Top Cyber Security Jobs

Lead Fireworks AI’s security operations function, including CrowdStrike deployment, detection engineering, incident response, SOAR workflows, threat intelligence, playbooks, metrics, and cross-functional incident coordination. Build and tune detections, operationalize response processes, run post-incident reviews, and improve coverage against MITRE ATT&CK. The role begins as a hands-on individual contributor and may grow into team leadership, including hiring and expanding 24/7 coverage and capabilities such as cloud detection engineering and red/purple team operations.

Monitor and analyze cybersecurity alerts, perform vulnerability scans and forensic analysis, maintain security infrastructure and policies, research and implement mitigation strategies, develop security plans and training, and support incident response and system protection efforts for Air Force Reserve Command IT systems.

Support AFRC cybersecurity compliance by managing POAMs, providing SME oversight for eMASS, ACT, and STIGs, analyzing Endpoint Security System reports (DLP, enhanced reports, outdated products, rogues, subnet coverage), coordinating remediation with system administrators, and ensuring timely updates and reporting for CCRI.

Monitor and investigate security alerts, logs, threats, vulnerabilities, and incidents. Conduct vulnerability assessments, support penetration testing and cloud security reviews, assist with incident response, recommend remediation, and prepare technical and executive reports. Collaborate with security consultants, engineers, red teamers, and client IT teams while supporting compliance, hardening, patch management, and security monitoring across cloud and enterprise environments.

Perform IT systems administration, including patching, user management, and ICT security. Analyze system and security event logs, report and assess incidents, conduct security risk assessments and audits, evaluate security control effectiveness, and implement controls to identify and mitigate cybersecurity risks. Support the IT Security Manager and Cyber Security Specialist in maintaining and improving the organization’s security posture.

Protect Talos assets by identifying security gaps, automating testing and remediation, analyzing vulnerabilities, tracking remediation, conducting threat modeling and secure code reviews, and collaborating with engineers and architects to secure multi-cloud hybrid infrastructures.

Designs and assesses security for complex systems, cloud infrastructure, applications, media workflows, APIs, vendor tools, and third-party integrations. The engineer leads high-risk AppSec and CloudSec assessments, develops threat models and reusable security controls, establishes hardening baselines, advises secure content-production workflows, tests tooling, researches AI security implications, and mentors engineers. The role is primarily office-based Monday through Thursday in Glendale, California, with remote work on Fridays.

Protect P&G’s global IT environment from cyber threats through security engineering or analysis. Responsibilities include designing and monitoring security platforms, investigating incidents, responding to threats, assessing vulnerabilities, driving remediation, researching emerging attack techniques, strengthening security controls, and communicating risks to technical and business stakeholders.

Leads security engineering across application, cloud, infrastructure, and on-premises environments. Designs security controls, vulnerability-management processes, patching cycles, image refreshes, cloud guardrails, network isolation, WAF, identity, and secrets-management practices. Prioritizes remediation using CVSS, EPSS, CISA KEV, and SLA-driven metrics. Provides technical direction, reviews fixes, mentors engineers, builds standards and runbooks, and coordinates cross-functional security initiatives globally without direct people-management responsibility.

Conduct cyber threat intelligence analysis focused on financial-sector threats, producing reports, actor profiles, executive briefings, and visualizations. Extract and operationalize IOCs, map activity to MITRE ATT&CK, develop detections, assess vulnerabilities and attack-surface exposures, and coordinate remediation. Use AI and automation to scale intelligence workflows, support digital-threat monitoring, share intelligence with industry partners, and participate in incident response and the SOC on-call rotation.

Secures and hardens application, cloud, infrastructure, operating systems, containers, CI/CD pipelines, and networks across multi-cloud and on-premises environments. Improves patching and golden-image processes, scales AI-assisted SAST and SCA tooling, prioritizes vulnerabilities, validates fixes, tracks remediation metrics, creates reusable tooling and runbooks, mentors junior engineers, and partners with application and platform teams to deliver security improvements.

Leads enterprise incident response as senior incident commander for high-severity events across hybrid and multi-cloud environments. Directs triage, containment, eradication, recovery, evidence handling, executive communications, and post-incident reviews. Owns incident response readiness, playbooks, exercises, after-action governance, and measurable improvement programs. Advances AWS detection engineering, monitoring, logging, telemetry, automation, identity security, and threat-informed mitigation while coordinating infrastructure, cloud, endpoint, identity, and application teams.

Execute security engineering across application, cloud, and infrastructure environments by applying patches, upgrading dependencies, hardening configurations, implementing security controls, and managing WAF and network-isolation changes. Review AI-generated SAST and SCA pull requests, coordinate regression testing, support patching cycles and golden-image refreshes, track remediation through verification, and collaborate with application and platform teams. Follow established runbooks, standards, risk prioritization, and CISA guidance while developing broader security expertise.

Conduct comprehensive cybersecurity control assessments for collateral, SCI, and SAP information systems using RMF and JSIG methodologies. Evaluate authorization packages, threats, vulnerabilities, security documentation, continuous monitoring, hardware and software impacts, and authorization boundaries. Prepare Security Assessment Reports and POA&Ms, recommend corrective actions, advise government and security officials, support inspections and cybersecurity incidents, and assess system changes and sanitization procedures.

Own and harden on-premises and hybrid infrastructure across network, server, cloud, identity, and security platforms. Lead patching, vulnerability remediation, zero-day response, OS hardening, PKI and certificate management, segmentation, firewall and wireless security, privileged access, logging, and Azure security posture improvements. Support HIPAA, penetration test, and risk assessment remediation while maintaining 24/7 reliability, documenting procedures, and coordinating with Security, DevOps, project managers, and data center teams.

Supports P&G’s Cyber Defense organization by helping design, test, deploy, monitor, and improve security solutions. Interns may investigate cybersecurity incidents, identify vulnerabilities, drive remediation, research emerging threats and tactics, and strengthen security controls across networks, applications, infrastructure, and CI/CD pipelines. The role also involves communicating security risks, collaborating with cross-functional teams, and promoting compliance with cybersecurity standards and best practices.

Own and direct cybersecurity design for multiple medical devices. Develop security architectures, requirements, threat models, risk analyses, and system specifications for embedded and hosted systems. Perform vulnerability scanning, secure code analysis, penetration testing, fuzz testing, and CWE/CVE analysis. Lead cross-functional cybersecurity improvements, resolve technical constraints, support regulatory interactions, and ensure compliance with quality systems and design controls.

Designs and integrates cybersecurity controls across network, cloud, virtualization, and enclave environments. Leads RMF and Assessment & Authorization activities, maintains accreditation artifacts, conducts vulnerability and compliance assessments, coordinates remediation, reviews architectures for security risks, supports continuous monitoring and change management, and responds to cybersecurity threats and intrusions.

Operate and improve cybersecurity tools and processes across cloud, endpoint, identity, application, email, network, data loss prevention, and vulnerability management environments. Respond to alerts and incidents, manage logging and SIEM telemetry, implement security controls aligned with HITRUST, NIST, CIS, HIPAA, and OWASP, support audits, and develop incident response procedures. Collaborate with a Senior Security Engineer and use AI tools to automate security operations.

Develops and implements cybersecurity controls for mission-critical unmanned systems supporting Navy and Marine Corps operations. Responsibilities include vulnerability and risk assessments, scan-result remediation, threat detection, event correlation, infrastructure security, and communicating security issues to technical teams and senior management. The role requires Secret clearance, Security+ certification, vulnerability-scanning experience, and knowledge of NIST and DoN Risk Management Framework policies.

Develops and implements cybersecurity and infrastructure controls for mission-critical unmanned systems supporting Navy and Marine Corps operations. Responsibilities include vulnerability scanning and remediation, risk assessments, security event correlation, advanced threat detection, and applying NIST, RMF, and Department of the Navy policies. The engineer analyzes network, system, and application vulnerabilities, recommends security strategies, and communicates technical risks to diverse stakeholders.

Develops and implements cybersecurity controls for mission-critical unmanned systems supporting Navy and Marine Corps operations. Responsibilities include vulnerability scanning and remediation, risk assessments, threat detection, event correlation, security analysis, and infrastructure protection. The role requires applying NIST and RMF policies, communicating security risks to technical and senior audiences, and securing network, system, application, and communications architectures in contested environments.

Serve as the primary cybersecurity advisor for assigned systems and lead Risk Management Framework assessment and authorization activities. Develop and maintain security plans, assessments, POA&Ms, risk acceptances, agreements, and other authorization artifacts. Conduct continuous monitoring, control assessments, vulnerability reviews, impact analyses, and user account reviews. Coordinate remediation with system owners and technical teams, support audits and inspections, and help maintain compliant Authority to Operate status.

Lead design and implementation of end-to-end evaluation platforms for agentic security workflows: build benchmarks, deterministic validators, graders, telemetry, CI/CD integration, and production feedback loops to measure safety, correctness, cost, latency, and human-review effort. Partner with engineering and product teams to detect regressions, compare configurations, and provide release-readiness evidence and reusable playbooks.

Own corporate IT and security across employee devices, identity, SaaS, networks, endpoint protection, vulnerability management, incident response, access reviews, and SOC 2 compliance. Build onboarding and offboarding workflows, maintain inventories and controls, coordinate audits and remediation, lead vendor security reviews, respond to customer questionnaires, and partner with Engineering on application and cloud security. Automate operational processes and support safe adoption of AI tools while serving as the primary employee IT and security contact.