytics, automation, and generative AI to enable continuous monitoring and automated evidence retrieval.

The CISO will develop and manage the Bank's information security programs, ensuring compliance and protecting customer data while mitigating risks. They will also lead a security team, oversee third-party risk, and promote a culture of security awareness across the organization.

Serve as a customer-facing pre-sales security and compliance architect for defense and national security customers. Advise on DoD cybersecurity frameworks, authorization requirements, cloud architecture, network security, cryptography, and SaaS security controls. Partner with sales and internal technical teams, engage senior government stakeholders, build customized demos, lead workshops, support RFIs, monitor policy changes, and translate requirements into customer guidance and product feedback.

Designs and develops advanced anti-cheat and game security systems for Call of Duty. Responsibilities include strengthening protection frameworks, creating cheat detection mechanisms, optimizing and debugging complex C++ systems, analyzing compiled code, and collaborating across studios. The role requires expertise in large-scale software development, algorithms, data structures, CI/CD, automation, performance tuning, and low-level systems, with preferred experience in game engines, reverse engineering, DevOps, cryptography, and anti-cheat technology.

Assesses enterprise information security risks, conducts vulnerability and compliance assessments, and coordinates remediation across networks, systems, applications, and vendors. The role monitors risk mitigation, supports audits and incident response, reports findings, develops security policies and training, and leads security projects and architecture risk assessments. It requires experience with security controls, infrastructure, SIEM, IPS/IDS, Windows administration, and regulatory frameworks including HIPAA, HITRUST, SOC 2, and PCI.