Top Cyber Security Jobs

Lead security risk and compliance programs by translating objectives into engineered controls, acceptance criteria, monitoring, and evidence readiness. Evaluate infrastructure and system changes, advise on compliance impacts, coordinate remediation of control deficiencies, and align requirements across NIS2, CCPA, ISO 27001, SOC 2, ISO 42001, and other frameworks. Partner with engineering and business teams to deliver measurable security outcomes.

Own application security for backend services, APIs, cloud infrastructure, and edge systems handling financial transactions. Responsibilities include validating red-team findings, assigning severity, hardening services, implementing WAF and rate-limiting defenses, creating automated security configuration checks, expanding pull-request security gates, reviewing architectures, managing attack-surface coverage, and evaluating security tools. The role also partners with engineers and Security Operations to drive effective remediation.

Own and execute the application security program, including SIEM management, threat detection, architecture and code reviews, vulnerability management, security testing, incident response, forensic investigations, and security tooling. Partner with engineering and infrastructure teams to remediate vulnerabilities, promote secure coding, develop training, and improve enterprise security through cloud, container, compliance, and monitoring practices.

Leads cybersecurity consulting and governance for a business line, coordinating information security assessments across infrastructure, data, network, cloud, resiliency, and access management. Manages cyber risk, supports security capability adoption, advises leadership, and provides updates on information security health. The role also contributes to threat analysis, architecture reviews, incident analysis, third-party risk management, monitoring, and cybersecurity program development.

Lead full-stack engineering projects and developers building cloud-based identity security solutions. Design distributed microservices and APIs, establish engineering standards, partner with architects and product managers, reduce technical debt, optimize performance, mentor engineers, and influence technology strategy. The role uses modern programming languages, databases, containers, cloud platforms, CI/CD, infrastructure as code, automated testing, and observability in an Agile environment.

Leads CDW’s Security Cyber and Physical Professional Services organization, overseeing customer satisfaction, financial performance, utilization, staffing, retention, professional development, service delivery, capacity planning, budgeting, forecasting, and portfolio expansion. Partners with sales, presales, solutions, legal, finance, vendors, and operations teams to develop offerings, improve delivery efficiency, scale capabilities, and drive revenue. Champions responsible AI adoption and continuous improvement while managing senior leaders and ensuring teams meet customer, coworker, operational, and profitability goals.

Owns Cleo’s application and product security strategy across SaaS and customer-hosted products. Responsibilities include maturing the SSDLC, threat modeling, security scanning, vulnerability triage, penetration testing, coordinated disclosure, CVE management, product security controls, customer-facing advisories, and NIST CSF evidence. The role also leads security enablement, roadmap prioritization, AI security reviews, and hands-on exploit reproduction and patch validation while guiding engineers and security partners.

Experienced Product Security Engineer supporting anti-tamper and product security for Boeing defense platforms. Responsibilities include developing requirements, documentation, test plans, and procedures; participating in verification; defining secure hardware and software architectures; and leading integration engineers across multiple programs. The role is fully onsite in Berkeley/St. Louis, Missouri, requires U.S. citizenship and the ability to obtain a Secret clearance, and involves collaboration with platform architects, chief engineers, customers, and suppliers.

Leads product security engineering for defense training systems across requirements, architecture, assessment, testing, certification, and sustainment. Develops cybersecurity controls aligned with DoD RMF, JSIG, and NISPOM; conducts threat and risk assessments; identifies vulnerabilities; tracks mitigation; advises stakeholders; and supports cyber validation, audits, and certification. The role collaborates with engineering, customer, supplier, and industry partners while independently completing cybersecurity tasks.

Lead complex security incident investigations from assessment through recovery, coordinating containment, remediation, evidence preservation, and stakeholder communication. Analyze threats across endpoint, identity, cloud, SaaS, network, and application environments. Build code, queries, automation, and AI-assisted workflows to improve evidence collection, detection, case management, and response. Lead post-incident reviews, drive lasting improvements, mentor responders, and participate in the incident response on-call rotation.

Lead Cloudflare’s Governance, Risk, and Compliance technical program, initially focused on the Department of Defense Impact Level 4 initiative. Responsibilities include managing roadmaps, milestones, dependencies, governance forums, risks, executive reporting, stakeholder alignment, and cross-functional execution. The role also involves using AI platforms and automation to streamline program administration, metrics, status updates, and dashboards while applying federal cybersecurity frameworks and balancing compliance objectives with security priorities.

Supports cybersecurity operations for Compass Call mission and support systems as an Information Systems Security Officer. Responsibilities include security management, artifact and access control, audit monitoring, incident response, vulnerability management, RMF compliance, documentation, inspections, training, and coordination with government and cybersecurity stakeholders. The role is fully onsite at Davis-Monthan AFB, requires shift and extended CONUS/OCONUS deployment support, and involves hazardous-environment travel.

Lead cybersecurity efforts for a classified Intelligence Community customer. Apply expertise across security operations, system and network administration, ISSO/ISSE functions, Assessment and Authorization, continuous monitoring, auditing, vulnerability management, insider threat monitoring, and security assessments. The role may also involve leading A&A processes, maintaining Splunk environments, and managing classified and unclassified systems.

Lead enterprise cybersecurity engineering strategy across encryption, data protection, cryptographic policy, cloud security, DevSecOps, and automated security controls. Architect scalable key management and tokenization solutions, establish security reference architectures, automate detection and remediation, resolve systemic vulnerabilities, and embed security into software, cloud, infrastructure, and data platforms. Mentor senior engineers, influence technical roadmaps, and translate emerging threats into proactive architectural mitigations.

Designs and delivers cloud and on-premises security platforms, automated controls, IAM, endpoint, network, and data protection solutions. Develops vulnerability management and compliance automation, advises on incident response and forensics, integrates security into enterprise platforms, evaluates security technologies, establishes engineering standards, and supports security tools. Requires cybersecurity experience, cloud expertise, automation capabilities, and familiarity with Palo Alto Networks, infrastructure as code, CI/CD, and security engineering practices.

Leads cybersecurity product strategy, roadmaps, and enterprise security capabilities using threat, risk, data, and design thinking. Partners with engineering, operations, vendors, and executives to prioritize solutions, make build-versus-buy decisions, define metrics, and scale products. Oversees cybersecurity projects, risk programs, control automation, incident analysis, and stakeholder communication while recruiting, mentoring, and managing technical teams.

Leads security engineering across multiple technology domains, clarifies security requirements, supports multi-level network security, and advises stakeholders during vulnerabilities and disruptive events. Performs threat modeling, risk assessment, vulnerability and penetration testing, and validates AI-assisted security recommendations. Designs and implements enterprise security solutions while ensuring security testing, control validation, traceability, auditability, and resiliency throughout software development lifecycles and toolchains.

Manage customer security inquiries, enhance the Trust Center, collaborate with Engineering and Information Security, and review security clauses in contracts, MSAs, and DPAs. Translate technical security details for business audiences, maintain trust systems, support compliance frameworks, report risk and trust metrics to senior leaders, and develop AI-driven prompts and workflows to automate governance tasks.

Monitor, triage, and investigate security alerts across Microsoft Sentinel and Azure infrastructure. Follow playbooks to contain and escalate threats, document investigations, apply MITRE ATT&CK and Cyber Kill Chain concepts, identify detection gaps, and support tuning efforts. The role requires clear communication, methodical alert handling, and a willingness to develop scripting, log analysis, and evidence collection skills.

Own detection engineering and SOAR automation for an Azure-native platform. Build and tune Microsoft Sentinel analytics rules, close telemetry gaps across AKS, endpoints, and networks, and develop automated workflows for triage, enrichment, and response. Translate threat intelligence into detection logic, integrate security tools through APIs and scripting, reduce false positives, and improve detection coverage and analyst efficiency.

Leads enterprise cybersecurity incident response from identification through recovery and post-incident review. Acts as Incident Commander for high-severity events, coordinating technical, business, legal, privacy, communications, and executive stakeholders. Maintains incident documentation, facilitates war rooms, delivers executive briefings, manages corrective actions, develops response playbooks and exercises, tracks operational metrics, and drives improvements through automation, orchestration, and enhanced detection capabilities.

Paid, onsite summer cybersecurity and information security internship supporting project-based assignments at the Federal Reserve Bank of Chicago. Interns work 40 hours weekly for 10–12 weeks, analyze data, communicate findings, present information, and collaborate with internal stakeholders. Applicants must be current students graduating December 2027 or later, meet GPA requirements, and be authorized to work in the United States without visa sponsorship.

Leads cloud security advisory engagements across IaaS, PaaS, and SaaS environments. Develops security strategies, architectures, controls, monitoring, and incident response processes; directs risk assessments and vulnerability testing; advises executive clients; drives business development and thought leadership; and mentors security leaders and teams.

Leads cloud security engagements across IaaS, PaaS, and SaaS environments. Designs security architecture and controls, conducts risk assessments and vulnerability testing, manages monitoring and incident response, tracks remediation, and develops technical deliverables. The manager coaches team members, oversees project quality and timelines, addresses stakeholder issues, and identifies opportunities to improve cloud security through automation and emerging technologies.

Own third-party risk management and business continuity programs while building production data pipelines, integrations, policy-as-code controls, continuous monitoring, and agentic AI workflows. The role requires defining technical direction, integrating imperfect data sources, automating evidence collection, and partnering across Security, Procurement, Resilience, and Engineering teams to improve governance and operational resilience.