Top Cyber Security Jobs

Maintains cybersecurity compliance and Authority to Operate approvals for Department of War information systems. Responsibilities include RMF package development, continuous monitoring, audit-log review, account authorization, vulnerability scanning, STIG compliance, incident response, security training, POA&M management, and coordination of system changes. The role requires an active Top Secret clearance with SCI eligibility, DoD cybersecurity certification, on-site work in Spokane, and occasional travel.

Develop and implement security features for embedded devices, PCs, and server-class workstations. Responsibilities include secure boot, cryptography, key management, device identity, secure communications, data protection, and hardware-backed security. Collaborate with firmware, operating system, hardware, cloud, and design teams; contribute to threat modeling, vulnerability analysis, testing, remediation, and secure SDLC practices. Investigate security issues and improve product reliability across Linux, AOSP, Windows, and embedded environments.

Supports ISSO and security architecture teams with cybersecurity compliance coordination, ATO and RMF activities, documentation, artifact management, vulnerability remediation tracking, inventory alignment, POA&M reporting, stakeholder follow-up, and continuous monitoring. Maintains security agreements, GRC records, project trackers, and assessment evidence while escalating documentation gaps and schedule risks in a federal or DoD environment.

Monitor and defend corporate, product, and mission environments through SOC operations, SIEM analysis, threat hunting, incident response, digital forensics, malware analysis, and vulnerability management. Develop detections, dashboards, alerts, and automation; assess compliance against security frameworks; document findings and procedures; support remediation, security training, and tabletop exercises. The role also contributes to endpoint, cloud, Linux, network, and application security across distributed enterprise environments.

Supports security operations by onboarding and troubleshooting network monitoring infrastructure, triaging security-device issues, resolving escalated customer problems, coordinating vendor maintenance, and managing hardware sensors. The role collaborates with SOC analysts, assists with testing and quality assurance, provides customer support, and participates in on-call incident response. Requires network and security administration experience, TCP/IP knowledge, command-line expertise, and troubleshooting across Linux, Windows, and macOS.

Designs, develops, and supports secure AI-powered applications, agents, APIs, integrations, and workflow automations. Builds Generative AI solutions using LLMs, prompt engineering, retrieval patterns, and enterprise data. Responsibilities include full software delivery lifecycle participation, AI output evaluation, stakeholder collaboration, secure engineering, governance, monitoring, risk controls, and operational readiness.

Participate in a paid 10-week internship developing secure applications and systems, implementing security controls, identifying vulnerabilities, and creating security automation tools. Collaborate with engineering, security, and platform teams in Agile environments while gaining experience in secure software development, cybersecurity, design, development, and testing. Receive mentorship, coaching, and leadership development throughout the program.

Paid 10-week summer internship supporting secure application and systems development, security controls, vulnerability remediation, security automation, and secure software practices. The intern will collaborate with engineering, cybersecurity, and platform teams in Agile environments while developing technical and leadership skills through mentorship and project work.

Maintains corporate information security and cloud system protections by evaluating monitoring outputs, assessing risks and vulnerabilities, implementing access and remediation controls, designing secure configurations, supporting incident response, and coordinating with IT, security, and application teams. The role also advises on risk acceptance, regulatory standards, confidentiality, and secure system design.

Supports a CACI engineering team delivering network modernization solutions for an NGA cybersecurity program. Assists with solution design, project lifecycle activities, and task monitoring under senior engineering supervision. The intern works fully onsite in Springfield, Virginia, collaborates with project managers and technical staff, and applies foundational knowledge of network communications and computer operations. An active TS/SCI clearance, U.S. citizenship, and enrollment in an engineering, computer science, or cybersecurity program are required or preferred as specified.

Manages DoD and Intelligence Community RMF compliance for information systems. Conducts security reviews, vulnerability scans, risk assessments, and continuous security analysis; maintains authorization documentation including SSPs, risk assessments, POA&Ms, and ATOs. Administers vulnerability management tools, prepares audit findings and remediation recommendations, responds to security inquiries, and handles classified information while ensuring compliance with cybersecurity policies.

Leads the design, development, automation, and support of secure customer identity and access management capabilities. Builds PingOne authentication, authorization, fraud detection, risk, registration, recovery, and MFA journeys; integrates web and mobile applications; develops APIs and reusable components; manages migrations; and improves observability through Splunk and Dynatrace. Partners with engineering, fraud, cyber, architecture, product, and business teams to deliver secure, scalable CIAM solutions and guide technical decisions through production deployment.

Designs, implements, and optimizes Microsoft Purview information protection, DLP, insider risk, records management, and lifecycle governance controls across Microsoft 365 environments. Partners with mission stakeholders and technical teams to translate policy into enforcement mechanisms. Builds sensitivity labels, sensitive information types, encryption and retention policies, audit and eDiscovery capabilities, and Entra ID governance controls. Supports Zero Trust initiatives, automation, compliance engineering, and mentoring.

Designs and leads Microsoft cloud security solutions for SMB and enterprise clients. Responsibilities include presales architecture, solution design, technical documentation, security standards, delivery oversight, quality assurance, troubleshooting, client consulting, and supporting cybersecurity capability growth and go-to-market strategies.

Lead product security for Salesforce business units by defining security strategies, conducting architecture reviews and threat modeling, reviewing code and AI/LLM integrations, identifying vulnerabilities, and advising engineering leadership on risk and release readiness. The role requires building scalable security programs across SaaS, private-cloud, public-sector, and regulated environments, with expertise spanning application, cloud, and data security.

Support security engineering for a DoD IL5 SAP S/4HANA environment. Responsibilities include SAP authorization and role management, GRC access controls and SoD enforcement, threat detection and SIEM integration, HANA encryption, ILM and data governance, ABAC, SSO, interface security, and RMF/ATO compliance documentation. The role also implements DISA STIGs, supports audit evidence and ISSM workflows, and requires quarterly travel to Scott Air Force Base.

Leads DEP’s cybersecurity strategy and program across IT and OT environments. Responsibilities include managing security professionals, incidents, vulnerabilities, policies, compliance with New York cybersecurity regulations, risk reporting, audits, security architecture, threat monitoring, critical-response processes, backup strategies, and cybersecurity budgets. The CISO advises executives and technology teams, protects critical infrastructure, and coordinates with NYC Cyber Command and oversight agencies.

Leads PS’s enterprise information security program, owning the ISMS and ISO 27001 certification roadmap. Responsibilities include security governance, audit readiness, risk management, security operations oversight, vulnerability assessments, incident response, access governance, third-party risk management, business continuity, evidence retention, and executive reporting. The role manages cybersecurity analysts, partners with cross-functional leaders, and builds a scalable, evidence-driven security program supporting organizational growth and new locations.

Provides ISSO support for classified and accredited systems, including security documentation, continuous monitoring, vulnerability management, configuration reviews, incident response, and RMF/ATO compliance. Supports cybersecurity, physical security, program security, inspections, training, visitor control, access systems, intrusion detection, and security investigations. Collaborates with engineers, system administrators, security personnel, customers, vendors, and government stakeholders while maintaining security records and responding to help desk and local support needs.

Provides Information System Security Officer support for accredited defense and intelligence systems. Responsibilities include maintaining security plans and evidence, continuous monitoring, audit and vulnerability assessments, configuration management, system accreditation, risk management, incident response, data transfers, security documentation, and collaboration with cybersecurity teams, administrators, engineers, and program staff. The role requires Linux and Windows knowledge, DoD security certification eligibility, U.S. citizenship, and TS/SCI eligibility.

Lead and manage the information security and risk management function, overseeing staff, policies, projects, budgets, and security technology. Drive compliance with corporate and regulatory standards, deliver training and awareness, coordinate audits, and collaborate with stakeholders to implement security strategies and continuous process improvements.

Lead enterprise data security architecture to protect sensitive data across its lifecycle. Define strategies for encryption, key management, tokenization, masking, DLP, classification, database security, and Zero Trust. Advise execs and engineering on secure design patterns for data platforms (e.g., Starburst), cloud/on-prem systems, APIs, data pipelines, and AI/ML workloads. Develop roadmaps, evaluate technologies, mentor staff, and drive secure-by-design adoption across the organization.

Designs and implements security for embedded consumer electronics products, including ARM TrustZone applets, cryptographic device identity, secure boot, firmware protection, key management, and trust chains. Defines security requirements, performs assessments and testing, supports compliance audits, mitigates vulnerabilities, and advises engineering teams through architecture and code reviews. Collaborates with firmware, DevOps, cloud, manufacturing, and program management teams to strengthen product security and incident response.

Build and operate cloud security tooling, automation, and controls across AWS and Azure. Secure IAM, networks, infrastructure-as-code, CI/CD, PKI, certificates, Kubernetes integrations, and secrets management with HashiCorp Vault. Lead security projects from design through implementation, troubleshoot multi-account cloud networks, conduct CSPM and threat detection work, and support incident response. Collaborate with engineering teams on secure architectures and leverage AI to accelerate development. The role is onsite in Denver or Long Beach, may include on-call duties and occasional travel, and requires obtaining and maintaining a security clearance.

Leads SoFi’s Offensive Security function, unifying penetration testing and red teaming. Owns strategy, staffing, tooling, metrics, vendor relationships, regulatory engagement, and execution quality. Builds AI-assisted offensive security capabilities for reconnaissance, exploit development, attack-path analysis, testing, and reporting. Personally contributes to network, application, cloud, mobile, AI, and adversary-emulation engagements while hiring, coaching, and developing the team and partnering with engineering, risk, vulnerability management, and incident response.