Top Cyber Security Jobs

Provides information assurance, systems administration, vulnerability assessment, security planning, risk analysis, and secure system design for enterprise network, server, desktop, and application environments. Develops security solutions, enforces trusted relationships across systems, and supports government information security programs. Requires shift and weekend support as needed, an active CASP+, SecurityX, or CISSP certification, and an active TS/SCI clearance with polygraph.

Information Security Engineer responsible for Azure cloud security projects, vulnerability remediation, security operations, AI security governance, vendor risk assessments, architecture reviews, and quarterly access reviews. The role partners with development and architecture teams, evaluates AI agents and MCP servers, participates in CrowdStrike-based on-call operations, and supports post-quantum cryptography readiness. Candidates should have at least five years of security or cloud security experience and be comfortable working independently across varied security initiatives.

Provides multidisciplinary security support for Special Access Programs, SCI, and collateral activities. Responsibilities include enforcing NISPOM and DoD security policies, identifying vulnerabilities and risks, conducting facility compliance reviews, tracking corrective actions, investigating classified information compromises, supporting Operations Security training, and briefing government and industry personnel. Requires current Top Secret clearance with SCI eligibility, SAP eligibility, a counterintelligence polygraph, and willingness to travel extensively within the assigned geographic area.

Lead end-to-end SIEM platform engineering and operations, owning roadmap, platform resilience, regulatory and audit compliance, and expansion of detection, telemetry onboarding, and vendor delivery. Manage multidisciplinary teams, budgets, governance, and stakeholder engagement to ensure secure, scalable security monitoring for the bank.

Manage and enhance Azure and AWS cloud security environments, including Microsoft Sentinel, Log Analytics, Azure Monitor, KQL analytics, automation rules, data connectors, and security data pipelines. Design log collection, normalization, enrichment, and routing architectures; develop custom REST API connectors; administer Microsoft security services; resolve complex cloud operations issues; and mentor team members. A Secret clearance and high school diploma or GED are required.

Supports classified information-system security by monitoring compliance, conducting audits and assessments, developing security plans, investigating violations, reviewing configuration changes, implementing cybersecurity processes, and maintaining technical documentation. The role works onsite with the ISSM and applies NIST, NISPOM, DAAPM, JSIG, RMF, and related government security policies. It also supports vulnerability mitigation, incident response, cybersecurity education, and authorization processes in complex classified network environments.

Owns and continuously improves NOBULL’s cloud, identity, endpoint, network, collaboration, and security platforms. Responsibilities include administering Microsoft and cloud environments, managing access and endpoint security, investigating incidents, handling vulnerability management and patching, developing PowerShell and Python automations, supporting disaster recovery, managing vendors, documenting procedures, and serving as a Tier 2 and Tier 3 escalation resource. The role also provides technical mentorship and supports compliance, governance, and platform lifecycle decisions.

Manage security compliance for an AI and defense research program, including fundamental research protection, CUI and classified information controls, DARPA security coordination, Intelligence Oversight, OPSEC planning, export-control compliance, risk-based personnel reviews, Technology Control Plans, security reporting, and security guidance during program events. The role requires current TS/SCI clearance, U.S. citizenship, and experience supporting defense and intelligence research programs.

Designs, engineers, tunes, and maintains security detections, correlation rules, behavioral analytics, and CI/CD pipelines for detection content. Supports network security, access management, incident response, risk assessments, security architecture, and complex troubleshooting. Leads incident recovery, root cause analysis, testing, technical escalations, vendor coordination, and collaboration with security operations, fraud, threat intelligence, infrastructure, and engineering teams.

Leads technical security sales engagements through demonstrations, proofs of concept, hackathons, architecture workshops, and customer consultations. Designs secure, scalable cloud and hybrid architectures, resolves technical blockers, and advises customers on Microsoft Security solutions, including Defender and Sentinel. Develops security posture recommendations, supports XDR, zero trust, cloud security, and AI adoption strategies, while influencing technical decisions and representing Microsoft in developer communities.

The Regional SOC Analyst supports defensive cybersecurity operations across IT, OT, and R&D environments. Responsibilities include threat detection, Tier 3 incident response, vulnerability management, hardening, patching, security controls, SOC process improvement, and regional incident coordination. The role also guides a cybersecurity team, collaborates with engineering and R&D groups, and applies frameworks including NIST, IEC 62443, and MITRE ATT&CK. This is a full-time, onsite position requiring experience with CrowdStrike Falcon, SIEM, EDR, NDR, cloud security, and industrial environments.

Conduct vulnerability research across Microsoft products, cloud services, and open-source ecosystems. Develop scalable automation and AI-driven systems for vulnerability discovery, exploit validation, triage, and remediation. Perform offensive security assessments, analyze emerging attack techniques, collaborate with engineering and security teams, and publish technical findings or influence open-source projects.

Designs and evaluates secure enterprise technology deployments through end-to-end security and threat analysis. Partners with business, IT, and cybersecurity teams on network, application, cloud, and enterprise security controls. Develops security guidance and mitigation requirements, communicates cybersecurity programs to stakeholders, documents best practices, and provides technical mentorship across concurrent initiatives.

Lead complex data security risk-reduction programs across technology, cyber, business, risk, and control stakeholders. Responsibilities include integrated planning, governance, milestone and dependency management, risk and issue escalation, executive reporting, KPI/KRI development, control implementation, evidence capture, and transition to business-as-usual monitoring. The role also supports data security governance for AI, APIs, SaaS platforms, external websites, and evolving data movement channels.

Defines and scales security assurance and global compliance practices across engineering and product teams. Establishes SDL requirements, lifecycle checkpoints, controls, evidence plans, and reporting. Conducts security reviews, CRA assessments, readiness reviews, and security hackathons; coordinates certification activities with notified bodies and stakeholders. Supports FPGA customers with security and certification requirements, tracks remediation, validates corrective actions, and reports progress to technical and executive audiences.

Architects and delivers enterprise-scale AI security systems for identity risk, anomalous access, malware detection, sensitive data classification, and threat recognition. Builds inference engines, ML platforms, feature pipelines, and production model-monitoring workflows. Provides technical leadership across multi-quarter initiatives, integrates AI with access-control and security infrastructure, evaluates emerging techniques such as LLMs and agentic systems, and collaborates across identity, threat detection, and platform teams.

Lead and scale Serval’s cybersecurity detection and response program. Design and operate monitoring, triage, investigation, containment, remediation, incident response, and recovery processes. Build and mentor teams across observability, detection and response, and threat intelligence. Establish playbooks, escalation paths, on-call operations, tabletop exercises, and continuous improvement. Partner with Engineering, Product, and Infrastructure to embed reliable telemetry and security capabilities across cloud, corporate, and production environments.

Lead corporate security for endpoints, device trust, SaaS posture, workforce identity, and network access. Build teams, automate controls as code, implement allowlisting, binary authorization, 802.1x, and govern OAuth/MFA to enforce least-privilege across the company.

Designs and implements security architectures and embedded software for complex processors. Responsibilities include analyzing adversary threats, developing countermeasures, integrating hardware and software, defining system requirements and architectures, and validating solutions. The role involves cryptographic algorithms, secure coding, operating system security, security protocols, and defense-in-depth solutions. Engineers may provide technical leadership and apply model-based systems engineering practices. This is a full-time onsite position supporting defense electronics and national security missions.

Own spacecraft and embedded-platform security architecture, threat modeling, PKI, cryptography, secure boot, firmware, FPGA, RF, and supply-chain security. Build production security tooling, foundational services, test frameworks, and validation platforms for resource-constrained systems. Lead penetration testing, security assessments, secure development practices, and organization-wide hardening initiatives while mentoring engineers and addressing novel space-based threats.

Owns security architecture and defensive controls for spacecraft, flight software, firmware, FPGA designs, RF systems, and hardware platforms. Designs embedded PKI, secure boot, cryptographic systems, key management, and supply-chain protections. Leads security assessments, penetration testing, tooling, and automated validation frameworks while driving secure development practices across engineering teams. Requires deep hardware, firmware, cryptography, and software expertise in high-assurance space systems.

Partners with engineering teams to identify and remediate product security risks across the software development lifecycle. Responsibilities include threat modeling, secure architecture and coding guidance, security testing, vulnerability prioritization, penetration testing coordination, bug bounty remediation, application monitoring, developer training, and secure deployment practices. The role also advances AI-assisted security tooling, DevSecOps practices, security champions, Kubernetes and container security, and scalable risk-based remediation frameworks.

Lead cloud security architecture across AWS and GCP, strengthening identity, access management, workload protection, encryption, secrets management, and secure deployment paths. Build Terraform and policy-as-code guardrails, improve cloud threat visibility and detection, support threat hunting and incident response, and drive strategic security initiatives across engineering teams. Provide technical leadership, mentorship, and guidance while delivering measurable security improvements at scale.

Participate in cybersecurity engagements, job shadows, coursework, special projects, and professional networking. Assist with developing client security solutions, assessing information security risks, researching emerging threats, and supporting cross-functional projects. Interns receive training, career coaching, and hands-on experience while developing communication, technical presentation, decision-making, and collaboration skills.

Leads enterprise IAM security strategy, governance, and risk management across human, machine, service, workload, and AI-agent identities. Establishes authentication, authorization, lifecycle, access-control, and policy standards; translates regulatory and audit requirements into sustainable controls; drives remediation and modernization; and advises senior stakeholders. The role advances zero trust, least privilege, passwordless authentication, policy-as-code, identity threat detection, and secure access patterns across cloud, APIs, applications, and hybrid environments.