Top Cyber Security Jobs

Lead Cloudflare’s Governance, Risk, and Compliance technical program, initially focused on the Department of Defense Impact Level 4 initiative. Responsibilities include managing roadmaps, milestones, dependencies, governance forums, risks, executive reporting, stakeholder alignment, and cross-functional execution. The role also involves using AI platforms and automation to streamline program administration, metrics, status updates, and dashboards while applying federal cybersecurity frameworks and balancing compliance objectives with security priorities.

Supports cybersecurity operations for Compass Call mission and support systems as an Information Systems Security Officer. Responsibilities include security management, artifact and access control, audit monitoring, incident response, vulnerability management, RMF compliance, documentation, inspections, training, and coordination with government and cybersecurity stakeholders. The role is fully onsite at Davis-Monthan AFB, requires shift and extended CONUS/OCONUS deployment support, and involves hazardous-environment travel.

Lead cybersecurity efforts for a classified Intelligence Community customer. Apply expertise across security operations, system and network administration, ISSO/ISSE functions, Assessment and Authorization, continuous monitoring, auditing, vulnerability management, insider threat monitoring, and security assessments. The role may also involve leading A&A processes, maintaining Splunk environments, and managing classified and unclassified systems.

Lead enterprise cybersecurity engineering strategy across encryption, data protection, cryptographic policy, cloud security, DevSecOps, and automated security controls. Architect scalable key management and tokenization solutions, establish security reference architectures, automate detection and remediation, resolve systemic vulnerabilities, and embed security into software, cloud, infrastructure, and data platforms. Mentor senior engineers, influence technical roadmaps, and translate emerging threats into proactive architectural mitigations.

Designs and delivers cloud and on-premises security platforms, automated controls, IAM, endpoint, network, and data protection solutions. Develops vulnerability management and compliance automation, advises on incident response and forensics, integrates security into enterprise platforms, evaluates security technologies, establishes engineering standards, and supports security tools. Requires cybersecurity experience, cloud expertise, automation capabilities, and familiarity with Palo Alto Networks, infrastructure as code, CI/CD, and security engineering practices.

Leads cybersecurity product strategy, roadmaps, and enterprise security capabilities using threat, risk, data, and design thinking. Partners with engineering, operations, vendors, and executives to prioritize solutions, make build-versus-buy decisions, define metrics, and scale products. Oversees cybersecurity projects, risk programs, control automation, incident analysis, and stakeholder communication while recruiting, mentoring, and managing technical teams.

Leads product and platform security for Federal Reserve Financial Services, overseeing security architecture, secure development lifecycles, threat modeling, DevSecOps, security testing, risk management, and cloud security. Advises product, engineering, architecture, and executive stakeholders; establishes security standards and reference architectures; evaluates security technologies; and leads, mentors, and develops the security team. The role also represents security interests across Federal Reserve System forums and requires occasional travel and national security clearance eligibility.

Leads security engineering across multiple technology domains, clarifies security requirements, supports multi-level network security, and advises stakeholders during vulnerabilities and disruptive events. Performs threat modeling, risk assessment, vulnerability and penetration testing, and validates AI-assisted security recommendations. Designs and implements enterprise security solutions while ensuring security testing, control validation, traceability, auditability, and resiliency throughout software development lifecycles and toolchains.

Manage customer security inquiries, enhance the Trust Center, collaborate with Engineering and Information Security, and review security clauses in contracts, MSAs, and DPAs. Translate technical security details for business audiences, maintain trust systems, support compliance frameworks, report risk and trust metrics to senior leaders, and develop AI-driven prompts and workflows to automate governance tasks.

Monitor, triage, and investigate security alerts across Microsoft Sentinel and Azure infrastructure. Follow playbooks to contain and escalate threats, document investigations, apply MITRE ATT&CK and Cyber Kill Chain concepts, identify detection gaps, and support tuning efforts. The role requires clear communication, methodical alert handling, and a willingness to develop scripting, log analysis, and evidence collection skills.

Own detection engineering and SOAR automation for an Azure-native platform. Build and tune Microsoft Sentinel analytics rules, close telemetry gaps across AKS, endpoints, and networks, and develop automated workflows for triage, enrichment, and response. Translate threat intelligence into detection logic, integrate security tools through APIs and scripting, reduce false positives, and improve detection coverage and analyst efficiency.

Leads enterprise cybersecurity incident response from identification through recovery and post-incident review. Acts as Incident Commander for high-severity events, coordinating technical, business, legal, privacy, communications, and executive stakeholders. Maintains incident documentation, facilitates war rooms, delivers executive briefings, manages corrective actions, develops response playbooks and exercises, tracks operational metrics, and drives improvements through automation, orchestration, and enhanced detection capabilities.

Paid, onsite summer cybersecurity and information security internship supporting project-based assignments at the Federal Reserve Bank of Chicago. Interns work 40 hours weekly for 10–12 weeks, analyze data, communicate findings, present information, and collaborate with internal stakeholders. Applicants must be current students graduating December 2027 or later, meet GPA requirements, and be authorized to work in the United States without visa sponsorship.

Performs COMSEC custodial and industrial security duties, including classified keying material and equipment inventories, transfers, accountability, installation, destruction, and compliance oversight. Maintains records, supports classified networks, trains personnel, conducts inspections, and reports discrepancies. The role requires physical work in production environments, including climbing, lifting, and confined-space access, as well as an active Top Secret clearance and U.S. person status.

Leads cloud security advisory engagements across IaaS, PaaS, and SaaS environments. Develops security strategies, architectures, controls, monitoring, and incident response processes; directs risk assessments and vulnerability testing; advises executive clients; drives business development and thought leadership; and mentors security leaders and teams.

Leads cloud security engagements across IaaS, PaaS, and SaaS environments. Designs security architecture and controls, conducts risk assessments and vulnerability testing, manages monitoring and incident response, tracks remediation, and develops technical deliverables. The manager coaches team members, oversees project quality and timelines, addresses stakeholder issues, and identifies opportunities to improve cloud security through automation and emerging technologies.

Own third-party risk management and business continuity programs while building production data pipelines, integrations, policy-as-code controls, continuous monitoring, and agentic AI workflows. The role requires defining technical direction, integrating imperfect data sources, automating evidence collection, and partnering across Security, Procurement, Resilience, and Engineering teams to improve governance and operational resilience.

Leads product strategy and a team of Product Managers for ServiceNow’s Unified Security and Exposure Management portfolio. Defines AI-native, enterprise-grade security products for CISO organizations, drives product vision and roadmaps, and collaborates with customers, architects, engineering, and cross-functional teams. The role requires deep cybersecurity expertise, experience scaling enterprise software products, strong technical depth, data-driven prioritization, and exceptional communication skills.

Leads the DevSecOps and application security function, managing the team, program strategy, roadmap, tooling, vendors, and budget. Establishes security-by-design practices, threat modeling, secure development guidance, and training. Governs application and software supply-chain security across CI/CD, cloud, containers, infrastructure, APIs, and on-premises environments. Oversees vulnerability management, security testing, remediation, reporting, and risk processes while partnering with engineering, IT, cloud, SecOps, GRC, and architecture teams.

Own Deepgram’s privacy operations, security compliance, audit evidence, control mapping, security questionnaires, policies, and public trust documentation. Lead DPIAs, data-flow mapping, DSAR and deletion workflows, vendor reviews, SOC 2, ISO 27001, and PCI DSS audits. Partner with Engineering, Legal, Research, and Sales Engineering to verify technical claims, automate evidence collection, maintain accurate documentation, and translate privacy and AI regulations into practical requirements and enablement.

Build and automate security controls across bare-metal Linux infrastructure and AWS. Responsibilities include host hardening, vulnerability and patch management, container and CI/CD security, penetration testing, detection and incident response, access and log reviews, compliance evidence automation, and software supply-chain security. The role also supports customer security work and applies AI tooling to security operations.

Lead AI-focused application security at Samsara by assessing software, code, hardware, and firmware against AI-driven attacks. Build and red-team AI-enabled security tools, apply LLMs and agentic workflows to security operations, develop fixes with engineers, and shape company-wide AI security strategy. Partner with engineering, hardware, and executive stakeholders on threat modeling, vulnerability management, secure AI adoption, and offensive validation.

Leads AI-focused application security across software, cloud, hardware, and firmware. Conducts security assessments and AI-driven red-team exercises, develops secure-code fixes and AI-enabled security tooling, validates controls for LLM and agentic systems, and shapes organization-wide AI security strategy. Partners with engineering, hardware, and executive stakeholders to identify threats, implement mitigations, and safely adopt AI within security operations.

Lead AI-focused application security across software, cloud, hardware, and firmware. Conduct offensive security assessments and AI-driven red teaming, develop secure-code fixes and AI-enabled security tooling, evaluate threats such as prompt injection and agent abuse, and establish organization-wide AI security strategy. Partner with engineering, hardware, and executive leadership to strengthen security controls and adoption of safe AI workflows.

Leads the architecture, engineering, and lifecycle management of cybersecurity platforms across hybrid cloud and on-premises environments. Develops secure software, automation, infrastructure-as-code, integrations, and CI/CD capabilities for security testing, adversarial simulation, vulnerability research, and cyber-defense validation. Establishes controls for resiliency, access, monitoring, compliance, and recovery; leads troubleshooting and incident response; and partners with cybersecurity, cloud, infrastructure, and enterprise technology teams. Applies AI and large language models to engineering and security workflows while validating security and reliability.