Top Cyber Security Jobs

Designs and implements enterprise cybersecurity controls, manages security applications and advanced tooling, investigates and leads incident response, and supports threat detection, vulnerability remediation, risk assessments, audits, and compliance. Develops security policies and standards, administers cloud security and data protection capabilities, delivers security projects, mentors team members, and communicates security strategies to business and technology partners. Participates in a 24/7 on-call rotation and provides local support across corporate sites.

Leads enterprise security configuration automation and engineering strategy, roadmap, and delivery. Oversees teams developing policy-as-code, configuration baselines, preventive and detective controls, posture management improvements, and security enforcement capabilities. Partners with security, technology, risk, finance, and business stakeholders to remediate control gaps and meet regulatory and audit requirements. Establishes metrics, evaluates investments, and builds a high-performing security engineering team.

Investigate and respond to security incidents through alert monitoring, digital forensics, log and network analysis, evidence preservation, threat containment, and recovery recommendations. The engineer collaborates with technical and non-technical stakeholders, supports vulnerability management and security assessments, improves detection systems, develops automation, documents findings, and participates in a 24x7 on-call rotation.

Build secure-by-default infrastructure platforms, policy-as-code guardrails, identity and access automation, and automated security and compliance controls. Develop reusable infrastructure patterns, self-service workflows, CI/CD and GitOps protections, least-privilege enforcement, and continuous compliance capabilities. Detect configuration drift and automate remediation across cloud environments and engineering workflows while collaborating with teams across the organization.

The Customer Security Engineer will deliver pentesting services, support customers throughout the process, and translate findings into actionable next steps to improve security.

Supports information security operations by monitoring logs and alerts, assessing vulnerabilities, responding to incidents, conducting forensic analysis, maintaining security tools and hardening standards, managing patches, and supporting compliance, disaster recovery, business continuity, and security-related projects. The role also communicates security risks to management and participates in on-call and after-hours rotations.

Supports Security Operations by maintaining system and process compliance with regulatory standards and implementing information security best practices across the organization. The role requires a bachelor’s degree in computer science, IT, cybersecurity, or a related field, along with 2–4 years of IT security or systems administration experience. Relevant certifications such as CISSP, Security+, Microsoft AZ-500, SC-200, or GIAC certifications are preferred.

Supports security operations by monitoring, analyzing, and responding to security events, service requests, and identity-related activities. Escalates security and access issues, supports IAM onboarding and offboarding, collaborates on issue resolution, and assists with audits and compliance in a regulated healthcare environment.

Supports security operations by maintaining compliance with regulatory standards and implementing information security best practices across the organization. The role requires IT security or systems administration experience, security controls knowledge, and the ability to support organizational security processes. Preferred certifications include CISSP, Security+, Microsoft AZ-500, Microsoft SC-200, and relevant GIAC certifications.

Designs and implements security controls across cloud platforms, operating systems, Kubernetes, networks, and CI/CD. Audits infrastructure for weaknesses, develops security and privacy improvements, performs threat modeling, and drives remediation. The role includes software development, infrastructure security, incident containment, and technical security analysis while collaborating with engineering teams in a distributed startup environment.

Conduct application security assessments, identify and validate vulnerabilities, perform dynamic testing and static code reviews, and recommend remediation strategies. Collaborate with development teams to improve application security, use tools such as Burp Suite, and stay current with application security methodologies, web vulnerabilities, and exploitation techniques.

Lead Wikimedia Foundation’s product security strategy, prioritize security and privacy engineering initiatives, develop platform interventions against threats, strengthen organizational security culture, and communicate with Wikimedia communities. The role partners with cross-functional and departmental leaders on information security, represents the Foundation to volunteers, and applies AI-based tools to security analysis, code review, and software engineering. Prior product management experience is not required, but strong technical, security, communication, and online-community experience are important.

Two-year rotational program for graduating students supporting cybersecurity and operational risk assessment, threat and vulnerability analysis, control strengthening, risk reporting, and security initiatives. Participants rotate across cybersecurity operations, threat intelligence, risk management, and identity and access management teams while developing analytical, leadership, and collaboration skills through projects, coaching, and hands-on assignments.

Paid summer cybersecurity internship focused on security strategy, risk mitigation, digital ethics, threat analysis, fraud mitigation, and reporting. Interns gain hands-on experience, collaborate with security and program teams, practice Agile and Lean methodologies, and receive training, mentorship, and coaching. Responsibilities include supporting investor protection, sharing insights, driving outcomes, and contributing independently and collaboratively.

Paid summer cybersecurity internship focused on security strategy, risk mitigation, digital ethics, threat analysis, fraud mitigation, and reporting. The intern will work collaboratively using Agile and Lean methodologies, gain exposure to the software life cycle, contribute to security outcomes, and receive training, mentorship, coaching, and networking opportunities with leaders and peers.

Two-year rotational program for graduating students supporting cybersecurity and operational risk identification, threat and vulnerability analysis, control strengthening, risk reporting, and security initiatives. Participants rotate across risk management, cybersecurity operations, threat intelligence, and identity and access management teams while developing analytical, leadership, and collaboration skills through hands-on projects, capstones, and mentorship.

Leads the company’s Security Operations organization and owns incident response, vulnerability management, threat intelligence, GRC and privacy, and offensive security. The role develops SecOps strategy, platforms, budgets, SOC and detection engineering capabilities, operating metrics, and domain leadership. It oversees security tooling including SIEM, SOAR, and EDR; drives risk-based remediation, threat hunting, red teaming, compliance readiness, and measurable improvements in detection and response across HPC, cloud, GPU, and AI infrastructure.

Manages information security risks, vendor and third-party risk reviews, mitigation plans, policy exceptions, and compliance reporting. Partners with stakeholders and Enterprise Risk Management to maintain risk policies within tolerance. Serves as a technical expert, supports risk awareness and accountability, monitors security controls, and contributes to operational goals. The role requires expertise in IT audit, security monitoring, access management, encryption, networking, incident response, SOX compliance, and project management.

Manage information system security for classified DoD networks supporting Pacific theater operations. Responsibilities include owning RMF authorization activities, maintaining eMASS packages, implementing STIGs, managing vulnerabilities and POA&Ms, conducting continuous monitoring, coordinating inspections and interconnections, enforcing configuration controls, and supporting security incident response. The role requires an active Secret clearance, DoD 8570 IAT-II certification, NIST and RMF expertise, and experience with eMASS.

Manage cybersecurity compliance and authorization activities for classified DoD systems and networks. Responsibilities include administering eMASS packages, maintaining security policies, conducting inspections and audits, managing vulnerabilities and POA&Ms, overseeing STIG and configuration compliance, executing continuous monitoring, coordinating interconnections, and supporting incident response. The role requires active Secret clearance, DoD IAM-III certification, RMF and NIST expertise, and experience with assessment and authorization processes.

Lead cybersecurity engineering and Risk Management Framework activities for DoD mission systems. Design secure architectures, integrate security requirements, maintain authorization documentation, validate NIST and DISA controls, analyze vulnerability assessments, coordinate remediation, and support continuous monitoring, inspections, assessments, and ATO renewals. Provide technical guidance on system risks, Zero Trust modernization, interconnections, and secure design to system owners, leadership, and engineering teams.

Support the ISSM in managing information security programs for classified systems and networks. Own RMF authorization activities, eMASS packages, continuous monitoring, vulnerability management, STIG compliance, configuration management, inspections, interconnection requests, and POA&M tracking. Coordinate security activities across stakeholders, respond to incidents, assess system changes, and provide policy and compliance oversight in a fast-paced DoD environment.

Manage cybersecurity and authorization activities for classified systems supporting DoD mission operations. Responsibilities include RMF lifecycle management, eMASS packages, STIG compliance, vulnerability and patch management, configuration control, continuous monitoring, POA&M tracking, inspections, security audits, incident response, and coordination of system interconnections. The role requires an active Secret clearance, six years of relevant experience, strong NIST and DoD compliance knowledge, and may involve nontraditional work hours.

Manage cybersecurity compliance and authorization activities for classified DoD systems and networks. Responsibilities include maintaining eMASS packages, implementing RMF and STIG requirements, coordinating inspections and interconnections, managing vulnerability remediation and continuous monitoring, overseeing configuration management, and supporting security incident response. The role requires extensive cybersecurity experience, an active Secret clearance, and strong knowledge of DoD security standards and compliance tools.

Support cybersecurity operations for classified systems at Joint Base Pearl Harbor Hickam. Manage the RMF lifecycle, eMASS authorization packages, STIG compliance, vulnerability and patch management, continuous monitoring, configuration management, inspections, interconnection requests, POA&Ms, and security incident response. Coordinate across stakeholders and provide security guidance for mission-critical systems supporting thousands of users.