Top Cyber Security Jobs

Design, implement, and operate application and cloud security controls across the SDLC. Integrate security tooling (SAST/DAST/SCA/IaC), secure CI/CD pipelines, run secure code reviews and threat modeling, deploy and manage cloud security posture and CNAPP tooling, and partner with engineering teams to remediate vulnerabilities and build secure, repeatable patterns.

Design, develop, and deploy autonomous AI agents and ML models to automate cybersecurity use cases (incident investigation, vulnerability prioritization). Integrate LLMs, build data pipelines with vector databases, implement MLOps and cloud AI deployments, enforce safety/compliance guardrails, and optimize workflows for automated remediation.

Design, build, and maintain high-volume security data models and pipelines in Snowflake. Ingest, normalize, enrich, and correlate telemetry for detection engineering and threat hunting. Partner with security teams, enforce data standards, drive data governance, performance optimization, vendor management, and mentor engineering teams. Conduct POCs and produce integration and process documentation.

Design and implement secure application architectures, perform security requirement reviews, develop secure coding standards, run security audits/penetration tests, implement controls and remediation, conduct threat modeling and risk identification, and mentor engineering teams on secure coding and security best practices.

Lead design and implementation of enterprise IAM capabilities (IGA, AM, PAM). Build SSO/MFA, RBAC/ABAC, lifecycle provisioning/deprovisioning, privileged account management, integrations with cloud and on‑prem, scripting automation, directory services management, and IAM monitoring and incident response.

Lead cloud-focused GRC activities across multicloud and hybrid environments: assess cloud architectures, audit cloud controls, quantify cyber risk, produce executive reports, support regulatory compliance and remediation, and influence cloud security strategy and metrics.

Conduct technical research on new chains and DeFi projects to identify architecture risks and exploits. Deconstruct attack logic, determine root causes, and design actionable detection rules and defensive measures for wallet security. Collaborate with the wallet team to implement protections and document attack patterns to improve the team's knowledge base and AI-assisted operations.

Lead the design and operations of an AI-driven Insider Threat Detection & Response program. Develop behavioral analytics, anomaly detection, and proactive threat-hunting; design detections for data exfiltration, privileged misuse, and account compromise; lead investigations and responses; partner with Legal, HR, Privacy, and Compliance; deliver executive risk assessments and playbooks.

Perform smart contract and blockchain security audits, analyze disclosed vulnerabilities and post-mortems, develop automated scanning/monitoring tools, detect on-chain risks, and produce high-quality audit reports and risk warnings.

Design, build, and maintain security automation, SOC tooling, and API integrations. Automate alert enrichment, correlation, response, and investigation workflows. Support SIEM ingestion and detection engineering, assist incident response and on-call SOC duties, and collaborate with SOC analysts to translate operational needs into scalable engineering solutions.

Design and maintain Binance's login, registration, and account-security experiences across web and mobile. Build an in-house AI facial-recognition KYC product, integrate authentication flows (passkeys/FIDO2, MFA), develop Node.js server-side and BFF layers, publish shared SDKs, optimize performance and observability, and drive product improvements using data.

Analyze complex Web3 security incidents, extract attack patterns, and maintain SOPs. Identify workflow gaps and improve operations, partner with AI agents to build a security knowledge base, and convert manual analyses into automated detection rules while staying ahead of emerging DeFi and wallet exploit techniques.

Analyze large-scale on-chain data to detect anomalous transactions, develop detection mechanisms and risk monitoring frameworks, apply supervised and unsupervised ML, identify malicious accounts via community-discovery algorithms, and design integrated on-chain/off-chain prevention and control systems.

Design, develop, maintain, and optimize backend and big-data systems for Binance's Web3 security domain. Build scalable, high-concurrency services, improve security tooling and threat detection, work with data teams on collection and processing, and collaborate with cross-functional and global stakeholders to deliver security-focused technical solutions.

Design, build, and scale cloud infrastructure while embedding application and cloud security. Own CI/CD and deployment workflows, protect sensitive insurance data, implement monitoring and incident response, and support SOC 2 compliance while partnering with product and engineering teams.

Lead the security architecture and implementation for an enterprise AI platform: secure cloud infrastructure, data protection, IAM, tenant isolation, and GenAI workflows. Embed security into CI/CD, IaC, containers, secrets management, and operations. Design secure customer deployment patterns, support enterprise security reviews, and partner on compliance (SOC 2, ISO 27001, SSPA) while personally implementing critical security capabilities and guiding cross-functional engineering teams.

Serve as a technical AppSec expert to identify, validate, and reduce application security risk via SAST/DAST/SCA and manual testing, threat modeling, secure design reviews, CI/CD tool integration, remediation validation, and security enablement across development teams.

Engineer and operate the CrowdStrike platform across cloud and enterprise environments: deploy agents, integrate cloud assets, build API-driven automation, implement RBAC/IAM, develop security controls, perform technical security assessments, and support incident detection and response in collaboration with architecture and operations teams.

Lead and build Swords Security Operations Center: architect SIEM, develop detection-as-code, run incident response, mentor SOC engineers, design SOAR/AI automation, run threat hunting and metrics to reduce MTTD/MTTR and scale defenses across cloud environments.

Lead design and improvement of detection, alerting, incident response playbooks, and threat hunting. Drive investigations, digital forensics, AI-assisted automation, and cross-functional coordination to contain, eradicate, and prevent security incidents while measuring and improving SOC effectiveness.

Lead product security for residential HVAC controls and connected devices: perform threat modeling, secure design reviews, penetration testing, SAST/DAST/SCA/fuzz testing, manage vendors, lead incident response and Security Champions, and advise on product security requirements and risks.

Design and build cloud-native security governance and platform capabilities for AWS-based infrastructure. Implement automated security auditing, threat detection, access control, host and container security, and collaborate with engineering and operations to embed and improve platform security posture.

Senior privacy consultant to design and implement privacy technology and governance. Lead OneTrust platform configuration, privacy assessments (ROPA, PIA, PTA, DSAR), data discovery, classification, mapping, and privacy-by-design. Translate privacy requirements into technical solution architectures and Azure integrations (Data Lake, Data Factory, Databricks, SQL), build workflows, dashboards, reports, and operational procedures, and implement data protection controls (masking, encryption, retention).

Manage daily vulnerability management operations, develop and enhance information security policies and standards, track and report remediation from audits, analyze policy exceptions, and coordinate security awareness activities while supporting broader security program initiatives.

Implements and enforces enterprise security policies, participates in incident response (CSIRT), evaluates technologies, conducts risk and compliance assessments, supports vulnerability and continuous monitoring, implements secure baselines (SCCM/Group Policy/PowerShell), and advises on security architecture while educating staff.