Top Cyber Security Jobs

Leads Velogica US information security and compliance, including SOC 2 and ISO 27001 assurance, risk and vulnerability management, control harmonization, audit readiness, client security reviews, and technical security guidance across cloud, application, DevSecOps, AI/LLM, incident response, and secure SDLC practices.

Supports cybersecurity risk management and authorization activities through the Risk Management Framework. Develops security documentation, including SSPs and POA&Ms; identifies controls; coordinates testing; reviews audit records; supports cloud security; analyzes vulnerabilities and recommends mitigations. Requires extensive systems security experience, cloud expertise, Linux and virtualization knowledge, TS/SCI clearance with active polygraph, and onsite work in McLean, Virginia.

Administer user access, entitlements, provisioning, and deprovisioning across platforms and applications. Apply least-privilege and security controls, coordinate with application owners and security coordinators, support access requests, maintain policies and procedures, meet SLAs, identify process improvements, and communicate findings and recommendations to stakeholders.

Designs and transforms global enterprise security capabilities across endpoint, cloud, identity, network, application, and data domains. Evaluates emerging technologies, develops proofs of concept, automates security controls using APIs and scripting, and partners with architecture, operations, infrastructure, application, and business teams. The role builds scalable integrations, engineering standards, and adaptive security solutions while improving cyber resilience through telemetry, threat intelligence, and incident learnings.

Operate and improve the internal information security program across security operations, incident response, identity and access management, endpoint and network security, vulnerability management, compliance, third-party risk, and security awareness. The role monitors security platforms, investigates incidents, administers access controls, coordinates remediation, supports audits, reviews vendors, documents procedures, automates processes, and participates in an on-call rotation.

Designs and deploys security solutions across complex hybrid cloud environments, advises on secure architecture and resilient implementation processes, and collaborates with infrastructure leadership, engineering, architecture, operations, and cloud vendors. The role also supports special security projects and initiatives within a 24/7 government technology operation.

Conduct security research focused on next-generation intrusion and anomaly detection. Analyze large-scale security event data, develop machine learning and statistical models, and design scalable, low-latency analytics platforms using streaming, graph-based, and representation-learning techniques. Collaborate with researchers, product teams, and engineers to transition concepts into deployed systems, while publishing and presenting findings in leading security, systems, and data-management venues.

Lead a team building automated systems and tools to discover, explain, and remediate vulnerabilities in native Windows code. Develop scalable detection methods, enable automated security testing for developers, collaborate with product teams, and drive team clarity and execution.

Design, build, deploy, and operate scalable backend security services using REST and/or gRPC APIs. Define service architecture, data models, integrations, and reliability practices while supporting observability, incident response, testing, and continuous improvement. Integrate identity providers, key-management services, HSMs, SIEMs, and access-control systems across customer environments. Collaborate with product, security, infrastructure, and customers, contribute to technical direction, and mentor engineers.

Designs, deploys, operates, and improves cloud and network security infrastructure across AWS and on-premises environments. Manages AWS security services and Palo Alto firewalls, develops hybrid-cloud security architectures, implements Infrastructure as Code and automation, troubleshoots complex incidents, and supports compliance with NIST, FedRAMP, and FISMA frameworks. The role also develops monitoring, alerting, runbooks, and security standards while participating in on-call escalation support.

Conduct manual penetration tests and secure code reviews across web applications, APIs, AWS infrastructure, and AI systems. Develop AI-assisted security tooling, test LLM applications and agents, triage SAST findings, tune detection rules, support security reviews before production, and communicate risks and remediation priorities to engineering teams.

Lead Riot’s Anti-Cheat Engineering team developing and evolving Vanguard’s Windows client services. Set technical direction, manage and recruit engineers, translate emerging cheat threats into detections and mitigations, and guide investigations involving kernel manipulation, evasive cheats, and compatibility issues. Partner with game, product, operations, and engineering teams to deliver secure, reliable anti-cheat capabilities while balancing security, performance, player experience, and delivery risks.

Provides security engineering and architecture expertise for FedRAMP Cloud Service Provider assessments. Reviews full-stack architectures, authorization packages, security controls, policies, assessment reports, vulnerability scans, and penetration tests for compliance with FedRAMP, NIST, FISMA, RMF, and agency requirements. Leads vendor interviews, identifies technical and documentation gaps, supports continuous monitoring, advises government program leaders and CISOs, and provides security recommendations for cloud systems.

Supports enterprise security operations through monitoring, investigation, incident response, vulnerability management, control validation, identity and cloud security, risk assessments, and audit evidence collection. The role analyzes security telemetry, coordinates containment and remediation, improves security processes and automation, supports awareness activities, documents investigations, and communicates risks to technical and business stakeholders. It also provides guidance to team members and participates in after-hours incident escalation when needed.

Conduct penetration testing across web, mobile, API, and network environments; simulate threat actors through Red Team campaigns; identify vulnerabilities; and provide remediation guidance. Requires offensive security experience, proficiency with penetration testing tools, Linux, networking, command-line utilities, and programming. Cloud, threat modeling frameworks, offensive security certifications, and Korean-English fluency are preferred.

Lead security engineering for RTOS, hypervisor, and embedded virtualization: design and review defenses, collaborate on CPU/SoC security, perform threat modeling and automotive TARA, review low-level C/C++ code, build fuzzing and test infrastructure, assess vulnerabilities, and drive security fixes and verification toward automotive safety and security standards.

Build, secure, automate, and operate AWS and Kubernetes infrastructure while supporting HIPAA and SOC 2 compliance. Responsibilities include Terraform development, CI/CD security, IAM, vulnerability management, observability, SIEM integrations, incident response, infrastructure hardening, scripting, technical documentation, and cross-functional automation. The role also participates in on-call coverage and evaluates new security and infrastructure tools.

Provides systems security engineering for Air Force armament programs, including anti-tamper, information assurance, supply chain risk management, and platform security. Identifies critical program information and mission-critical components, develops protection specifications, supports secure weapon-system integration, and ensures compliant connections to classified networks. The role also supports RMF assessments, authorization, continuous monitoring, ATO processes, PIT security, audits, and stakeholder coordination while protecting classified technologies from exploitation and supply-chain risks.

Lead and continuously improve the enterprise information security and risk program, manage security operations, cloud/application/infrastructure security, vulnerability and threat management, risk assessments, policy and awareness, incident response, and a security team. Advise senior leaders, embed security-by-design, ensure compliance, and translate strategy into measurable roadmaps that balance protection with business needs.

Own and secure the cloud infrastructure for a multi-tenant SaaS product: design secure cloud architecture, deploy infrastructure security (access, certificates, logging), develop isolation/sandboxing, review IaC changes, audit environments for vulnerabilities, and create secure cloud policies and procedures.

Designs, engineers, and maintains SIEM data collection and security monitoring infrastructure. Develops detection use cases, dashboards, alerts, reporting metrics, and log onboarding strategies. Integrates threat intelligence and SOAR technologies, supports incident response and threat hunting, troubleshoots security systems, and escalates complex investigations. Collaborates with SOC analysts, incident response teams, executives, and cross-functional stakeholders to improve detection, automation, and enterprise security operations.

Designs, operates, monitors, and remediates security solutions across cloud, infrastructure, application, and DevSecOps environments. Analyzes security events and threat models, implements security standards and controls, develops security automation, supports secure coding practices, and resolves cross-functional security issues. The role requires strong knowledge of security tools, cloud technologies, application development, identity standards, operating systems, networking, and cybersecurity frameworks.

Performs cloud information systems assessment and authorization activities for DoD systems, including security categorization, system security plans, risk assessments, control assessments, POA&Ms, ST&Es, privacy assessments, incident response preparation, and authorization documentation. Uses CSAM, eMASS, PPSM, ACAS, and STIG processes to monitor and mitigate cybersecurity risks. Supports ISSMs and may provide after-hours or weekend support during planned or emergency events.

Build and scale application security for a SaaS platform by integrating SAST, SCA, DAST, secrets scanning, and container/IaC checks into CI/CD. Partner with engineering and DevOps teams on threat modeling, secure code reviews, vulnerability remediation, incident response, and secure development practices. The role also supports compliance goals and translates security risks clearly to engineers.

Partner with product, platform, and infrastructure teams to embed security into products and AWS cloud architecture. Conduct application security assessments, code reviews, threat modeling, penetration tests, red-team exercises, and vulnerability remediation. Assess AI and agentic AI capabilities, investigate security findings and customer concerns, support incident response, monitor threat intelligence, and automate security processes. Occasional on-call participation may be required.