Top Cyber Security Jobs

Owns the enterprise control plane and product strategy for agentic technologies, AI platforms, non-human identities, and emerging technologies. Defines identity, authorization, governance, monitoring, auditability, risk, and enforcement capabilities that enable secure AI adoption. Translates security and regulatory requirements into scalable platform features, partners with engineering and control functions, manages roadmaps and operational performance, and communicates control gaps and decisions to senior stakeholders.

Build and manage Juicebox’s IT, identity and access management, employee provisioning, device management, ticketing, and support operations. Implement and administer Okta and access workflows across business applications, evaluate AI-powered IT tools, support compliance audits through access governance and documentation, and provide hands-on employee troubleshooting. This first dedicated IT role requires establishing scalable systems and processes from scratch while partnering with Security, Engineering, and business teams.

Leads complex cybersecurity initiatives, including Microsoft Purview DLP and data classification, third-party risk assessments, security architecture, vulnerability scanning, penetration testing, and incident response. Designs and manages enterprise security solutions, investigates application and service security, performs risk assessments and root-cause analysis, and advises stakeholders on security practices. The role also mentors colleagues, documents processes, and supports emerging AI and cloud security risks.

Leads research security and sponsored research compliance for federally funded and industry-sponsored projects. Oversees CMMC compliance, evaluates protected-data obligations, conducts gap analyses, develops project-specific control plans, supports audits and assessments, provides sponsor certifications, and maintains compliance documentation. Advises and trains researchers and stakeholders on cybersecurity, controlled data, privacy, and regulatory requirements while developing practical policies and institutional controls.

Leads enterprise cryptography consulting engagements for executives and security leaders. Responsibilities include cryptographic risk assessments, post-quantum readiness, enterprise key management, HSM strategy, PKI architecture, encryption modernization, crypto-agility design, and migration roadmaps. The role develops governance, policies, standards, and risk-based transformation programs aligned with NIST, ISO, and regulatory requirements. It also includes client presentations, executive advisory, thought leadership, cross-functional coordination, workshops, and mentoring.

Designs, implements, and operates SASE and ZTNA architecture across GCCH and commercial environments. Owns identity-driven access controls, session management, telemetry, compliance mapping, dashboards, and audit evidence. Serves as the senior escalation point for incidents, performs root-cause analysis, integrates device posture and SOAR workflows, develops AI-enabled automations, collaborates with identity, network, compliance, and vendors, and mentors junior engineers.

Lead design and implementation of automated control testing, continuous monitoring, telemetry, and evidence collection. Integrate governance, risk, asset, CMDB, and evidence platforms; translate control requirements into scalable automation, metrics, and audit-ready reporting. Partner with Risk, Audit, BI, and Technology to onboard evidence sources, improve traceability, and drive governance transformation. Develop operating models, playbooks, and automation routines to support reporting, remediation tracking, and executive visibility.

Plans and coordinates cybersecurity projects involving security policies, risk assessments, network and endpoint scans, security architecture, audits, and system certification. Develops project charters, business cases, budgets, schedules, reports, RFIs, and RFPs. Evaluates vulnerabilities and vendor submissions, coordinates stakeholders and rollout activities, and reports compliance findings and project status to leadership.

Administer enterprise security technologies, cloud and infrastructure platforms, Linux systems, networks, identity controls, and endpoint deployments. Monitor and respond to incidents, manage vulnerabilities, maintain secure configurations, and support CMMC compliance. Troubleshoot complex infrastructure issues, document technical evidence, and collaborate with IT teams on cybersecurity, reliability, risk mitigation, and continuous improvement.

Manage enterprise information security strategy, incident response, forensic investigations, threat hunting, SIEM optimization, patch management, DLP, continuous monitoring, and risk mitigation. Implement Microsoft Intune, Sentinel, Defender, Splunk, and automated security solutions. Develop IT roadmaps, enforce NIST, FISMA, HIPAA, PCI, CUI, and ITAR compliance, and support FedRAMP technology integration. Produce executive-level security reporting and oversee enterprise security posture improvements.

Implements and operates Identity and Access Management solutions covering provisioning, access governance, identity federation, and secure application integrations. Develops IAM architecture and design documentation, troubleshoots access issues, supports SAML and OAuth integrations, and helps ensure policy compliance and performance. The role may lead IAM projects and work across hybrid cloud and on-premise environments using platforms such as Oracle IAM and CyberArk. It also requires Linux or Unix knowledge and may involve monitoring with SIEM tools.

Owns the company-wide IT and cybersecurity program, including SOC 2 compliance, cloud security, penetration-test remediation, business continuity testing, endpoint management, access controls, onboarding and offboarding, AI security governance, vendor reviews, security training, incident response, and employee IT support. The role partners with engineering, HR, Finance, leadership, auditors, and healthcare customers while managing security across AWS, Heroku, Cloudflare, Google Workspace, GitHub, and related tools.

Supports Azure Government cloud infrastructure, web applications, and PaaS environments while partnering with infrastructure, cloud, and application teams. Performs NIST RMF security control assessments, credentialed vulnerability scans, configuration reviews, and security findings analysis. Recommends remediation, evaluates security control effectiveness, and develops artifacts for RMF documentation and accreditation. The role requires Azure administration, Windows and Linux hardening, DISA STIG/SCAP knowledge, DoD IAT III certification, and an active Secret clearance.

Build and automate security infrastructure across AWS and Kubernetes, including cryptographic material lifecycle, telemetry pipelines, policy-as-code, compliance monitoring, and incident-response tooling. Develop agentic AI workflows using coding assistants, MCP integrations, and custom harnesses. Apply threat modeling and secure architecture review while partnering with engineering, risk, auditors, vendors, and clients. The role emphasizes production software, cloud-native automation, continuous control monitoring, and eliminating manual security toil.

Build and operate a reliable security platform across hundreds of AWS environments. Responsibilities include security telemetry and OpenSearch infrastructure, GitOps deployments, Kubernetes and AWS security controls, cross-account and multi-region architecture, Python automation, and agentic AI workflows. The role participates in on-call support, security incident enablement, audit evidence automation, and reliability improvements while collaborating with Security Operations, Risk, and SRE teams.

Design, implement, and maintain secure network and cloud architectures. Build automated security controls, perform risk assessments and security reviews of IaC and system designs, ensure compliance and governance, integrate security solutions, and deliver training to promote data protection.

Lead alliance and technical product marketing: build joint positioning and go-to-market enablement with strategic partners, own competitive intelligence and technical differentiation, create content and launch programs that drive pipeline and inform product and GTM strategy.

Summer internship building security-focused software solutions. Gain hands-on experience in application development, Agile/LEAN practices, collaborate across teams, receive mentorship, and contribute to protecting investor outcomes through practical engineering assignments.

Join a product security team to improve security across the Studio 5000 Logix Designer lifecycle. Contribute to design, code reviews, testing, threat modeling, vulnerability remediation, and security assurance. Integrate security requirements with global engineering teams, evaluate AI-generated outputs, and promote SSDLC and DevSecOps practices for Windows desktop and industrial control system software.

Lead design and implementation of security controls, drive audit readiness across multiple frameworks (FedRAMP, SOC2, ISO, CMMC), gather audit evidence, liaise with auditors and government officials, translate compliance into practical controls with engineering/product teams, draft policies, automate compliance processes, and represent the program in customer security reviews.

The Application Security Engineer ensures security in software development, focusing on secure coding practices, securing applications, and enabling secure, compliant software for various systems.

Lead pre-sales architecture and post-sales technical adoption for an AI-native ASPM platform. Run demos, POCs, onboarding, and executive reviews; translate complex security and SDLC requirements into architectures, drive adoption, expansion, and product feedback. Serve as senior escalation and build playbooks for secure AI-SDLC and supply chain practices.

As a Manager for CyberOps, you will lead third-party security assessments, conduct technical inspections, develop assessment tools, and manage collaborative projects to enhance information security and risk management processes.

Design and execute integration and security-focused test plans for PAM and Keeper Secrets Manager. Validate integrations across cloud providers, IAM, CI/CD, and OS/databases; perform reliability and security testing; analyze logs and defects; contribute to automation and collaborate with engineering, product, and security teams to ensure reliability and compliance.

Lead cybersecurity engineering for systems, ensuring compliance with RMF/NIST and security standards (STIG, OWASP, CIS). Perform vulnerability assessments, A&A support, risk analyses, implementation guidance, and vulnerability remediation using tools like Nessus, Nexpose, ACAS, and SAST/DAST. Coordinate stakeholders, document security posture, and obtain required special access and clearances.