Top Cyber Security Jobs

Leads product and platform security for Federal Reserve Financial Services, overseeing security architecture, secure development lifecycles, threat modeling, DevSecOps, security testing, risk management, and cloud security. Advises product, engineering, architecture, and executive stakeholders; establishes security standards and reference architectures; evaluates security technologies; and leads, mentors, and develops the security team. The role also represents security interests across Federal Reserve System forums and requires occasional travel and national security clearance eligibility.

Leads security engineering across multiple technology domains, clarifies security requirements, supports multi-level network security, and advises stakeholders during vulnerabilities and disruptive events. Performs threat modeling, risk assessment, vulnerability and penetration testing, and validates AI-assisted security recommendations. Designs and implements enterprise security solutions while ensuring security testing, control validation, traceability, auditability, and resiliency throughout software development lifecycles and toolchains.

Manage customer security inquiries, enhance the Trust Center, collaborate with Engineering and Information Security, and review security clauses in contracts, MSAs, and DPAs. Translate technical security details for business audiences, maintain trust systems, support compliance frameworks, report risk and trust metrics to senior leaders, and develop AI-driven prompts and workflows to automate governance tasks.

Monitor, triage, and investigate security alerts across Microsoft Sentinel and Azure infrastructure. Follow playbooks to contain and escalate threats, document investigations, apply MITRE ATT&CK and Cyber Kill Chain concepts, identify detection gaps, and support tuning efforts. The role requires clear communication, methodical alert handling, and a willingness to develop scripting, log analysis, and evidence collection skills.

Own detection engineering and SOAR automation for an Azure-native platform. Build and tune Microsoft Sentinel analytics rules, close telemetry gaps across AKS, endpoints, and networks, and develop automated workflows for triage, enrichment, and response. Translate threat intelligence into detection logic, integrate security tools through APIs and scripting, reduce false positives, and improve detection coverage and analyst efficiency.

Leads enterprise cybersecurity incident response from identification through recovery and post-incident review. Acts as Incident Commander for high-severity events, coordinating technical, business, legal, privacy, communications, and executive stakeholders. Maintains incident documentation, facilitates war rooms, delivers executive briefings, manages corrective actions, develops response playbooks and exercises, tracks operational metrics, and drives improvements through automation, orchestration, and enhanced detection capabilities.

Paid, onsite summer cybersecurity and information security internship supporting project-based assignments at the Federal Reserve Bank of Chicago. Interns work 40 hours weekly for 10–12 weeks, analyze data, communicate findings, present information, and collaborate with internal stakeholders. Applicants must be current students graduating December 2027 or later, meet GPA requirements, and be authorized to work in the United States without visa sponsorship.

Performs COMSEC custodial and industrial security duties, including classified keying material and equipment inventories, transfers, accountability, installation, destruction, and compliance oversight. Maintains records, supports classified networks, trains personnel, conducts inspections, and reports discrepancies. The role requires physical work in production environments, including climbing, lifting, and confined-space access, as well as an active Top Secret clearance and U.S. person status.

Leads cloud security advisory engagements across IaaS, PaaS, and SaaS environments. Develops security strategies, architectures, controls, monitoring, and incident response processes; directs risk assessments and vulnerability testing; advises executive clients; drives business development and thought leadership; and mentors security leaders and teams.

Leads cloud security engagements across IaaS, PaaS, and SaaS environments. Designs security architecture and controls, conducts risk assessments and vulnerability testing, manages monitoring and incident response, tracks remediation, and develops technical deliverables. The manager coaches team members, oversees project quality and timelines, addresses stakeholder issues, and identifies opportunities to improve cloud security through automation and emerging technologies.

Own third-party risk management and business continuity programs while building production data pipelines, integrations, policy-as-code controls, continuous monitoring, and agentic AI workflows. The role requires defining technical direction, integrating imperfect data sources, automating evidence collection, and partnering across Security, Procurement, Resilience, and Engineering teams to improve governance and operational resilience.

Leads product strategy and a team of Product Managers for ServiceNow’s Unified Security and Exposure Management portfolio. Defines AI-native, enterprise-grade security products for CISO organizations, drives product vision and roadmaps, and collaborates with customers, architects, engineering, and cross-functional teams. The role requires deep cybersecurity expertise, experience scaling enterprise software products, strong technical depth, data-driven prioritization, and exceptional communication skills.

Leads the DevSecOps and application security function, managing the team, program strategy, roadmap, tooling, vendors, and budget. Establishes security-by-design practices, threat modeling, secure development guidance, and training. Governs application and software supply-chain security across CI/CD, cloud, containers, infrastructure, APIs, and on-premises environments. Oversees vulnerability management, security testing, remediation, reporting, and risk processes while partnering with engineering, IT, cloud, SecOps, GRC, and architecture teams.

Own Deepgram’s privacy operations, security compliance, audit evidence, control mapping, security questionnaires, policies, and public trust documentation. Lead DPIAs, data-flow mapping, DSAR and deletion workflows, vendor reviews, SOC 2, ISO 27001, and PCI DSS audits. Partner with Engineering, Legal, Research, and Sales Engineering to verify technical claims, automate evidence collection, maintain accurate documentation, and translate privacy and AI regulations into practical requirements and enablement.

Build and automate security controls across bare-metal Linux infrastructure and AWS. Responsibilities include host hardening, vulnerability and patch management, container and CI/CD security, penetration testing, detection and incident response, access and log reviews, compliance evidence automation, and software supply-chain security. The role also supports customer security work and applies AI tooling to security operations.

Lead AI-focused application security at Samsara by assessing software, code, hardware, and firmware against AI-driven attacks. Build and red-team AI-enabled security tools, apply LLMs and agentic workflows to security operations, develop fixes with engineers, and shape company-wide AI security strategy. Partner with engineering, hardware, and executive stakeholders on threat modeling, vulnerability management, secure AI adoption, and offensive validation.

Leads AI-focused application security across software, cloud, hardware, and firmware. Conducts security assessments and AI-driven red-team exercises, develops secure-code fixes and AI-enabled security tooling, validates controls for LLM and agentic systems, and shapes organization-wide AI security strategy. Partners with engineering, hardware, and executive stakeholders to identify threats, implement mitigations, and safely adopt AI within security operations.

Lead AI-focused application security across software, cloud, hardware, and firmware. Conduct offensive security assessments and AI-driven red teaming, develop secure-code fixes and AI-enabled security tooling, evaluate threats such as prompt injection and agent abuse, and establish organization-wide AI security strategy. Partner with engineering, hardware, and executive leadership to strengthen security controls and adoption of safe AI workflows.

Leads the architecture, engineering, and lifecycle management of cybersecurity platforms across hybrid cloud and on-premises environments. Develops secure software, automation, infrastructure-as-code, integrations, and CI/CD capabilities for security testing, adversarial simulation, vulnerability research, and cyber-defense validation. Establishes controls for resiliency, access, monitoring, compliance, and recovery; leads troubleshooting and incident response; and partners with cybersecurity, cloud, infrastructure, and enterprise technology teams. Applies AI and large language models to engineering and security workflows while validating security and reliability.

Supports Assessment and Authorization projects for government systems by documenting security controls, architectures, SSPs, CONOPS, contingency plans, user guides, SOPs, and POA&Ms. Coordinates artifacts and stakeholders through RMF and ICD 503 processes, supports ISSO/ISSM and assessor reviews, and tracks projects toward ATD, IATT, ATO, renewals, and extensions. The role also requires understanding complex networks, security enclaves, cloud, virtualization, vulnerability management, and security tools.

Supports enterprise cybersecurity Assessment and Authorization projects by documenting security controls, architectures, SSPs, CONOPS, contingency plans, user guides, SOPs, POA&Ms, and RMF artifacts. Coordinates with technical teams, contractors, assessors, and customer security organizations to achieve and maintain ATD, IATT, and ATO. Tracks accreditation status and supports security reviews across complex network, cloud, virtualization, and enterprise computing environments.

Owns GitLab’s security policy and standards lifecycle, including drafting, approvals, exceptions, attestations, regulatory alignment, framework mapping, audits, and adherence measurement. Translates emerging regulations into actionable requirements, supports customer trust activities, and automates governance and evidence workflows using AI. Provides technical and program leadership across Security, Product, Legal, and Engineering while mentoring team members and shaping the security governance roadmap.

Designs and implements network security architecture for CoreWeave’s hyperscale AI cloud infrastructure. Responsibilities include firewalls, intrusion prevention, segmentation, Zero Trust, monitoring, incident response, and securing GPU clusters and high-speed interconnects. The role collaborates with networking, infrastructure, DevOps, and software teams; develops security policies; supports compliance; leads initiatives; and mentors engineers.

Secures Snyk’s GCP and AWS cloud platforms through threat modeling, IAM hardening, Kubernetes and container security, Terraform and pipeline fixes, CSPM integration, and secure configuration baselines. Uses AI coding agents and MCP integrations to scale infrastructure remediation while reviewing changes for unsafe defaults, excessive permissions, and agent-related risks. Works consultatively with platform teams to implement and measure security improvements.

Lead the design and implementation of enterprise security solutions, clarify multi-network security requirements, perform threat modeling, vulnerability and penetration testing, triage risks and incidents, advise stakeholders, and drive cloud-native and software security initiatives while working independently.