Top Cyber Security Jobs

Supports cybersecurity operations for classified information systems by monitoring logs, validating controls, processing access and data transfer requests, maintaining authorization documentation, tracking POA&Ms, identifying security issues, and preparing for audits and inspections. Collaborates with IT, engineering, facilities, and industrial security teams to apply cybersecurity requirements and support remediation in a DoD environment.

Operate and improve cloud security controls across AWS, Azure, Kubernetes, and hybrid environments. Investigate vulnerabilities, misconfigurations, identity risks, and exposure paths using CSPM/CNAPP platforms; prioritize findings and drive remediation. Build Python- and API-based security tooling, dashboards, integrations, automation, and guardrails supported by infrastructure as code and CI/CD. Secure Kubernetes workloads, conduct architecture and pipeline reviews, investigate incidents, and collaborate with Cloud Operations, SRE, and engineering teams.

Monitor security telemetry, investigate and contain incidents, conduct vulnerability assessments, support penetration testing, maintain security tools, perform threat hunting, and develop cybersecurity policies, procedures, playbooks, and after-action reports. The role also includes researching emerging threats, educating employees on security practices, and configuring SIEM, EDR/XDR, SOAR, IDS/IPS, and endpoint security platforms.

Supports cybersecurity accreditation and authorization activities for government information systems. Coordinates with IT, ISSO, C-ISSM/C-ISSO, ISO, and government personnel; monitors and coordinates vulnerability management, patching, and STIG implementation. Performs ISSO responsibilities, NIST RMF assessment and authorization activities, and security tasks involving classified and unclassified systems, networks, standalone computers, and encryption. Requires an associate degree or equivalent experience, one year of cybersecurity experience, DOD IAM I certification, and Secret clearance eligibility.

Leads global security strategy across manufacturing plant OT/ICS, connected medical products, and application security. Oversees FDA medical device cybersecurity compliance, OT/ICS frameworks, DevSecOps, CI/CD security, and application security tooling. Builds and develops global security teams, partners with executives and operating companies, maintains enterprise risk frameworks, reports security posture to leadership and committees, and travels internationally to manufacturing, R&D, and plant locations.

Provides cybersecurity oversight, risk management, compliance support, and Authority to Operate leadership for federal Health IT systems. Responsibilities include ATO documentation and coordination, continuous monitoring, vulnerability remediation tracking, security planning, incident response coordination, reporting, audit preparation, and advising leadership on risks. The role collaborates with system owners, project managers, authorizing officials, and technical teams while ensuring compliance with NIST, FISMA, DHS policies, and related federal security standards.

Owns cybersecurity for classified and controlled information systems, leading RMF authorization, continuous monitoring, inspections, audits, risk management, POA&M closure, change control, and compliance documentation. The ISSM communicates cybersecurity risks to leadership, coordinates corrective actions and cross-functional security activities, and mentors ISSOs. The role requires onsite work in Cedar Rapids, an active DoD Top Secret clearance, IAM Level III certification, and up to 20% domestic travel.

Leads the enterprise information security and compliance program, including governance, risk reporting, vendor security requirements, security awareness training, policy enforcement, project controls, privacy, business continuity, and SOX IT General Controls. Partners with business leaders, enterprise risk teams, internal auditors, and external audit firms to reduce information security risk and maintain regulatory compliance.

Designs, implements, and improves enterprise security capabilities across identity, cloud, infrastructure, endpoints, and governance. Secures Microsoft Entra ID, hybrid Active Directory, Windows Server, Azure environments, privileged accounts, and enterprise access controls. Leads vulnerability remediation, infrastructure hardening, security risk assessments, incident response support, compliance initiatives, audits, and Zero Trust efforts. Partners with infrastructure, cloud, networking, DevOps, and application engineering teams while providing technical guidance to business and technology leaders.

Designs, deploys, and manages enterprise identity and security platforms across Azure, AWS, Windows, Linux, and network environments. Responsibilities include IAM, IGA, PAM, RBAC, Zero Trust, Active Directory hardening, Entra ID migration, automation, incident escalation, troubleshooting, documentation, and security tool integration. The role partners with architecture and risk teams, improves security controls and operational processes, and provides technical guidance on cybersecurity policies, standards, and emerging threats.

Designs, automates, and supports complex cybersecurity solutions across cloud and infrastructure environments. Responsibilities include security alert monitoring, incident and vulnerability management, security architecture, SIEM tuning, access reviews, compliance with frameworks such as SOC 2 and CMMC, risk assessments, third-party security reviews, scripting, and secure technology guidance. The role also mentors team members and partners with technical and business stakeholders to improve security posture.

Owns the business unit’s risk-based cybersecurity capability, governance, compliance, architecture security, identity management, operational security, vendor security, incident response, and awareness programs. Serves as the primary liaison with the Central CISO Office, translating enterprise policies and regulations into practical controls. Partners with business, engineering, IT, architecture, and suppliers to improve cyber maturity, resilience, secure integrations, cloud and SaaS governance, and remediation outcomes.

Leads product security initiatives and manages business risk across product engineering organizations. Partners with executives, engineering, and security teams to prioritize security backlogs, improve risk posture, and translate technical security concepts into business outcomes. Responsibilities span application, cloud, infrastructure, secure coding, security architecture, third-party risk, compliance frameworks, emerging threats, and AI security. The role requires strong stakeholder influence, executive communication, independent ownership, and cross-functional collaboration.

Lead customer security strategy and architecture using Microsoft security products. Assess security posture, design cloud-native solutions, remove technical blockers, author customer insights, and support complex enterprise deployments to accelerate adoption and secure cloud/hybrid environments.

Leads and develops a cloud security engineering team while overseeing security operations across AWS, Azure, and GCP. Responsibilities include managing CSPM, CNAPP, vulnerability management, cloud identity, compliance monitoring, security baselines, remediation programs, automation, governance, metrics, audits, and incident response. The role partners with technical and business stakeholders to reduce enterprise cloud risk and improve security service delivery.

Leads and mentors cloud security engineers while developing and executing security strategy across AWS, Azure, and GCP. Oversees cloud security baselines, monitoring, compliance, vulnerability management, IAM, container and Kubernetes security, and enterprise-scale security solutions. Identifies service gaps, drives automation and AI/ML improvements, documents policies and operational runbooks, and partners with stakeholders to implement new security technologies in production.

Develop and drive enterprise cybersecurity strategy, multi-year roadmaps, portfolio governance, and risk-reduction initiatives. Manage cybersecurity budgets across operational, capital, and professional-services spending. Prepare bi-monthly executive and board reporting that synthesizes cyber posture, threats, vulnerabilities, control gaps, project progress, and remediation risks. Partner with cybersecurity leadership, Finance, technology, risk, and business stakeholders to optimize investments and support risk-informed decision-making.

Sell cybersecurity products and services to Fortune 1000 customers across Missouri, Kansas, Iowa, and Nebraska. Build executive and OEM relationships, develop security sales strategies, generate profitable revenue, and align solutions with customer business objectives. The role requires expert cybersecurity knowledge across areas such as cloud security, compliance, governance, threat management, and vulnerability management, along with experience leading initiatives, creating enablement materials, and holding a CISSP, CISM, CRISC, or comparable credential.

Leads Trustly’s global information security and IT organizations, defining security strategy, architecture, risk management, compliance, SOC operations, incident response, and resilience programs. Oversees enterprise IT, infrastructure, workplace technology, vendors, disaster recovery, and AI-driven productivity initiatives. Advises the executive team and Board on cyber risk, regulatory requirements, and technology resilience while managing global teams and relationships with regulators, auditors, and strategic partners.

Owns security and compliance across IT, software development, GCP infrastructure, and subprocessors. Responsibilities include managing SecOps tools, improving software security posture, conducting security and AI audits, maintaining compliance artifacts, developing data and AI governance, vetting technologies, and managing contractual security obligations. The role partners with engineering teams and requires experience with Vanta, cloud DevOps, infrastructure as code, identity platforms, security reviews, and regulated industries.

Provides cybersecurity governance and oversight for classified information systems supporting the 25th Attack Group. Manages RMF compliance, ATO packages, SSPs, risk assessments, POA&Ms, continuous monitoring, vulnerability management, access controls, incident reporting, and configuration management using eMASS and Xacta. Advises government authorizing officials and senior leadership on cyber risk, supervises ISSO personnel, coordinates exceptions and waivers, and ensures DoD 8140 workforce compliance.

Provides cybersecurity leadership for classified information systems, managing RMF compliance, ATO packages, SSPs, risk assessments, POA&Ms, continuous monitoring, vulnerability management, access controls, incident reporting, and configuration management. Advises government authorizing officials and senior stakeholders on cyber risk, oversees ISSO personnel, coordinates exceptions and waivers, and ensures DoD cybersecurity workforce compliance across assigned enclaves.

Own Forterra’s product security program across autonomous vehicle platforms, including security strategy, governance, DoD ATO and IATT lifecycles, STIG compliance, threat modeling, SBOM and vulnerability management, incident response, and security requirements. Lead product security engineers and cross-functional contributors, brief executives and government stakeholders, support bids and customer evaluations, and build a security-focused engineering culture.

Owns product security for DoD autonomous systems, including end-to-end RMF and ATO execution, security architecture, requirements, threat modeling, STIG applicability, vulnerability management, monitoring, secure updates, SBOMs, and secure SDLC practices. Acts as the security subject-matter expert for engineering teams and government cyber or program offices, securing embedded hardware, software, air-gapped systems, and command-and-control platforms through authorization.

Provides senior security guidance and hands-on DevSecOps engineering for Cisco Intersight. Responsibilities include assessing application and delivery-workflow security, interpreting security mandates and audit requirements, conducting architecture and threat assessments, prioritizing vulnerability remediation, supporting compliance and build-environment security, and developing automation, reporting, hardening, and remediation solutions. The role collaborates with engineering, architecture, product, SRE, compliance, and corporate security stakeholders.