Top Cyber Security Jobs

Monitor and investigate security alerts, triage and contain incidents, analyze logs and endpoint artifacts, document findings, support root-cause analysis, escalate complex events, and participate in security exercises and continuous improvement.

Leads the development and continual improvement of global information security policies within IBKR’s GRC function. Aligns policies with regulatory requirements, risk appetite, security frameworks, and control environments. Develops policy mappings, gap analyses, controls, and testing procedures; evaluates control effectiveness; supports audits, regulatory examinations, external assessments, and compliance evidence requests. The role requires strong cybersecurity, policy writing, regulatory, analytical, and stakeholder-management skills in a multinational financial services environment.

Leads an IT security team responsible for developing, implementing, and supporting security controls across software applications, hardware platforms, systems, networks, and data. Oversees security projects, budgets, work plans, resource allocation, status reporting, and business-partner communications. Provides staff leadership and development while applying expertise across infrastructure security, application security, security automation, cloud security, identity and access management, vulnerability management, and enterprise cyber risk.

The Security Operations Engineer protects and improves enterprise infrastructure, endpoints, identities, SaaS platforms, cloud services, and applications. Responsibilities include managing security controls, IAM, endpoint security, vulnerability remediation, audit readiness, compliance, risk registers, incident response, security testing, penetration testing, privacy governance, third-party risk, and automation. The role partners with IT, Legal, Compliance, Privacy, MSSPs, and business stakeholders to strengthen security and operational resilience.

Protect and improve enterprise security across infrastructure, endpoints, identities, SaaS, cloud services, and business applications. Responsibilities include managing MSSP relationships, security controls, identity and endpoint administration, vulnerability management, penetration testing, incident response, audit readiness, privacy compliance, risk assessments, third-party reviews, and security automation. The role also supports threat analysis, forensic investigations, remediation tracking, documentation, and ISO/NIST-aligned governance initiatives.

Protects CRB’s enterprise technology environment across infrastructure, endpoints, identities, SaaS, cloud services, and applications. Responsibilities include security operations, vulnerability management, penetration testing, incident response, identity and access management, audit readiness, privacy compliance, risk assessment, third-party reviews, security control implementation, and workflow automation. The role partners with IT, Legal, Compliance, Privacy, and business stakeholders to reduce risk and improve operational resilience.

The Security Operations Engineer strengthens enterprise cybersecurity, privacy, and operational resilience. Responsibilities include managing MSSPs, security risks, identity and endpoint controls, vulnerability remediation, incident response, audits, compliance, penetration testing, privacy governance, third-party risk, and security automation. The role requires collaboration with IT, Legal, Compliance, Privacy, and business stakeholders while supporting cloud, SaaS, infrastructure, and enterprise application security.

Leads information security engineering across enterprise environments, including security tool administration, vulnerability management, patching coordination, incident response, security architecture, risk assessments, and implementation of detection and prevention solutions. The role researches and deploys security technologies, develops security standards and documentation, reports on security events, and supports identity, access control, network, cloud, and endpoint security. Remote work is available in the Eastern Time Zone, with up to 10% annual travel.

Lead 24/7 SOC detection, triage, and incident response using SentinelOne, SIEM, EDR, and Fusion Firewall systems. Own PKI certificate lifecycle operations, tune blockchain-intelligence integrations, support joint Severity 1 security and availability events, and mentor on-shift Security Operations Engineers. Monitor security metrics including detection and response times, certificate incidents, and shift coverage adherence.

Deploys, integrates, maintains, and troubleshoots cybersecurity solutions across government customer environments. Performs STIG compliance validation, vulnerability scanning, remediation, system hardening, RMF support, configuration management, and security testing. Creates technical documentation and presents security concepts and remediation plans to stakeholders. The role requires extensive onsite travel to CONUS and OCONUS locations and collaboration with government personnel, vendors, and engineering teams.

Performs and reviews technical security assessments, architects secure systems and networks, evaluates security controls, and advises on vulnerability remediation. Responsibilities include implementing continuous vulnerability monitoring, reviewing certification and accreditation documentation, testing against NIST 800-53 controls, supporting incident response, and managing security technologies such as firewalls, IDS/IPS, SIEM, PKI, and MFA. The role also provides technical leadership, policy guidance, product evaluation, and customer support in a government environment.

Design, build, and automate database and infrastructure security solutions across cloud and on-prem environments. Partner with product and engineering teams to implement monitoring, vulnerability management, privileged access reporting, compliance (SOX/CIS), and integrations (ServiceNow, Splunk). Apply IaC, scripting, DevSecOps practices, and perform patching, DR, and security lifecycle activities while mentoring team members.

Designs, implements, and maintains security controls across cloud, infrastructure, endpoint, and application environments. Supports secure configurations, vulnerability remediation, logging and monitoring integration, security assessments, audits, documentation, and continuous improvement of security baselines and engineering processes.

Designs, implements, and maintains security controls across enterprise cloud, infrastructure, endpoint, and application environments. Supports secure configuration, vulnerability remediation, logging and monitoring integration, control validation, security assessments, audits, documentation, and continuous improvement of security standards and engineering processes.

Leads security and network professionals responsible for enterprise security operations, infrastructure support, monitoring, incident response, compliance, vulnerability remediation, and configuration management. The role oversees firewalls, IDS/IPS, DNSSEC, proxies, load balancers, and Zero Trust technologies; applies DoD security standards and DISA STIGs; manages security documentation, POA&Ms, change control, and project delivery. Requires onsite work, U.S. citizenship, Top Secret clearance, CISSP or equivalent, IAT II, CE certification, and ITIL.

Conducts security control assessments for Collateral, SCI, and SAP information systems using RMF and JSIG. Evaluates authorization packages, threats, vulnerabilities, continuous monitoring, security documentation, and system changes. Advises government and security stakeholders, prepares Security Assessment Reports and POA&Ms, supports inspections and incidents, and recommends authorization decisions and corrective actions.

Supports information system security compliance under supervision by maintaining RMF documentation, tracking POA&Ms, assessing risks, conducting vulnerability scans, validating findings, supporting audits and continuous monitoring, and providing cybersecurity guidance. The role requires knowledge of NIST and RMF frameworks, vulnerability management, security documentation, stakeholder communication, and government security compliance. A Public Trust clearance must be obtained before starting.

Oversee security and governance across SAP NetWeaver, S/4HANA, and BTP environments. Manage SAP GRC user provisioning, role administration, access-risk evaluations, segregation-of-duties reviews, and General IT Controls. Investigate security alerts and suspicious activity, maintain access-risk rules, support security configurations, improve processes, monitor emerging cyber threats, and promote organizational security awareness through training and communication.

Leads cybersecurity operations and serves as the senior security authority for CAOC-X information systems. Manages RMF documentation, ATO/ATC/IATT activities, STIG implementation, vulnerability remediation, incident response, security reviews, and risk mitigation across TS/SCI, SIPRNET, and NIPRNET environments. Coordinates with authorizing officials, security assessors, engineering teams, and mission stakeholders while guiding ISSOs and maintaining compliance with DoD and Air Force directives.

Senior cyber security leader aligned to a business platform, advising executives on cyber risk, controls, resilience, regulatory readiness, secure transformation, and incident response. The role owns the platform risk register, drives remediation, supports audits and client security reviews, translates technical issues into business decisions, and provides executive reporting. Success requires deep cybersecurity expertise, strong stakeholder influence, strategic judgment, and extensive experience in complex, regulated environments.

Supports the cybersecurity awareness program through phishing simulations, security metrics, KPI dashboards, training administration, compliance reporting, awareness communications, and Cybersecurity Awareness Month activities. The intern analyzes human-risk trends, tracks training completion, creates educational content, and maintains documentation for PCI, SOX, and audit requirements while collaborating with cybersecurity and business teams.

Leads DC Water’s integrated IT/OT security, cyber risk, compliance, privacy, governance, audit, and third-party risk programs. Develops security strategy and policies, manages regulatory and external audits, oversees segregation-of-duties remediation in Oracle Fusion ERP, operationalizes water-sector threat intelligence, and reports assurance status to executive leadership and the Audit & Risk Committee. Supervises employees and consultants, coordinates cross-functional governance, and supports incident response across treatment facilities and critical infrastructure.

Analyzes security incidents, vulnerabilities, risks, and infrastructure damage; implements and manages security solutions; monitors systems and logs; conducts forensic investigations; audits security deployments; researches security technologies; and tests compliance with security policies and procedures.

Own and establish the company’s security function as its first dedicated security engineer. Build customer-facing security products, secure multi-cloud AWS, GCP, and Azure infrastructure, harden Kubernetes clusters, and implement IAM, network security, secrets management, workload isolation, and security logging. Write production Go code, identify vulnerabilities, establish secure development practices, define the security roadmap, and collaborate directly with customer security teams.

Lead DigitalOcean’s AI security strategy, governance framework, threat modeling, and multi-year roadmap. Partner with security, engineering, and data science teams to secure AI products, deploy guardrails, conduct adversarial testing and red teaming, and monitor AI/ML systems. Provide architectural reviews, executive risk briefings, and guidance on emerging threats including prompt injection, model supply-chain risks, agentic AI, and data exfiltration.